$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft File: jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json) Hash identifier: W5To/RyBmrl4CPMYvsIoIRlCgQXKctqcgh4PKRWFt78= Subject key identifier: F8:65:E5:29:75:1C:57:9B:C1:FA:C0:7B:29:AF:49:0A:B6:E2:BC:CD Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 Certificate issuer: /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft Manifest number: 0111 Signing time: Sat 19 Jul 2025 05:10:39 +0000 Manifest this update: Sat 19 Jul 2025 05:10:39 +0000 Manifest next update: Sat 26 Jul 2025 05:10:38 +0000 Files and hashes: 1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: h7hDHXOupFyfEad0JNnnCxUxmYcCMdE1SmmL8U80F7o=) 2: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: nZip0umQgQfNUVSJn6scZoNl7nqXBFARNgNZLe4qOTs=) 3: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: orqQypE5bc7gvUO4QzKhBPPdldDDB/JBoIJgb5EjBz0=) 4: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: 6lk7JsGwO4/wcTnuVTo0XHToPhtmgaBJiaipZQHj0o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Validity Not Before: Jul 19 05:10:39 2025 GMT Not After : Jul 26 05:10:38 2025 GMT Subject: CN=687b28cf-ce8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:ad:3a:9d:a7:34:c5:cc:66:bd:10:89:76: b0:ff:23:be:ee:94:be:0b:ec:3f:9a:05:93:4b:77: d1:cb:0d:cd:47:10:d2:e3:5c:29:0d:09:b6:2d:cf: 40:8d:d9:7b:86:3f:ca:eb:ea:c1:fb:94:56:fe:17: ca:b0:f5:c3:e1:25:d0:8b:73:3c:48:e8:ee:35:47: 95:40:75:f7:25:b4:6f:a4:d0:70:a1:67:d3:75:1a: 2a:34:e6:35:9c:b8:81:03:00:80:e2:75:ae:87:6c: 1e:a0:e7:59:cd:42:e8:8b:b5:c6:8a:54:79:60:7a: 2c:0a:1f:7d:5e:6c:c0:cb:4d:e4:69:73:75:09:73: 05:5c:70:a9:3b:63:27:e6:a1:d3:76:5d:3d:45:22: 47:51:c3:18:9f:7c:f2:aa:2b:58:be:aa:75:36:16: 57:b8:e8:d6:4f:61:7b:31:db:cf:21:6d:b2:d9:1c: 52:8d:b5:12:4c:90:e7:45:f3:9f:bb:d9:fe:b0:99: d6:c4:9b:cc:26:d1:90:fd:f5:b2:de:66:79:b7:6c: 1d:3f:65:29:1d:1b:fc:95:13:6e:ea:85:df:41:72: 96:e3:fa:70:06:f6:72:43:70:eb:ab:ae:6c:d8:f9: 5f:ee:a4:bf:34:97:bf:0f:a3:5d:7c:b3:2b:ac:09: 64:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:65:E5:29:75:1C:57:9B:C1:FA:C0:7B:29:AF:49:0A:B6:E2:BC:CD X509v3 Authority Key Identifier: keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:ea:cd:f1:16:9f:e7:25:f8:40:71:03:79:33:de:8e:5f:3b: d3:cb:3a:d1:91:2e:f8:00:50:59:27:11:18:06:f5:96:34:3d: 70:56:81:ce:c1:8e:a9:17:82:d8:d1:3f:08:73:55:f8:31:cc: 30:59:ea:f6:96:ba:8f:50:8b:85:20:2b:1d:ed:a5:bc:5c:d3: 07:08:8b:69:ce:8c:d6:86:e2:28:f2:63:7a:17:2c:82:99:e4: 9b:6d:a8:70:d3:14:d6:93:5b:a4:3a:6c:59:51:ee:c4:4f:26: d3:46:a5:55:6a:72:e4:38:2c:1b:66:1e:a6:79:b3:82:93:c9: b1:c1:96:fc:ba:8f:6b:b2:86:6b:a0:a9:f9:09:dc:dc:5b:13: f0:cf:9a:a6:81:3c:f1:e0:c1:be:20:1b:a9:b0:49:72:96:81: 07:76:9e:65:79:14:6c:e5:c6:c6:e1:fa:b1:2c:4f:b3:2d:42: 15:d1:bc:bd:39:b1:5d:5e:45:7e:78:19:cc:55:5f:71:b0:9a: 7f:41:ed:7a:f4:9f:12:d7:c4:8d:1f:16:bc:32:e9:9b:b8:59: 70:84:2e:ba:51:19:87:8e:56:49:62:31:5b:1e:a3:da:4e:b0: 96:72:e9:9d:8b:e0:c8:bf:3d:8b:6e:88:f9:df:30:95:bf:74: 0c:ed:88:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzMzQxMTAvBgNVBAUTKDhFOERENUIyQzEwMUI5ODNBNzk5QzkzOEFBMEU0MEE2 NTFGQ0JFMDcwHhcNMjUwNzE5MDUxMDM5WhcNMjUwNzI2MDUxMDM4WjAYMRYwFAYD VQQDEw02ODdiMjhjZi1jZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv92tOp2nNMXMZr0QiXaw/yO+7pS+C+w/mgWTS3fRyw3NRxDS41wpDQm2Lc9A jdl7hj/K6+rB+5RW/hfKsPXD4SXQi3M8SOjuNUeVQHX3JbRvpNBwoWfTdRoqNOY1 nLiBAwCA4nWuh2weoOdZzULoi7XGilR5YHosCh99XmzAy03kaXN1CXMFXHCpO2Mn 5qHTdl09RSJHUcMYn3zyqitYvqp1NhZXuOjWT2F7MdvPIW2y2RxSjbUSTJDnRfOf u9n+sJnWxJvMJtGQ/fWy3mZ5t2wdP2UpHRv8lRNu6oXfQXKW4/pwBvZyQ3Drq65s 2Plf7qS/NJe/D6NdfLMrrAlkdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhl5Sl1 HFebwfrAeymvSQq24rzNMB8GA1UdIwQYMBaAFI6N1bLBAbmDp5nJOKoOQKZR/L4H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjMzNC9FN0NEREZDRUM4 RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZT25tY2s0cWc1QXBsSDh2 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvM1Zzc0VCdVlPbm1jazRxZzVBcGxIOHZnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjMzNC9FN0NEREZDRUM4RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZ T25tY2s0cWc1QXBsSDh2Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY6s3xFp/nJfhAcQN5M96OXzvTyzrRkS74AFBZJxEYBvWWND1wVoHO wY6pF4LY0T8Ic1X4McwwWer2lrqPUIuFICsd7aW8XNMHCItpzozWhuIo8mN6FyyC meSbbahw0xTWk1ukOmxZUe7ETybTRqVVanLkOCwbZh6mebOCk8mxwZb8uo9rsoZr oKn5CdzcWxPwz5qmgTzx4MG+IBupsElyloEHdp5leRRs5cbG4fqxLE+zLUIV0by9 ObFdXkV+eBnMVV9xsJp/Qe169J8S18SNHxa8MumbuFlwhC66URmHjlZJYjFbHqPa TrCWcumdi+DIvz2Lboj53zCVv3QM7YjS -----END CERTIFICATE-----Generated at Sun Jul 20 06:42:04 2025 by rpki-client