$ rpki-client -vvf rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft File: RyIWWikMD62wOOjNLGOuxx6Pg-w.mft (raw, json) Hash identifier: x0c0nAxwQkUxer7gPzjTh6tH78ua1wvblOyZ52Hmdhc= Subject key identifier: C0:DB:DA:6B:B8:19:3A:E0:20:0A:F6:C8:70:86:ED:DB:A9:C6:6F:9D Authority key identifier: 47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC Certificate issuer: /CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft Manifest number: 0535 Signing time: Fri 22 Aug 2025 23:41:45 +0000 Manifest this update: Fri 22 Aug 2025 23:41:44 +0000 Manifest next update: Fri 29 Aug 2025 23:41:44 +0000 Files and hashes: 1: RyIWWikMD62wOOjNLGOuxx6Pg-w.crl (hash: auN7zJa+DCtd80NissHyq8BFURArqlVwIp++qPgiw6E=) 2: EF3517E8099311ECAD398842C4F9AE02.roa (hash: 70nUVsPI/eDiHF1rN+y5OKRTGHTL9/bXu36vYcff6Yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A341, serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC Validity Not Before: Aug 22 23:41:44 2025 GMT Not After : Aug 29 23:41:44 2025 GMT Subject: CN=68a90038-9255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:be:34:23:d9:6c:c5:1b:89:3c:9f:b4:b9: a5:09:aa:d9:74:b9:58:15:3a:fb:03:d7:81:09:65: cd:bb:22:f1:6f:4f:af:63:9b:7f:c5:55:c3:69:46: fa:e8:6b:3a:c7:8a:1d:5d:00:03:1d:9b:95:96:98: ba:1f:06:f5:7e:ea:4d:ec:e4:5d:c1:34:b0:7a:98: d2:be:da:5b:98:7b:b6:33:fb:68:93:07:99:ed:07: 1e:4a:16:18:09:34:d3:d7:8d:a1:fe:21:07:5d:33: cb:39:4c:c1:c1:2a:bc:2d:b9:5e:fd:01:5b:b4:b4: 0c:eb:fd:29:1f:dd:f1:18:86:f0:30:d5:28:20:3b: 2b:aa:0d:d9:a9:8a:6d:02:74:1f:21:61:56:0e:4e: 92:13:71:90:4c:c4:bd:f4:1a:01:57:de:d8:5b:e7: 4e:24:d2:85:4c:51:07:19:1f:bd:f3:c3:a2:22:24: 11:e5:25:5c:f7:c9:f3:13:7f:95:70:25:89:29:d0: c0:38:4b:b8:b7:56:b0:3e:c6:af:54:25:82:12:df: ae:04:07:08:af:d1:ba:bf:58:42:9c:e3:2b:cb:c1: 16:26:fb:2b:7b:bf:1d:5f:37:43:08:8c:52:2f:91: ad:9a:28:ac:57:8e:43:4a:c6:a9:9a:22:f7:e3:c5: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DB:DA:6B:B8:19:3A:E0:20:0A:F6:C8:70:86:ED:DB:A9:C6:6F:9D X509v3 Authority Key Identifier: keyid:47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:6b:e5:f9:a7:01:17:c6:5a:70:23:10:05:5f:75:9e:54:1a: b7:d3:2f:73:f5:1d:f9:57:d8:b9:f8:ce:ab:a8:5c:0a:b9:ac: d1:b0:89:dd:8b:67:b8:cf:c6:7b:07:64:b8:68:74:c1:49:7e: 8c:a1:13:77:fa:0f:41:01:18:a6:68:a7:b0:2a:5e:ea:ea:e5: 24:fa:5e:fc:10:5f:3f:6e:3a:8f:79:6a:bf:ce:f7:f7:9c:d3: 95:9a:9b:56:0f:da:df:9e:39:b2:82:27:9c:2d:61:07:45:eb: 87:54:c9:93:39:96:37:83:fa:9e:19:66:46:0e:dd:b4:c3:17: 20:1d:50:de:2e:33:14:9f:8c:03:d3:37:e5:35:43:70:22:19: 4f:64:26:61:70:8f:68:b6:f8:6f:eb:e8:a1:6f:92:cb:03:31: 8b:09:63:04:1a:9e:be:7f:65:fe:1f:21:15:bc:76:e3:aa:9a: e3:89:d8:3f:fa:ab:f0:6f:5f:90:00:dd:7c:85:bd:1a:da:49: 8e:aa:c4:6e:4f:e6:7d:74:e1:e1:32:cd:e1:6f:11:6a:56:b5: 70:f2:65:fd:0b:5f:e1:9d:63:2f:bc:f9:22:0e:e6:34:ca:ca: 3d:31:32:95:37:91:b0:bc:0c:9e:59:2f:db:2a:85:ca:f0:91: 21:0a:9e:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNDExMTAvBgNVBAUTKDQ3MjIxNjVBMjkwQzBGQURCMDM4RThDRDJDNjNBRUM3 MUU4RjgzRUMwHhcNMjUwODIyMjM0MTQ0WhcNMjUwODI5MjM0MTQ0WjAYMRYwFAYD VQQDEw02OGE5MDAzOC05MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwva+NCPZbMUbiTyftLmlCarZdLlYFTr7A9eBCWXNuyLxb0+vY5t/xVXDaUb6 6Gs6x4odXQADHZuVlpi6Hwb1fupN7ORdwTSwepjSvtpbmHu2M/tokweZ7QceShYY CTTT142h/iEHXTPLOUzBwSq8Lble/QFbtLQM6/0pH93xGIbwMNUoIDsrqg3ZqYpt AnQfIWFWDk6SE3GQTMS99BoBV97YW+dOJNKFTFEHGR+988OiIiQR5SVc98nzE3+V cCWJKdDAOEu4t1awPsavVCWCEt+uBAcIr9G6v1hCnOMry8EWJvsre78dXzdDCIxS L5GtmiisV45DSsapmiL348XdEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDb2mu4 GTrgIAr2yHCG7dupxm+dMB8GA1UdIwQYMBaAFEciFlopDA+tsDjozSxjrscej4Ps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM0MS85QTdFQUM0QTA5 OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2MndPT2pOTEdPdXh4NlBn LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J5SVdXaWtNRDYyd09Pak5MR091eHg2UGctdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM0MS85QTdFQUM0QTA5OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2 MndPT2pOTEdPdXh4NlBnLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxa+X5pwEXxlpwIxAFX3WeVBq30y9z9R35V9i5+M6rqFwKuazRsInd i2e4z8Z7B2S4aHTBSX6MoRN3+g9BARimaKewKl7q6uUk+l78EF8/bjqPeWq/zvf3 nNOVmptWD9rfnjmygiecLWEHReuHVMmTOZY3g/qeGWZGDt20wxcgHVDeLjMUn4wD 0zflNUNwIhlPZCZhcI9otvhv6+ihb5LLAzGLCWMEGp6+f2X+HyEVvHbjqprjidg/ +qvwb1+QAN18hb0a2kmOqsRuT+Z9dOHhMs3hbxFqVrVw8mX9C1/hnWMvvPkiDuY0 yso9MTKVN5GwvAyeWS/bKoXK8JEhCp4O -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:22 2025 by rpki-client