$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft File: rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json) Hash identifier: Qm261Rfj9eweTFcYAjsOiJiOUAJKQTByo7qbUNB5HKs= Subject key identifier: D9:8C:13:28:5C:0B:37:72:53:A4:6C:F8:70:16:10:D8:EC:95:63:67 Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Certificate serial: 12D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft Manifest number: 12B7 Signing time: Wed 02 Jul 2025 17:16:19 +0000 Manifest this update: Wed 02 Jul 2025 17:16:18 +0000 Manifest next update: Wed 09 Jul 2025 17:16:18 +0000 Files and hashes: 1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: 4TaJUFT+JApLE+HaWm9Z2FVKAynIgoMXQxeb5Mgj/cM=) 2: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: cuFQqVlbEJ/udXRPZ56LOiAFU4p5XZPUOiRAjCCaxGQ=) 3: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: mehZcMjFb7HT3F1ePo3UBF+1EGoPOvu0R4233be/rFs=) 4: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: tPqGcusMyqiuDoF3oCEh1MkgveCq5i4UTPc8YjbijQA=) 5: 403398AA233111EEAF768F66C4F9AE02.roa (hash: LFrmkrzanddJe0x2nUkwJLw/OhE7SJ+J+T3fYrc0q4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4823 (0x12d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Validity Not Before: Jul 2 17:16:18 2025 GMT Not After : Jul 9 17:16:18 2025 GMT Subject: CN=68656963-57cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e4:7f:f9:0c:f2:2d:e0:1c:d4:78:df:de:76: 71:32:17:5e:68:fb:72:fc:77:79:7f:bf:0a:f5:72: a7:53:8c:fb:ba:88:39:d9:bd:89:a0:f3:60:38:3b: 38:d7:5a:09:44:63:bc:6b:67:87:48:be:89:c4:85: 83:c3:8c:8b:ae:d3:90:10:15:28:32:2e:89:6e:75: c9:97:83:42:fa:97:77:78:a6:ef:fd:99:52:1f:67: a3:58:c2:0a:4d:1c:fc:8a:93:71:e4:da:4c:f0:db: 0f:df:f3:72:26:86:24:14:6b:d0:b2:56:38:32:39: 24:58:bf:57:0f:66:c3:0a:70:10:ca:eb:d4:7a:e8: e6:7f:6d:ed:e8:da:53:d4:95:89:62:16:99:f0:3b: 7f:89:58:ee:21:3d:34:73:56:8b:e0:99:32:57:b6: e0:b3:d6:db:e8:51:77:1e:54:02:48:23:bb:de:d9: b6:dd:30:18:f2:c6:ec:ad:2b:09:58:87:9c:0c:68: 07:a6:f6:b9:a5:f6:68:1a:55:63:5a:3c:a6:73:12: 61:81:6b:ec:29:9c:9b:92:ff:30:dd:66:4e:63:0e: a2:8b:fb:8c:3a:20:05:e1:b1:d2:ec:6a:61:62:43: f6:ef:79:f3:d6:60:51:5d:2b:23:4c:40:16:58:b4: 11:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8C:13:28:5C:0B:37:72:53:A4:6C:F8:70:16:10:D8:EC:95:63:67 X509v3 Authority Key Identifier: keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:86:6b:16:0c:6b:42:3c:3f:a5:d5:be:1a:56:05:0a:a2:45: 20:11:70:d6:93:c5:3f:27:a7:09:91:5b:20:4d:c3:ef:14:fb: 95:b5:08:49:a5:46:0c:2c:65:00:51:33:e4:97:b8:84:15:bd: aa:84:af:b3:e7:a4:20:51:13:5b:ae:e1:08:a4:2b:57:df:28: 2a:ac:71:31:eb:e2:7f:ab:7a:9a:07:14:59:00:8a:62:31:83: 7b:0f:98:bc:0f:44:b4:e9:dc:29:a5:78:96:d5:66:27:4a:22: 1f:db:f0:d8:6f:c6:ed:cc:8e:34:b1:d7:9e:a5:e5:b9:c8:39: 1b:66:f5:e8:31:e4:0e:5d:f5:8c:f4:d8:6f:68:4e:40:3a:32: df:cd:54:ce:3c:5c:1f:0a:af:5d:5e:c0:a1:4f:60:e0:56:67: d6:f2:25:f7:04:d7:7d:83:ce:fe:25:aa:d8:be:ca:63:1d:1e: 5c:4a:39:35:dc:4b:e6:14:f3:2a:ee:a0:72:76:8c:72:95:dc: 13:4f:bf:9a:1e:01:f3:40:af:cf:90:d9:6e:8f:93:35:c7:ce: 6d:f9:b8:a6:e5:63:6b:45:36:c7:f6:7a:9b:18:62:f4:8a:c9: 67:27:fa:39:82:64:14:43:97:62:38:29:3b:22:95:57:1f:f1: ce:de:b6:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF QzhGOUQzNjcwHhcNMjUwNzAyMTcxNjE4WhcNMjUwNzA5MTcxNjE4WjAYMRYwFAYD VQQDEw02ODY1Njk2My01N2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+R/+QzyLeAc1Hjf3nZxMhdeaPty/Hd5f78K9XKnU4z7uog52b2JoPNgODs4 11oJRGO8a2eHSL6JxIWDw4yLrtOQEBUoMi6JbnXJl4NC+pd3eKbv/ZlSH2ejWMIK TRz8ipNx5NpM8NsP3/NyJoYkFGvQslY4MjkkWL9XD2bDCnAQyuvUeujmf23t6NpT 1JWJYhaZ8Dt/iVjuIT00c1aL4JkyV7bgs9bb6FF3HlQCSCO73tm23TAY8sbsrSsJ WIecDGgHpva5pfZoGlVjWjymcxJhgWvsKZybkv8w3WZOYw6ii/uMOiAF4bHS7Gph YkP273nz1mBRXSsjTEAWWLQRQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmMEyhc CzdyU6Rs+HAWENjslWNnMB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BMzBCNUE0QUM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15 YlhGV2d2c0VFMUhzajUwMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqhmsWDGtCPD+l1b4aVgUKokUgEXDWk8U/J6cJkVsgTcPvFPuVtQhJ pUYMLGUAUTPkl7iEFb2qhK+z56QgURNbruEIpCtX3ygqrHEx6+J/q3qaBxRZAIpi MYN7D5i8D0S06dwppXiW1WYnSiIf2/DYb8btzI40sdeepeW5yDkbZvXoMeQOXfWM 9NhvaE5AOjLfzVTOPFwfCq9dXsChT2DgVmfW8iX3BNd9g87+JarYvspjHR5cSjk1 3EvmFPMq7qBydoxyldwTT7+aHgHzQK/PkNluj5M1x85t+bim5WNrRTbH9nqbGGL0 islnJ/o5gmQUQ5diOCk7IpVXH/HO3rb6 -----END CERTIFICATE-----Generated at Thu Jul 3 23:30:56 2025 by rpki-client