$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: 6WyCtj4FfEi7Pazkdunw6/OmKXAzBnGx5XSbjmlI4WA= Subject key identifier: DA:4C:B6:19:C8:A5:75:8C:3B:C2:65:A5:BC:B8:8F:DD:C9:35:C4:8F Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1EEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1EC3 Signing time: Sat 14 Jun 2025 16:00:52 +0000 Manifest this update: Sat 14 Jun 2025 16:00:51 +0000 Manifest next update: Sat 21 Jun 2025 16:00:51 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: 4+g6KSmYyjUqrLJ2y/c0YaGZ5oRKKivlNa6MX5+RlY8=) 2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: kbKWOZNJMc5q48ZGAPJwk/No5hClmF4tRx65umSQzAA=) 3: A63484760E7511F0B651A474C4F9AE02.roa (hash: E5E7M+KU38t2hoCZnvux4qAliD8ibl/Vp9X6gykPlbI=) 4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: yrblWteuMzwUMPHL56NEpj1u/5SILXxLN8wP92DwqIY=) 5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: fmsgiPf9NAexR5vlu7jiK+Ra4ISg07n1PLjbPNsyZNQ=) 6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: 7bLJ+6dveh56SJZSGgZCe9J26eijaiEXg9KDAFNqlo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7918 (0x1eee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Jun 14 16:00:51 2025 GMT Not After : Jun 21 16:00:51 2025 GMT Subject: CN=684d9cb3-bb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:c5:51:60:83:be:0b:25:bf:38:a3:b6:d3: b0:7b:d9:0e:6f:72:ab:6e:63:ea:6c:3d:12:b2:46: b2:c2:8c:95:ab:c4:eb:40:d4:6e:9c:1e:71:13:9a: a0:83:a6:57:6d:ed:ab:96:7e:08:ea:bf:cd:7b:83: 13:1b:1f:d6:83:2f:22:72:b7:d6:cf:0f:e3:5b:25: b1:75:ea:f9:aa:1f:e0:6a:35:3f:be:fe:ba:85:2b: a7:fe:43:69:fb:16:84:c8:6f:af:3e:b6:a0:c7:9a: 13:90:20:78:02:1f:3e:a9:75:18:3c:b4:d9:3b:ef: 5d:4e:43:49:b0:77:14:01:57:e6:73:45:0b:38:d6: da:e3:62:8c:bf:47:84:85:62:10:2c:43:03:12:4d: d2:cc:cc:e5:bb:37:f0:72:f2:bf:bd:12:d5:4a:bd: 34:91:50:88:f4:88:38:bb:bb:08:f2:e6:aa:c6:a6: ea:2d:10:67:1a:f3:cd:56:f9:87:b2:32:14:ec:d0: b8:a7:3e:3f:a6:1c:72:9c:97:85:47:4d:fa:0d:a0: f4:dd:12:25:d4:cb:6d:6f:cb:a7:91:e4:40:ba:8f: 59:1f:bc:ef:ef:0b:cb:9d:33:13:6d:7b:aa:b2:d2: 5f:ed:24:d9:16:c9:b8:d0:28:97:1b:66:88:ce:23: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4C:B6:19:C8:A5:75:8C:3B:C2:65:A5:BC:B8:8F:DD:C9:35:C4:8F X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:9a:d7:8d:c6:0a:cd:f9:e6:58:a4:7d:3c:2f:a7:73:fc:4b: c6:7d:f7:a2:6a:6c:92:ce:91:43:9e:e0:bb:a2:b5:e8:f8:08: 55:c2:a9:d0:80:ac:fb:46:ae:56:12:c2:44:ce:b2:ea:f5:b5: df:8d:0c:4e:d5:ff:fd:f6:07:f9:93:b3:da:c0:34:5f:f8:25: 55:87:9b:24:82:bc:4d:9d:e7:8e:11:91:61:1a:e5:42:87:0a: d1:2c:52:cc:e0:80:29:d0:25:30:3a:85:36:ed:39:63:01:e4: ea:ea:19:7b:c0:b9:1a:3f:00:3c:3f:42:59:72:4c:f6:47:de: 61:2f:a7:f3:bc:f7:f5:f1:d4:a7:d5:e7:d3:4c:52:0c:5b:22: c8:ba:e7:aa:6a:64:93:16:ff:d4:da:0a:1b:4a:2b:11:02:55: 13:45:33:df:f9:03:a4:eb:63:5d:43:38:f0:35:f0:7e:00:27: fb:a3:e8:af:cb:b0:3d:a6:56:ff:78:4f:c0:85:a5:ac:07:b2: 86:83:cb:88:6b:2c:40:05:57:01:16:01:7d:dc:a8:a6:f3:ba: a8:53:3b:10:25:89:a2:97:72:8f:95:5c:dc:54:2b:57:d2:91: 0a:71:94:ac:e8:64:b8:b8:94:e4:f7:c8:d8:cf:63:eb:ff:ad: 49:59:6f:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUwNjE0MTYwMDUxWhcNMjUwNjIxMTYwMDUxWjAYMRYwFAYD VQQDEw02ODRkOWNiMy1iYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxULFUWCDvgslvzijttOwe9kOb3KrbmPqbD0SskaywoyVq8TrQNRunB5xE5qg g6ZXbe2rln4I6r/Ne4MTGx/Wgy8icrfWzw/jWyWxder5qh/gajU/vv66hSun/kNp +xaEyG+vPragx5oTkCB4Ah8+qXUYPLTZO+9dTkNJsHcUAVfmc0ULONba42KMv0eE hWIQLEMDEk3SzMzluzfwcvK/vRLVSr00kVCI9Ig4u7sI8uaqxqbqLRBnGvPNVvmH sjIU7NC4pz4/phxynJeFR036DaD03RIl1Mttb8unkeRAuo9ZH7zv7wvLnTMTbXuq stJf7STZFsm40CiXG2aIziPANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpMthnI pXWMO8Jlpby4j93JNcSPMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTmteNxgrN+eZYpH08L6dz/EvGffeiamySzpFDnuC7orXo+AhVwqnQ gKz7Rq5WEsJEzrLq9bXfjQxO1f/99gf5k7PawDRf+CVVh5skgrxNneeOEZFhGuVC hwrRLFLM4IAp0CUwOoU27TljAeTq6hl7wLkaPwA8P0JZckz2R95hL6fzvPf18dSn 1efTTFIMWyLIuueqamSTFv/U2gobSisRAlUTRTPf+QOk62NdQzjwNfB+ACf7o+iv y7A9plb/eE/AhaWsB7KGg8uIayxABVcBFgF93Kim87qoUzsQJYmil3KPlVzcVCtX 0pEKcZSs6GS4uJTk98jYz2Pr/61JWW8C -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:58 2025 by rpki-client