$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json) Hash identifier: V2Vrmt/noqIvGr19ESFWFprn6KAEwKEyQDP0/Z5a25g= Subject key identifier: 0E:9F:9D:55:AC:40:EF:3B:D1:72:52:D0:E8:4D:16:2C:DB:FC:5D:D9 Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft Manifest number: 011A Signing time: Thu 21 Aug 2025 04:59:51 +0000 Manifest this update: Thu 21 Aug 2025 04:59:50 +0000 Manifest next update: Thu 28 Aug 2025 04:59:50 +0000 Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: 5xFwVEdxndncA8fpzCiBrhYoXMRGigPAKl7tE6e/6kI=) 2: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: dRNilESPTQz/Q5N/cLbpDlE/USFMgoC4F5PCG8xDhno=) 3: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: ONnLvdYQIbTLtbVrwQpfNQIQVF7OagH6RPbHX1a91NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Validity Not Before: Aug 21 04:59:50 2025 GMT Not After : Aug 28 04:59:50 2025 GMT Subject: CN=68a6a7c7-ca55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:49:65:69:51:4a:4b:8b:ac:e7:e5:69:7e:5e: 55:be:51:2e:94:54:d5:ed:71:c0:0b:be:dd:bc:23: 76:ff:58:a9:2a:56:c8:5b:52:49:1e:aa:0a:f7:68: 59:2e:eb:46:5b:19:a9:ca:d7:13:4d:2a:e1:3f:82: aa:c4:05:29:3f:59:e0:81:a5:48:03:09:32:1a:ce: 3f:d1:02:e9:19:10:e5:d6:3c:fb:29:13:18:90:3b: f1:a7:96:ea:78:a3:4b:33:3f:3f:7f:2e:8f:63:65: 7f:3e:85:f5:7e:25:b3:28:16:57:83:b1:df:51:da: 6c:20:c4:e1:f1:d0:9d:e9:c1:b8:fa:61:46:23:8d: cc:94:67:28:f4:ae:4f:e6:b6:6a:29:b0:07:af:0c: b5:4a:41:94:68:ae:89:f1:f8:3e:94:6f:3a:87:ec: cf:bf:17:1c:51:31:15:1d:55:ac:7c:e2:40:6b:31: 81:93:a5:d2:67:7b:44:2b:b6:74:07:c1:f3:21:01: 3a:76:aa:16:fd:00:8f:90:1f:8f:ef:0a:f2:44:1f: b4:64:25:9d:98:f6:65:d6:29:d8:2a:30:40:52:70: 79:15:a9:05:b6:68:cd:88:da:bd:da:a2:5b:c5:ca: f7:05:e5:19:7b:ab:21:86:68:c3:52:c0:12:86:14: ba:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:9D:55:AC:40:EF:3B:D1:72:52:D0:E8:4D:16:2C:DB:FC:5D:D9 X509v3 Authority Key Identifier: keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:32:aa:02:14:68:9d:ae:3d:ea:e8:c3:06:4a:ed:aa:65:04: a1:96:f8:b0:bc:78:71:d2:ac:37:a4:77:0e:93:7b:e6:27:7a: 52:09:55:65:2f:38:e5:82:ae:43:2d:0a:57:7b:ee:26:49:cc: 1b:f9:b8:31:19:c7:95:5e:4c:44:07:c9:2a:93:3d:c8:22:ba: 07:b4:63:a2:b0:a6:90:d9:32:11:fd:d2:65:60:dd:88:83:3a: 66:65:ad:8b:bf:f9:74:1e:bd:da:95:1e:27:30:6e:d7:34:36: 6b:df:2c:48:16:85:47:8b:30:2c:4c:b8:f8:b4:61:6b:ea:8a: fd:bd:ee:7b:d2:e7:bb:3b:f9:69:be:08:3b:52:6e:50:a0:fb: ed:8c:e7:7b:8e:30:4d:77:98:56:e7:ea:8b:2d:73:ec:fb:3c: d0:4f:f8:57:65:e0:f5:b1:ed:a0:39:1d:e3:3c:e2:ed:7e:3b: 65:f9:b4:1e:83:60:17:b6:0b:8a:84:37:4d:5a:cf:6c:8c:16: 5a:82:75:06:52:7c:c6:aa:03:63:3c:be:3b:92:06:93:9a:a5: 88:2e:dd:84:a3:24:e1:7e:bb:f4:d7:59:86:17:7c:ce:e4:74: 60:7f:ab:c2:8f:ea:ea:4f:14:58:31:df:85:f5:50:a8:3f:62: bb:a0:46:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDEzNzM1M0QwRThDMTQ1QTU4MENCMDBCQzMyMjIwODlD NDA0OEFFNTEwHhcNMjUwODIxMDQ1OTUwWhcNMjUwODI4MDQ1OTUwWjAYMRYwFAYD VQQDEw02OGE2YTdjNy1jYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUllaVFKS4us5+Vpfl5VvlEulFTV7XHAC77dvCN2/1ipKlbIW1JJHqoK92hZ LutGWxmpytcTTSrhP4KqxAUpP1nggaVIAwkyGs4/0QLpGRDl1jz7KRMYkDvxp5bq eKNLMz8/fy6PY2V/PoX1fiWzKBZXg7HfUdpsIMTh8dCd6cG4+mFGI43MlGco9K5P 5rZqKbAHrwy1SkGUaK6J8fg+lG86h+zPvxccUTEVHVWsfOJAazGBk6XSZ3tEK7Z0 B8HzIQE6dqoW/QCPkB+P7wryRB+0ZCWdmPZl1inYKjBAUnB5FakFtmjNiNq92qJb xcr3BeUZe6shhmjDUsAShhS6aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6fnVWs QO870XJS0OhNFizb/F3ZMB8GA1UdIwQYMBaAFBNzU9DowUWlgMsAvDIiCJxASK5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC85OTE5OEYxMkQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJhV0F5d0M4TWlJSW5FQkly bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC85OTE5OEYxMkQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJh V0F5d0M4TWlJSW5FQklybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhMqoCFGidrj3q6MMGSu2qZQShlviwvHhx0qw3pHcOk3vmJ3pSCVVl Lzjlgq5DLQpXe+4mScwb+bgxGceVXkxEB8kqkz3IIroHtGOisKaQ2TIR/dJlYN2I gzpmZa2Lv/l0Hr3alR4nMG7XNDZr3yxIFoVHizAsTLj4tGFr6or9ve570ue7O/lp vgg7Um5QoPvtjOd7jjBNd5hW5+qLLXPs+zzQT/hXZeD1se2gOR3jPOLtfjtl+bQe g2AXtguKhDdNWs9sjBZagnUGUnzGqgNjPL47kgaTmqWILt2EoyThfrv011mGF3zO 5HRgf6vCj+rqTxRYMd+F9VCoP2K7oEZN -----END CERTIFICATE-----Generated at Fri Aug 22 16:22:29 2025 by rpki-client