$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft File: J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json) Hash identifier: oxP+cHblZdLLt4v5b24XDODIBxZ7ogFHA+HIFPD4Tow= Subject key identifier: 32:2F:AE:A1:BD:8E:06:E6:B5:6C:8C:D9:04:55:25:86:18:25:3A:98 Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Certificate serial: 1D98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft Manifest number: 1D8F Signing time: Wed 02 Jul 2025 16:14:48 +0000 Manifest this update: Wed 02 Jul 2025 16:14:47 +0000 Manifest next update: Wed 09 Jul 2025 16:14:47 +0000 Files and hashes: 1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: 8s8k7wMlwelH9VP0Ybk6CJVK7osd1k87Nglf3xAQagA=) 2: A17F07705FA311EAB1BB612CC4F9AE02.roa (hash: syqFyO0I3Vmcn5bJeGcao6zGLsNLne0ee+UOpu0s0a0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7576 (0x1d98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Validity Not Before: Jul 2 16:14:47 2025 GMT Not After : Jul 9 16:14:47 2025 GMT Subject: CN=68655af7-acbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:9a:58:2c:79:dc:d3:71:05:62:c7:1c:4c: e6:de:11:c6:26:e4:96:a4:09:8b:72:51:e9:06:d0: 76:12:24:14:9e:ee:c1:2c:3f:e9:04:c3:8d:cc:ce: c7:49:7d:14:fd:21:04:04:a4:9b:5d:b0:bc:b5:90: aa:ef:77:cd:4b:4f:5e:d4:a0:ab:cd:55:59:0e:a1: 63:a5:b8:dc:e4:0d:a1:c6:23:5e:cc:4e:ae:17:e9: d3:2e:5a:85:06:5c:7f:3e:86:87:89:cd:f8:86:52: 1a:ff:42:a4:16:f9:fd:05:57:89:49:77:bb:b3:94: ab:c0:90:77:0e:b3:63:1f:ce:4e:e4:c6:47:95:7c: 6d:85:9a:cb:18:9a:3f:82:cf:72:18:27:8b:c9:fb: 5d:b3:5b:d3:7f:05:95:09:a4:fe:66:86:0c:12:aa: ce:8f:ee:0f:42:73:78:70:4f:c3:c3:45:20:cd:9d: 99:d8:47:9f:26:4b:81:9f:86:7d:df:6a:04:44:92: f1:fe:2a:e2:8d:f7:b8:dc:67:5f:49:24:4e:61:ca: 36:b9:2c:e0:9d:e3:10:27:31:4f:8b:2e:be:a2:8d: 42:3f:3a:a0:56:25:39:41:2b:d7:26:7f:94:87:c3: 1d:18:21:8a:66:19:5f:fb:aa:65:0c:cd:1d:bc:50: d9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2F:AE:A1:BD:8E:06:E6:B5:6C:8C:D9:04:55:25:86:18:25:3A:98 X509v3 Authority Key Identifier: keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:d7:11:60:da:36:89:52:bb:6b:97:35:e0:44:22:62:9e:75: 6f:4c:af:e5:93:94:16:ef:3d:dc:52:03:08:a1:96:09:d5:0d: d3:ca:a1:0d:d2:dd:10:b0:b4:7c:c8:2f:e5:5d:93:37:a8:34: 49:5b:9d:6d:71:1f:c6:ca:de:5e:fb:53:cd:c3:7e:d5:d4:dc: 5a:e0:cb:36:d7:23:c0:26:e7:9a:39:ce:3e:dd:b9:13:eb:67: 19:0e:e9:d8:cc:aa:2e:14:5d:af:86:2b:18:88:bd:9c:08:48: 68:d0:f4:a7:86:ca:b8:ed:be:31:43:bf:d2:f0:bb:47:d0:3c: ff:fb:92:e2:1a:92:59:ce:3a:6e:82:52:d7:cf:3d:da:d4:d6: 7a:b2:08:ed:d4:20:79:2b:b7:68:0d:c6:94:6a:87:ff:b3:f9: 7d:5d:04:16:6b:87:8c:c0:f1:bc:74:c9:82:3d:13:e4:ec:be: 66:1a:3d:a2:93:07:60:0a:8c:c1:26:72:ed:13:9c:97:4c:39: a3:e4:4f:26:02:54:38:73:87:19:45:71:a8:a1:68:63:a5:36: 14:7b:c7:94:3b:3a:7a:82:e9:54:47:06:71:fb:55:14:ad:02: 68:e8:66:88:fb:61:16:d0:38:0d:44:19:b0:84:d0:2f:73:d4: ad:d5:42:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVGOTUxMTAvBgNVBAUTKDI3RkM2M0Q4NjFGNDY5NEY3QTJGOTUxRkIxMjg0N0Uw N0ZBQTkwNzIwHhcNMjUwNzAyMTYxNDQ3WhcNMjUwNzA5MTYxNDQ3WjAYMRYwFAYD VQQDEw02ODY1NWFmNy1hY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AuaWCx53NNxBWLHHEzm3hHGJuSWpAmLclHpBtB2EiQUnu7BLD/pBMONzM7H SX0U/SEEBKSbXbC8tZCq73fNS09e1KCrzVVZDqFjpbjc5A2hxiNezE6uF+nTLlqF Blx/PoaHic34hlIa/0KkFvn9BVeJSXe7s5SrwJB3DrNjH85O5MZHlXxthZrLGJo/ gs9yGCeLyftds1vTfwWVCaT+ZoYMEqrOj+4PQnN4cE/Dw0UgzZ2Z2EefJkuBn4Z9 32oERJLx/irijfe43GdfSSROYco2uSzgneMQJzFPiy6+oo1CPzqgViU5QSvXJn+U h8MdGCGKZhlf+6plDM0dvFDZTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIvrqG9 jgbmtWyM2QRVJYYYJTqYMB8GA1UdIwQYMBaAFCf8Y9hh9GlPei+VH7EoR+B/qpBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY5NS9DRTJBRkM0NkEy NzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFVOTZMNVVmc1NoSDRILXFr SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pfeGoyR0gwYVU5Nkw1VWZzU2hINEgtcWtISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUY5NS9DRTJBRkM0NkEyNzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFV OTZMNVVmc1NoSDRILXFrSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm1xFg2jaJUrtrlzXgRCJinnVvTK/lk5QW7z3cUgMIoZYJ1Q3TyqEN 0t0QsLR8yC/lXZM3qDRJW51tcR/Gyt5e+1PNw37V1Nxa4Ms21yPAJueaOc4+3bkT 62cZDunYzKouFF2vhisYiL2cCEho0PSnhsq47b4xQ7/S8LtH0Dz/+5LiGpJZzjpu glLXzz3a1NZ6sgjt1CB5K7doDcaUaof/s/l9XQQWa4eMwPG8dMmCPRPk7L5mGj2i kwdgCozBJnLtE5yXTDmj5E8mAlQ4c4cZRXGooWhjpTYUe8eUOzp6gulURwZx+1UU rQJo6GaI+2EW0DgNRBmwhNAvc9St1UKY -----END CERTIFICATE-----Generated at Thu Jul 3 08:33:30 2025 by rpki-client