$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json) Hash identifier: d3ISRLv2LRp5d2vaiqBRvtDYRpIdfhOIfu4jyB1M/A8= Subject key identifier: 64:F5:78:5F:64:E6:30:CA:EB:FE:60:5A:6F:1B:D0:7C:83:76:22:32 Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 074C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft Manifest number: 073F Signing time: Fri 22 Aug 2025 21:57:24 +0000 Manifest this update: Fri 22 Aug 2025 21:57:23 +0000 Manifest next update: Fri 29 Aug 2025 21:57:23 +0000 Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: NwybeUuI11qU9boSdqC5kj96QVQkdOn95o8ccAf9KAs=) 2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 2jsCymQavrx92Kq4v6h75mDYqdyK8XpnNBvpUzJpvhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: Aug 22 21:57:23 2025 GMT Not After : Aug 29 21:57:23 2025 GMT Subject: CN=68a8e7c4-76a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:3b:33:54:dc:a4:15:b6:52:94:76:8a:ec: 83:2a:ca:8e:7f:e7:8b:4e:e6:3b:28:b6:39:ae:a4: aa:96:c8:f1:d2:75:84:11:a3:57:eb:25:fa:eb:1d: a9:19:fb:39:46:97:1d:c4:bf:c5:0a:8f:b6:ac:63: 38:bb:5b:7c:c1:57:d9:4b:32:3e:ef:10:5b:2d:7d: 71:1c:52:78:eb:0f:80:6e:f4:a6:3c:f1:3c:c7:9a: 15:c9:37:43:fb:4a:99:b3:62:8e:90:b7:42:8b:d7: 26:0d:37:9f:6d:c6:d0:51:65:2d:17:7e:7a:00:d0: 07:1e:fd:4a:0c:9b:67:f0:a4:1c:da:b9:b0:ee:ce: 54:86:b5:a5:30:38:ec:50:7c:3c:a5:51:0c:3f:7c: 20:83:47:bc:11:ab:9f:ca:3e:e9:6b:0d:ec:02:28: 66:41:3a:b7:85:aa:fa:6b:ff:71:76:12:ac:46:1c: b6:39:cf:36:37:f5:af:f2:3d:2c:0b:f5:4b:fc:4a: 11:bf:f7:15:b0:c6:44:52:6b:33:b9:34:26:76:cf: 18:24:7e:54:36:72:7c:11:fb:23:be:9c:1f:80:43: 5d:5a:2b:8e:8f:3f:c2:4a:aa:36:c9:8a:05:ee:25: a6:ec:48:06:05:9b:4f:cd:1f:3f:00:ae:c0:e6:98: 58:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F5:78:5F:64:E6:30:CA:EB:FE:60:5A:6F:1B:D0:7C:83:76:22:32 X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:45:4b:9b:a4:f9:5f:e4:4c:23:d0:aa:af:6f:1d:2f:4e:5d: 35:c7:09:8c:7b:56:fe:6f:ef:cd:45:4e:d3:dd:ae:53:a5:74: e3:90:d9:c9:e4:c4:28:19:27:1a:f1:03:dc:3e:14:2f:07:24: 5f:f1:53:a5:52:f3:4c:1d:f2:57:a2:12:48:5c:21:06:b3:e5: 56:90:00:44:0f:97:e2:61:a3:68:22:2e:30:e1:fa:86:b7:30: 58:ca:5c:c8:03:90:7c:18:83:3c:29:60:e2:ce:b4:13:15:50: 79:60:70:a3:0a:f0:35:11:1e:01:46:21:2e:48:c5:09:1d:5e: ff:08:06:fa:11:24:f1:d3:bd:dc:78:0f:10:e7:dd:86:9c:c3: 04:b7:52:20:8a:4c:1c:62:f6:b7:a6:7f:2a:f5:b9:3c:eb:80: 8f:ff:90:09:52:4c:69:7a:91:a1:d8:a4:11:6a:f8:3e:f1:22: 67:a0:c9:cd:ce:44:6b:50:84:6f:7a:73:eb:da:7e:50:32:8e: e9:e4:bf:54:39:a3:f1:f1:01:9c:f4:8f:4d:a8:4e:9f:69:1d: 20:20:e8:99:71:8c:51:f9:b6:ae:cb:55:88:48:3e:17:a3:b4: 10:14:53:4e:b5:41:31:cd:72:a3:0f:a1:ce:b8:e6:23:f5:b8: 2e:50:ef:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjUwODIyMjE1NzIzWhcNMjUwODI5MjE1NzIzWjAYMRYwFAYD VQQDEw02OGE4ZTdjNC03NmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Eo7M1TcpBW2UpR2iuyDKsqOf+eLTuY7KLY5rqSqlsjx0nWEEaNX6yX66x2p Gfs5RpcdxL/FCo+2rGM4u1t8wVfZSzI+7xBbLX1xHFJ46w+AbvSmPPE8x5oVyTdD +0qZs2KOkLdCi9cmDTefbcbQUWUtF356ANAHHv1KDJtn8KQc2rmw7s5UhrWlMDjs UHw8pVEMP3wgg0e8Eaufyj7paw3sAihmQTq3har6a/9xdhKsRhy2Oc82N/Wv8j0s C/VL/EoRv/cVsMZEUmszuTQmds8YJH5UNnJ8EfsjvpwfgENdWiuOjz/CSqo2yYoF 7iWm7EgGBZtPzR8/AK7A5phYDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGT1eF9k 5jDK6/5gWm8b0HyDdiIyMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrRUubpPlf5Ewj0Kqvbx0vTl01xwmMe1b+b+/NRU7T3a5TpXTjkNnJ 5MQoGSca8QPcPhQvByRf8VOlUvNMHfJXohJIXCEGs+VWkABED5fiYaNoIi4w4fqG tzBYylzIA5B8GIM8KWDizrQTFVB5YHCjCvA1ER4BRiEuSMUJHV7/CAb6ESTx073c eA8Q592GnMMEt1IgikwcYva3pn8q9bk864CP/5AJUkxpepGh2KQRavg+8SJnoMnN zkRrUIRvenPr2n5QMo7p5L9UOaPx8QGc9I9NqE6faR0gIOiZcYxR+bauy1WISD4X o7QQFFNOtUExzXKjD6HOuOYj9bguUO/B -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:55 2025 by rpki-client