$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json) Hash identifier: A/U5uBtlMeB40abDjd6mpmVSbtVzLtIndZf2rOeOut8= Subject key identifier: D0:18:56:02:4C:D4:28:E2:2C:6E:47:F2:EB:AE:CC:7E:05:78:AD:A9 Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft Manifest number: 0119 Signing time: Sat 23 Aug 2025 04:59:51 +0000 Manifest this update: Sat 23 Aug 2025 04:59:50 +0000 Manifest next update: Sat 30 Aug 2025 04:59:50 +0000 Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: uXf5FBtHcGQPjAyqFbEiQYg1zuEjZvdsYY0Nm/otKR4=) 2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: ojSPB0ISIGRw3cOfBtrECwI7sYrCbgl9SiZcYTomn1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Validity Not Before: Aug 23 04:59:50 2025 GMT Not After : Aug 30 04:59:50 2025 GMT Subject: CN=68a94ac7-176b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:03:c1:44:6d:7e:17:ce:c5:0e:7a:38:75:1d: 4f:72:2d:40:f6:16:54:c7:41:27:c6:2a:f6:b3:b5: b3:bf:50:f5:c3:a1:cd:c1:b6:7c:4f:91:5f:99:e2: e4:90:d8:0a:0c:1b:cf:b0:3d:9b:e5:33:e6:9c:29: 6f:93:18:11:1e:db:c9:9f:97:ae:a6:99:46:d0:4b: 04:6d:28:fa:c6:8e:c3:31:2c:4e:e6:8c:cd:ef:8f: b3:a4:86:79:fc:a8:a9:47:b4:d1:cd:32:ea:f0:10: fc:c1:fe:83:cb:d5:e6:fe:2f:08:c4:0f:d7:b8:f9: 9e:cd:de:26:f8:2d:50:78:f2:ef:c8:3f:30:14:13: ab:32:a0:08:60:03:6c:f8:5e:27:d7:c1:0e:1c:09: 31:c2:28:4d:aa:50:fd:9b:c4:83:27:88:ca:58:ab: 31:76:57:65:d5:05:db:cb:49:0b:6e:39:34:0b:30: 4a:0e:d3:1a:5d:5a:7b:bb:9b:30:c2:93:0d:ac:69: 41:0a:c6:96:32:b5:ec:5e:c5:dc:03:82:e6:3d:6c: 4a:10:33:18:03:b4:d3:1b:7f:9a:0c:92:9f:1e:b6: 69:ab:00:e0:26:a7:db:94:34:b8:a9:5d:1c:6f:20: 6d:d6:70:2e:e2:11:f7:ca:d9:76:d2:2c:1b:2f:38: bd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:18:56:02:4C:D4:28:E2:2C:6E:47:F2:EB:AE:CC:7E:05:78:AD:A9 X509v3 Authority Key Identifier: keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:50:55:68:ce:ce:73:77:11:df:44:f9:bc:0a:f4:55:55:19: aa:fe:81:44:5d:0b:1e:b0:32:58:7a:58:ab:c0:05:15:55:bc: 5f:f1:8a:b8:c8:05:27:32:7a:c5:fc:0a:e0:78:ac:12:1d:2f: 94:a7:02:03:17:6c:eb:9e:c9:c1:01:bd:62:8c:cc:ad:d4:28: 74:36:e8:5a:d7:cc:7a:6a:b2:9b:26:73:cb:da:af:3f:ee:52: ed:20:81:46:e8:d7:51:95:5f:19:fe:a9:b1:77:f0:d5:b7:e0: 51:d5:d5:c3:74:d1:a9:f2:94:05:d4:c4:d5:c4:4e:db:93:24: d5:3d:a6:39:23:00:1d:77:30:a2:94:7d:23:2e:17:d3:58:8b: 59:fb:73:13:ee:e8:b4:52:c8:9b:c6:a2:f9:64:87:f8:3f:e8: b1:a0:6f:e7:96:08:40:c9:fe:d3:ea:11:b0:ee:bb:89:a4:99: 2c:2b:44:fa:f3:bc:76:2b:49:af:e4:29:38:1a:47:c0:8d:af: 51:1e:d4:25:9b:8f:d8:87:c3:e2:a4:f2:0a:78:ed:9b:17:4f: ed:59:f4:2f:40:66:c2:28:f4:2f:a9:f8:3e:1d:fa:3d:5e:54: e3:09:a7:f1:d6:09:93:2d:12:93:a5:cb:e6:7c:f8:3d:55:fe: 8a:b3:54:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE QUQ5MUI0MDYwHhcNMjUwODIzMDQ1OTUwWhcNMjUwODMwMDQ1OTUwWjAYMRYwFAYD VQQDEw02OGE5NGFjNy0xNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gPBRG1+F87FDno4dR1Pci1A9hZUx0Enxir2s7Wzv1D1w6HNwbZ8T5FfmeLk kNgKDBvPsD2b5TPmnClvkxgRHtvJn5eupplG0EsEbSj6xo7DMSxO5ozN74+zpIZ5 /KipR7TRzTLq8BD8wf6Dy9Xm/i8IxA/XuPmezd4m+C1QePLvyD8wFBOrMqAIYANs +F4n18EOHAkxwihNqlD9m8SDJ4jKWKsxdldl1QXby0kLbjk0CzBKDtMaXVp7u5sw wpMNrGlBCsaWMrXsXsXcA4LmPWxKEDMYA7TTG3+aDJKfHrZpqwDgJqfblDS4qV0c byBt1nAu4hH3ytl20iwbLzi9OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAYVgJM 1CjiLG5H8uuuzH4FeK2pMB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0 ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow NVk1ZFRCODduUkxhMlJ0QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPUFVozs5zdxHfRPm8CvRVVRmq/oFEXQsesDJYelirwAUVVbxf8Yq4 yAUnMnrF/ArgeKwSHS+UpwIDF2zrnsnBAb1ijMyt1Ch0Nuha18x6arKbJnPL2q8/ 7lLtIIFG6NdRlV8Z/qmxd/DVt+BR1dXDdNGp8pQF1MTVxE7bkyTVPaY5IwAddzCi lH0jLhfTWItZ+3MT7ui0UsibxqL5ZIf4P+ixoG/nlghAyf7T6hGw7ruJpJksK0T6 87x2K0mv5Ck4GkfAja9RHtQlm4/Yh8PipPIKeO2bF0/tWfQvQGbCKPQvqfg+Hfo9 XlTjCafx1gmTLRKTpcvmfPg9Vf6Ks1Sy -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:55 2025 by rpki-client