$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json) Hash identifier: WrQJx0LAaZlx5lUGP0las3xlMiC0OeunwtlwZXWWQ2M= Subject key identifier: 27:52:59:53:25:1B:D2:1F:40:5B:2A:24:E9:C0:D9:F3:15:8F:6E:65 Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft Manifest number: 07D4 Signing time: Fri 22 Aug 2025 21:14:02 +0000 Manifest this update: Fri 22 Aug 2025 21:14:01 +0000 Manifest next update: Fri 29 Aug 2025 21:14:01 +0000 Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: bVFCI8NE8y7/kmfFykFmNn7/UFBCVqip5AzKJNrtPWg=) 2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: FLJlO0/U5xnVZ/RuP3SLCUdb/l/zTCs0DDA6x0gKds8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Validity Not Before: Aug 22 21:14:01 2025 GMT Not After : Aug 29 21:14:01 2025 GMT Subject: CN=68a8dd99-132c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:99:53:b4:f8:b4:f7:04:f4:5a:2f:51:4d: 39:e6:ca:32:14:67:88:1f:f6:d2:63:be:77:47:b8: e0:78:ec:c0:4a:1b:1c:de:96:cb:1e:6b:82:34:a8: ea:91:67:64:ec:3e:9c:b2:0a:7b:4e:b1:08:42:64: ab:fe:51:81:30:e6:df:48:23:63:29:82:e9:2b:39: 6c:cb:e1:05:53:be:03:80:b8:1c:6b:3e:ad:90:61: 2b:9f:a8:92:a4:13:44:a7:33:32:2f:ef:7e:06:d9: bb:10:1e:c7:4b:74:a4:82:85:ea:2b:af:46:bd:db: 51:f0:56:01:c0:fa:29:e3:44:50:9f:04:ef:60:85: 58:96:d4:33:38:36:9e:64:56:8b:01:01:ec:70:0b: 63:cd:95:f4:40:95:7f:20:40:fe:c7:fb:5c:d7:20: d5:cd:24:4e:e6:fb:ff:6b:d0:aa:20:fe:e4:db:0b: 10:d0:12:c4:53:18:b7:13:26:9c:75:96:4b:3a:e4: 33:5f:fc:f7:09:64:b1:b3:df:05:ca:b6:5f:5d:d2: 18:59:9c:f2:b6:35:25:79:8a:d2:ed:1d:97:83:34: e4:2f:8d:70:ad:a8:f8:0a:c5:68:12:d5:5e:01:64: 50:4f:72:d6:17:f5:58:09:35:83:56:15:a2:74:e9: 48:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:52:59:53:25:1B:D2:1F:40:5B:2A:24:E9:C0:D9:F3:15:8F:6E:65 X509v3 Authority Key Identifier: keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:33:a2:9a:80:33:c3:7f:19:bd:1e:22:c7:58:6f:5c:b7:5b: f6:0b:40:34:a3:c0:f3:ce:e6:f7:96:06:cb:b0:18:a3:d7:b1: 17:e2:6f:b9:9f:d0:9e:44:f4:d6:a1:19:6c:58:a3:ab:09:dd: bf:91:ba:59:f5:24:41:cd:62:47:4e:5f:f8:83:3e:c2:b4:98: 6e:c1:18:0a:9c:4d:ec:34:92:bf:ec:82:bc:24:ec:29:c1:50: 70:6b:50:17:88:3b:8a:07:65:ae:4b:f2:5f:df:ae:b2:02:1f: f3:db:53:d2:70:38:f7:46:63:6c:e2:84:6d:83:c8:15:f7:41: f6:23:11:5c:62:ba:f5:17:1f:8f:7f:b4:49:b2:99:c7:e3:bc: d5:3a:9b:f9:30:81:16:03:58:44:a8:61:80:b7:6b:46:ae:4d: 89:18:3b:fa:21:6a:ea:b4:2e:40:a3:b7:77:2d:99:c5:e5:70: 57:09:04:2d:47:f5:af:7e:90:3b:a5:1e:6e:9e:5c:d5:d0:15: 40:2a:b3:25:eb:e9:a4:da:32:73:55:a7:97:b2:23:20:58:c5: 8e:50:4e:cb:33:a5:67:c0:18:89:67:be:35:79:2f:3a:59:c1: d9:74:76:c9:ab:e7:e1:5d:60:31:81:50:5e:01:e7:53:9f:08: 4a:6d:54:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF QURBOEQ0NzcwHhcNMjUwODIyMjExNDAxWhcNMjUwODI5MjExNDAxWjAYMRYwFAYD VQQDEw02OGE4ZGQ5OS0xMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2qZU7T4tPcE9FovUU055soyFGeIH/bSY753R7jgeOzAShsc3pbLHmuCNKjq kWdk7D6csgp7TrEIQmSr/lGBMObfSCNjKYLpKzlsy+EFU74DgLgcaz6tkGErn6iS pBNEpzMyL+9+Btm7EB7HS3SkgoXqK69GvdtR8FYBwPop40RQnwTvYIVYltQzODae ZFaLAQHscAtjzZX0QJV/IED+x/tc1yDVzSRO5vv/a9CqIP7k2wsQ0BLEUxi3Eyac dZZLOuQzX/z3CWSxs98FyrZfXdIYWZzytjUleYrS7R2XgzTkL41wraj4CsVoEtVe AWRQT3LWF/VYCTWDVhWidOlIPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdSWVMl G9IfQFsqJOnA2fMVj25lMB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZP UnZxM3RUNUtjMTdxMm8xSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdM6KagDPDfxm9HiLHWG9ct1v2C0A0o8Dzzub3lgbLsBij17EX4m+5 n9CeRPTWoRlsWKOrCd2/kbpZ9SRBzWJHTl/4gz7CtJhuwRgKnE3sNJK/7IK8JOwp wVBwa1AXiDuKB2WuS/Jf366yAh/z21PScDj3RmNs4oRtg8gV90H2IxFcYrr1Fx+P f7RJspnH47zVOpv5MIEWA1hEqGGAt2tGrk2JGDv6IWrqtC5Ao7d3LZnF5XBXCQQt R/WvfpA7pR5unlzV0BVAKrMl6+mk2jJzVaeXsiMgWMWOUE7LM6VnwBiJZ741eS86 WcHZdHbJq+fhXWAxgVBeAedTnwhKbVT/ -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:36 2025 by rpki-client