$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft File: jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json) Hash identifier: xZGQQbbSvW5KfJcy5dS4mT6bs+WGkFbUYOCGJ3AiMmU= Subject key identifier: 79:5B:64:EE:EB:5A:79:CA:1E:5C:26:48:4C:1F:78:9A:EA:12:E3:1E Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 Certificate issuer: /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft Manifest number: 0109 Signing time: Thu 03 Jul 2025 05:14:29 +0000 Manifest this update: Thu 03 Jul 2025 05:14:29 +0000 Manifest next update: Thu 10 Jul 2025 05:14:29 +0000 Files and hashes: 1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: Dc3LoH/YGD9LCp7pL2u+9FIjPV9BJSn5BXckXFHUvKA=) 2: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: nZip0umQgQfNUVSJn6scZoNl7nqXBFARNgNZLe4qOTs=) 3: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: orqQypE5bc7gvUO4QzKhBPPdldDDB/JBoIJgb5EjBz0=) 4: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: 6lk7JsGwO4/wcTnuVTo0XHToPhtmgaBJiaipZQHj0o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Validity Not Before: Jul 3 05:14:29 2025 GMT Not After : Jul 10 05:14:29 2025 GMT Subject: CN=686611b5-d7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:05:d4:f5:1b:0f:45:f8:fb:79:cb:25:5c: cb:78:3c:67:02:f5:8e:f5:8f:30:f0:b2:7a:ad:bf: e1:a1:d2:f1:fa:17:56:ff:72:4c:33:17:6f:63:a8: 3a:e7:08:b1:d6:b1:4c:fb:d6:2b:29:94:c0:a7:ce: 1a:5e:df:5d:ea:5d:8e:a2:ce:49:83:ed:a1:2c:04: 85:1c:ed:0f:4d:dc:f7:26:55:d9:11:98:e3:6f:f6: f5:2a:a5:d8:69:bb:cd:2a:23:8b:b6:83:a6:0e:46: 4d:dd:7b:dd:93:0a:6b:2b:0e:75:4a:e0:08:fb:54: 95:4b:80:f6:88:3c:81:ee:0b:8d:a1:b6:a7:0a:7b: b9:6c:f5:ae:6b:eb:f8:0f:93:24:50:11:42:0f:56: 1b:f9:e0:c6:00:2c:a3:99:ba:17:0a:a6:8a:f2:76: cc:98:a1:3a:9c:ac:ab:90:63:a5:c8:34:b7:68:e8: 62:79:a2:ac:da:09:03:da:30:c9:bb:bb:f1:d3:81: 88:66:f2:9b:5b:9f:7c:1c:cf:91:db:e7:fd:4c:d5: 8f:fe:69:8e:93:e1:ad:02:15:ad:81:76:e7:81:5d: 13:80:18:ad:3a:90:90:8d:ec:5e:02:79:f1:54:32: e4:50:ec:c9:27:fd:f1:0a:81:2d:1d:17:34:8f:dc: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5B:64:EE:EB:5A:79:CA:1E:5C:26:48:4C:1F:78:9A:EA:12:E3:1E X509v3 Authority Key Identifier: keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5f:7b:23:98:41:75:60:3d:2e:d8:55:32:6a:45:af:50:32: 31:ec:33:ce:d3:90:2d:b0:24:0c:59:97:e8:2b:e3:86:af:ee: ed:e5:d1:40:5b:7d:85:8b:ca:e6:0f:02:1f:4e:33:e1:ed:84: a4:c6:b0:23:cf:e6:28:b6:69:21:e2:8e:8d:f8:0e:06:a6:9a: 83:b9:64:02:d1:5c:10:3a:14:56:90:f7:7a:a7:aa:2b:20:87: c7:4e:0a:f3:c2:96:2b:03:de:7f:a0:ef:1b:7b:c9:74:d2:33: d4:cc:b2:24:f7:8e:3b:d1:e6:a7:d8:9c:11:f8:97:d5:c5:c5: ee:4f:a5:45:07:4a:fd:b3:e0:c0:98:3e:bb:2e:80:c0:24:5b: 4f:7d:27:9c:b7:60:7c:76:2b:34:36:b4:b1:0c:e1:a5:ca:42: 6b:3f:f9:c3:82:94:c5:97:ed:b9:2f:f4:94:f0:f8:11:2f:ab: f2:0a:04:fe:2e:83:2c:a4:60:a3:9d:40:02:0a:74:81:cb:8d: 9c:9d:48:c3:28:7a:85:c3:37:cc:4b:7b:2c:0a:3a:6b:59:43: fd:d9:a0:2e:92:6e:53:84:8d:8d:1c:b4:e8:e8:af:35:c6:7d: a6:7a:62:16:3f:d1:16:49:c2:90:01:de:40:05:a6:da:27:69: 46:7b:d5:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzMzQxMTAvBgNVBAUTKDhFOERENUIyQzEwMUI5ODNBNzk5QzkzOEFBMEU0MEE2 NTFGQ0JFMDcwHhcNMjUwNzAzMDUxNDI5WhcNMjUwNzEwMDUxNDI5WjAYMRYwFAYD VQQDEw02ODY2MTFiNS1kN2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsA8F1PUbD0X4+3nLJVzLeDxnAvWO9Y8w8LJ6rb/hodLx+hdW/3JMMxdvY6g6 5wix1rFM+9YrKZTAp84aXt9d6l2Oos5Jg+2hLASFHO0PTdz3JlXZEZjjb/b1KqXY abvNKiOLtoOmDkZN3XvdkwprKw51SuAI+1SVS4D2iDyB7guNobanCnu5bPWua+v4 D5MkUBFCD1Yb+eDGACyjmboXCqaK8nbMmKE6nKyrkGOlyDS3aOhieaKs2gkD2jDJ u7vx04GIZvKbW598HM+R2+f9TNWP/mmOk+GtAhWtgXbngV0TgBitOpCQjexeAnnx VDLkUOzJJ/3xCoEtHRc0j9x+MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlbZO7r WnnKHlwmSEwfeJrqEuMeMB8GA1UdIwQYMBaAFI6N1bLBAbmDp5nJOKoOQKZR/L4H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjMzNC9FN0NEREZDRUM4 RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZT25tY2s0cWc1QXBsSDh2 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvM1Zzc0VCdVlPbm1jazRxZzVBcGxIOHZnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjMzNC9FN0NEREZDRUM4RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZ T25tY2s0cWc1QXBsSDh2Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeX3sjmEF1YD0u2FUyakWvUDIx7DPO05AtsCQMWZfoK+OGr+7t5dFA W32Fi8rmDwIfTjPh7YSkxrAjz+Yotmkh4o6N+A4GppqDuWQC0VwQOhRWkPd6p6or IIfHTgrzwpYrA95/oO8be8l00jPUzLIk94470ean2JwR+JfVxcXuT6VFB0r9s+DA mD67LoDAJFtPfSect2B8dis0NrSxDOGlykJrP/nDgpTFl+25L/SU8PgRL6vyCgT+ LoMspGCjnUACCnSBy42cnUjDKHqFwzfMS3ssCjprWUP92aAukm5ThI2NHLTo6K81 xn2memIWP9EWScKQAd5ABabaJ2lGe9Va -----END CERTIFICATE-----Generated at Thu Jul 3 15:13:36 2025 by rpki-client