$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json) Hash identifier: 0awhPvCAg6R+FaO6HLCymWGkw00ryOuTNT1lrlLvqb8= Subject key identifier: 90:79:D2:D2:01:52:A7:F7:97:4E:18:38:35:07:8F:A4:76:5E:61:60 Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft Manifest number: 17 Signing time: Sat 23 Aug 2025 08:13:50 +0000 Manifest this update: Sat 23 Aug 2025 08:13:49 +0000 Manifest next update: Sat 30 Aug 2025 08:13:49 +0000 Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: 32ddv4q/GjIn5zpQPH3yGhdFzPQLT4BQRjk6fzYJ4b8=) 2: 21C5B04263A311F096468248C4F9AE02.roa (hash: Xzb62xLJbAMEkevYXMmuNbI1IlT4POMgC4Yy3OA8C7k=) 3: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: OVSbJE+Pd0/Klp/U7r6paIfqVvKQjdcHWMz7l5HkgE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Validity Not Before: Aug 23 08:13:49 2025 GMT Not After : Aug 30 08:13:49 2025 GMT Subject: CN=68a9783d-18e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:78:77:3c:ba:7d:90:d2:89:be:41:8c:0b: 66:53:4a:13:45:95:c7:89:70:01:36:ff:c0:78:30: 3e:4c:e2:1f:a8:a6:14:55:c1:e9:bd:99:73:d4:02: f3:3a:ec:98:e6:34:a4:91:64:d4:20:ad:df:76:3b: 9f:8f:0a:3a:bb:91:50:b1:40:79:79:db:96:00:fa: c3:76:e1:74:52:a0:be:c6:7f:5d:0b:43:65:2a:92: f9:9c:39:e8:34:a8:df:ae:11:f8:e4:0f:bd:ba:1f: 1b:7e:15:a6:6b:4e:88:70:e7:51:89:bb:67:32:68: 37:16:84:39:c4:6d:69:b7:7f:1b:da:f3:fc:e1:6a: 22:c5:e8:9a:a9:f8:5b:89:d0:cc:d1:d6:e8:f5:5f: ad:7c:22:64:76:09:28:00:05:e5:b0:ae:f0:50:fc: 2e:ed:b4:ac:55:2b:2f:ef:0d:56:62:27:e9:4e:1d: c9:5f:79:7b:03:68:67:06:f7:35:73:cb:36:1d:67: f8:cf:d2:fe:a3:58:6d:53:9a:37:0e:a0:87:73:2c: ac:27:8d:dc:dd:45:c0:2d:16:b3:a5:5b:07:81:27: 5e:3b:fd:4b:9c:f9:9f:60:95:43:81:ef:cd:ea:7c: cc:ef:08:5c:c0:d7:18:53:ad:5b:ff:98:a3:0a:ff: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:79:D2:D2:01:52:A7:F7:97:4E:18:38:35:07:8F:A4:76:5E:61:60 X509v3 Authority Key Identifier: keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c6:15:5c:8f:4a:f2:da:98:c3:11:94:4c:e8:9f:ba:1c:89: bb:e9:00:47:e0:08:e9:67:12:0f:7f:3e:cc:5f:01:d5:dc:53: 16:4b:8d:07:97:c9:3f:48:47:b8:af:39:d7:37:1e:9e:3a:30: 09:bc:18:85:ec:5b:e1:07:2e:24:a0:3b:ed:bf:54:49:95:71: 41:0b:6b:b4:fe:e1:3b:36:29:46:46:66:22:de:53:2f:7b:fe: 8a:72:86:b2:c2:47:7d:3c:c0:33:c6:8c:02:47:1d:f5:b0:a8: d3:54:7c:4e:70:b4:bf:29:f2:a5:ad:5c:22:b0:a1:23:c7:a6: 43:b9:6f:a2:19:d8:c7:b3:60:3e:a6:5f:f9:fe:1c:c9:b4:92: 18:84:32:ae:0c:65:a6:53:85:d9:5d:5f:49:4a:ee:cd:6b:bb: d8:da:4d:3a:15:a1:7b:cf:0d:64:d3:43:2e:59:5c:ed:91:82: ea:e0:f4:c9:ff:c6:84:ee:2a:1f:4f:b0:05:b9:31:7b:b5:e1: fb:54:80:1f:a0:27:72:5a:6d:bf:c0:34:7f:30:2e:bd:59:e8: 58:d9:83:92:0a:46:01:0d:e4:6e:49:7a:f4:ee:5d:ec:6a:17: 39:a0:8f:85:02:09:06:71:3f:72:3f:50:5b:53:27:43:5d:e5: 14:10:7f:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTMwOTExMC8GA1UEBRMoN0Q4RkEwQkVGNkFFRjcxQkRGODgzODU4RjczNjE5RDNC NTlFMjc3NzAeFw0yNTA4MjMwODEzNDlaFw0yNTA4MzAwODEzNDlaMBgxFjAUBgNV BAMTDTY4YTk3ODNkLTE4ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/DXh3PLp9kNKJvkGMC2ZTShNFlceJcAE2/8B4MD5M4h+ophRVwem9mXPUAvM6 7JjmNKSRZNQgrd92O5+PCjq7kVCxQHl525YA+sN24XRSoL7Gf10LQ2UqkvmcOeg0 qN+uEfjkD726Hxt+FaZrTohw51GJu2cyaDcWhDnEbWm3fxva8/zhaiLF6Jqp+FuJ 0MzR1uj1X618ImR2CSgABeWwrvBQ/C7ttKxVKy/vDVZiJ+lOHclfeXsDaGcG9zVz yzYdZ/jP0v6jWG1TmjcOoIdzLKwnjdzdRcAtFrOlWweBJ147/Uuc+Z9glUOB783q fMzvCFzA1xhTrVv/mKMK/4mBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkHnS0gFS p/eXThg4NQePpHZeYWAwHwYDVR0jBBgwFoAUfY+gvvau9xvfiDhY9zYZ07WeJ3cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5Lzk4OTFFOTJFNjEz RDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUoz Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZlktZ3Z2YXU5eHZmaURoWTl6WVowN1dlSjNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 MzA5Lzk4OTFFOTJFNjEzRDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2 ZmlEaFk5ellaMDdXZUozYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADrGFVyPSvLamMMRlEzon7ocibvpAEfgCOlnEg9/PsxfAdXcUxZLjQeX yT9IR7ivOdc3Hp46MAm8GIXsW+EHLiSgO+2/VEmVcUELa7T+4Ts2KUZGZiLeUy97 /opyhrLCR308wDPGjAJHHfWwqNNUfE5wtL8p8qWtXCKwoSPHpkO5b6IZ2MezYD6m X/n+HMm0khiEMq4MZaZThdldX0lK7s1ru9jaTToVoXvPDWTTQy5ZXO2Rgurg9Mn/ xoTuKh9PsAW5MXu14ftUgB+gJ3Jabb/ANH8wLr1Z6FjZg5IKRgEN5G5JevTuXexq Fzmgj4UCCQZxP3I/UFtTJ0Nd5RQQfy8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:57 2025 by rpki-client