$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json) Hash identifier: KWjIu2YO01yusdgBPUJ8XrQQUqbOgDWtSs74O8WHKCg= Subject key identifier: CA:DE:81:BC:11:5D:E5:1D:A3:01:46:67:92:D2:10:48:E7:5E:D7:59 Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft Manifest number: 0A3A Signing time: Thu 18 Sep 2025 20:01:10 +0000 Manifest this update: Thu 18 Sep 2025 20:01:10 +0000 Manifest next update: Thu 25 Sep 2025 20:01:10 +0000 Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: E9Vq4KXT+OrzpfIl+oYgDguJP+fv39IjezD7ivSbnho=) 2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: 3nC+gG2mDTZBTV04V3x6XaZzq6tvXUY+nCHa8UvPHpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: Sep 18 20:01:10 2025 GMT Not After : Sep 25 20:01:10 2025 GMT Subject: CN=68cc6506-b085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:36:a7:40:f0:45:45:2e:00:9f:0f:0c:ce: f9:52:6a:f0:bb:a2:62:f7:6d:b7:29:b3:e9:91:d7: 88:fe:c3:df:19:9f:e6:d7:e5:63:f5:20:61:80:5d: f7:4f:2a:72:91:10:b7:e7:c4:42:df:1e:5a:c7:4e: c7:7f:4f:2c:42:46:b4:a7:67:2a:52:41:73:29:a5: a5:72:9b:dd:63:c1:dc:a0:bc:48:d4:eb:0c:71:6d: cd:a1:01:6f:d3:f4:1c:ce:da:8d:03:ec:6a:41:67: 82:28:88:b5:00:3b:4d:4a:bd:ce:af:f8:79:f0:bc: b5:41:26:bb:5d:5f:4e:81:0c:2c:83:ba:07:a3:2d: 30:69:59:ab:b6:ca:03:18:fb:b5:df:37:e0:b6:a5: 4a:ba:f0:97:70:27:bd:1e:40:3e:cb:30:cc:83:ec: d1:e0:e8:3b:76:ce:12:55:96:b3:e1:96:80:ba:e8: 1c:eb:9e:9d:07:a9:08:c7:9a:b1:27:1a:c7:40:9c: 68:7d:2f:e2:e7:e6:3b:f8:15:df:6b:51:85:b0:b4: 39:9a:56:1e:fa:c7:5a:71:9e:6e:79:1c:b9:96:fc: d8:a7:c1:48:18:80:9d:5a:ea:d4:a9:5a:5f:ee:88: 75:48:ee:77:ca:c4:89:cb:a9:50:4c:c1:df:8d:75: 2b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DE:81:BC:11:5D:E5:1D:A3:01:46:67:92:D2:10:48:E7:5E:D7:59 X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:82:bc:09:61:27:7a:b9:b2:6a:08:19:c7:fb:a6:fc:e0:78: e1:c8:90:15:d6:b1:09:e7:a3:ec:8a:6f:b7:1d:7e:c7:ab:7e: f9:84:57:0e:60:86:b5:02:e5:57:3a:5c:95:86:0a:8a:f5:54: 60:2f:1f:10:6e:47:c0:3e:31:e7:dd:24:de:4f:c1:81:01:66: 28:fd:48:65:46:90:a8:d1:d9:2a:c9:3d:e4:50:99:c8:d3:90: e9:8b:82:69:39:d3:78:ac:c7:50:5d:55:5e:6c:71:c0:c2:3c: d8:26:3f:2a:eb:2e:95:32:4e:2e:6c:9c:a6:16:d8:d1:c0:3d: fe:41:68:28:87:53:91:e4:dd:e7:a0:96:0b:79:5f:f1:60:55: 0f:af:f1:f4:a3:cf:de:03:99:00:1d:05:9e:0b:4f:f3:68:d3: 21:40:df:c7:61:09:74:df:23:74:21:ab:3a:1f:35:17:13:c3: 5f:f4:27:67:ff:7d:58:81:b8:b5:55:ab:76:cf:39:79:86:65: 10:23:95:f2:31:fa:df:58:af:af:c0:fe:5e:73:4c:53:64:1a: b7:8c:b8:57:cc:33:7e:87:b9:d1:8f:2d:64:23:41:16:fe:1d: 4d:22:24:c8:fa:1d:d9:37:8f:9b:9b:df:54:41:d1:16:39:af: 0c:74:c9:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjUwOTE4MjAwMTEwWhcNMjUwOTI1MjAwMTEwWjAYMRYwFAYD VQQDEw02OGNjNjUwNi1iMDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ82p0DwRUUuAJ8PDM75Umrwu6Ji9223KbPpkdeI/sPfGZ/m1+Vj9SBhgF33 TypykRC358RC3x5ax07Hf08sQka0p2cqUkFzKaWlcpvdY8HcoLxI1OsMcW3NoQFv 0/QcztqNA+xqQWeCKIi1ADtNSr3Or/h58Ly1QSa7XV9OgQwsg7oHoy0waVmrtsoD GPu13zfgtqVKuvCXcCe9HkA+yzDMg+zR4Og7ds4SVZaz4ZaAuugc656dB6kIx5qx JxrHQJxofS/i5+Y7+BXfa1GFsLQ5mlYe+sdacZ5ueRy5lvzYp8FIGICdWurUqVpf 7oh1SO53ysSJy6lQTMHfjXUruwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMregbwR XeUdowFGZ5LSEEjnXtdZMB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM1MS80NzZBN0JFMDdCQkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVO X3ZfT2QzQzd5TWhyZGlvZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjgrwJYSd6ubJqCBnH+6b84HjhyJAV1rEJ56Psim+3HX7Hq375hFcO YIa1AuVXOlyVhgqK9VRgLx8QbkfAPjHn3STeT8GBAWYo/UhlRpCo0dkqyT3kUJnI 05Dpi4JpOdN4rMdQXVVebHHAwjzYJj8q6y6VMk4ubJymFtjRwD3+QWgoh1OR5N3n oJYLeV/xYFUPr/H0o8/eA5kAHQWeC0/zaNMhQN/HYQl03yN0Ias6HzUXE8Nf9Cdn /31Ygbi1Vat2zzl5hmUQI5XyMfrfWK+vwP5ec0xTZBq3jLhXzDN+h7nRjy1kI0EW /h1NIiTI+h3ZN4+bm99UQdEWOa8MdMmD -----END CERTIFICATE-----Generated at Thu Sep 18 20:52:09 2025 by rpki-client