$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft File: rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json) Hash identifier: A7aULDdDSwqHr0eFq753Wb2VCx21M/ihVVWpi6xpRjM= Subject key identifier: A7:11:F9:74:55:A7:DB:16:45:A0:6E:96:43:19:D4:D8:72:2C:29:3B Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft Manifest number: F1 Signing time: Sat 23 Aug 2025 05:26:08 +0000 Manifest this update: Sat 23 Aug 2025 05:26:07 +0000 Manifest next update: Sat 30 Aug 2025 05:26:07 +0000 Files and hashes: 1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: WtI4toMU72il0sSUR2TBFvPOBXSZ15fyyn5AqJsCRjI=) 2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: b3uced97w9HX8eWf4q1QzAvxi1eeuc/tsrxa1EU++kg=) 3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: jYT3h3nuK8EuInDGgHZ314Lk8EIylHxKqFUTo50wOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B6FB, serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Validity Not Before: Aug 23 05:26:07 2025 GMT Not After : Aug 30 05:26:07 2025 GMT Subject: CN=68a950ef-a19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:82:a4:0b:15:d1:3e:c7:b0:1d:f5:4d:55: 2a:66:f9:3c:c4:af:55:e2:40:eb:3f:33:94:51:ca: 36:28:1f:67:4a:ce:04:0e:60:ae:95:5e:33:31:9c: d3:6b:7c:9e:aa:a1:de:98:ca:52:d0:eb:4d:a2:a4: 9f:3f:00:b3:c5:a6:f3:28:8b:cf:66:01:01:6a:b7: 1d:06:58:31:67:58:9c:74:cb:34:01:38:50:70:a8: bf:cc:11:d8:d3:00:cf:8d:83:c1:8b:18:ba:c3:07: 27:0d:98:f9:a7:99:39:7d:a5:b0:c7:7b:ad:90:11: 3c:15:3d:f7:9e:9b:7f:14:af:1f:ac:03:fe:05:ba: c2:8f:0d:da:84:3f:f1:e3:39:cf:87:af:6e:c7:fc: 7d:32:ce:56:17:c9:08:78:96:e1:2d:b6:40:a0:6b: 96:fa:60:19:8e:a2:b2:fb:f3:59:87:a3:73:f1:14: 10:f6:3f:d3:21:04:6a:22:3d:87:51:43:70:43:19: 72:23:d0:d3:bd:63:10:0a:a9:06:76:6a:4f:90:85: 31:ba:ca:7a:56:44:d8:0c:b6:3f:1a:ea:8c:f6:fe: 46:a6:14:f3:f6:69:68:4c:f2:51:de:b3:6b:7e:9c: 8f:e8:c4:20:d8:55:04:31:e4:b7:ef:49:4b:3c:e3: 4e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:11:F9:74:55:A7:DB:16:45:A0:6E:96:43:19:D4:D8:72:2C:29:3B X509v3 Authority Key Identifier: keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:88:09:11:15:2c:25:e9:d6:8b:00:55:77:0a:0d:6c:10:63: 2e:ec:c7:32:ce:40:75:75:b9:0c:4a:03:95:15:6d:67:7c:64: 83:2c:29:0e:0a:f0:af:bb:df:ed:06:ad:88:12:06:7c:08:40: d5:43:6a:f7:8e:0a:a8:f3:6d:b4:7c:bd:fe:ea:3e:12:99:28: 62:42:d1:94:77:6a:67:6e:c6:1b:4b:c5:78:b9:10:e5:ac:0d: 1e:8f:26:01:5c:da:72:b4:12:dc:81:74:87:0d:b4:74:db:27: d4:81:a1:d7:2f:01:36:59:5b:40:d9:a5:d5:01:c8:68:a4:79: 9f:2d:ed:84:f7:f2:c2:01:da:08:14:b5:35:22:fe:61:8b:7a: 62:4d:21:6c:05:4f:be:c2:e1:82:ad:0b:87:11:f0:dc:bb:74: 77:e8:ac:4c:bf:6a:a4:a4:ca:92:0b:2a:6e:6f:60:33:3f:eb: 89:82:69:db:1a:23:0f:e4:4b:72:c7:f4:eb:31:fb:ab:43:77: 7f:a8:17:2f:f3:8a:f9:7c:f2:62:ac:d3:e1:4c:3e:83:7e:56: 77:3d:a2:50:cf:1b:f1:ed:a3:ec:55:bb:51:70:18:8d:9e:7f: 4e:a0:66:b6:ad:a0:cd:38:36:a7:e3:2c:d9:a8:c5:01:1c:4b: 9d:34:01:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI2RkIxMTAvBgNVBAUTKEFEMjM0RTNGMUVCQkFEQUQwMTlGRTA5QUZGRjcwRTgw NzVBRkRFMTcwHhcNMjUwODIzMDUyNjA3WhcNMjUwODMwMDUyNjA3WjAYMRYwFAYD VQQDEw02OGE5NTBlZi1hMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/qCpAsV0T7HsB31TVUqZvk8xK9V4kDrPzOUUco2KB9nSs4EDmCulV4zMZzT a3yeqqHemMpS0OtNoqSfPwCzxabzKIvPZgEBarcdBlgxZ1icdMs0AThQcKi/zBHY 0wDPjYPBixi6wwcnDZj5p5k5faWwx3utkBE8FT33npt/FK8frAP+BbrCjw3ahD/x 4znPh69ux/x9Ms5WF8kIeJbhLbZAoGuW+mAZjqKy+/NZh6Nz8RQQ9j/TIQRqIj2H UUNwQxlyI9DTvWMQCqkGdmpPkIUxusp6VkTYDLY/GuqM9v5GphTz9mloTPJR3rNr fpyP6MQg2FUEMeS370lLPONOAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcR+XRV p9sWRaBulkMZ1NhyLCk7MB8GA1UdIwQYMBaAFK0jTj8eu62tAZ/gmv/3DoB1r94X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjZGQi9EOUNDOUVERTEx RjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3JhMEJuLUNhX19jT2dIV3Yz aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTTk9QeDY3cmEwQm4tQ2FfX2NPZ0hXdjNoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjZGQi9EOUNDOUVERTExRjcxMUVGOTNCRDk0NEVDNEY5QUUwMi9yU05PUHg2N3Jh MEJuLUNhX19jT2dIV3YzaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8iAkRFSwl6daLAFV3Cg1sEGMu7McyzkB1dbkMSgOVFW1nfGSDLCkO CvCvu9/tBq2IEgZ8CEDVQ2r3jgqo8220fL3+6j4SmShiQtGUd2pnbsYbS8V4uRDl rA0ejyYBXNpytBLcgXSHDbR02yfUgaHXLwE2WVtA2aXVAchopHmfLe2E9/LCAdoI FLU1Iv5hi3piTSFsBU++wuGCrQuHEfDcu3R36KxMv2qkpMqSCypub2AzP+uJgmnb GiMP5Etyx/TrMfurQ3d/qBcv84r5fPJirNPhTD6DflZ3PaJQzxvx7aPsVbtRcBiN nn9OoGa2raDNODan4yzZqMUBHEudNAHp -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:28 2025 by rpki-client