$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft File: rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json) Hash identifier: suNQnXRtP9t+ZFs31kb9aLa3TxYQPYwVYUH9nFvtiCQ= Subject key identifier: 71:3C:9A:99:32:C6:3E:8A:87:FF:D7:D1:FC:E5:18:FA:44:80:CD:02 Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft Manifest number: E8 Signing time: Tue 05 Aug 2025 05:51:28 +0000 Manifest this update: Tue 05 Aug 2025 05:51:27 +0000 Manifest next update: Tue 12 Aug 2025 05:51:27 +0000 Files and hashes: 1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: CEulQtYtCtSWfagRdWnfGNTN8PEmTT+jPpuEBjwnrvs=) 2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: b3uced97w9HX8eWf4q1QzAvxi1eeuc/tsrxa1EU++kg=) 3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: jYT3h3nuK8EuInDGgHZ314Lk8EIylHxKqFUTo50wOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B6FB, serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Validity Not Before: Aug 5 05:51:27 2025 GMT Not After : Aug 12 05:51:27 2025 GMT Subject: CN=68919bdf-3eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:1d:2d:2e:d9:59:2f:b5:12:8d:ab:a7:f0: dc:2e:9e:38:73:05:f3:84:5f:cb:04:e4:bf:f1:7f: 60:d6:8e:1e:a8:18:1e:c8:66:5b:d6:6a:75:cf:c8: f0:cd:ad:d9:b2:21:cc:0e:7c:ea:50:1f:66:19:39: ca:39:70:4e:d0:d2:1c:c0:68:8c:8d:53:42:b6:bb: ba:b3:38:2e:ea:d7:b4:a7:4a:af:d4:15:a3:2e:bd: 4e:af:eb:25:12:7e:0b:f5:95:e0:5d:0d:f9:43:f9: e4:eb:86:d7:45:43:ee:5e:7a:c6:8b:c5:28:37:6d: 29:59:9f:3c:e3:4c:a5:8b:ac:f3:20:11:29:ca:b6: 73:9c:e3:e4:99:b4:0a:8f:12:ce:19:c3:b5:e3:e0: 14:c2:b3:a3:30:43:7e:f3:98:25:5a:d8:4c:68:5e: 1a:2b:a1:e7:ed:82:3c:c9:af:e0:ac:f3:4c:46:fc: 84:25:1b:e4:04:3f:0e:95:67:a3:62:cf:17:9f:8a: 61:50:ca:39:5b:e1:fb:7f:7c:21:db:48:0e:94:29: 12:03:6f:c5:d8:a5:eb:3b:a8:14:b1:d0:20:eb:6b: 0d:69:8a:c8:41:92:5e:cb:ea:a6:a3:5e:ed:b1:d5: 53:b2:ee:cc:a4:2e:f7:12:7d:16:48:f6:57:e5:da: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3C:9A:99:32:C6:3E:8A:87:FF:D7:D1:FC:E5:18:FA:44:80:CD:02 X509v3 Authority Key Identifier: keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:69:d7:96:d0:85:e3:8f:00:07:2f:b8:2f:72:79:8e:b7:83: 2f:34:ab:a4:2d:1d:22:bc:f1:ee:ae:13:f6:87:26:ea:2d:cb: 0f:c7:44:f7:a5:73:82:2b:40:79:17:fa:b3:fd:65:6d:4c:57: 26:9d:ec:0c:e0:c5:41:1f:81:26:11:82:00:93:a6:ec:24:33: 03:3e:e1:c8:18:6a:76:e2:f7:25:52:03:4f:71:f8:4f:2d:22: 85:1c:33:29:19:63:68:72:e2:28:59:f1:6e:91:81:dc:bf:75: 68:e3:bf:23:0c:b7:c0:e9:d9:bc:30:ba:d4:e4:0a:85:b2:1d: 4d:6c:05:0d:18:36:eb:67:35:f1:7e:92:00:dc:13:36:0a:1e: ea:95:cb:17:38:77:86:4f:8b:3e:cb:f8:ac:3c:84:b8:9c:c5: ab:73:e2:ea:b2:b1:81:5f:b0:86:f5:6f:36:64:a7:11:65:db: 7c:0c:cd:8f:79:ab:73:f3:8a:31:d0:70:7c:81:9e:34:dc:94: c3:6b:46:e2:40:00:f3:51:9b:f8:40:34:68:ea:17:41:a3:3b: 65:75:ac:b4:cb:06:78:4d:c3:c6:7d:14:dc:8f:61:0e:8b:3c: 65:1b:3d:1d:27:70:97:81:06:3b:de:f4:16:88:46:56:48:76: e1:c4:91:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI2RkIxMTAvBgNVBAUTKEFEMjM0RTNGMUVCQkFEQUQwMTlGRTA5QUZGRjcwRTgw NzVBRkRFMTcwHhcNMjUwODA1MDU1MTI3WhcNMjUwODEyMDU1MTI3WjAYMRYwFAYD VQQDEw02ODkxOWJkZi0zZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4EdLS7ZWS+1Eo2rp/DcLp44cwXzhF/LBOS/8X9g1o4eqBgeyGZb1mp1z8jw za3ZsiHMDnzqUB9mGTnKOXBO0NIcwGiMjVNCtru6szgu6te0p0qv1BWjLr1Or+sl En4L9ZXgXQ35Q/nk64bXRUPuXnrGi8UoN20pWZ8840yli6zzIBEpyrZznOPkmbQK jxLOGcO14+AUwrOjMEN+85glWthMaF4aK6Hn7YI8ya/grPNMRvyEJRvkBD8OlWej Ys8Xn4phUMo5W+H7f3wh20gOlCkSA2/F2KXrO6gUsdAg62sNaYrIQZJey+qmo17t sdVTsu7MpC73En0WSPZX5dq53QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHE8mpky xj6Kh//X0fzlGPpEgM0CMB8GA1UdIwQYMBaAFK0jTj8eu62tAZ/gmv/3DoB1r94X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjZGQi9EOUNDOUVERTEx RjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3JhMEJuLUNhX19jT2dIV3Yz aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTTk9QeDY3cmEwQm4tQ2FfX2NPZ0hXdjNoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjZGQi9EOUNDOUVERTExRjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3Jh MEJuLUNhX19jT2dIV3YzaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPadeW0IXjjwAHL7gvcnmOt4MvNKukLR0ivPHurhP2hybqLcsPx0T3 pXOCK0B5F/qz/WVtTFcmnewM4MVBH4EmEYIAk6bsJDMDPuHIGGp24vclUgNPcfhP LSKFHDMpGWNocuIoWfFukYHcv3Vo478jDLfA6dm8MLrU5AqFsh1NbAUNGDbrZzXx fpIA3BM2Ch7qlcsXOHeGT4s+y/isPIS4nMWrc+LqsrGBX7CG9W82ZKcRZdt8DM2P eatz84ox0HB8gZ403JTDa0biQADzUZv4QDRo6hdBoztlday0ywZ4TcPGfRTcj2EO izxlGz0dJ3CXgQY73vQWiEZWSHbhxJFd -----END CERTIFICATE-----Generated at Wed Aug 6 14:12:28 2025 by rpki-client