$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft File: jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json) Hash identifier: nwT7Q/CpIcYGdib3tVQHE+Bp1sJlBNGuFd2yJzEHSWg= Subject key identifier: AA:DC:FB:31:97:E5:4E:90:1B:F2:20:57:56:85:6F:EF:E2:49:8E:ED Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 Certificate issuer: /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft Manifest number: 0123 Signing time: Sat 23 Aug 2025 04:54:29 +0000 Manifest this update: Sat 23 Aug 2025 04:54:28 +0000 Manifest next update: Sat 30 Aug 2025 04:54:28 +0000 Files and hashes: 1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: RJ3MosY7+CDUOMyh2U717nTD/KAB1puDil/9Nbtq1Qg=) 2: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: nZip0umQgQfNUVSJn6scZoNl7nqXBFARNgNZLe4qOTs=) 3: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: orqQypE5bc7gvUO4QzKhBPPdldDDB/JBoIJgb5EjBz0=) 4: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: 6lk7JsGwO4/wcTnuVTo0XHToPhtmgaBJiaipZQHj0o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Validity Not Before: Aug 23 04:54:28 2025 GMT Not After : Aug 30 04:54:28 2025 GMT Subject: CN=68a94985-3c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:b3:00:b2:be:53:a9:b9:5f:a2:19:cc:c9: f8:7e:bd:9d:65:b6:00:00:57:c2:af:d0:8c:3f:e8: 08:b9:83:5e:2a:8a:44:59:33:5e:2c:2e:10:d3:87: 2d:f3:1d:55:da:6a:61:f0:ed:63:13:af:33:c0:bf: f3:2d:07:77:bb:d9:6e:b1:85:f9:9a:ba:33:4f:00: 59:61:e8:00:b4:43:8c:a5:bf:87:ae:35:4d:f8:e5: 86:95:df:7a:bb:1e:c6:98:8b:9e:ef:02:6c:16:6f: ec:4f:93:64:79:1c:3e:4a:e9:69:95:c6:d6:d9:99: a2:48:0a:8a:c7:91:a1:18:50:da:64:4f:8d:d7:f7: 20:70:40:1c:aa:17:9e:8a:5b:be:4b:da:d2:3f:4a: 1f:4d:28:d2:d2:50:20:fc:4b:13:86:a8:8c:7a:29: 7d:6e:a0:f7:6c:f3:7e:1f:bb:8b:56:48:0a:d1:b8: 05:32:0d:93:14:02:75:73:f7:b3:94:0c:01:51:4c: 10:41:69:7a:5d:d5:b0:d0:f9:b4:3b:8d:e9:f2:21: da:1f:2e:96:f3:79:56:26:9d:d3:4e:d5:04:eb:d9: 5d:ad:df:d2:97:cf:db:c7:00:16:a5:33:a7:c6:60: f3:e2:0f:72:f9:9c:ae:3b:f8:21:97:63:9b:8d:77: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DC:FB:31:97:E5:4E:90:1B:F2:20:57:56:85:6F:EF:E2:49:8E:ED X509v3 Authority Key Identifier: keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:99:0b:f3:2a:b9:02:6a:ee:e6:f4:37:0b:92:65:73:73:ff: c8:67:56:3b:df:cf:f0:2e:40:fd:c8:1b:05:7f:34:17:3b:d3: 29:f9:a5:32:94:15:8b:57:c1:45:0f:77:d5:c6:ad:3e:bb:91: 80:17:e0:36:51:51:6b:d0:ce:4e:fc:7e:ab:75:5f:92:04:01: e2:92:14:35:38:6b:42:50:36:fe:db:ea:d5:16:66:68:77:45: 52:50:8a:ac:81:b0:fc:07:07:69:fe:e8:32:d7:0a:96:bc:e8: 42:e2:2c:a9:9c:0f:27:f8:31:6d:c2:d8:5d:82:f3:02:48:12: f3:03:54:8c:8a:bf:ad:0b:39:9c:24:3c:be:f5:77:ea:2f:26: 26:24:77:7e:03:be:50:c1:75:ee:28:6b:3a:bc:75:c0:c2:b1: 0b:27:60:eb:6a:50:13:6c:49:d4:01:ca:1b:29:d1:16:0e:95: 75:d4:c4:c7:b2:03:25:33:29:19:fb:45:50:d2:4e:66:b5:eb: 60:68:6b:ab:27:a9:28:64:af:56:fe:ea:7c:95:75:f3:f8:0e: 37:52:b4:48:b5:b3:00:0a:d3:40:c3:03:4c:b0:df:fd:95:55: 7d:c8:25:5d:fd:d5:02:cb:76:99:42:a9:c2:d8:6b:f5:d2:5b: 5e:f2:31:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzMzQxMTAvBgNVBAUTKDhFOERENUIyQzEwMUI5ODNBNzk5QzkzOEFBMEU0MEE2 NTFGQ0JFMDcwHhcNMjUwODIzMDQ1NDI4WhcNMjUwODMwMDQ1NDI4WjAYMRYwFAYD VQQDEw02OGE5NDk4NS0zYzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2mzALK+U6m5X6IZzMn4fr2dZbYAAFfCr9CMP+gIuYNeKopEWTNeLC4Q04ct 8x1V2mph8O1jE68zwL/zLQd3u9lusYX5mrozTwBZYegAtEOMpb+HrjVN+OWGld96 ux7GmIue7wJsFm/sT5NkeRw+SulplcbW2ZmiSAqKx5GhGFDaZE+N1/cgcEAcqhee ilu+S9rSP0ofTSjS0lAg/EsThqiMeil9bqD3bPN+H7uLVkgK0bgFMg2TFAJ1c/ez lAwBUUwQQWl6XdWw0Pm0O43p8iHaHy6W83lWJp3TTtUE69ldrd/Sl8/bxwAWpTOn xmDz4g9y+ZyuO/ghl2ObjXdnwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrc+zGX 5U6QG/IgV1aFb+/iSY7tMB8GA1UdIwQYMBaAFI6N1bLBAbmDp5nJOKoOQKZR/L4H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjMzNC9FN0NEREZDRUM4 RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZT25tY2s0cWc1QXBsSDh2 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvM1Zzc0VCdVlPbm1jazRxZzVBcGxIOHZnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjMzNC9FN0NEREZDRUM4RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZ T25tY2s0cWc1QXBsSDh2Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEmQvzKrkCau7m9DcLkmVzc//IZ1Y738/wLkD9yBsFfzQXO9Mp+aUy lBWLV8FFD3fVxq0+u5GAF+A2UVFr0M5O/H6rdV+SBAHikhQ1OGtCUDb+2+rVFmZo d0VSUIqsgbD8Bwdp/ugy1wqWvOhC4iypnA8n+DFtwthdgvMCSBLzA1SMir+tCzmc JDy+9XfqLyYmJHd+A75QwXXuKGs6vHXAwrELJ2DralATbEnUAcobKdEWDpV11MTH sgMlMykZ+0VQ0k5mtetgaGurJ6koZK9W/up8lXXz+A43UrRItbMACtNAwwNMsN/9 lVV9yCVd/dUCy3aZQqnC2Gv10lte8jHq -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:55 2025 by rpki-client