$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft File: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft (raw, json) Hash identifier: M3pQjjcPN+ROUTis0OXOYojg9prlowk06sYNsrM2w7Y= Subject key identifier: 04:EA:B9:EC:5B:0E:22:AE:A7:70:F7:E5:A8:14:5C:FF:31:48:BB:D9 Authority key identifier: 46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 Certificate issuer: /CN=A9188F45/serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft Manifest number: 012C Signing time: Sat 23 Aug 2025 04:46:57 +0000 Manifest this update: Sat 23 Aug 2025 04:46:57 +0000 Manifest next update: Sat 30 Aug 2025 04:46:57 +0000 Files and hashes: 1: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl (hash: 1oirvX1QsYclTMEKSm+Q0WgHQU9HjtZX4KQm892JLMA=) 2: 8A574D9AB8AB11EEA866EB27C4F9AE02.roa (hash: B74l8KAcZzTJjTG0Mnc+WUicHwzuFyRpUWB92X31DmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F45, serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Validity Not Before: Aug 23 04:46:57 2025 GMT Not After : Aug 30 04:46:57 2025 GMT Subject: CN=68a947c1-9223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:32:83:aa:3c:0e:19:e4:e9:14:8b:33:13:e1: 87:a8:9f:b3:94:f6:3c:c7:42:fb:e1:29:49:ac:49: 56:ff:81:08:3c:31:c6:32:03:05:7d:01:63:a5:2a: 50:ae:20:92:c0:c4:6b:5c:2d:ce:27:1c:7c:ce:dc: 1c:70:0e:6f:fc:88:cb:8b:6d:29:1c:89:97:ff:62: 46:06:bc:34:1c:55:28:7d:88:1e:c9:88:be:45:93: c1:1b:df:d1:7c:e5:36:4c:8a:5b:09:cd:14:25:a1: 95:0a:f2:4a:1d:64:98:71:18:21:5d:20:5f:14:53: cd:df:71:1f:f1:2d:14:73:18:2b:09:f2:c8:98:1c: e9:35:26:63:8a:0e:20:0c:75:9f:66:93:8c:1e:8d: f2:bf:55:43:a3:5b:43:7e:41:f1:4e:02:0c:a3:59: 81:a9:1c:c4:29:16:4a:9b:e8:fb:e8:ad:12:7d:66: bb:c4:c7:ce:0e:31:33:08:0f:46:18:2f:98:74:6b: 60:9f:10:1f:57:7d:45:36:e4:f8:3f:ef:b5:9e:14: 5c:20:9e:97:f0:73:cf:af:3c:93:a5:8d:73:ce:c0: 76:b3:b1:01:f3:c8:80:a8:1e:80:fe:8d:2b:67:f1: 6c:11:61:13:8a:7d:9b:9d:c0:fc:bc:ec:2d:1a:72: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EA:B9:EC:5B:0E:22:AE:A7:70:F7:E5:A8:14:5C:FF:31:48:BB:D9 X509v3 Authority Key Identifier: keyid:46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:16:cb:b7:33:93:82:af:e4:0b:11:f5:83:a6:40:c5:aa:e6: 24:fd:a2:7b:b6:80:ac:d5:ea:5b:70:8c:2e:ed:e3:02:eb:77: 68:7c:95:ce:b8:e6:71:7a:34:fe:d5:2e:66:39:6b:56:2b:cb: 66:36:de:29:7d:fc:c8:7f:0a:f1:59:a5:35:0a:3e:48:4d:6c: 7f:80:33:9d:da:96:7f:74:77:51:cd:ca:fc:22:9f:87:a3:f3: 50:ab:fd:e2:cd:77:f5:15:f9:63:47:d9:30:66:57:42:e9:56: 66:b8:3b:8d:54:97:c4:97:ab:46:e0:36:22:b3:03:05:7b:86: 3d:c4:22:b9:24:06:c0:13:39:67:38:10:16:0b:08:e2:6b:50: f3:07:08:78:6b:04:43:be:53:f4:f7:46:89:0e:56:d9:8b:99: 67:ff:e1:2c:45:5e:7a:5a:e8:2e:c9:c0:e8:2d:17:db:81:91: b6:1c:00:de:83:a9:fb:99:be:71:23:9b:72:fe:4e:db:e5:7b: b1:f7:ae:02:d2:c2:2c:3c:b5:7e:c8:a8:9f:b6:38:ed:dc:43: 76:89:65:de:9f:ab:62:36:d0:1c:c7:27:c7:67:67:d7:a8:e6: f0:d3:ad:f9:72:4d:b7:9a:5b:77:c5:e7:35:c6:e0:58:93:43: 74:bb:88:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNDUxMTAvBgNVBAUTKDQ2RUYwNEJGMTE5OEJFMEUyQTMxM0FBN0FEMEFCMEZD N0UwODFDNDUwHhcNMjUwODIzMDQ0NjU3WhcNMjUwODMwMDQ0NjU3WjAYMRYwFAYD VQQDEw02OGE5NDdjMS05MjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TKDqjwOGeTpFIszE+GHqJ+zlPY8x0L74SlJrElW/4EIPDHGMgMFfQFjpSpQ riCSwMRrXC3OJxx8ztwccA5v/IjLi20pHImX/2JGBrw0HFUofYgeyYi+RZPBG9/R fOU2TIpbCc0UJaGVCvJKHWSYcRghXSBfFFPN33Ef8S0UcxgrCfLImBzpNSZjig4g DHWfZpOMHo3yv1VDo1tDfkHxTgIMo1mBqRzEKRZKm+j76K0SfWa7xMfODjEzCA9G GC+YdGtgnxAfV31FNuT4P++1nhRcIJ6X8HPPrzyTpY1zzsB2s7EB88iAqB6A/o0r Z/FsEWETin2bncD8vOwtGnKXMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATquexb DiKup3D35agUXP8xSLvZMB8GA1UdIwQYMBaAFEbvBL8RmL4OKjE6p60KsPx+CBxF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY0NS9GRDk5NjUxNEI4 QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZnNHFNVHFuclFxd19INElI RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1OEV2eEdZdmc0cU1UcW5yUXF3X0g0SUhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY0NS9GRDk5NjUxNEI4QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZn NHFNVHFuclFxd19INElIRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtFsu3M5OCr+QLEfWDpkDFquYk/aJ7toCs1epbcIwu7eMC63dofJXO uOZxejT+1S5mOWtWK8tmNt4pffzIfwrxWaU1Cj5ITWx/gDOd2pZ/dHdRzcr8Ip+H o/NQq/3izXf1FfljR9kwZldC6VZmuDuNVJfEl6tG4DYiswMFe4Y9xCK5JAbAEzln OBAWCwjia1DzBwh4awRDvlP090aJDlbZi5ln/+EsRV56WuguycDoLRfbgZG2HADe g6n7mb5xI5ty/k7b5Xux964C0sIsPLV+yKiftjjt3EN2iWXen6tiNtAcxyfHZ2fX qObw0635ck23mlt3xec1xuBYk0N0u4jI -----END CERTIFICATE-----Generated at Sat Aug 23 17:24:02 2025 by rpki-client