$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json) Hash identifier: KcqWMj8MpfLqyI3sm7Umy0LSH31ZB/MPRP9NyJRaBvs= Subject key identifier: C3:A3:B2:25:45:4B:7F:5E:9F:6D:75:A2:31:ED:9F:02:5A:C9:F6:93 Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft Manifest number: 011B Signing time: Sat 23 Aug 2025 04:58:34 +0000 Manifest this update: Sat 23 Aug 2025 04:58:33 +0000 Manifest next update: Sat 30 Aug 2025 04:58:33 +0000 Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: yHaS5viUyNTmQp77mqhRieBvNKt/vmn5uS2MfA89myw=) 2: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: dRNilESPTQz/Q5N/cLbpDlE/USFMgoC4F5PCG8xDhno=) 3: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: ONnLvdYQIbTLtbVrwQpfNQIQVF7OagH6RPbHX1a91NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Validity Not Before: Aug 23 04:58:33 2025 GMT Not After : Aug 30 04:58:33 2025 GMT Subject: CN=68a94a79-0233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:43:bf:39:83:a0:25:6e:f7:b1:ba:cb:f2: 68:87:4b:59:62:bc:ab:8d:ad:52:2d:6f:2c:2c:d6: 3c:98:f4:37:0a:e3:a4:d9:01:3a:44:70:c8:fa:26: 20:90:88:24:60:22:35:9b:91:72:4b:fe:7f:aa:f0: 96:bd:df:86:af:f6:c5:ed:de:a7:bf:c3:ea:5b:16: ff:f0:61:55:34:92:70:32:df:c8:41:73:6c:c5:78: 4a:e6:5e:74:44:62:51:18:2b:95:28:20:63:61:2c: 5e:01:6a:b5:bd:74:30:19:73:12:75:e1:81:1c:59: b0:2d:ee:ff:d7:c8:4a:08:ed:43:93:d2:00:20:ec: 1e:e1:d8:f3:1d:47:ab:27:8e:94:e1:c9:aa:35:42: cb:6d:13:e3:a8:d9:d4:7f:1d:14:6e:f6:a2:fe:d4: 1e:61:67:7d:81:40:ed:ee:cc:85:2d:93:45:b2:c8: 8f:05:59:8c:55:d9:0a:97:f6:7e:07:8b:db:de:7b: e3:be:59:0f:60:a5:cf:ae:df:c7:32:39:a9:9e:0b: a9:51:6f:6e:a6:fe:cd:34:b4:36:2e:95:dc:ee:12: e0:20:00:77:f5:08:07:e7:f5:ea:ff:c5:ca:12:12: 09:ba:c5:ce:a0:85:da:f0:c5:2b:39:45:77:b7:d8: 8a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A3:B2:25:45:4B:7F:5E:9F:6D:75:A2:31:ED:9F:02:5A:C9:F6:93 X509v3 Authority Key Identifier: keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:45:48:fa:ef:b4:ac:2b:d1:05:44:55:0e:df:d9:02:3f:4a: 0e:af:9a:a3:11:a1:6e:51:5f:3b:d3:1a:cc:20:eb:8c:8f:30: 4d:b7:d7:06:0b:3b:ad:04:18:38:6f:be:5c:c4:9d:09:d2:d0: 31:e5:11:4a:d9:93:58:ff:27:23:33:0b:a6:7f:63:2e:a9:48: 96:c2:36:40:7d:9a:86:85:e0:c4:41:b6:0c:0b:d7:ba:39:ca: 4d:73:c5:da:a3:5f:e1:56:5a:0b:d3:62:a5:3f:3c:d4:89:4e: 4e:5e:ea:29:86:c1:8d:03:fa:93:09:5e:ea:78:cd:33:e4:38: 78:75:a5:80:9f:6d:21:75:f0:60:cb:07:28:b3:99:68:6b:56: 05:fb:6c:60:aa:67:8d:bb:45:34:09:a8:4e:a1:47:3b:73:86: b5:5b:25:43:95:7d:21:4a:dc:ec:b3:71:bb:73:52:a6:50:46: a7:bd:b9:ea:76:8d:bd:60:65:63:0d:02:5f:5b:02:d9:60:31: ca:f0:a0:33:76:bc:f5:22:5c:e5:da:a0:9c:d3:b2:8e:0e:c9: 0e:0d:5b:50:f0:76:14:7e:f5:5d:80:25:d9:c0:ce:e4:5f:b3: 2c:93:fc:5d:4e:92:67:f7:4e:a7:c1:b2:d2:de:8f:30:8e:43: 0b:66:7a:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDEzNzM1M0QwRThDMTQ1QTU4MENCMDBCQzMyMjIwODlD NDA0OEFFNTEwHhcNMjUwODIzMDQ1ODMzWhcNMjUwODMwMDQ1ODMzWjAYMRYwFAYD VQQDEw02OGE5NGE3OS0wMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AhDvzmDoCVu97G6y/Joh0tZYryrja1SLW8sLNY8mPQ3CuOk2QE6RHDI+iYg kIgkYCI1m5FyS/5/qvCWvd+Gr/bF7d6nv8PqWxb/8GFVNJJwMt/IQXNsxXhK5l50 RGJRGCuVKCBjYSxeAWq1vXQwGXMSdeGBHFmwLe7/18hKCO1Dk9IAIOwe4djzHUer J46U4cmqNULLbRPjqNnUfx0Ubvai/tQeYWd9gUDt7syFLZNFssiPBVmMVdkKl/Z+ B4vb3nvjvlkPYKXPrt/HMjmpngupUW9upv7NNLQ2LpXc7hLgIAB39QgH5/Xq/8XK EhIJusXOoIXa8MUrOUV3t9iK8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOjsiVF S39en211ojHtnwJayfaTMB8GA1UdIwQYMBaAFBNzU9DowUWlgMsAvDIiCJxASK5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC85OTE5OEYxMkQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJhV0F5d0M4TWlJSW5FQkly bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC85OTE5OEYxMkQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJh V0F5d0M4TWlJSW5FQklybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhRUj677SsK9EFRFUO39kCP0oOr5qjEaFuUV870xrMIOuMjzBNt9cG CzutBBg4b75cxJ0J0tAx5RFK2ZNY/ycjMwumf2MuqUiWwjZAfZqGheDEQbYMC9e6 OcpNc8Xao1/hVloL02KlPzzUiU5OXuophsGNA/qTCV7qeM0z5Dh4daWAn20hdfBg ywcos5loa1YF+2xgqmeNu0U0CahOoUc7c4a1WyVDlX0hStzss3G7c1KmUEanvbnq do29YGVjDQJfWwLZYDHK8KAzdrz1Ilzl2qCc07KODskODVtQ8HYUfvVdgCXZwM7k X7Msk/xdTpJn906nwbLS3o8wjkMLZnpI -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:00 2025 by rpki-client