$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json) Hash identifier: RaKjboHj0XvO1aAny6m+iqImbSAUDPUM8+uSVqlTErI= Subject key identifier: 13:AD:F2:59:D6:54:2F:A2:9A:81:AF:9A:D6:2A:15:F4:3C:F0:6A:8A Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft Manifest number: 71 Signing time: Sat 09 Aug 2025 07:25:31 +0000 Manifest this update: Sat 09 Aug 2025 07:25:31 +0000 Manifest next update: Sat 16 Aug 2025 07:25:31 +0000 Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: 2glznEuhArYQwgaP8vBlyQM6lwYT0E9WJlVOp69P7oE=) 2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: sDxPGPWuMnoYPL5SXwZzSX89Yi7Im2b2Bj3YLGK0a00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Validity Not Before: Aug 9 07:25:31 2025 GMT Not After : Aug 16 07:25:31 2025 GMT Subject: CN=6896f7eb-7f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:98:e5:d3:1e:1b:38:33:a8:66:75:41:6d:93: b1:4c:7a:e6:3d:a1:aa:59:09:77:c0:b0:40:23:f5: 21:f3:43:b9:6a:7d:5e:b8:a4:ab:df:7a:fe:49:88: a6:34:68:8f:51:cc:3d:6d:3e:ac:68:40:a2:ca:bd: 5d:eb:76:d7:dc:68:a4:52:91:7a:a9:17:31:20:4c: 8a:e6:fe:1f:7a:7e:16:10:d5:8f:57:05:43:65:b8: 08:82:e5:58:f7:d6:85:c5:98:b7:8e:3b:e0:99:b7: d9:b9:1a:02:28:51:ae:df:63:45:b3:e0:1d:e4:6e: 44:b1:08:30:d2:0c:53:79:e5:41:59:fd:eb:17:c8: db:78:83:2c:a4:e4:65:b0:ca:ef:a7:ac:1c:bd:35: 32:c0:4e:9d:c5:28:77:5d:df:89:52:61:e6:da:7e: ff:99:01:f7:ad:60:e2:0e:d0:fc:c2:e1:d9:3e:74: 26:ff:7a:0e:94:ff:a6:75:36:61:90:49:2d:b9:4e: d2:85:d8:59:5b:c5:61:c1:59:a7:55:fe:ce:a3:59: 0f:20:3b:da:fb:7d:b2:7b:cf:4c:43:ed:a1:a9:3e: d5:ca:f2:56:a3:1b:67:eb:97:bc:73:e6:db:2d:dd: 45:9f:5c:26:a8:66:22:65:eb:06:57:bc:88:74:37: 44:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AD:F2:59:D6:54:2F:A2:9A:81:AF:9A:D6:2A:15:F4:3C:F0:6A:8A X509v3 Authority Key Identifier: keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:1c:f6:74:ca:27:7d:95:ae:90:0e:b7:34:c1:23:02:88:fc: 44:c0:f9:ba:57:d8:2e:c6:5f:d0:09:ef:12:64:94:5f:3a:cf: 31:45:ac:fe:dc:a4:98:3d:85:e1:4f:04:23:d7:b2:8c:8e:12: 5c:c3:9a:52:ea:b1:b7:9e:f1:a9:77:24:b5:e2:d5:3b:84:c1: 40:fa:3b:b0:0e:49:0a:fc:36:92:09:54:a7:14:7f:9b:b8:e4: 91:d8:47:a6:f6:4c:51:b5:10:20:7f:5f:90:68:ef:1a:01:ba: 0b:54:13:46:dc:83:56:60:bd:67:bf:d0:4a:5b:b4:e3:12:ca: ec:f5:c6:5c:9e:4f:9e:10:d1:81:99:9e:9f:2a:23:46:d0:eb: b1:9c:83:3b:52:e9:fe:18:60:20:f3:f3:a7:4a:9e:44:68:32: b5:14:c5:38:b4:8a:45:45:90:01:23:9b:ac:10:cb:a7:42:9c: 9a:c8:9e:38:25:2e:6d:cb:c4:ab:87:6f:20:9d:74:35:3a:76: 83:45:08:0d:ee:90:37:3e:15:b0:e9:61:e5:7b:bd:4f:c0:23: 5a:69:0b:e9:bc:b7:18:27:a7:5d:66:60:fa:a3:36:78:83:7f: c2:dc:40:c1:dd:aa:ff:8c:39:cb:ec:98:a4:7e:51:4e:cd:6a: e8:0a:4a:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEFCODExMC8GA1UEBRMoMzE4OEY5QjlGNUU5MEFGQjBEQjBERTY1NjVGMDJDOTBC RUVBNDhEMDAeFw0yNTA4MDkwNzI1MzFaFw0yNTA4MTYwNzI1MzFaMBgxFjAUBgNV BAMTDTY4OTZmN2ViLTdmMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRmOXTHhs4M6hmdUFtk7FMeuY9oapZCXfAsEAj9SHzQ7lqfV64pKvfev5JiKY0 aI9RzD1tPqxoQKLKvV3rdtfcaKRSkXqpFzEgTIrm/h96fhYQ1Y9XBUNluAiC5Vj3 1oXFmLeOO+CZt9m5GgIoUa7fY0Wz4B3kbkSxCDDSDFN55UFZ/esXyNt4gyyk5GWw yu+nrBy9NTLATp3FKHdd34lSYebafv+ZAfetYOIO0PzC4dk+dCb/eg6U/6Z1NmGQ SS25TtKF2FlbxWHBWadV/s6jWQ8gO9r7fbJ7z0xD7aGpPtXK8lajG2frl7xz5tst 3UWfXCaoZiJl6wZXvIh0N0RDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE63yWdZU L6Kaga+a1ioV9DzwaoowHwYDVR0jBBgwFoAUMYj5ufXpCvsNsN5lZfAskL7qSNAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0QUI4LzNCMEE5QzY0RDFC MDExRUY4QzIwREQzMkM0RjlBRTAyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNO QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVlqNXVmWHBDdnNOc041bFpmQXNrTDdxU05BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 QUI4LzNCMEE5QzY0RDFCMDExRUY4QzIwREQzMkM0RjlBRTAyL01ZajV1ZlhwQ3Zz TnNONWxaZkFza0w3cVNOQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAQc9nTKJ32VrpAOtzTBIwKI/ETA+bpX2C7GX9AJ7xJklF86zzFFrP7c pJg9heFPBCPXsoyOElzDmlLqsbee8al3JLXi1TuEwUD6O7AOSQr8NpIJVKcUf5u4 5JHYR6b2TFG1ECB/X5Bo7xoBugtUE0bcg1ZgvWe/0EpbtOMSyuz1xlyeT54Q0YGZ np8qI0bQ67GcgztS6f4YYCDz86dKnkRoMrUUxTi0ikVFkAEjm6wQy6dCnJrInjgl Lm3LxKuHbyCddDU6doNFCA3ukDc+FbDpYeV7vU/AI1ppC+m8txgnp11mYPqjNniD f8LcQMHdqv+MOcvsmKR+UU7NaugKSmQ= -----END CERTIFICATE-----Generated at Sun Aug 10 04:21:26 2025 by rpki-client