$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft File: bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft (raw, json) Hash identifier: RwOOgK3r25VgD+8n2TEXHPkg7oMW+OFrnYjqcu5qPDU= Subject key identifier: 80:87:A3:4A:BC:67:B0:7D:90:D4:5C:18:E0:C7:B4:E1:EF:54:25:38 Authority key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C Certificate issuer: /CN=A917877E/serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft Manifest number: 19 Signing time: Sat 23 Aug 2025 08:10:30 +0000 Manifest this update: Sat 23 Aug 2025 08:10:29 +0000 Manifest next update: Sat 30 Aug 2025 08:10:29 +0000 Files and hashes: 1: bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl (hash: cjc4AOZEKQrryZaVZ2hB174CjssqkpxvFsUSpZKotKY=) 2: 9EA96DF25D5D11F08A574048C4F9AE02.roa (hash: q6ZblRMV0uyhkappWvL+RGy5XexsiemwGej/lfgL9RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C Validity Not Before: Aug 23 08:10:29 2025 GMT Not After : Aug 30 08:10:29 2025 GMT Subject: CN=68a97776-cfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:e8:b3:ab:6d:17:91:97:6f:6d:fa:38:28: c4:dd:7f:55:5e:9f:6a:d7:51:00:ef:77:72:88:ad: 30:6e:7d:3c:5b:e6:58:21:a5:c9:7d:56:ad:de:40: a0:1d:56:02:36:c5:69:3b:6a:10:07:ef:79:a6:bd: 5f:75:e3:60:77:d2:69:9e:0b:5d:84:f4:94:38:58: 6c:d8:d4:7c:45:58:1f:24:ac:88:db:13:06:34:9f: 59:c5:10:36:1d:a6:03:81:66:81:69:45:be:72:4a: 11:0d:43:03:fe:a4:fe:4a:47:85:1a:37:8d:7b:51: 11:76:ae:81:a4:a3:b3:83:ed:54:a4:0e:25:bb:c5: 61:54:2f:9a:97:18:fc:4d:6d:5d:49:7c:a3:61:71: 2d:43:4b:a3:c7:43:de:f1:50:ca:85:89:f5:8f:57: a1:78:f2:c6:44:0b:0e:ed:ac:01:6b:53:a7:fc:45: ad:e6:02:07:df:a2:2d:61:d7:1b:23:1e:0b:01:51: 06:86:c1:16:90:24:dc:fb:6a:31:53:92:a7:0b:ef: 7e:d8:ea:a3:35:dd:bd:da:db:f3:57:4d:65:2d:d7: 5d:27:64:53:9b:7c:cb:0f:ec:77:ab:56:b1:64:f5: 36:7c:91:f8:95:ef:f7:b9:e5:76:b1:82:ac:ed:5d: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:87:A3:4A:BC:67:B0:7D:90:D4:5C:18:E0:C7:B4:E1:EF:54:25:38 X509v3 Authority Key Identifier: keyid:6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c1:3d:da:f1:fe:ee:93:81:13:f2:b2:ce:cf:79:12:5d:60: f0:62:1e:df:d7:1b:da:3c:44:66:8e:dc:95:85:67:ff:34:2a: f0:d1:08:09:69:7d:66:f0:68:83:ba:d7:49:8a:8d:6a:6e:c8: c6:34:fa:dc:20:8c:75:24:7d:ed:63:bf:f1:e2:e1:13:58:46: 94:02:21:bb:e7:8e:e0:e7:72:1d:1b:9a:07:0c:78:db:7a:8b: 1d:cf:8e:e4:6c:ce:fa:df:ab:f4:e1:20:9a:ee:81:01:49:71: fa:90:2a:3a:23:c5:67:07:71:ec:1b:00:59:4f:57:d4:b6:2e: 40:6d:8d:34:39:e1:1a:ba:33:04:a0:e4:3d:27:18:51:02:4f: cc:4e:74:fa:c9:8e:e7:36:90:0b:64:79:c4:89:bf:8b:6c:cf: 51:c7:57:d9:5b:fc:9a:9e:d5:f2:4d:9f:fa:d4:3f:19:bf:9a: 1a:b4:85:ee:78:3b:89:fc:61:95:1c:ee:aa:60:14:08:8f:02: bc:63:41:55:c7:6e:1b:7a:3d:ab:34:f5:1a:90:55:e8:a3:9d: 4b:d8:4c:33:af:74:86:d1:0d:31:38:e3:8e:6f:3b:bc:f6:ee: 8d:32:f8:f4:3d:fc:b6:17:41:67:1e:87:d0:99:09:f9:9d:09: 51:30:e4:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODc3RTExMC8GA1UEBRMoNkQ4QUI2RkRFNTIxREMxMDZGOTQ4MjkyQjUwMkZENUEw NzM0ODM3QzAeFw0yNTA4MjMwODEwMjlaFw0yNTA4MzAwODEwMjlaMBgxFjAUBgNV BAMTDTY4YTk3Nzc2LWNmYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv/+izq20XkZdvbfo4KMTdf1Ven2rXUQDvd3KIrTBufTxb5lghpcl9Vq3eQKAd VgI2xWk7ahAH73mmvV9142B30mmeC12E9JQ4WGzY1HxFWB8krIjbEwY0n1nFEDYd pgOBZoFpRb5yShENQwP+pP5KR4UaN417URF2roGko7OD7VSkDiW7xWFUL5qXGPxN bV1JfKNhcS1DS6PHQ97xUMqFifWPV6F48sZECw7trAFrU6f8Ra3mAgffoi1h1xsj HgsBUQaGwRaQJNz7ajFTkqcL737Y6qM13b3a2/NXTWUt110nZFObfMsP7HerVrFk 9TZ8kfiV7/e55XaxgqztXZ6PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgIejSrxn sH2Q1FwY4Me04e9UJTgwHwYDVR0jBBgwFoAUbYq2/eUh3BBvlIKStQL9Wgc0g3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NzdFLzM4OUE2MkQyNUQ1 RDExRjBCNDlBNzg0N0M0RjlBRTAyL2JZcTJfZVVoM0JCdmxJS1N0UUw5V2djMGcz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYllxMl9lVWgzQkJ2bElLU3RRTDlXZ2MwZzN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NzdFLzM4OUE2MkQyNUQ1RDExRjBCNDlBNzg0N0M0RjlBRTAyL2JZcTJfZVVoM0JC dmxJS1N0UUw5V2djMGczdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGvBPdrx/u6TgRPyss7PeRJdYPBiHt/XG9o8RGaO3JWFZ/80KvDRCAlp fWbwaIO610mKjWpuyMY0+twgjHUkfe1jv/Hi4RNYRpQCIbvnjuDnch0bmgcMeNt6 ix3PjuRszvrfq/ThIJrugQFJcfqQKjojxWcHcewbAFlPV9S2LkBtjTQ54Rq6MwSg 5D0nGFECT8xOdPrJjuc2kAtkecSJv4tsz1HHV9lb/Jqe1fJNn/rUPxm/mhq0he54 O4n8YZUc7qpgFAiPArxjQVXHbht6Pas09RqQVeijnUvYTDOvdIbRDTE4445vO7z2 7o0y+PQ9/LYXQWceh9CZCfmdCVEw5K0= -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:20 2025 by rpki-client