$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft File: rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json) Hash identifier: u6KqRYUMS69NWkwbpNv6FvIMWbfJTX4afW94qPE1po8= Subject key identifier: 00:64:E1:6F:4E:7E:0D:F2:76:A3:B4:B0:49:C3:72:7D:FE:64:9D:7E Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft Manifest number: DF Signing time: Sat 19 Jul 2025 05:42:01 +0000 Manifest this update: Sat 19 Jul 2025 05:42:00 +0000 Manifest next update: Sat 26 Jul 2025 05:42:00 +0000 Files and hashes: 1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: 16SYPNIFCHlbGEiwGwzNBQWH55yYGYveCYjvwmqKM2s=) 2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: b3uced97w9HX8eWf4q1QzAvxi1eeuc/tsrxa1EU++kg=) 3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: jYT3h3nuK8EuInDGgHZ314Lk8EIylHxKqFUTo50wOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B6FB, serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Validity Not Before: Jul 19 05:42:00 2025 GMT Not After : Jul 26 05:42:00 2025 GMT Subject: CN=687b3029-1356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:6f:42:88:bc:92:ec:84:50:48:98:74:2a: cb:3d:1b:4a:a2:6d:7b:9c:ee:44:57:16:5b:98:23: 29:97:92:a8:19:50:6c:0e:d7:82:e9:95:76:de:44: c9:df:fa:29:6b:f0:6f:ab:b9:22:03:4f:11:d4:20: 49:53:0b:17:0a:a1:02:8f:75:76:04:52:35:7b:92: f6:08:a3:a0:f3:31:97:d5:7e:ab:56:15:0f:30:82: 6c:63:a0:8a:62:d2:35:57:c4:b7:95:7b:eb:89:dd: 73:1b:00:30:31:4a:34:0b:90:6c:b7:f9:6f:c2:54: 40:5e:74:43:49:4a:d5:6a:c9:fc:ef:c8:dd:b9:a8: 9c:c2:32:12:2c:02:53:b0:58:80:45:56:55:ec:01: 2f:a0:c2:19:f8:64:c3:a8:97:91:ec:86:bf:29:c3: 4a:a1:4c:f9:81:a3:18:90:21:a3:d1:be:4c:3c:19: 94:71:18:c9:2e:c7:3b:6b:31:27:62:dd:09:0c:75: 02:f8:5d:2d:35:b4:ea:74:31:e5:36:64:df:fe:4a: 6e:84:46:59:4e:58:52:e9:2b:c4:75:91:3e:61:50: 75:9f:ce:8c:4a:e9:c6:05:da:62:dc:be:e0:db:8e: 67:b9:16:63:82:5e:82:c2:41:81:c1:ea:be:7f:4c: 1d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:64:E1:6F:4E:7E:0D:F2:76:A3:B4:B0:49:C3:72:7D:FE:64:9D:7E X509v3 Authority Key Identifier: keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:08:cb:3c:01:77:86:19:f3:06:ff:64:8a:9d:ab:ef:88:75: 36:03:27:02:08:c3:ff:14:d6:5f:e6:5c:3a:14:3e:46:ad:c1: 4f:b2:f7:1a:43:f6:43:37:d3:94:fa:8b:08:20:8d:32:65:63: 7e:38:09:c0:79:d9:38:94:0f:3f:b7:de:33:6e:26:62:7f:45: 25:68:32:cd:70:15:6a:be:9b:b8:ce:b9:f5:ad:36:63:c1:a9: af:61:a7:11:6a:a3:c5:f4:7a:87:1c:c0:2b:07:6d:a5:38:8d: 66:98:f1:5a:1e:68:06:0d:09:e4:81:bd:a0:68:17:09:d4:c2: a6:77:f6:23:68:49:77:ed:47:fa:4c:04:87:59:b4:33:36:16: f3:02:9f:ea:5b:8f:75:96:b1:5b:76:7b:0f:e7:6a:2a:00:1e: 04:3d:d8:bb:9e:8e:b5:08:3a:08:53:08:c3:46:1b:e8:82:ff: 36:cb:51:bf:92:8e:25:bb:3c:c1:0e:66:7b:d5:19:9d:4a:aa: d8:ab:c4:0e:46:5c:bc:05:84:3d:c2:c1:1c:55:e5:62:81:3d: 7a:ea:27:aa:c1:06:c7:2e:dc:ac:5b:76:72:18:3b:e5:04:5d: d8:49:8d:f1:c0:e1:c8:0a:d1:bc:06:7d:65:91:68:ff:39:59: 64:96:20:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI2RkIxMTAvBgNVBAUTKEFEMjM0RTNGMUVCQkFEQUQwMTlGRTA5QUZGRjcwRTgw NzVBRkRFMTcwHhcNMjUwNzE5MDU0MjAwWhcNMjUwNzI2MDU0MjAwWjAYMRYwFAYD VQQDEw02ODdiMzAyOS0xMzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAps5vQoi8kuyEUEiYdCrLPRtKom17nO5EVxZbmCMpl5KoGVBsDteC6ZV23kTJ 3/opa/Bvq7kiA08R1CBJUwsXCqECj3V2BFI1e5L2CKOg8zGX1X6rVhUPMIJsY6CK YtI1V8S3lXvrid1zGwAwMUo0C5Bst/lvwlRAXnRDSUrVasn878jduaicwjISLAJT sFiARVZV7AEvoMIZ+GTDqJeR7Ia/KcNKoUz5gaMYkCGj0b5MPBmUcRjJLsc7azEn Yt0JDHUC+F0tNbTqdDHlNmTf/kpuhEZZTlhS6SvEdZE+YVB1n86MSunGBdpi3L7g 245nuRZjgl6CwkGBweq+f0wd7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABk4W9O fg3ydqO0sEnDcn3+ZJ1+MB8GA1UdIwQYMBaAFK0jTj8eu62tAZ/gmv/3DoB1r94X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjZGQi9EOUNDOUVERTEx RjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3JhMEJuLUNhX19jT2dIV3Yz aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTTk9QeDY3cmEwQm4tQ2FfX2NPZ0hXdjNoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjZGQi9EOUNDOUVERTExRjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3Jh MEJuLUNhX19jT2dIV3YzaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRCMs8AXeGGfMG/2SKnavviHU2AycCCMP/FNZf5lw6FD5GrcFPsvca Q/ZDN9OU+osIII0yZWN+OAnAedk4lA8/t94zbiZif0UlaDLNcBVqvpu4zrn1rTZj wamvYacRaqPF9HqHHMArB22lOI1mmPFaHmgGDQnkgb2gaBcJ1MKmd/YjaEl37Uf6 TASHWbQzNhbzAp/qW491lrFbdnsP52oqAB4EPdi7no61CDoIUwjDRhvogv82y1G/ ko4luzzBDmZ71RmdSqrYq8QORly8BYQ9wsEcVeVigT166ieqwQbHLtysW3ZyGDvl BF3YSY3xwOHICtG8Bn1lkWj/OVlkliCw -----END CERTIFICATE-----Generated at Sun Jul 20 20:27:06 2025 by rpki-client