$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: thrcYE97BdP4xHmAqG7qNEO0xljMlg6RPXCHgUOZPdQ= Subject key identifier: 61:F8:D9:FC:AE:0F:71:D3:A3:4E:32:AC:6E:C1:C0:DD:D8:FC:9E:70 Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1EFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1ED4 Signing time: Fri 18 Jul 2025 16:09:15 +0000 Manifest this update: Fri 18 Jul 2025 16:09:15 +0000 Manifest next update: Fri 25 Jul 2025 16:09:15 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: RMcD02AkCk39f43qabmLBqvl8Opl/H5PqgwNCmSW4u0=) 2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: kbKWOZNJMc5q48ZGAPJwk/No5hClmF4tRx65umSQzAA=) 3: A63484760E7511F0B651A474C4F9AE02.roa (hash: E5E7M+KU38t2hoCZnvux4qAliD8ibl/Vp9X6gykPlbI=) 4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: yrblWteuMzwUMPHL56NEpj1u/5SILXxLN8wP92DwqIY=) 5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: fmsgiPf9NAexR5vlu7jiK+Ra4ISg07n1PLjbPNsyZNQ=) 6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: 7bLJ+6dveh56SJZSGgZCe9J26eijaiEXg9KDAFNqlo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7935 (0x1eff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Jul 18 16:09:15 2025 GMT Not After : Jul 25 16:09:15 2025 GMT Subject: CN=687a71ab-6c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:15:51:68:ea:8a:11:11:28:d6:5e:89:8a:d6: 0e:20:56:42:d3:36:68:a0:39:ef:59:a7:c1:42:3d: 94:6d:a2:47:6f:5b:49:88:b6:0f:e2:3c:c3:94:94: ca:17:1a:8a:22:35:16:7e:f5:ce:dd:93:ce:14:cd: 1e:60:30:a9:19:e3:b9:f0:96:57:bc:05:63:6d:5b: 93:6c:3e:40:29:f8:f9:2e:3c:e3:e3:29:9c:b5:5e: 37:56:20:77:03:5e:fb:75:2b:52:e1:ac:cf:1c:d3: e1:7d:62:9a:ab:df:59:87:4b:ce:8d:b0:77:06:e0: 91:5b:33:0c:a3:65:fc:2f:74:6f:06:31:44:05:0e: ea:c1:8c:eb:fc:2c:b7:68:a8:83:d2:1d:93:a0:db: dd:9a:cd:90:b0:12:69:53:d3:02:97:82:ea:96:36: 2c:ab:63:e9:1b:33:cc:53:3a:0a:17:c6:71:82:ee: be:75:f7:d6:a8:dd:a1:f7:d3:ac:5a:25:79:3e:a2: 39:f4:9f:71:ba:17:d7:f3:67:ae:c1:55:f3:76:44: 52:c0:66:46:7a:4b:7c:e2:fc:46:e0:f3:fd:3b:20: 72:70:58:a9:d4:13:b8:6a:69:f3:a4:a1:0f:c0:46: 74:ad:0b:1b:b2:af:64:39:52:61:11:63:a6:44:65: e3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F8:D9:FC:AE:0F:71:D3:A3:4E:32:AC:6E:C1:C0:DD:D8:FC:9E:70 X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:92:ab:ff:c6:ee:1b:8e:75:5b:67:04:69:0f:dd:b9:02:70: 15:8d:bf:29:58:28:81:c1:a8:cc:2e:d6:5d:2b:a6:10:69:54: f1:9c:34:1c:46:68:4e:11:39:64:43:76:59:0c:d5:2a:e5:23: ab:d6:4f:e2:a2:7e:6c:8a:6a:ee:8d:e3:2f:2f:75:45:b1:8f: 7a:be:b1:5f:af:7c:01:90:75:bf:e1:16:e4:24:5e:b2:1d:94: 30:4b:3d:38:90:f7:03:cc:77:8d:fd:cb:2c:6b:7e:1a:80:8a: 08:96:85:29:67:92:5a:11:d0:cf:6a:5b:7c:27:76:b4:3d:1f: ca:e1:54:2e:af:56:da:8d:fd:0b:8f:53:75:fb:55:e9:56:ac: 1f:c3:e2:33:4d:5c:af:a3:35:3a:2d:c4:18:1f:98:b1:2a:a0: 17:2f:ec:31:cc:38:f8:0a:03:e8:16:d2:47:55:34:09:fe:34: 4d:61:c1:06:a3:06:5e:20:8e:ee:6b:c8:f8:73:83:3e:81:c8: 45:2a:00:30:02:44:ff:19:42:7c:3d:0b:b5:54:87:a9:77:c2: 7f:ee:2f:bc:ff:c7:c0:87:4a:c4:eb:b4:c9:9f:8b:a9:29:99: d1:89:98:03:cc:3e:74:36:b2:f1:a6:25:ff:f7:0d:aa:37:35: f0:f0:b6:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUwNzE4MTYwOTE1WhcNMjUwNzI1MTYwOTE1WjAYMRYwFAYD VQQDEw02ODdhNzFhYi02YzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BVRaOqKEREo1l6JitYOIFZC0zZooDnvWafBQj2UbaJHb1tJiLYP4jzDlJTK FxqKIjUWfvXO3ZPOFM0eYDCpGeO58JZXvAVjbVuTbD5AKfj5Ljzj4ymctV43ViB3 A177dStS4azPHNPhfWKaq99Zh0vOjbB3BuCRWzMMo2X8L3RvBjFEBQ7qwYzr/Cy3 aKiD0h2ToNvdms2QsBJpU9MCl4LqljYsq2PpGzPMUzoKF8Zxgu6+dffWqN2h99Os WiV5PqI59J9xuhfX82euwVXzdkRSwGZGekt84vxG4PP9OyBycFip1BO4amnzpKEP wEZ0rQsbsq9kOVJhEWOmRGXjowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGH42fyu D3HTo04yrG7BwN3Y/J5wMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgkqv/xu4bjnVbZwRpD925AnAVjb8pWCiBwajMLtZdK6YQaVTxnDQc RmhOETlkQ3ZZDNUq5SOr1k/ion5simrujeMvL3VFsY96vrFfr3wBkHW/4RbkJF6y HZQwSz04kPcDzHeN/cssa34agIoIloUpZ5JaEdDPalt8J3a0PR/K4VQur1bajf0L j1N1+1XpVqwfw+IzTVyvozU6LcQYH5ixKqAXL+wxzDj4CgPoFtJHVTQJ/jRNYcEG owZeII7ua8j4c4M+gchFKgAwAkT/GUJ8PQu1VIepd8J/7i+8/8fAh0rE67TJn4up KZnRiZgDzD50NrLxpiX/9w2qNzXw8LYh -----END CERTIFICATE-----Generated at Sun Jul 20 08:00:34 2025 by rpki-client