$ rpki-client -vvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft File: JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft (raw, json) Hash identifier: /gLy/fkqDaDgNVcwz4fkdqa0lr8fTuaewZsiHLquxoI= Subject key identifier: 0C:BA:E7:9C:23:0E:9E:F4:38:CE:25:56:51:E3:B7:B0:00:17:1D:4D Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D Certificate issuer: /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft Manifest number: 0373 Signing time: Tue 01 Jul 2025 01:29:45 +0000 Manifest this update: Tue 01 Jul 2025 01:29:45 +0000 Manifest next update: Tue 08 Jul 2025 01:29:45 +0000 Files and hashes: 1: JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl (hash: m+URNzbCjJuuNXzX38uXldy49nWh0nIXQ4M8z+bzKh0=) 2: F02F57CCB0F911EC95467362C4F9AE02.roa (hash: 8c3vaTi0BSxLkUymwaj9MHcp45Mf7rThPmFdOeP7vA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110592, serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D Validity Not Before: Jul 1 01:29:45 2025 GMT Not After : Jul 8 01:29:45 2025 GMT Subject: CN=68633a09-8841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:27:83:39:f7:d1:15:e1:f3:ad:93:12:60:54: c7:f5:ea:9f:86:08:d1:eb:d4:ee:91:85:4e:23:c0: 26:a4:b0:73:c5:40:44:cd:64:d8:39:d4:c9:9e:4d: 85:13:36:d6:ff:5a:c0:f0:86:f2:cd:b5:35:61:1b: 92:90:45:55:3a:db:bf:8a:4e:19:0b:04:f9:c6:f2: eb:00:b1:73:42:c8:92:a3:a9:d3:6b:d0:6b:24:e8: e2:7d:ed:d9:3d:b0:8d:f2:dd:cd:c7:cc:94:a8:f1: 6e:05:0a:f5:63:08:19:09:0c:15:09:8e:cc:ed:cb: bd:39:49:a9:4f:c5:66:1a:7b:bd:fa:f6:ae:87:95: db:21:58:3a:00:d0:e8:a4:a3:a8:79:1a:dd:5f:6c: da:e4:90:b7:08:3b:03:76:00:fd:2c:2e:74:2b:4b: 46:53:92:12:b8:5b:c6:83:e3:fe:a6:1b:10:cd:8c: a3:5f:09:56:fb:3f:f0:27:16:17:84:63:0a:54:c9: 0c:bf:48:42:38:64:71:3a:7e:b0:85:95:c2:49:26: 8c:36:24:88:df:91:2c:3e:95:11:c8:2b:dc:54:c1: de:1a:97:1c:53:72:df:04:1b:62:88:c4:8d:02:a5: f0:67:0b:d7:94:95:4b:10:11:e2:60:4c:0a:a5:64: b9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BA:E7:9C:23:0E:9E:F4:38:CE:25:56:51:E3:B7:B0:00:17:1D:4D X509v3 Authority Key Identifier: keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:09:b0:0f:5a:72:d8:2f:50:15:1b:b4:5a:4a:34:00:bc:65: b5:e7:0b:88:e0:fd:ac:7c:d8:db:d1:74:4b:cf:58:9e:db:12: f9:9f:5b:c2:d4:a3:c8:d6:da:be:29:6d:80:00:9c:e2:64:58: 71:87:a7:3f:0d:6e:f3:5f:01:5b:ef:97:6a:23:90:61:be:0b: 81:d4:09:cc:ad:6d:a5:80:83:03:ce:2a:3b:e1:b6:83:c1:45: ee:26:cd:e8:fa:ea:82:ab:65:fa:56:95:44:d7:1c:ac:a7:15: 91:2e:ca:01:53:7f:ec:33:ec:d2:d8:8c:a2:40:76:4c:6b:e5: c7:78:b5:32:32:4f:09:41:33:36:40:c8:ac:7d:96:5b:f5:7b: 62:43:e6:4e:9d:fb:48:be:80:fe:d4:5b:52:83:77:7e:68:40: bd:62:fd:f2:98:ed:f9:f4:79:9b:77:70:bd:5b:86:17:4b:52: c4:73:06:d4:97:f4:6a:82:92:60:cd:6c:e2:2a:56:4f:e5:05: db:73:93:0f:66:90:eb:aa:bb:b8:fb:dd:b3:3e:57:74:9f:84: 73:1b:36:18:c3:71:1f:4c:3f:82:ee:69:87:12:52:c2:e9:a3: da:c4:85:c9:06:25:d9:fa:33:6f:80:0d:5a:b8:30:5f:b5:64: e7:f0:58:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1OTIxMTAvBgNVBAUTKDI0MEVDMTVEMTQ0NEQ0M0YwNzdDOTRENDhCRUVEMUFG MDkwNzREM0QwHhcNMjUwNzAxMDEyOTQ1WhcNMjUwNzA4MDEyOTQ1WjAYMRYwFAYD VQQDEw02ODYzM2EwOS04ODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CeDOffRFeHzrZMSYFTH9eqfhgjR69TukYVOI8AmpLBzxUBEzWTYOdTJnk2F EzbW/1rA8IbyzbU1YRuSkEVVOtu/ik4ZCwT5xvLrALFzQsiSo6nTa9BrJOjife3Z PbCN8t3Nx8yUqPFuBQr1YwgZCQwVCY7M7cu9OUmpT8VmGnu9+vauh5XbIVg6ANDo pKOoeRrdX2za5JC3CDsDdgD9LC50K0tGU5ISuFvGg+P+phsQzYyjXwlW+z/wJxYX hGMKVMkMv0hCOGRxOn6whZXCSSaMNiSI35EsPpURyCvcVMHeGpccU3LfBBtiiMSN AqXwZwvXlJVLEBHiYEwKpWS5LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy655wj Dp70OM4lVlHjt7AAFx1NMB8GA1UdIwQYMBaAFCQOwV0URNQ/B3yU1Ivu0a8JB009 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU5Mi81MUUxMjcyQUIw RjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFEOEhmSlRVaS03UnJ3a0hU VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pBN0JYUlJFMUQ4SGZKVFVpLTdScndrSFRUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU5Mi81MUUxMjcyQUIwRjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFE OEhmSlRVaS03UnJ3a0hUVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7CbAPWnLYL1AVG7RaSjQAvGW15wuI4P2sfNjb0XRLz1ie2xL5n1vC 1KPI1tq+KW2AAJziZFhxh6c/DW7zXwFb75dqI5BhvguB1AnMrW2lgIMDzio74baD wUXuJs3o+uqCq2X6VpVE1xyspxWRLsoBU3/sM+zS2IyiQHZMa+XHeLUyMk8JQTM2 QMisfZZb9XtiQ+ZOnftIvoD+1FtSg3d+aEC9Yv3ymO359Hmbd3C9W4YXS1LEcwbU l/RqgpJgzWziKlZP5QXbc5MPZpDrqru4+92zPld0n4RzGzYYw3EfTD+C7mmHElLC 6aPaxIXJBiXZ+jNvgA1auDBftWTn8Fim -----END CERTIFICATE-----Generated at Wed Jul 2 20:02:20 2025 by rpki-client