$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json) Hash identifier: ETgiKQUcKM/aMNw0HcYaVIFokJVuAUatTCJz+ZXEX7E= Subject key identifier: A3:9A:07:D0:5C:47:73:66:48:D6:EC:9B:4F:5F:44:87:EE:A6:5D:14 Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft Manifest number: AF Signing time: Sat 23 Aug 2025 06:17:11 +0000 Manifest this update: Sat 23 Aug 2025 06:17:10 +0000 Manifest next update: Sat 30 Aug 2025 06:17:10 +0000 Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: oSolaAqAPWcZHYfnEjK/HrCajCx5JygkrDCLRyl5Ccc=) 2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Validity Not Before: Aug 23 06:17:10 2025 GMT Not After : Aug 30 06:17:10 2025 GMT Subject: CN=68a95ce7-b005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:06:84:aa:65:3e:84:b9:bd:45:29:4d:4d:1a: 65:8c:e9:47:28:27:99:6b:34:92:8f:0e:d7:5c:cf: 03:a4:e9:46:39:36:6d:2b:f4:a9:63:e2:a5:7d:c5: 95:46:f1:ec:b2:55:55:d2:c6:89:e5:22:04:49:2a: 27:e7:47:73:60:7d:d8:91:d4:0e:d8:5a:00:bf:26: 07:fa:44:be:da:04:a4:53:7f:5a:c8:c2:7a:ca:af: af:8f:a0:59:e4:81:b1:82:c0:f8:3a:ba:bd:83:81: d8:b2:db:68:4b:d6:a8:2b:6a:c6:25:7b:68:7f:22: 39:fa:09:6a:7e:38:5c:7f:69:b9:5b:4e:ef:b9:9f: 1c:70:6e:25:ee:2d:5d:1d:be:d6:ae:a6:2e:6c:37: d7:21:77:28:eb:19:a3:7d:8f:22:23:87:75:16:0f: d2:78:5b:3b:14:c6:0b:6d:40:a3:0b:6f:26:19:c0: 4d:c3:ca:14:7f:18:2b:19:12:ea:15:d8:03:93:40: 99:bc:59:21:af:47:d3:88:e3:09:1e:d9:91:10:f5: 81:76:d8:df:8f:74:19:1e:0b:9b:b1:7a:4e:c5:7b: 6c:3f:6b:0c:80:03:78:f9:ac:bb:e0:40:b7:9b:8c: ab:20:63:62:61:77:60:aa:e5:c8:97:96:c4:53:31: df:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9A:07:D0:5C:47:73:66:48:D6:EC:9B:4F:5F:44:87:EE:A6:5D:14 X509v3 Authority Key Identifier: keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:85:e7:88:9f:19:a8:d6:f1:9f:f3:81:53:bb:b0:97:cf:af: 18:40:ad:bc:33:31:2d:16:d1:7b:92:45:4f:e3:b9:b2:c5:56: c6:4c:27:e8:27:50:96:56:1e:68:30:1c:d8:ab:73:2f:6c:9c: f1:00:38:72:96:b1:9b:06:e1:8f:82:76:13:81:21:60:92:4a: 79:80:5c:fd:60:de:58:71:c2:2e:c9:e9:8d:07:c8:9d:fb:04: ab:c2:d2:ad:d6:dc:ba:3d:d2:ca:68:b8:be:30:98:5a:3b:72: ba:cd:8b:d0:8b:cb:d1:18:30:b2:0b:d4:94:a8:5f:ea:1b:1c: 02:d5:6e:bc:45:0a:a4:93:dc:54:0c:ef:d8:55:cc:45:8f:d1: 5d:86:0b:6e:bd:05:dd:e3:50:6d:58:5a:28:e6:b1:5f:b5:b7: 44:e1:7e:d6:c4:bc:c6:97:de:bb:85:64:d5:14:2a:99:60:fb: ba:9d:14:59:23:e8:91:30:19:c0:45:57:ee:06:8f:31:ff:f0: 5e:bc:ff:6f:00:c6:60:71:fa:bc:d2:2d:5e:9c:c4:39:ab:59: b2:d1:2e:d0:64:66:6f:16:d7:a2:e0:cb:01:63:a5:27:6b:ab: 03:d6:ec:07:17:8a:0b:18:88:47:d6:01:ad:a3:ca:e0:f7:a4: 66:d7:ae:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEM4NDlDMUY2RUI4RDFCMEIzNzk0QjA2MEM0OUM1QTlC RDUzQUQ0QzkwHhcNMjUwODIzMDYxNzEwWhcNMjUwODMwMDYxNzEwWjAYMRYwFAYD VQQDEw02OGE5NWNlNy1iMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQaEqmU+hLm9RSlNTRpljOlHKCeZazSSjw7XXM8DpOlGOTZtK/SpY+KlfcWV RvHsslVV0saJ5SIESSon50dzYH3YkdQO2FoAvyYH+kS+2gSkU39ayMJ6yq+vj6BZ 5IGxgsD4Orq9g4HYsttoS9aoK2rGJXtofyI5+glqfjhcf2m5W07vuZ8ccG4l7i1d Hb7WrqYubDfXIXco6xmjfY8iI4d1Fg/SeFs7FMYLbUCjC28mGcBNw8oUfxgrGRLq FdgDk0CZvFkhr0fTiOMJHtmREPWBdtjfj3QZHgubsXpOxXtsP2sMgAN4+ay74EC3 m4yrIGNiYXdgquXIl5bEUzHfvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOaB9Bc R3NmSNbsm09fRIfupl0UMB8GA1UdIwQYMBaAFMhJwfbrjRsLN5SwYMScWpvVOtTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BNzMzN0M2QTcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3czNsTEJneEp4YW05VTYx TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BNzMzN0M2QTczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3 czNsTEJneEp4YW05VTYxTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOheeInxmo1vGf84FTu7CXz68YQK28MzEtFtF7kkVP47myxVbGTCfo J1CWVh5oMBzYq3MvbJzxADhylrGbBuGPgnYTgSFgkkp5gFz9YN5YccIuyemNB8id +wSrwtKt1ty6PdLKaLi+MJhaO3K6zYvQi8vRGDCyC9SUqF/qGxwC1W68RQqkk9xU DO/YVcxFj9FdhgtuvQXd41BtWFoo5rFftbdE4X7WxLzGl967hWTVFCqZYPu6nRRZ I+iRMBnARVfuBo8x//BevP9vAMZgcfq80i1enMQ5q1my0S7QZGZvFtei4MsBY6Un a6sD1uwHF4oLGIhH1gGto8rg96Rm165D -----END CERTIFICATE-----Generated at Sat Aug 23 16:24:31 2025 by rpki-client