$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: +NRsTeOr0aTOrJMg66OrY+XcDkMmuj3RaAUmbNSnV7M= Subject key identifier: 58:C7:B3:43:C7:78:AF:B4:81:93:6F:37:88:D5:92:E0:2E:33:54:FA Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1F11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1EE6 Signing time: Fri 22 Aug 2025 16:05:38 +0000 Manifest this update: Fri 22 Aug 2025 16:05:38 +0000 Manifest next update: Fri 29 Aug 2025 16:05:38 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: 7umetbJlcr+7G27y/rkp1eraXHkgSb2eAfAi+30xx6M=) 2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: kbKWOZNJMc5q48ZGAPJwk/No5hClmF4tRx65umSQzAA=) 3: A63484760E7511F0B651A474C4F9AE02.roa (hash: E5E7M+KU38t2hoCZnvux4qAliD8ibl/Vp9X6gykPlbI=) 4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: yrblWteuMzwUMPHL56NEpj1u/5SILXxLN8wP92DwqIY=) 5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: fmsgiPf9NAexR5vlu7jiK+Ra4ISg07n1PLjbPNsyZNQ=) 6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: 7bLJ+6dveh56SJZSGgZCe9J26eijaiEXg9KDAFNqlo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7953 (0x1f11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Aug 22 16:05:38 2025 GMT Not After : Aug 29 16:05:38 2025 GMT Subject: CN=68a89552-2d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:38:0d:75:14:e1:cc:80:85:05:d8:f1:c8: 27:94:80:a7:a6:d7:02:0b:7d:26:70:cd:d1:4e:a3: bd:01:24:63:92:ea:21:c1:cb:60:f0:1d:cc:79:8b: 0e:a1:a8:a7:eb:6f:a0:88:f4:58:16:c4:b2:e1:88: c7:b4:c6:19:f4:62:52:01:39:1c:2e:6d:3d:d0:fd: 8a:bd:cd:36:ab:1a:99:4c:3b:07:ac:3b:59:6c:60: 3c:c9:a4:05:cf:bb:f3:7e:8c:b4:b1:c9:ea:ad:86: 3d:0f:aa:2d:cf:ee:e6:2a:56:ef:b4:1c:02:bc:e7: 91:0e:ae:a1:b1:95:9e:58:8d:a5:b2:5e:d8:00:8a: 1f:0f:aa:b9:95:9a:01:30:67:56:26:1e:60:97:53: 51:c7:d8:4c:72:7e:8c:a1:a4:89:c1:88:7d:39:29: e0:60:51:39:92:64:18:70:44:fc:b8:fc:4b:bc:9a: e1:0b:7e:96:fe:47:4e:f4:f6:77:79:c8:3c:af:20: c0:c0:4c:47:5d:ff:44:a6:1d:96:30:73:c5:95:34: 93:f1:47:c0:1a:cf:8e:ab:f0:00:80:61:1b:9c:db: 35:72:6f:58:c8:ba:40:e4:ed:8f:30:18:e7:38:c1: d1:25:a9:9e:fb:27:d8:ab:94:fd:8b:8a:1d:54:bf: bf:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C7:B3:43:C7:78:AF:B4:81:93:6F:37:88:D5:92:E0:2E:33:54:FA X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b1:6d:89:0d:20:ae:1c:66:fc:fd:03:62:be:3e:3e:f2:80: 27:fc:05:fa:0a:24:24:12:37:19:2f:6e:73:51:52:4e:4a:95: 94:5c:d7:b4:20:20:90:ce:bf:76:9b:09:80:32:91:c8:f4:f9: ed:8f:d2:de:a5:02:49:a0:b8:1c:ed:d7:20:f3:97:da:4a:5a: 1a:39:78:7e:01:ff:c7:92:78:58:7a:53:de:60:53:0d:2a:02: a6:1e:03:08:86:94:65:f2:7c:6e:12:cc:98:fe:5a:8f:06:db: cf:4e:d7:c6:22:47:68:c0:99:67:e3:96:b8:d3:18:5f:1e:a3: 8f:2e:b7:8b:c7:ee:16:4f:9a:e9:c8:70:1d:b5:3a:f3:f8:56: 0b:e0:38:3a:98:8c:13:90:8e:cf:ea:9e:27:3d:07:5d:19:dd: 5e:78:dc:46:15:e6:8e:37:15:89:52:c0:b6:2c:71:97:86:95: 52:54:ef:57:fb:7c:56:e3:49:66:2c:44:d9:de:92:c9:b4:a5: 48:7f:2d:52:d8:70:1c:a5:e1:28:b3:14:43:f8:ab:6c:3d:6d: e8:62:3b:38:76:6c:ae:07:0e:f2:22:8f:f7:af:36:99:26:ec: 01:6c:d2:d6:77:29:7e:c3:5f:c9:f0:aa:42:0f:2c:65:53:6e: 1e:28:3b:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUwODIyMTYwNTM4WhcNMjUwODI5MTYwNTM4WjAYMRYwFAYD VQQDEw02OGE4OTU1Mi0yZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTE4DXUU4cyAhQXY8cgnlICnptcCC30mcM3RTqO9ASRjkuohwctg8B3MeYsO oain62+giPRYFsSy4YjHtMYZ9GJSATkcLm090P2Kvc02qxqZTDsHrDtZbGA8yaQF z7vzfoy0scnqrYY9D6otz+7mKlbvtBwCvOeRDq6hsZWeWI2lsl7YAIofD6q5lZoB MGdWJh5gl1NRx9hMcn6MoaSJwYh9OSngYFE5kmQYcET8uPxLvJrhC36W/kdO9PZ3 ecg8ryDAwExHXf9Eph2WMHPFlTST8UfAGs+Oq/AAgGEbnNs1cm9YyLpA5O2PMBjn OMHRJame+yfYq5T9i4odVL+/iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjHs0PH eK+0gZNvN4jVkuAuM1T6MB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKsW2JDSCuHGb8/QNivj4+8oAn/AX6CiQkEjcZL25zUVJOSpWUXNe0 ICCQzr92mwmAMpHI9Pntj9LepQJJoLgc7dcg85faSloaOXh+Af/HknhYelPeYFMN KgKmHgMIhpRl8nxuEsyY/lqPBtvPTtfGIkdowJln45a40xhfHqOPLreLx+4WT5rp yHAdtTrz+FYL4Dg6mIwTkI7P6p4nPQddGd1eeNxGFeaONxWJUsC2LHGXhpVSVO9X +3xW40lmLETZ3pLJtKVIfy1S2HAcpeEosxRD+KtsPW3oYjs4dmyuBw7yIo/3rzaZ JuwBbNLWdyl+w1/J8KpCDyxlU24eKDvz -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:26 2025 by rpki-client