$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json) Hash identifier: a2vurpvOFQnJdO/NHJk/XLxJib4Pobmwwel6MbzllkM= Subject key identifier: 38:4F:03:43:6A:3D:FD:CC:F7:B1:79:BD:6F:DD:2E:11:56:9F:4E:34 Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft Manifest number: 018C Signing time: Sat 09 Aug 2025 03:53:51 +0000 Manifest this update: Sat 09 Aug 2025 03:53:50 +0000 Manifest next update: Sat 16 Aug 2025 03:53:50 +0000 Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: HKUr7TNBktsFJgqZfNZC3XqeeoSioYLWoel4wk4PLX0=) 2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=) 3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=) 4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Validity Not Before: Aug 9 03:53:50 2025 GMT Not After : Aug 16 03:53:50 2025 GMT Subject: CN=6896c64f-1a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:43:c5:04:ef:c0:13:f8:7b:dd:ca:e9:08: 2c:44:48:bb:f9:95:ad:7f:e4:03:17:fc:08:17:b5: df:a7:d6:34:c0:1a:cb:1c:fb:9b:27:f0:46:bb:4e: 86:cc:b7:d9:fa:cc:76:f8:3b:5d:97:4d:9c:5e:87: 4f:fd:48:87:23:4c:81:33:1c:7e:b5:ce:b7:83:b6: d8:5d:44:4a:7b:a9:68:c1:19:c2:af:43:ea:62:2f: aa:79:8f:26:d2:1f:84:08:cd:ab:4d:b5:c7:21:d6: c3:2f:70:b5:93:e7:84:4d:c7:55:3d:d2:89:c9:41: 4c:f0:49:14:23:60:4d:da:2c:b7:78:d5:76:1a:8e: 76:c6:4e:d8:2b:39:c0:21:1c:ba:7f:a3:5e:7c:2b: 79:6b:99:57:3c:1e:b9:b6:ca:32:b8:e7:86:a5:cc: 71:4c:76:16:b5:d0:93:5e:2e:6f:55:1a:82:54:1f: c2:f9:76:45:33:aa:72:3b:0e:e9:d0:d9:e4:98:05: d3:fc:e9:14:cd:8e:f5:66:db:92:09:b2:c6:aa:6d: d1:05:37:13:b0:ef:e0:53:13:e5:f7:5b:c0:3c:61: e6:af:85:88:1d:f3:13:a0:9f:25:52:ec:61:01:57: c7:80:05:97:6b:ec:73:85:ae:e0:4e:7c:df:54:b8: 0f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4F:03:43:6A:3D:FD:CC:F7:B1:79:BD:6F:DD:2E:11:56:9F:4E:34 X509v3 Authority Key Identifier: keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:57:5b:c5:da:a7:5f:d5:14:49:23:85:35:0c:1f:b6:45:5e: b8:77:56:7f:50:98:66:d6:26:12:f3:cb:3a:36:66:99:fb:81: f6:6e:6e:e1:a9:f3:42:98:83:ef:75:33:01:05:62:65:64:25: b1:23:e3:27:65:8f:91:5e:7e:19:10:71:68:d7:e4:1c:de:f5: b6:a1:ce:44:b7:2d:db:1b:7a:fa:50:60:88:46:37:c1:53:41: 49:0d:4b:01:d4:f0:e4:67:13:f1:11:9e:35:85:19:34:1d:b0: 32:65:f4:fa:bd:34:ea:95:db:72:fa:45:a0:fe:84:59:35:fb: f7:1c:0d:04:01:bb:e4:a2:dc:25:fe:72:4a:ea:1d:52:ea:8e: e9:3d:15:f2:55:a4:e0:d9:22:e9:9f:b8:73:4b:bb:78:cb:8b: 36:93:91:d4:a9:cd:92:f9:12:8c:a9:82:26:23:9b:31:8f:1b: f4:ec:d5:89:6f:fb:9d:93:b8:cb:3b:96:68:bf:55:a3:e3:b2: 84:58:7e:ba:a1:43:59:c2:6c:36:b9:52:25:ad:8a:66:ac:e1: 60:b2:20:79:48:39:3c:eb:48:b3:b5:25:aa:42:54:55:51:fe: 5c:86:4a:ac:8e:b6:f2:69:8c:7d:41:24:64:f5:a7:e0:cc:13: b0:08:82:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC M0VCOEI2MzAwHhcNMjUwODA5MDM1MzUwWhcNMjUwODE2MDM1MzUwWjAYMRYwFAYD VQQDEw02ODk2YzY0Zi0xYTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6hDxQTvwBP4e93K6QgsREi7+ZWtf+QDF/wIF7Xfp9Y0wBrLHPubJ/BGu06G zLfZ+sx2+Dtdl02cXodP/UiHI0yBMxx+tc63g7bYXURKe6lowRnCr0PqYi+qeY8m 0h+ECM2rTbXHIdbDL3C1k+eETcdVPdKJyUFM8EkUI2BN2iy3eNV2Go52xk7YKznA IRy6f6NefCt5a5lXPB65tsoyuOeGpcxxTHYWtdCTXi5vVRqCVB/C+XZFM6pyOw7p 0NnkmAXT/OkUzY71ZtuSCbLGqm3RBTcTsO/gUxPl91vAPGHmr4WIHfMToJ8lUuxh AVfHgAWXa+xzha7gTnzfVLgPVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhPA0Nq Pf3M97F5vW/dLhFWn040MB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2 VS1rcE9LTTA3R3V6NjR0akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBV1vF2qdf1RRJI4U1DB+2RV64d1Z/UJhm1iYS88s6NmaZ+4H2bm7h qfNCmIPvdTMBBWJlZCWxI+MnZY+RXn4ZEHFo1+Qc3vW2oc5Ety3bG3r6UGCIRjfB U0FJDUsB1PDkZxPxEZ41hRk0HbAyZfT6vTTqldty+kWg/oRZNfv3HA0EAbvkotwl /nJK6h1S6o7pPRXyVaTg2SLpn7hzS7t4y4s2k5HUqc2S+RKMqYImI5sxjxv07NWJ b/udk7jLO5Zov1Wj47KEWH66oUNZwmw2uVIlrYpmrOFgsiB5SDk860iztSWqQlRV Uf5chkqsjrbyaYx9QSRk9afgzBOwCIIi -----END CERTIFICATE-----Generated at Sun Aug 10 19:56:25 2025 by rpki-client