$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json) Hash identifier: KyRUF1ZfwhT+QsPhD+FZ4eh8AKfW+ASdk3adA8iRtu0= Subject key identifier: 66:2D:CF:46:D3:60:5A:12:A9:9D:D8:44:51:B0:2B:1E:9C:C7:41:C9 Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0A4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft Manifest number: 0A2A Signing time: Fri 22 Aug 2025 19:57:08 +0000 Manifest this update: Fri 22 Aug 2025 19:57:08 +0000 Manifest next update: Fri 29 Aug 2025 19:57:08 +0000 Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: AdVBONyOkpDuVv6pGz3fmTurmjBVzZ9xoGs5PpfeyFM=) 2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: 6YSal0k37yOUJLUbfkiKR/DSeI3K/4jgwnlzNntMzvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2635 (0xa4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: Aug 22 19:57:08 2025 GMT Not After : Aug 29 19:57:08 2025 GMT Subject: CN=68a8cb94-6502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:60:15:d6:c6:c3:79:58:71:b6:19:47:9f: fe:a7:d1:84:80:b7:d9:ae:82:c4:43:0d:f6:dc:9e: 97:c5:fc:0c:d8:b3:0a:e4:46:e1:6e:62:cd:bc:0e: e8:ae:c1:d8:80:f1:be:ee:77:a3:61:d6:9e:c8:ef: 91:0c:ff:19:31:2c:e1:92:7d:99:ca:bb:9e:85:87: 48:80:9b:60:bf:1c:f6:53:90:25:23:fc:c6:f2:27: 35:a8:49:4b:0a:a3:34:d1:9f:31:60:49:7a:10:e5: 33:c6:b3:99:f8:fe:a7:de:21:5e:1e:0e:38:d1:e0: f9:e3:88:63:e0:e1:a4:95:12:b9:a0:fe:7b:fe:12: 6c:2e:79:5c:ef:5c:be:34:79:e0:da:27:84:df:75: 49:f9:2d:37:52:45:2e:17:db:12:65:31:ad:36:f4: 58:4c:96:38:dc:8e:af:37:17:6a:8b:02:e3:bc:7e: 9a:93:de:d6:ee:48:18:ed:a1:71:c3:a6:91:78:49: 48:6a:24:f8:20:c0:8f:e0:b5:60:0c:96:0e:e6:c2: b2:ec:63:04:b7:63:86:1d:8f:bb:de:94:27:e5:82: c7:42:b1:af:aa:a5:4a:79:c9:98:9f:c8:0d:fe:10: 98:fa:ee:53:43:a9:ae:a5:dd:4b:be:76:df:ff:b2: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2D:CF:46:D3:60:5A:12:A9:9D:D8:44:51:B0:2B:1E:9C:C7:41:C9 X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:dd:e7:5f:9a:d6:5f:f5:0c:0e:d7:3b:39:c5:a5:2d:62:f5: 80:bf:ad:c8:6c:af:41:f2:a3:56:61:a8:82:bc:67:ce:f1:41: d6:50:d1:3b:81:89:d1:37:d4:0e:08:81:ad:2d:3a:47:18:39: f5:2e:53:1e:40:11:22:04:fd:70:9d:40:85:c0:23:a2:35:b4: c7:11:6e:f7:9c:cc:a8:38:9a:c9:6d:9a:94:93:33:f7:06:79: b1:bc:99:d2:3d:d3:fe:18:5c:96:70:ab:4a:99:2f:8c:de:a6: a8:43:d2:f1:65:58:a2:07:0a:1c:d1:f1:97:bf:2c:d5:0b:b3: 8b:33:20:ce:b2:58:c8:d6:a4:9c:66:24:cc:9a:c9:de:98:75: af:88:d9:25:2c:61:58:db:bf:d9:11:9b:b5:d8:6d:a7:a6:52: 96:17:e9:a6:27:6e:2a:a3:9a:92:71:7d:6b:b9:64:7a:a9:01: 97:99:bd:ad:c0:6b:92:34:9e:67:e4:9a:eb:77:6a:0e:e1:6f: 96:7b:2b:46:5e:65:d1:43:38:51:1f:05:10:ac:b7:96:de:7e: d4:2d:78:dc:64:bd:e4:57:4e:86:f7:fb:d4:d4:8a:15:65:a9: 33:d3:c8:6f:f7:97:84:23:e4:84:d8:ff:29:f8:17:4b:c8:d1: 3a:30:fd:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjUwODIyMTk1NzA4WhcNMjUwODI5MTk1NzA4WjAYMRYwFAYD VQQDEw02OGE4Y2I5NC02NTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnY5gFdbGw3lYcbYZR5/+p9GEgLfZroLEQw323J6XxfwM2LMK5EbhbmLNvA7o rsHYgPG+7nejYdaeyO+RDP8ZMSzhkn2ZyruehYdIgJtgvxz2U5AlI/zG8ic1qElL CqM00Z8xYEl6EOUzxrOZ+P6n3iFeHg440eD544hj4OGklRK5oP57/hJsLnlc71y+ NHng2ieE33VJ+S03UkUuF9sSZTGtNvRYTJY43I6vNxdqiwLjvH6ak97W7kgY7aFx w6aReElIaiT4IMCP4LVgDJYO5sKy7GMEt2OGHY+73pQn5YLHQrGvqqVKecmYn8gN /hCY+u5TQ6mupd1Lvnbf/7K2ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYtz0bT YFoSqZ3YRFGwKx6cx0HJMB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM1MS80NzZBN0JFMDdCQkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVO X3ZfT2QzQzd5TWhyZGlvZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw3edfmtZf9QwO1zs5xaUtYvWAv63IbK9B8qNWYaiCvGfO8UHWUNE7 gYnRN9QOCIGtLTpHGDn1LlMeQBEiBP1wnUCFwCOiNbTHEW73nMyoOJrJbZqUkzP3 BnmxvJnSPdP+GFyWcKtKmS+M3qaoQ9LxZViiBwoc0fGXvyzVC7OLMyDOsljI1qSc ZiTMmsnemHWviNklLGFY27/ZEZu12G2nplKWF+mmJ24qo5qScX1ruWR6qQGXmb2t wGuSNJ5n5Jrrd2oO4W+WeytGXmXRQzhRHwUQrLeW3n7ULXjcZL3kV06G9/vU1IoV Zakz08hv95eEI+SE2P8p+BdLyNE6MP1S -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:59 2025 by rpki-client