$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: 93vpFA1HBaMzoR7jPWN96j1P3uY+I5ygC4F0aLKG9Ww= Subject key identifier: A0:CC:F4:C7:61:B7:8E:D6:E9:32:8F:47:59:35:9E:EA:BD:CC:27:47 Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1F0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1EE1 Signing time: Tue 12 Aug 2025 16:06:56 +0000 Manifest this update: Tue 12 Aug 2025 16:06:56 +0000 Manifest next update: Tue 19 Aug 2025 16:06:56 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: 8KCU7sAUX+/vZUPFi9UXkSlsR243KPeHeHyfjStrRm0=) 2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: kbKWOZNJMc5q48ZGAPJwk/No5hClmF4tRx65umSQzAA=) 3: A63484760E7511F0B651A474C4F9AE02.roa (hash: E5E7M+KU38t2hoCZnvux4qAliD8ibl/Vp9X6gykPlbI=) 4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: yrblWteuMzwUMPHL56NEpj1u/5SILXxLN8wP92DwqIY=) 5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: fmsgiPf9NAexR5vlu7jiK+Ra4ISg07n1PLjbPNsyZNQ=) 6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: 7bLJ+6dveh56SJZSGgZCe9J26eijaiEXg9KDAFNqlo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7948 (0x1f0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Aug 12 16:06:56 2025 GMT Not After : Aug 19 16:06:56 2025 GMT Subject: CN=689b66a0-be90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:bc:ab:bd:91:af:76:f3:e7:d3:5d:5b:7d: 79:3e:83:4b:73:79:7d:16:fd:1a:0b:d3:cc:da:b4: 18:87:70:bc:d3:d4:87:ed:7c:67:4e:a4:c7:71:bb: 47:93:98:5c:21:23:86:47:26:86:bc:7f:17:59:00: 88:da:bf:ca:42:51:24:33:b9:bc:79:2d:d6:7c:83: b4:96:10:4d:97:22:39:e5:0a:c8:ab:8d:c6:4a:9b: f5:fa:59:77:c4:79:16:af:53:df:ea:a2:22:f1:4f: 9e:95:8e:70:15:b4:f9:a9:5c:9d:97:29:fe:ea:23: f0:80:6c:2a:67:84:a3:41:28:b3:b5:94:63:fa:c8: 80:c7:6b:9d:a9:e3:e4:49:c5:d1:c7:fb:be:05:72: 66:4c:7e:01:27:d6:68:98:0d:8b:59:54:75:8e:78: 3d:dc:f1:34:91:54:9a:4e:2b:a9:18:b0:5b:b0:18: 3f:44:ea:cd:86:55:fa:d0:a6:91:69:5b:76:f5:91: 8f:b5:c4:50:bc:6b:87:5e:35:7e:31:e8:9b:d6:5d: a7:f2:c0:7c:3c:55:e8:c1:45:f5:7c:72:ea:7c:08: 09:87:74:d9:ec:e8:95:39:8e:9f:31:59:da:72:ae: f0:9b:92:2f:e5:a1:b1:13:c9:f6:d8:e0:7c:57:0f: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CC:F4:C7:61:B7:8E:D6:E9:32:8F:47:59:35:9E:EA:BD:CC:27:47 X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a9:0f:3a:08:1b:27:20:de:74:c1:c6:ff:e6:b6:cd:87:68: 50:89:2a:a3:3c:57:ed:41:35:d3:c1:54:b4:b1:ce:6d:65:08: 75:a9:f8:34:82:4f:a2:f2:41:a9:53:d9:76:b2:91:8a:3e:18: 13:23:fe:50:96:91:3a:42:e6:04:a6:d3:7e:62:f0:f7:0f:68: 17:2e:ba:0a:8d:b0:b9:29:15:fa:ac:70:6e:66:e2:0a:25:58: 84:88:d4:d5:4d:4b:19:69:5e:65:98:24:87:ab:28:de:32:6a: 05:a1:90:25:ba:ae:df:0c:00:12:38:c1:9f:3e:e2:a5:f1:8f: 80:79:fd:53:b9:c4:de:db:d3:f2:6e:9d:9c:79:6f:19:d2:78: 9f:f4:02:9f:e4:75:ef:60:c7:6e:a6:ab:04:91:fb:6c:c5:b1: 5c:a6:8d:40:ee:2b:d9:19:3f:63:6a:36:61:45:e7:ae:5c:29: ea:8f:11:34:96:19:f5:4c:ca:89:2e:05:85:50:03:d2:e8:25: 31:f9:b6:bd:18:d7:f1:af:14:0e:c2:7a:b8:83:48:12:32:69: 1d:26:ea:08:ba:cd:99:29:5d:49:da:b3:41:90:6e:08:b0:43: 55:50:51:de:47:af:e9:d1:c7:48:f6:84:fe:e3:42:a7:4a:31: 7b:ec:c0:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUwODEyMTYwNjU2WhcNMjUwODE5MTYwNjU2WjAYMRYwFAYD VQQDEw02ODliNjZhMC1iZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqE+8q72Rr3bz59NdW315PoNLc3l9Fv0aC9PM2rQYh3C809SH7XxnTqTHcbtH k5hcISOGRyaGvH8XWQCI2r/KQlEkM7m8eS3WfIO0lhBNlyI55QrIq43GSpv1+ll3 xHkWr1Pf6qIi8U+elY5wFbT5qVydlyn+6iPwgGwqZ4SjQSiztZRj+siAx2udqePk ScXRx/u+BXJmTH4BJ9ZomA2LWVR1jng93PE0kVSaTiupGLBbsBg/ROrNhlX60KaR aVt29ZGPtcRQvGuHXjV+Meib1l2n8sB8PFXowUX1fHLqfAgJh3TZ7OiVOY6fMVna cq7wm5Iv5aGxE8n22OB8Vw8uTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDM9Mdh t47W6TKPR1k1nuq9zCdHMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcqQ86CBsnIN50wcb/5rbNh2hQiSqjPFftQTXTwVS0sc5tZQh1qfg0 gk+i8kGpU9l2spGKPhgTI/5QlpE6QuYEptN+YvD3D2gXLroKjbC5KRX6rHBuZuIK JViEiNTVTUsZaV5lmCSHqyjeMmoFoZAluq7fDAASOMGfPuKl8Y+Aef1TucTe29Py bp2ceW8Z0nif9AKf5HXvYMdupqsEkftsxbFcpo1A7ivZGT9jajZhReeuXCnqjxE0 lhn1TMqJLgWFUAPS6CUx+ba9GNfxrxQOwnq4g0gSMmkdJuoIus2ZKV1J2rNBkG4I sENVUFHeR6/p0cdI9oT+40KnSjF77MCr -----END CERTIFICATE-----Generated at Tue Aug 12 22:52:20 2025 by rpki-client