$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: yw/41/HA14by1kVe3H41f35ZdjMWiwqBCcCNWHIlzZ0= Subject key identifier: 50:4F:EB:14:19:3B:17:06:40:7E:7A:D5:C3:7D:07:D8:32:28:A9:E9 Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1EF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1ECC Signing time: Wed 02 Jul 2025 16:10:01 +0000 Manifest this update: Wed 02 Jul 2025 16:10:00 +0000 Manifest next update: Wed 09 Jul 2025 16:10:00 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: DsFbChgfzObYIN/Kd/pV+avrk7mC+eOAvjNTv8MIgTI=) 2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: kbKWOZNJMc5q48ZGAPJwk/No5hClmF4tRx65umSQzAA=) 3: A63484760E7511F0B651A474C4F9AE02.roa (hash: E5E7M+KU38t2hoCZnvux4qAliD8ibl/Vp9X6gykPlbI=) 4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: yrblWteuMzwUMPHL56NEpj1u/5SILXxLN8wP92DwqIY=) 5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: fmsgiPf9NAexR5vlu7jiK+Ra4ISg07n1PLjbPNsyZNQ=) 6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: 7bLJ+6dveh56SJZSGgZCe9J26eijaiEXg9KDAFNqlo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7927 (0x1ef7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Jul 2 16:10:00 2025 GMT Not After : Jul 9 16:10:00 2025 GMT Subject: CN=686559d9-f268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:28:b2:ce:f7:3e:ce:09:c2:60:36:36:53: e0:dd:d5:90:c9:31:c9:bc:36:94:9d:1a:04:3a:85: 1f:fe:1a:56:17:c3:04:16:4b:75:e4:fe:3c:ae:d6: 1b:6a:ae:66:35:08:5d:51:3c:4d:35:37:3a:32:48: df:11:d3:01:fe:68:33:ec:39:79:66:05:6d:a1:cf: f9:c5:b0:82:0e:97:8b:23:1e:f6:d6:26:7a:4c:a5: 13:71:c9:c4:7b:6a:df:39:fe:eb:f4:64:1f:53:f6: fc:48:16:91:9d:2f:e2:a9:e6:36:8a:65:22:3f:bd: a2:fb:4e:24:33:3c:8f:75:51:93:bc:79:39:40:25: aa:27:18:e9:57:b6:40:ea:f5:c6:6a:70:0b:82:8e: 15:41:a1:5d:86:00:87:d5:cd:74:8e:4c:63:70:92: 9f:ba:a1:bf:7e:2d:cd:bc:69:9f:bb:ab:bf:34:95: d7:35:12:72:05:90:5f:3b:e7:47:44:c2:d2:20:e7: ca:1a:e4:28:69:49:fe:c8:59:02:7f:d9:94:d9:8d: d2:38:57:dc:8b:25:78:49:01:00:20:6f:91:36:ef: 90:97:48:d9:9a:37:06:1e:5e:51:a4:a2:dc:11:bb: fe:77:fd:87:5d:a6:43:e8:f3:12:e7:ad:b4:a7:54: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4F:EB:14:19:3B:17:06:40:7E:7A:D5:C3:7D:07:D8:32:28:A9:E9 X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:5c:2c:0b:5b:c9:f5:98:28:5b:fc:bf:bb:91:f9:1a:d0:db: 90:f8:f7:58:c4:be:45:5b:1e:d2:29:68:c1:b7:e9:21:29:a6: 08:a6:7d:92:23:61:76:26:25:1c:52:52:18:bc:67:7b:5c:48: 3c:b1:f3:3e:20:92:5c:22:ee:70:70:31:0b:b8:ee:f8:ae:ed: 7d:39:e7:9c:a0:4c:d7:a6:6b:49:0d:cc:aa:24:96:f9:c8:78: 5f:0a:62:7f:02:ce:f6:0c:e8:ab:91:35:74:69:26:f3:80:f0: 7b:88:23:20:8a:df:e7:f8:0d:37:26:50:1e:65:0d:8b:b5:4c: df:8d:90:75:41:7d:9c:7c:88:65:38:cf:fb:3f:55:0a:98:77: 0b:8d:7a:3a:76:a3:bf:0b:09:9d:07:e4:3d:9a:63:ce:e1:b8: 33:a0:3e:1b:ea:18:d9:53:98:39:26:2e:dd:0e:0c:be:2a:b7: 1d:44:96:e3:d1:91:3c:db:89:78:41:7c:8a:e9:96:24:74:16: 14:93:bd:a6:2d:13:0f:8e:f7:f3:3f:5a:67:52:88:e0:93:15: 7a:bc:50:2f:f2:39:fe:0a:ce:2b:db:1c:a1:dd:d8:72:45:20: 4b:cf:16:0b:35:62:c9:59:98:fa:87:a8:7d:de:ad:59:c5:ae: ad:ad:10:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUwNzAyMTYxMDAwWhcNMjUwNzA5MTYxMDAwWjAYMRYwFAYD VQQDEw02ODY1NTlkOS1mMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqAoss73Ps4JwmA2NlPg3dWQyTHJvDaUnRoEOoUf/hpWF8MEFkt15P48rtYb aq5mNQhdUTxNNTc6MkjfEdMB/mgz7Dl5ZgVtoc/5xbCCDpeLIx721iZ6TKUTccnE e2rfOf7r9GQfU/b8SBaRnS/iqeY2imUiP72i+04kMzyPdVGTvHk5QCWqJxjpV7ZA 6vXGanALgo4VQaFdhgCH1c10jkxjcJKfuqG/fi3NvGmfu6u/NJXXNRJyBZBfO+dH RMLSIOfKGuQoaUn+yFkCf9mU2Y3SOFfciyV4SQEAIG+RNu+Ql0jZmjcGHl5RpKLc Ebv+d/2HXaZD6PMS5620p1QJ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBP6xQZ OxcGQH561cN9B9gyKKnpMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4XCwLW8n1mChb/L+7kfka0NuQ+PdYxL5FWx7SKWjBt+khKaYIpn2S I2F2JiUcUlIYvGd7XEg8sfM+IJJcIu5wcDELuO74ru19OeecoEzXpmtJDcyqJJb5 yHhfCmJ/As72DOirkTV0aSbzgPB7iCMgit/n+A03JlAeZQ2LtUzfjZB1QX2cfIhl OM/7P1UKmHcLjXo6dqO/CwmdB+Q9mmPO4bgzoD4b6hjZU5g5Ji7dDgy+KrcdRJbj 0ZE824l4QXyK6ZYkdBYUk72mLRMPjvfzP1pnUojgkxV6vFAv8jn+Cs4r2xyh3dhy RSBLzxYLNWLJWZj6h6h93q1Zxa6trRAQ -----END CERTIFICATE-----Generated at Thu Jul 3 09:40:56 2025 by rpki-client