$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: 7DkCc7zB7tq8u84vjhwMN5Yky2iCpxfDUfqyrP01Dy4= Subject key identifier: D6:7E:00:49:C2:36:7C:2C:76:29:E4:CC:DE:89:B9:54:4D:E7:97:C5 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0DCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0D94 Signing time: Sat 23 Aug 2025 08:17:10 +0000 Manifest this update: Sat 23 Aug 2025 08:17:09 +0000 Manifest next update: Sat 30 Aug 2025 08:17:09 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: e9U6fRDuIj9uNVY34qeCPSKykVmmy17lfLzG43l8oeU=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: ephMktk7dldPDpqOYOq0zlTVGd1aoKcLbgXlsFlKEgM=) 4: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: TY0we0LCT2NhieXnw4ZC8SmWs1+jQYEFzS94Z1jJrh0=) 6: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3531 (0xdcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Aug 23 08:17:09 2025 GMT Not After : Aug 30 08:17:09 2025 GMT Subject: CN=68a97906-b1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:e1:7a:ea:9b:0c:e8:65:17:f8:bd:c0:ba: 7d:39:44:0d:26:6f:3c:de:76:24:7c:aa:53:06:ce: ee:d8:d4:81:d7:b8:e0:15:56:fc:7c:ec:0b:7d:23: b3:0e:37:f0:d1:b0:bb:1b:7e:73:30:ad:81:3f:53: 8f:7f:bb:23:c9:e9:46:97:a1:6b:d1:e6:07:97:7f: 64:4a:48:4e:b7:57:ca:df:8e:ae:a1:93:f3:bb:59: 35:f3:13:7e:c3:21:88:49:85:c9:d0:e8:d1:99:27: 82:2e:cf:91:45:08:41:03:33:e7:a5:34:7a:70:b2: ab:71:92:33:3e:71:75:fe:74:15:7c:0e:4a:d3:94: 45:15:c8:5d:a3:ef:00:a0:38:53:c5:80:a6:6d:2c: 01:8e:90:83:c7:da:67:79:5a:0d:bf:31:f8:02:d6: 40:57:8f:da:c4:d7:13:68:88:5e:1a:82:51:00:27: d2:03:4b:d2:4d:ce:0e:99:02:f7:81:5d:6b:c0:df: 7c:9b:32:f8:98:1e:a3:ea:fb:69:8f:15:45:f2:47: 84:87:75:61:9e:4a:16:4b:ca:56:77:9a:ee:0b:70: fe:9d:5e:3a:51:ac:b3:9e:db:4e:e7:57:bd:71:bd: ff:50:f1:ce:3e:05:e7:03:84:75:ea:2f:3a:0a:48: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7E:00:49:C2:36:7C:2C:76:29:E4:CC:DE:89:B9:54:4D:E7:97:C5 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:a8:c7:f3:06:6b:d0:4f:d0:a2:f9:74:9f:27:1e:30:ec:65: 84:28:37:a8:7b:0b:28:f8:ae:f4:5e:44:dc:19:cf:30:45:10: 8b:e6:0c:a4:5e:d3:46:68:3b:33:ee:06:bf:eb:ff:eb:e9:09: 09:b5:a3:8b:9e:e3:2a:a9:58:aa:37:1e:c0:27:31:f0:24:c2: af:5f:d6:17:2f:b4:21:18:c6:85:e0:03:ee:96:9f:09:95:ca: 22:bb:fa:f3:50:88:cb:e3:5d:36:10:18:5a:fc:4e:bc:53:07: cb:a5:35:ff:ab:c6:31:68:0d:aa:21:1c:59:97:d7:4c:37:69: 2d:bb:69:bb:94:b3:e5:07:a9:55:0a:09:ed:94:d8:0e:dc:46: 55:f3:46:b2:e7:1b:74:35:17:f9:d8:7d:c2:88:fb:dc:56:6c: f5:fd:b9:4b:97:98:c0:f7:62:78:0d:a3:d8:17:80:20:18:b1: d0:9f:d1:cc:9d:1a:44:5b:31:0f:36:5e:87:c1:f3:cf:9b:3a: 56:20:c4:1c:1e:d8:7f:36:7e:22:03:d5:89:58:5f:83:ef:b7: c1:cd:93:c5:74:6f:81:76:cd:e9:92:b1:eb:f0:7f:e8:ff:b0: b7:e1:66:40:ed:05:31:65:b3:07:23:6c:22:e5:5b:31:e0:3a: 73:86:c2:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjUwODIzMDgxNzA5WhcNMjUwODMwMDgxNzA5WjAYMRYwFAYD VQQDEw02OGE5NzkwNi1iMWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWbheuqbDOhlF/i9wLp9OUQNJm883nYkfKpTBs7u2NSB17jgFVb8fOwLfSOz Djfw0bC7G35zMK2BP1OPf7sjyelGl6Fr0eYHl39kSkhOt1fK346uoZPzu1k18xN+ wyGISYXJ0OjRmSeCLs+RRQhBAzPnpTR6cLKrcZIzPnF1/nQVfA5K05RFFchdo+8A oDhTxYCmbSwBjpCDx9pneVoNvzH4AtZAV4/axNcTaIheGoJRACfSA0vSTc4OmQL3 gV1rwN98mzL4mB6j6vtpjxVF8keEh3VhnkoWS8pWd5ruC3D+nV46UayznttO51e9 cb3/UPHOPgXnA4R16i86Cki7KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZ+AEnC NnwsdinkzN6JuVRN55fFMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUqMfzBmvQT9Ci+XSfJx4w7GWEKDeoewso+K70XkTcGc8wRRCL5gyk XtNGaDsz7ga/6//r6QkJtaOLnuMqqViqNx7AJzHwJMKvX9YXL7QhGMaF4APulp8J lcoiu/rzUIjL4102EBha/E68UwfLpTX/q8YxaA2qIRxZl9dMN2ktu2m7lLPlB6lV CgntlNgO3EZV80ay5xt0NRf52H3CiPvcVmz1/blLl5jA92J4DaPYF4AgGLHQn9HM nRpEWzEPNl6HwfPPmzpWIMQcHth/Nn4iA9WJWF+D77fBzZPFdG+Bds3pkrHr8H/o /7C34WZA7QUxZbMHI2wi5Vsx4DpzhsKl -----END CERTIFICATE-----Generated at Sun Aug 24 05:17:45 2025 by rpki-client