$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json) Hash identifier: UkGKwNtBre5yoF59QxQABfXtUvBt6Urq8gI8kQNKhlQ= Subject key identifier: 8F:13:1C:D6:37:53:7A:71:F9:AB:F6:13:07:2D:3C:11:07:B3:D1:22 Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft Manifest number: 10 Signing time: Sat 09 Aug 2025 08:36:20 +0000 Manifest this update: Sat 09 Aug 2025 08:36:20 +0000 Manifest next update: Sat 16 Aug 2025 08:36:20 +0000 Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: NuRslvxHn/wSKxrixJZthNKIy+fbWL7Eyu5qv6IYHDc=) 2: 21C5B04263A311F096468248C4F9AE02.roa (hash: Xzb62xLJbAMEkevYXMmuNbI1IlT4POMgC4Yy3OA8C7k=) 3: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: OVSbJE+Pd0/Klp/U7r6paIfqVvKQjdcHWMz7l5HkgE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Validity Not Before: Aug 9 08:36:20 2025 GMT Not After : Aug 16 08:36:20 2025 GMT Subject: CN=68970884-00c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:9c:ba:2b:87:7f:b6:fb:5c:2e:f7:6d:a1: 37:19:ea:d1:e6:4a:03:33:d6:d9:fc:f7:53:3f:76: 23:31:15:5c:38:1c:23:b0:8c:ed:20:9d:bd:bf:1b: 75:ec:20:61:84:44:1a:23:40:b1:d3:9e:f1:cd:e3: e8:71:9d:9a:a9:39:d1:80:29:67:75:13:33:3d:33: 4f:59:5a:2b:82:06:a2:a8:8c:5f:34:b2:f5:f8:5f: a5:17:ac:13:41:ee:00:26:de:de:07:68:aa:50:02: bf:b5:f9:52:70:c0:d5:3f:90:62:b1:fb:d6:34:5d: 11:2f:3c:a4:66:7d:df:f7:22:93:85:2c:cb:59:49: 8a:f0:ce:e1:f2:88:a3:58:8c:5f:1c:9a:7b:72:79: 37:9a:21:b5:99:de:3a:e1:c3:16:93:d2:09:55:12: 42:39:43:5e:b0:04:1b:7c:27:46:8a:a2:58:ad:c7: fd:ef:7a:b3:8f:c3:d1:5a:8a:8c:a4:03:85:95:45: fe:f4:cb:f6:01:e9:15:b3:fc:65:f2:29:3f:d5:5d: 88:33:47:1a:a9:f7:0a:14:f8:a0:ce:15:07:1b:09: c4:95:ba:ca:c3:90:08:6a:a5:0c:3e:e2:21:29:70: 32:f2:89:b8:0b:e3:f6:ef:fb:38:47:ab:37:fa:8a: 26:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:13:1C:D6:37:53:7A:71:F9:AB:F6:13:07:2D:3C:11:07:B3:D1:22 X509v3 Authority Key Identifier: keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:8b:7e:3f:59:43:b6:91:5e:52:e5:24:11:c0:86:e5:f8:da: 05:44:e9:5a:0e:28:ef:e7:e4:d3:bd:70:96:3f:d2:5d:f6:f0: 8d:24:6b:26:b8:37:95:85:2e:b7:f9:a1:a1:c9:7a:8c:d7:65: 5b:af:d0:62:94:1d:b5:8c:fc:4c:46:37:60:4c:43:78:52:10: 43:fd:40:8c:36:a5:4e:7e:30:35:9a:87:71:d4:2e:a5:20:27: 01:17:4c:a1:c2:39:59:04:ce:50:0f:d6:3b:09:6b:50:86:e4: b6:7a:93:d8:76:8b:36:60:6a:dd:85:91:76:a9:52:e4:44:d9: ca:f9:27:a4:8d:ba:91:ae:9e:47:61:a4:0f:e4:36:46:7f:c3: 99:e8:6a:bc:ee:c3:64:71:00:a2:29:bd:10:ab:3b:22:9f:7e: 55:1f:ad:b6:a3:df:69:18:72:5b:66:fc:37:b2:4d:b1:a3:29: eb:bf:c9:ff:d2:f6:e4:76:94:36:63:26:32:32:20:b4:ac:58: 60:da:30:a0:73:63:40:6c:df:4c:d0:aa:4a:ff:55:06:cb:85: 88:6d:0d:1f:ec:f8:ef:a7:64:0c:7d:fc:4b:09:33:82:95:67: 6a:af:70:10:8e:f6:d4:eb:1a:89:32:2b:4a:c6:f5:3a:82:88: 2f:7a:f9:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTMwOTExMC8GA1UEBRMoN0Q4RkEwQkVGNkFFRjcxQkRGODgzODU4RjczNjE5RDNC NTlFMjc3NzAeFw0yNTA4MDkwODM2MjBaFw0yNTA4MTYwODM2MjBaMBgxFjAUBgNV BAMTDTY4OTcwODg0LTAwYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAdJy6K4d/tvtcLvdtoTcZ6tHmSgMz1tn891M/diMxFVw4HCOwjO0gnb2/G3Xs IGGERBojQLHTnvHN4+hxnZqpOdGAKWd1EzM9M09ZWiuCBqKojF80svX4X6UXrBNB 7gAm3t4HaKpQAr+1+VJwwNU/kGKx+9Y0XREvPKRmfd/3IpOFLMtZSYrwzuHyiKNY jF8cmntyeTeaIbWZ3jrhwxaT0glVEkI5Q16wBBt8J0aKolitx/3verOPw9Faioyk A4WVRf70y/YB6RWz/GXyKT/VXYgzRxqp9woU+KDOFQcbCcSVusrDkAhqpQw+4iEp cDLyibgL4/bv+zhHqzf6iibfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjxMc1jdT enH5q/YTBy08EQez0SIwHwYDVR0jBBgwFoAUfY+gvvau9xvfiDhY9zYZ07WeJ3cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5Lzk4OTFFOTJFNjEz RDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUoz Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZlktZ3Z2YXU5eHZmaURoWTl6WVowN1dlSjNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 MzA5Lzk4OTFFOTJFNjEzRDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2 ZmlEaFk5ellaMDdXZUozYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANWLfj9ZQ7aRXlLlJBHAhuX42gVE6VoOKO/n5NO9cJY/0l328I0kaya4 N5WFLrf5oaHJeozXZVuv0GKUHbWM/ExGN2BMQ3hSEEP9QIw2pU5+MDWah3HULqUg JwEXTKHCOVkEzlAP1jsJa1CG5LZ6k9h2izZgat2FkXapUuRE2cr5J6SNupGunkdh pA/kNkZ/w5noarzuw2RxAKIpvRCrOyKfflUfrbaj32kYcltm/DeyTbGjKeu/yf/S 9uR2lDZjJjIyILSsWGDaMKBzY0Bs30zQqkr/VQbLhYhtDR/s+O+nZAx9/EsJM4KV Z2qvcBCO9tTrGokyK0rG9TqCiC96+YA= -----END CERTIFICATE-----Generated at Mon Aug 11 07:31:52 2025 by rpki-client