$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft File: bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft (raw, json) Hash identifier: iaykQIUUfnDwZDq+2M8dn1P453JEQcPei0wDYM7Rtuo= Subject key identifier: 5B:4E:00:CC:A2:78:E2:97:36:59:3B:66:10:DA:BC:70:45:D1:99:89 Authority key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C Certificate issuer: /CN=A917877E/serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft Manifest number: 12 Signing time: Sat 09 Aug 2025 08:32:49 +0000 Manifest this update: Sat 09 Aug 2025 08:32:48 +0000 Manifest next update: Sat 16 Aug 2025 08:32:48 +0000 Files and hashes: 1: bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl (hash: n3UkGwIbBVtpmdBEeffvOi4JAQlFnjZ/LSr/8lEs2vY=) 2: 9EA96DF25D5D11F08A574048C4F9AE02.roa (hash: q6ZblRMV0uyhkappWvL+RGy5XexsiemwGej/lfgL9RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C Validity Not Before: Aug 9 08:32:48 2025 GMT Not After : Aug 16 08:32:48 2025 GMT Subject: CN=689707b1-8502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:68:60:55:21:10:c8:01:c2:8c:0e:da:fa:35: f1:f9:1b:94:1f:8d:b8:a6:6b:3f:76:37:96:5d:8b: 1a:3f:fb:f8:95:da:0b:f9:5c:ff:04:66:25:3f:03: 7a:bb:fb:b9:e2:df:75:58:35:e9:fe:fc:b6:fc:4d: f4:e8:b8:53:3c:40:d2:1d:cf:6f:34:5e:71:8b:5d: 65:f5:03:b3:2f:ed:38:25:99:31:7a:3e:3a:5b:e9: 00:a5:f7:f0:91:09:f4:92:34:31:0a:26:f0:a8:03: b4:5e:44:0a:f4:e8:1c:36:cb:ac:ac:c5:bb:96:a9: 67:53:66:58:8e:d4:de:31:f5:7a:30:89:9e:49:e9: 04:78:6e:c3:01:7a:54:ac:71:29:8f:53:b3:77:35: 23:20:89:58:af:c2:5d:0f:89:21:1b:8a:5d:b9:65: a1:85:19:85:d7:26:8a:4e:f7:4d:8f:f5:7e:c3:76: cf:eb:63:4c:21:ad:6b:cd:0f:35:0c:c9:b9:37:20: 1a:4f:b1:6b:4c:46:c6:b4:81:93:5c:e9:61:6d:75: fd:59:58:ea:8b:f5:39:4d:94:84:19:15:4c:40:5a: 9a:33:cc:cb:58:f4:51:3c:d7:bc:8d:19:d9:a9:e4: 56:ba:8c:bd:68:67:6f:0a:f7:79:d7:19:6e:77:15: 06:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4E:00:CC:A2:78:E2:97:36:59:3B:66:10:DA:BC:70:45:D1:99:89 X509v3 Authority Key Identifier: keyid:6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:96:f3:cc:24:84:f1:81:cf:73:27:92:fe:3f:f8:4e:c6:7a: a7:fa:88:38:90:c4:6c:42:2f:bc:48:34:82:0a:a3:c2:42:bb: 22:56:fb:53:5c:f4:5d:43:43:78:5b:0f:ec:98:43:c1:89:f4: c4:69:51:a0:26:f9:5b:e6:8f:df:9d:ce:36:06:57:73:fb:37: 6a:da:c9:8c:e6:09:9d:e7:a0:0f:d9:4a:d6:3d:76:a0:54:0b: 42:b4:c8:3c:24:37:73:dc:f1:e4:8e:5b:7f:08:da:18:9a:0b: ad:50:8b:32:cc:03:45:cd:a0:61:87:41:36:2b:7d:c2:d3:f8: 54:5a:e6:2a:cf:60:fe:c6:3a:d7:67:13:95:aa:73:9d:27:11: e1:b7:8d:96:26:40:9f:55:e9:a0:3d:21:13:33:fe:d1:9c:90: 6b:12:33:d7:2d:01:47:b4:3f:d3:ec:d1:e0:ec:7a:44:95:f6: b8:45:de:97:82:a7:7f:af:8c:98:fe:cb:fb:39:fa:d9:87:3c: d5:3c:ca:50:8d:c5:d4:31:b7:50:98:1d:b2:82:ae:6c:48:ec: 05:6b:38:25:55:2c:cf:05:cf:48:66:b4:1c:0b:59:be:5d:35: 98:a3:9b:29:1d:1a:ef:52:06:a4:95:1a:60:cf:a2:02:87:c3: 0b:a5:61:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODc3RTExMC8GA1UEBRMoNkQ4QUI2RkRFNTIxREMxMDZGOTQ4MjkyQjUwMkZENUEw NzM0ODM3QzAeFw0yNTA4MDkwODMyNDhaFw0yNTA4MTYwODMyNDhaMBgxFjAUBgNV BAMTDTY4OTcwN2IxLTg1MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD6aGBVIRDIAcKMDtr6NfH5G5Qfjbimaz92N5Zdixo/+/iV2gv5XP8EZiU/A3q7 +7ni33VYNen+/Lb8TfTouFM8QNIdz280XnGLXWX1A7Mv7TglmTF6Pjpb6QCl9/CR CfSSNDEKJvCoA7ReRAr06Bw2y6ysxbuWqWdTZliO1N4x9XowiZ5J6QR4bsMBelSs cSmPU7N3NSMgiVivwl0PiSEbil25ZaGFGYXXJopO902P9X7Dds/rY0whrWvNDzUM ybk3IBpPsWtMRsa0gZNc6WFtdf1ZWOqL9TlNlIQZFUxAWpozzMtY9FE817yNGdmp 5Fa6jL1oZ28K93nXGW53FQZdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW04AzKJ4 4pc2WTtmENq8cEXRmYkwHwYDVR0jBBgwFoAUbYq2/eUh3BBvlIKStQL9Wgc0g3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NzdFLzM4OUE2MkQyNUQ1 RDExRjBCNDlBNzg0N0M0RjlBRTAyL2JZcTJfZVVoM0JCdmxJS1N0UUw5V2djMGcz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYllxMl9lVWgzQkJ2bElLU3RRTDlXZ2MwZzN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NzdFLzM4OUE2MkQyNUQ1RDExRjBCNDlBNzg0N0M0RjlBRTAyL2JZcTJfZVVoM0JC dmxJS1N0UUw5V2djMGczdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGWW88wkhPGBz3Mnkv4/+E7Geqf6iDiQxGxCL7xINIIKo8JCuyJW+1Nc 9F1DQ3hbD+yYQ8GJ9MRpUaAm+Vvmj9+dzjYGV3P7N2rayYzmCZ3noA/ZStY9dqBU C0K0yDwkN3Pc8eSOW38I2hiaC61QizLMA0XNoGGHQTYrfcLT+FRa5irPYP7GOtdn E5Wqc50nEeG3jZYmQJ9V6aA9IRMz/tGckGsSM9ctAUe0P9Ps0eDsekSV9rhF3peC p3+vjJj+y/s5+tmHPNU8ylCNxdQxt1CYHbKCrmxI7AVrOCVVLM8Fz0hmtBwLWb5d NZijmykdGu9SBqSVGmDPogKHwwulYf4= -----END CERTIFICATE-----Generated at Sun Aug 10 19:02:22 2025 by rpki-client