$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json) Hash identifier: WXRC5MR0YoICyuuD4qsoLh+H5qRngMFGZKnqylLoFO8= Subject key identifier: 59:86:3D:82:1F:9C:B3:6E:71:42:8F:9A:2D:E8:82:53:A1:5E:E4:67 Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft Manifest number: A6 Signing time: Tue 05 Aug 2025 06:42:23 +0000 Manifest this update: Tue 05 Aug 2025 06:42:22 +0000 Manifest next update: Tue 12 Aug 2025 06:42:22 +0000 Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: Y0M0iGFpgSlDbSgGV3+lIPOdCKtxPSqLjg7bRUhwKmM=) 2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Validity Not Before: Aug 5 06:42:22 2025 GMT Not After : Aug 12 06:42:22 2025 GMT Subject: CN=6891a7ce-798d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1c:02:c6:ec:86:06:e6:e9:6e:39:1a:89:95: c3:5b:48:79:a5:00:3f:6b:d2:78:02:0c:be:ee:47: fd:f7:b7:fd:dd:55:79:f6:1e:dd:9b:5b:a7:ad:2b: ea:ba:38:79:ba:11:2b:01:ab:9c:f2:de:9e:40:cd: 95:60:e7:23:71:90:81:97:83:97:dc:f5:e8:10:fd: a6:a0:fb:3b:3a:d6:f0:1f:f7:a0:4d:18:79:5d:71: 72:09:7d:5f:b5:69:a0:b8:33:98:70:31:51:ad:be: c6:4f:c9:02:3a:86:18:2b:04:20:f9:6c:16:53:6e: b1:a3:b4:a8:0a:26:53:19:41:a0:52:2b:a7:94:cb: ad:11:5a:24:47:0d:75:2f:fc:16:8b:1f:84:81:52: b5:f7:f9:6c:03:3d:2f:f5:ed:00:28:20:69:c1:8e: 4d:7b:70:d9:5c:e1:db:55:82:f3:11:69:7e:9b:a4: fe:e7:20:69:78:68:81:53:7c:0d:29:67:e9:e2:ef: ec:c5:66:9d:29:91:3a:7e:b8:28:12:95:4f:f5:7e: d1:79:d2:bb:b8:d6:a5:b8:c7:dc:90:84:ba:47:ca: 7b:9d:72:8b:f1:11:54:54:d1:97:33:33:8c:32:83: 1b:2c:3e:98:c4:07:dc:96:6a:3a:55:44:9d:be:60: d3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:86:3D:82:1F:9C:B3:6E:71:42:8F:9A:2D:E8:82:53:A1:5E:E4:67 X509v3 Authority Key Identifier: keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:5e:b4:d5:9a:9a:06:af:7d:89:0b:ea:df:a0:d5:c6:b4:bd: 78:e7:5f:d5:fc:0c:b4:7f:fc:82:ff:89:f4:02:fa:57:4e:1d: 94:3b:f5:c0:86:23:03:fa:32:28:9f:08:03:a9:e0:27:75:b6: 69:47:c1:0f:95:ac:cb:23:3f:40:59:2d:74:a2:63:02:e2:a7: 09:73:e5:de:00:97:aa:66:7d:20:d8:f3:88:9d:25:67:b8:b4: d0:59:57:91:88:03:7f:fc:db:69:12:79:c9:c8:97:43:f4:66: 58:15:e2:a9:fd:03:13:dd:c8:ba:1a:04:82:16:42:47:ce:c1: da:79:07:e0:4f:a9:2e:0f:70:b6:56:94:1b:70:3f:4d:79:cd: 07:b6:a8:e6:9b:58:16:4e:91:17:06:1a:a9:15:ea:c6:b2:f2: 76:a7:75:d0:52:5f:34:d6:89:71:c0:89:6e:89:44:6b:d0:a5: 60:d2:f8:ca:2a:d8:a0:36:6f:29:3b:83:d0:c8:f1:0b:b2:41: b3:7f:aa:f1:a8:1f:97:bc:1b:d7:bf:3e:4a:ab:36:b0:b2:67: d2:6a:a6:26:92:0a:81:8d:fb:93:af:c6:56:9c:44:b2:5e:e9: 08:c1:cb:fe:a7:c9:19:9c:17:ec:25:41:8e:68:34:b8:0e:75: 68:d3:ca:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEM4NDlDMUY2RUI4RDFCMEIzNzk0QjA2MEM0OUM1QTlC RDUzQUQ0QzkwHhcNMjUwODA1MDY0MjIyWhcNMjUwODEyMDY0MjIyWjAYMRYwFAYD VQQDEw02ODkxYTdjZS03OThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xwCxuyGBubpbjkaiZXDW0h5pQA/a9J4Agy+7kf997f93VV59h7dm1unrSvq ujh5uhErAauc8t6eQM2VYOcjcZCBl4OX3PXoEP2moPs7OtbwH/egTRh5XXFyCX1f tWmguDOYcDFRrb7GT8kCOoYYKwQg+WwWU26xo7SoCiZTGUGgUiunlMutEVokRw11 L/wWix+EgVK19/lsAz0v9e0AKCBpwY5Ne3DZXOHbVYLzEWl+m6T+5yBpeGiBU3wN KWfp4u/sxWadKZE6frgoEpVP9X7RedK7uNaluMfckIS6R8p7nXKL8RFUVNGXMzOM MoMbLD6YxAfclmo6VUSdvmDT7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmGPYIf nLNucUKPmi3oglOhXuRnMB8GA1UdIwQYMBaAFMhJwfbrjRsLN5SwYMScWpvVOtTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BNzMzN0M2QTcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3czNsTEJneEp4YW05VTYx TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BNzMzN0M2QTczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3 czNsTEJneEp4YW05VTYxTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmXrTVmpoGr32JC+rfoNXGtL1451/V/Ay0f/yC/4n0AvpXTh2UO/XA hiMD+jIonwgDqeAndbZpR8EPlazLIz9AWS10omMC4qcJc+XeAJeqZn0g2POInSVn uLTQWVeRiAN//NtpEnnJyJdD9GZYFeKp/QMT3ci6GgSCFkJHzsHaeQfgT6kuD3C2 VpQbcD9Nec0Htqjmm1gWTpEXBhqpFerGsvJ2p3XQUl801olxwIluiURr0KVg0vjK KtigNm8pO4PQyPELskGzf6rxqB+XvBvXvz5KqzawsmfSaqYmkgqBjfuTr8ZWnESy XukIwcv+p8kZnBfsJUGOaDS4DnVo08o4 -----END CERTIFICATE-----Generated at Wed Aug 6 11:18:41 2025 by rpki-client