$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft File: cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json) Hash identifier: j3BhhYslq4fKM7jMX91tQ+u84CYmBQzPS9XV4QUVsgQ= Subject key identifier: F2:32:9A:7E:CA:66:46:EF:9B:0C:D4:68:51:59:A5:CE:25:31:C1:F9 Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft Manifest number: BF Signing time: Sat 23 Aug 2025 06:04:00 +0000 Manifest this update: Sat 23 Aug 2025 06:03:59 +0000 Manifest next update: Sat 30 Aug 2025 06:03:59 +0000 Files and hashes: 1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: y9FV9eypZJEj9Ej+3y9IfyabEe8Gbn9V7yLo1BXxXrg=) 2: 73EF25545DDE11EFBCDB7463C4F9AE02.roa (hash: MZgkuhZaLuaH742l5Nmqx23G0Q6+kgWllUIicpxtkRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Validity Not Before: Aug 23 06:03:59 2025 GMT Not After : Aug 30 06:03:59 2025 GMT Subject: CN=68a959cf-9c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:0f:43:bb:b5:87:4d:5c:fb:0c:77:7c:23: 47:81:86:b4:f5:61:cb:c9:72:f7:78:37:8a:89:b7: 63:98:cc:56:bb:af:51:59:0f:55:9b:93:cd:71:73: 89:42:a4:d6:29:5c:9c:7e:18:c8:12:74:c2:7d:32: 90:8d:94:c3:32:06:14:49:3a:91:a8:ea:9b:1d:67: f8:ec:61:14:3f:ff:ca:06:d7:d4:17:26:d2:c6:02: 27:d4:a8:16:4b:d5:f4:72:27:c3:1e:b0:6c:a6:d8: 2a:17:9f:78:d5:5c:2c:67:fd:2a:dd:04:5d:4f:0a: 57:a1:e1:a5:a6:a5:03:d0:e5:d2:14:c9:82:6a:aa: 7e:66:2c:d6:fa:db:cb:fc:6d:e4:8c:c3:a4:c4:f9: ca:03:23:ad:71:14:1a:dc:9d:8c:6c:e8:7f:29:a2: 68:80:2b:c6:62:28:e3:97:52:f7:48:3e:3c:cd:bc: 22:ec:d4:d7:69:a4:75:ad:d6:58:78:70:fb:e7:e5: f3:1a:aa:0a:cf:ae:7e:7d:12:f0:33:f4:97:c5:5d: 49:cb:14:1c:cf:66:96:ff:3e:91:38:32:ef:39:a1: 7b:3a:c6:33:e1:35:d9:ea:3e:f8:4f:a6:f4:9f:39: a3:91:e6:f4:a5:04:dd:d7:ae:07:a8:0c:9d:b2:3c: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:32:9A:7E:CA:66:46:EF:9B:0C:D4:68:51:59:A5:CE:25:31:C1:F9 X509v3 Authority Key Identifier: keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:64:1f:91:d7:aa:b9:73:c2:e9:8e:ea:57:00:51:11:a6:fc: ec:56:42:8d:c0:a5:66:83:60:37:aa:5b:53:cb:8b:02:33:40: 60:74:74:fb:8a:33:4b:7b:b7:3c:67:2a:2d:ae:31:3e:52:01: 31:ee:4a:70:14:e0:9d:8e:9f:12:e3:aa:fd:93:98:de:d9:9e: 28:5f:45:bc:37:ce:2a:0e:a8:43:05:33:8d:f4:ee:bd:7e:3d: 34:f3:cd:80:37:94:98:fc:47:72:9f:28:df:fe:dc:07:ef:65: 20:93:89:98:bb:31:04:d5:d6:07:35:0a:31:85:15:52:ae:60: af:4c:00:a8:33:16:f7:e7:00:fa:08:e8:79:98:d3:ce:72:e6: 33:b4:50:20:66:af:a1:d6:f5:ee:48:d5:ad:35:6e:3e:a8:5e: d3:5a:59:63:58:6a:64:f1:a7:af:58:49:48:2f:17:d1:cf:53: 88:49:2e:3f:e2:3e:25:14:2b:04:30:f9:5c:f6:be:15:67:56: 92:e7:8c:f5:cc:1c:55:66:96:aa:81:b9:a8:d6:2c:12:a6:2f: e2:4c:7d:d7:d2:4c:c6:51:b4:71:44:0b:03:eb:e3:32:a1:50: 40:11:c8:33:e8:0a:a0:de:fb:23:0f:0c:f2:50:13:38:c3:65: 74:a1:92:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM2RTcxMTAvBgNVBAUTKDcxMTYxNzAwMkQ5RjBDOUVCNjVCNEVERDYxRjdBMUM5 MUZDREI4M0UwHhcNMjUwODIzMDYwMzU5WhcNMjUwODMwMDYwMzU5WjAYMRYwFAYD VQQDEw02OGE5NTljZi05YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykcPQ7u1h01c+wx3fCNHgYa09WHLyXL3eDeKibdjmMxWu69RWQ9Vm5PNcXOJ QqTWKVycfhjIEnTCfTKQjZTDMgYUSTqRqOqbHWf47GEUP//KBtfUFybSxgIn1KgW S9X0cifDHrBsptgqF5941VwsZ/0q3QRdTwpXoeGlpqUD0OXSFMmCaqp+ZizW+tvL /G3kjMOkxPnKAyOtcRQa3J2MbOh/KaJogCvGYijjl1L3SD48zbwi7NTXaaR1rdZY eHD75+XzGqoKz65+fRLwM/SXxV1JyxQcz2aW/z6RODLvOaF7OsYz4TXZ6j74T6b0 nzmjkeb0pQTd164HqAydsjxxBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIymn7K ZkbvmwzUaFFZpc4lMcH5MB8GA1UdIwQYMBaAFHEWFwAtnwyetltO3WH3ockfzbg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzZFNy9FNEEwQ0NBRTVE REQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRKNjJXMDdkWWZlaHlSX051 RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSWVhBQzJmREo2MlcwN2RZZmVoeVJfTnVENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzZFNy9FNEEwQ0NBRTVEREQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRK NjJXMDdkWWZlaHlSX051RDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdZB+R16q5c8LpjupXAFERpvzsVkKNwKVmg2A3qltTy4sCM0BgdHT7 ijNLe7c8ZyotrjE+UgEx7kpwFOCdjp8S46r9k5je2Z4oX0W8N84qDqhDBTON9O69 fj00882AN5SY/Edynyjf/twH72Ugk4mYuzEE1dYHNQoxhRVSrmCvTACoMxb35wD6 COh5mNPOcuYztFAgZq+h1vXuSNWtNW4+qF7TWlljWGpk8aevWElILxfRz1OISS4/ 4j4lFCsEMPlc9r4VZ1aS54z1zBxVZpaqgbmo1iwSpi/iTH3X0kzGUbRxRAsD6+My oVBAEcgz6Aqg3vsjDwzyUBM4w2V0oZIx -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:51 2025 by rpki-client