$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft File: rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json) Hash identifier: iJ0mee48+9NGiTdc35CPinHS02vfECluhJw2caqOIGQ= Subject key identifier: 11:D2:79:1F:96:6E:E6:ED:CC:AE:D3:CA:9E:93:2D:90:6D:17:CF:C2 Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Certificate serial: 12F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft Manifest number: 12D1 Signing time: Fri 22 Aug 2025 17:12:00 +0000 Manifest this update: Fri 22 Aug 2025 17:11:59 +0000 Manifest next update: Fri 29 Aug 2025 17:11:59 +0000 Files and hashes: 1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: A9RK7BzSnooAtDzbLmevIy0aYxqYi0W0Cdsk9uCOO20=) 2: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: cuFQqVlbEJ/udXRPZ56LOiAFU4p5XZPUOiRAjCCaxGQ=) 3: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: mehZcMjFb7HT3F1ePo3UBF+1EGoPOvu0R4233be/rFs=) 4: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: tPqGcusMyqiuDoF3oCEh1MkgveCq5i4UTPc8YjbijQA=) 5: 403398AA233111EEAF768F66C4F9AE02.roa (hash: LFrmkrzanddJe0x2nUkwJLw/OhE7SJ+J+T3fYrc0q4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4849 (0x12f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Validity Not Before: Aug 22 17:11:59 2025 GMT Not After : Aug 29 17:11:59 2025 GMT Subject: CN=68a8a4e0-5e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4f:66:7a:3e:35:c0:01:4e:63:b4:f5:dc:61: 0d:9c:32:96:e4:ed:a7:2a:07:90:33:d3:f1:d1:7d: 4b:f8:df:25:86:66:b8:36:60:60:5f:76:59:02:48: bf:59:46:44:1d:07:1c:32:64:72:ed:de:a9:e7:83: 5f:36:83:f1:7f:b8:17:17:fc:44:e0:16:cc:fd:ff: ce:90:1a:a4:43:00:12:1c:9b:38:2d:3e:49:b6:d0: 1e:37:6f:0b:a8:e0:98:84:cc:85:b1:3a:52:ce:70: c1:2b:cc:2c:66:1a:7b:9d:11:7d:66:0f:1d:dd:81: cf:77:c6:2d:62:bd:b1:4d:16:1c:06:d7:79:c9:e0: d8:2e:8a:00:70:f3:52:39:5c:c1:e7:99:f8:15:95: 6c:a5:b7:2d:32:f6:90:3f:61:18:a3:bf:49:a2:94: e5:4d:f0:97:e0:e8:1c:8a:81:a7:e9:b4:06:06:be: f2:cb:ac:83:f9:a1:e4:62:1b:4b:f3:87:7b:65:65: f4:e3:f4:5f:05:e0:b7:36:c9:22:bd:2e:8c:62:65: ce:cd:42:04:88:f9:df:d7:cf:59:9b:a9:2c:63:da: 5f:23:3f:e4:a7:35:a7:80:fb:40:85:3b:a9:01:9f: fc:a5:1b:01:da:af:bd:bc:9b:67:9d:91:89:e7:5c: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D2:79:1F:96:6E:E6:ED:CC:AE:D3:CA:9E:93:2D:90:6D:17:CF:C2 X509v3 Authority Key Identifier: keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:10:48:6c:ca:be:96:6f:c5:a5:e0:21:16:b0:b9:77:24:1f: 5c:46:f3:d1:b3:02:fa:3b:8e:3a:6e:cc:41:b8:20:6d:10:68: 7a:91:60:99:09:83:3f:91:9f:97:50:11:c3:f3:2f:65:2c:e5: 17:cc:9a:28:c4:34:e1:9d:75:1a:8d:7c:9b:4d:4a:45:a4:d4: 8b:af:69:38:fd:3c:48:3c:8d:f3:4f:a3:a1:07:3d:99:cb:cb: 56:ea:d4:48:d1:e5:5d:15:81:49:ff:70:00:7e:85:24:b9:ec: 5a:32:7c:ae:ef:55:2a:22:54:67:46:59:4b:b6:04:88:34:b1: e0:1f:17:79:dd:b7:5c:75:0c:c5:da:3f:a4:de:3a:89:42:11: 18:e0:54:6f:80:db:f1:f5:6e:e7:93:6e:eb:c2:7a:1c:be:89: 78:db:0f:13:a2:c4:40:7a:81:47:b2:80:fd:13:8a:05:94:da: 7c:ad:7a:46:9d:51:3a:0d:42:a9:4f:7a:a6:89:5d:7d:a9:ce: 5f:70:ba:7d:af:ba:9f:65:69:53:c0:b2:0d:c9:92:de:c8:1e: 13:bf:ab:04:b8:d8:08:4f:7b:b5:eb:e9:87:ea:78:e8:cf:e3: 85:dd:ee:0f:d2:34:f0:85:6f:4f:43:83:ef:95:7c:47:68:97: b7:e0:b1:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF QzhGOUQzNjcwHhcNMjUwODIyMTcxMTU5WhcNMjUwODI5MTcxMTU5WjAYMRYwFAYD VQQDEw02OGE4YTRlMC01ZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA309mej41wAFOY7T13GENnDKW5O2nKgeQM9Px0X1L+N8lhma4NmBgX3ZZAki/ WUZEHQccMmRy7d6p54NfNoPxf7gXF/xE4BbM/f/OkBqkQwASHJs4LT5JttAeN28L qOCYhMyFsTpSznDBK8wsZhp7nRF9Zg8d3YHPd8YtYr2xTRYcBtd5yeDYLooAcPNS OVzB55n4FZVspbctMvaQP2EYo79JopTlTfCX4OgcioGn6bQGBr7yy6yD+aHkYhtL 84d7ZWX04/RfBeC3NskivS6MYmXOzUIEiPnf189Zm6ksY9pfIz/kpzWngPtAhTup AZ/8pRsB2q+9vJtnnZGJ51w/7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHSeR+W bubtzK7Typ6TLZBtF8/CMB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BMzBCNUE0QUM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15 YlhGV2d2c0VFMUhzajUwMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2EEhsyr6Wb8Wl4CEWsLl3JB9cRvPRswL6O446bsxBuCBtEGh6kWCZ CYM/kZ+XUBHD8y9lLOUXzJooxDThnXUajXybTUpFpNSLr2k4/TxIPI3zT6OhBz2Z y8tW6tRI0eVdFYFJ/3AAfoUkuexaMnyu71UqIlRnRllLtgSINLHgHxd53bdcdQzF 2j+k3jqJQhEY4FRvgNvx9W7nk27rwnocvol42w8TosRAeoFHsoD9E4oFlNp8rXpG nVE6DUKpT3qmiV19qc5fcLp9r7qfZWlTwLINyZLeyB4Tv6sEuNgIT3u16+mH6njo z+OF3e4P0jTwhW9PQ4PvlXxHaJe34LEH -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:16 2025 by rpki-client