$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: p5eFmYOavl6sPjfdQ5iUfzAJ/jsovum+9WsgAHGyXQA= Subject key identifier: 03:74:E7:D5:7B:BE:A4:7B:0E:AF:C7:09:A0:28:B3:94:C4:73:24:A0 Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0AB6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 0AB4 Signing time: Wed 04 Jun 2025 16:42:44 +0000 Manifest this update: Wed 04 Jun 2025 16:42:44 +0000 Manifest next update: Wed 11 Jun 2025 16:42:44 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: zr4YxOmNN/joez2kmMEHYKitKT+0cOoiHdhg4xaV90g=) 2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: X6qLGESMHlCjgInNJuuQgeTL462kIXu1+dGUahA9Gs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 16:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2742 (0xab6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: Jun 4 16:42:44 2025 GMT Not After : Jun 11 16:42:44 2025 GMT Subject: CN=68407784-90b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:2a:c5:1b:c0:01:f5:aa:ff:f4:9b:53:76: e1:a2:2a:47:1a:c7:6b:12:87:41:a6:08:5e:1c:5d: f0:ed:e5:2b:dc:b0:93:e4:53:9b:b1:6c:9d:b2:3e: 77:a2:d7:3e:79:39:1d:e5:30:58:3f:05:e4:22:f4: 21:7c:cf:be:36:73:29:7b:db:39:1a:89:24:e9:7e: 60:fc:d3:48:6f:e0:53:e9:3d:10:1a:2c:cb:e3:91: ad:c3:5f:f2:64:ae:d6:dc:70:62:28:db:15:a6:86: 79:ff:a7:d8:84:87:bc:5b:f0:54:dc:d2:51:fd:8b: 67:78:1d:ff:f9:82:54:a4:b8:60:7d:a2:29:6c:7e: ca:ca:f5:c8:1e:fd:b5:0a:c4:ab:55:d9:3d:be:96: 38:bf:e7:2b:4d:05:c9:01:ae:c3:5b:e6:63:43:62: 37:a6:f4:ea:a5:be:a2:8a:18:8e:ab:9e:71:24:53: 2b:1f:f2:1d:16:c7:23:6a:35:af:2f:7f:46:71:4e: 71:50:b3:46:3d:19:70:49:fa:a5:a9:42:99:a8:52: 17:eb:2e:a5:9c:31:f1:b2:b9:7e:52:73:16:c9:35: 01:e0:e5:f4:b4:be:ca:d7:19:e8:57:55:93:7b:b8: 5e:7f:f3:a9:1b:a5:35:2a:1c:5d:f9:df:5b:a7:06: cd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:74:E7:D5:7B:BE:A4:7B:0E:AF:C7:09:A0:28:B3:94:C4:73:24:A0 X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c3:fa:38:48:62:5b:c9:71:b3:f3:ef:e5:66:50:55:1f:b6: c7:27:eb:95:4f:5b:de:ed:1b:a6:bf:46:d4:05:90:b2:fc:1e: d2:bb:ea:13:e3:b9:e9:03:bc:5b:0b:74:cb:74:8c:9a:5c:68: cf:62:04:42:53:00:c8:f0:68:34:de:5d:c7:05:92:af:b3:cd: dd:5e:0d:73:92:f0:76:64:50:3d:52:d9:f2:ab:85:e1:cc:19: 7e:e4:a8:2a:dc:6f:8e:4d:a5:21:13:69:88:2e:07:41:10:9d: 62:82:bd:06:93:02:05:a5:4f:db:72:90:cf:f3:8f:79:79:32: 1a:50:bc:5a:7f:78:41:d4:15:e8:26:54:5a:7f:b9:f7:5f:8e: 0c:90:4a:2e:9f:e6:00:ec:e5:4e:4d:38:7a:5d:ba:88:62:18: fd:e9:82:06:1a:c8:ac:81:fe:df:08:c2:19:ee:67:2d:45:92: 84:0b:11:42:6e:4a:46:2a:86:3c:bf:c4:6a:7c:a4:78:7a:5f: a9:f8:ba:c8:56:b3:e4:09:02:8a:02:b7:27:0d:41:b1:10:1d: ac:af:f0:da:67:a0:19:e2:a3:83:00:a1:b5:18:69:cd:a2:82: 29:c5:94:83:01:15:ad:b7:9e:24:5c:1b:4f:46:1a:b6:13:39: 7b:97:53:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjUwNjA0MTY0MjQ0WhcNMjUwNjExMTY0MjQ0WjAYMRYwFAYD VQQDEw02ODQwNzc4NC05MGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoAqxRvAAfWq//SbU3bhoipHGsdrEodBpgheHF3w7eUr3LCT5FObsWydsj53 otc+eTkd5TBYPwXkIvQhfM++NnMpe9s5Gokk6X5g/NNIb+BT6T0QGizL45Gtw1/y ZK7W3HBiKNsVpoZ5/6fYhIe8W/BU3NJR/YtneB3/+YJUpLhgfaIpbH7KyvXIHv21 CsSrVdk9vpY4v+crTQXJAa7DW+ZjQ2I3pvTqpb6iihiOq55xJFMrH/IdFscjajWv L39GcU5xULNGPRlwSfqlqUKZqFIX6y6lnDHxsrl+UnMWyTUB4OX0tL7K1xnoV1WT e7hef/OpG6U1Khxd+d9bpwbNwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN059V7 vqR7Dq/HCaAos5TEcySgMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfw/o4SGJbyXGz8+/lZlBVH7bHJ+uVT1ve7Rumv0bUBZCy/B7Su+oT 47npA7xbC3TLdIyaXGjPYgRCUwDI8Gg03l3HBZKvs83dXg1zkvB2ZFA9Utnyq4Xh zBl+5Kgq3G+OTaUhE2mILgdBEJ1igr0GkwIFpU/bcpDP8495eTIaULxaf3hB1BXo JlRaf7n3X44MkEoun+YA7OVOTTh6XbqIYhj96YIGGsisgf7fCMIZ7mctRZKECxFC bkpGKoY8v8RqfKR4el+p+LrIVrPkCQKKArcnDUGxEB2sr/DaZ6AZ4qODAKG1GGnN ooIpxZSDARWtt54kXBtPRhq2Ezl7l1PQ -----END CERTIFICATE-----Generated at Fri Jun 6 17:22:06 2025 by rpki-client