$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json) Hash identifier: QtBn24y95hrShyNIlLRiUciGAgqtHZSbR83RPjc++RU= Subject key identifier: B7:D3:DA:4C:84:99:2C:B1:33:6D:37:C4:6C:CB:83:23:9E:56:A1:86 Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 0745 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft Manifest number: 0738 Signing time: Fri 08 Aug 2025 22:13:31 +0000 Manifest this update: Fri 08 Aug 2025 22:13:31 +0000 Manifest next update: Fri 15 Aug 2025 22:13:31 +0000 Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: ALmQz1wQUvFEmWeKMo5LagUueIwnFPxGi7itirRKI/M=) 2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 2jsCymQavrx92Kq4v6h75mDYqdyK8XpnNBvpUzJpvhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1861 (0x745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: Aug 8 22:13:31 2025 GMT Not After : Aug 15 22:13:31 2025 GMT Subject: CN=6896768b-3bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:0e:60:67:7f:66:d3:c7:3a:58:97:61:1c: 7e:76:13:60:d3:f8:d6:8f:cf:9d:49:72:12:bb:6d: c1:e7:6e:0f:26:0d:1f:ef:1b:3e:78:61:73:8a:55: 19:3f:8c:9c:bc:bb:99:bc:64:bb:d9:f0:01:55:b6: b9:06:fb:27:da:9c:73:63:ae:80:d5:fc:17:d8:7e: 79:ef:30:1e:15:ee:0e:00:c9:6a:47:67:21:1f:0a: 43:78:bb:cf:cd:68:23:b4:a2:65:50:75:3f:a3:94: cc:02:dd:db:d9:3e:7f:b0:3b:38:64:4f:10:85:8a: 22:fc:ae:94:97:5f:a2:9a:e7:85:96:6d:26:d3:56: df:e1:0e:fa:d1:ab:ff:82:4e:f5:aa:1c:45:58:5f: 8b:b5:60:fa:7b:f0:83:d5:ed:d8:77:27:dd:41:09: e9:6d:e2:b3:fb:ca:ea:79:85:dc:32:95:2a:ab:5a: 5f:bf:ac:35:40:f7:6d:5c:fd:08:e5:98:f6:2f:66: f2:46:7e:6a:8c:95:5a:ae:07:ac:17:21:24:7e:2c: 2c:04:d9:ab:8b:eb:58:1c:58:21:a8:1e:35:1c:d7: 1c:6a:07:67:e3:ca:f1:46:82:85:bf:8b:29:53:99: 3c:89:30:d6:ee:fd:c6:79:b3:4f:28:f9:34:1b:fa: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D3:DA:4C:84:99:2C:B1:33:6D:37:C4:6C:CB:83:23:9E:56:A1:86 X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:5a:b3:3b:f0:9d:c8:85:20:5c:d9:0b:dd:de:53:60:bb:88: af:36:97:6b:3a:6c:39:2f:f0:15:a5:ef:78:54:95:d7:e0:5e: 0d:a8:8f:b7:f5:23:47:a6:8b:f3:0e:d6:32:91:ca:da:52:d8: a4:31:a1:17:a4:fd:2f:1a:5f:37:1c:9e:fe:d6:16:24:71:75: 8a:94:be:35:55:0a:6e:7a:f7:62:34:b4:83:89:0a:78:aa:5b: a1:6d:2c:bc:2a:d0:87:bb:c3:c4:7b:ca:7b:4a:9d:a6:36:96: 7d:f2:97:e6:15:c8:f1:10:3a:da:e6:82:1a:33:1b:c9:e1:d6: b4:95:87:d0:ca:14:08:16:88:96:6d:39:b0:f6:22:c8:e2:ea: b6:18:4e:b1:c8:d5:fd:6c:0a:c6:9b:30:12:eb:58:ba:9f:70: 92:96:58:18:bb:c0:e9:b9:c2:71:dc:d1:26:cd:62:d0:05:7d: a6:81:15:32:7a:87:ec:a5:26:39:4c:19:e5:fd:93:2c:93:3d: 2c:7a:f9:38:0e:3e:16:9c:0b:49:d7:9e:d8:88:45:9b:80:ba: da:2e:79:31:59:83:70:96:b9:2f:6f:b3:d5:83:bf:20:ae:50: d3:ad:db:d7:bf:b2:20:f9:6b:24:6c:a3:cd:4f:94:79:fa:5d: 03:51:e6:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjUwODA4MjIxMzMxWhcNMjUwODE1MjIxMzMxWjAYMRYwFAYD VQQDEw02ODk2NzY4Yi0zYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHAOYGd/ZtPHOliXYRx+dhNg0/jWj8+dSXISu23B524PJg0f7xs+eGFzilUZ P4ycvLuZvGS72fABVba5Bvsn2pxzY66A1fwX2H557zAeFe4OAMlqR2chHwpDeLvP zWgjtKJlUHU/o5TMAt3b2T5/sDs4ZE8QhYoi/K6Ul1+imueFlm0m01bf4Q760av/ gk71qhxFWF+LtWD6e/CD1e3YdyfdQQnpbeKz+8rqeYXcMpUqq1pfv6w1QPdtXP0I 5Zj2L2byRn5qjJVargesFyEkfiwsBNmri+tYHFghqB41HNccagdn48rxRoKFv4sp U5k8iTDW7v3GebNPKPk0G/p2WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfT2kyE mSyxM203xGzLgyOeVqGGMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmWrM78J3IhSBc2Qvd3lNgu4ivNpdrOmw5L/AVpe94VJXX4F4NqI+3 9SNHpovzDtYykcraUtikMaEXpP0vGl83HJ7+1hYkcXWKlL41VQpuevdiNLSDiQp4 qluhbSy8KtCHu8PEe8p7Sp2mNpZ98pfmFcjxEDra5oIaMxvJ4da0lYfQyhQIFoiW bTmw9iLI4uq2GE6xyNX9bArGmzAS61i6n3CSllgYu8DpucJx3NEmzWLQBX2mgRUy eofspSY5TBnl/ZMskz0sevk4Dj4WnAtJ157YiEWbgLraLnkxWYNwlrkvb7PVg78g rlDTrdvXv7Ig+WskbKPNT5R5+l0DUebq -----END CERTIFICATE-----Generated at Sun Aug 10 05:46:21 2025 by rpki-client