$ rpki-client -vvf rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft File: rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft (raw, json) Hash identifier: qAE6g6uR7UXmfG6HenhR7vioKKs1RvCQBmno8ONSQS0= Subject key identifier: B7:34:27:77:5D:05:DC:7A:6F:CB:62:69:9D:D0:F6:9A:46:AA:88:50 Authority key identifier: AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02 Certificate issuer: /CN=A9190057/serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft Manifest number: 01A5 Signing time: Sat 09 Aug 2025 03:39:44 +0000 Manifest this update: Sat 09 Aug 2025 03:39:43 +0000 Manifest next update: Sat 16 Aug 2025 03:39:43 +0000 Files and hashes: 1: rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl (hash: fvGqrDVT2jlM05SfNLg97ItsizA42SU3fF4q/o4TuJQ=) 2: 1EE23948F8F411ED96463014C4F9AE02.roa (hash: EvYmZSvFW4TmtbBw6J3n3GDqNPIDejLlfQRwyNljJeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190057, serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802 Validity Not Before: Aug 9 03:39:43 2025 GMT Not After : Aug 16 03:39:43 2025 GMT Subject: CN=6896c300-52a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:09:9d:51:17:20:10:0f:c5:06:7e:df:a6: b2:96:95:ad:38:08:2f:4a:f6:4f:2c:b4:3e:a2:93: 3d:0a:7f:71:be:9b:98:a6:a9:01:94:6a:e9:c1:15: 00:69:69:c9:49:be:aa:da:8c:a9:b2:bc:94:e3:82: f9:85:cb:45:c3:6a:2b:d5:40:93:09:94:a7:d8:0a: 5a:e0:c6:d5:7b:eb:c6:1b:44:ae:25:a7:fa:1a:86: 59:6c:3c:4c:5a:1c:4e:69:53:4d:0c:b0:22:62:2f: 73:73:60:a8:aa:11:24:39:c7:cf:da:54:bb:99:29: c0:7a:fc:4e:47:8b:b4:78:4d:90:4f:29:98:3c:0e: ba:a7:45:d2:49:27:0b:88:73:83:3c:7c:6c:db:78: 11:76:0a:55:52:2d:c0:57:2e:6f:cf:3f:ca:a3:0d: 8f:23:d4:70:d4:84:98:d9:d5:dc:e9:a6:97:89:23: 8f:1a:05:b7:4d:85:3d:66:2f:b5:c3:ec:72:da:80: 92:7a:8a:42:53:45:35:5f:9d:c3:30:9c:2d:7f:10: eb:bb:2e:68:3e:30:68:cd:87:7d:9c:6a:e2:a5:a9: e6:f6:dd:98:f3:68:d1:cb:a9:d0:4d:08:5f:be:44: 23:47:da:d4:d7:61:e5:c3:ca:0b:5b:20:25:df:ee: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:34:27:77:5D:05:DC:7A:6F:CB:62:69:9D:D0:F6:9A:46:AA:88:50 X509v3 Authority Key Identifier: keyid:AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:a4:11:aa:d5:b4:4c:7d:36:5c:3f:89:0b:79:48:f0:d5:a9: 86:2a:af:39:16:c3:f4:0a:8b:56:f6:d5:d8:77:d3:83:e3:00: 6c:c8:c5:35:01:6b:08:51:18:a2:b9:ca:f5:1f:21:db:b3:76: 1a:e3:02:3e:4b:ef:83:c9:1e:27:36:63:a6:10:f2:8b:73:52: 74:29:22:4c:a0:b2:f8:03:ee:56:b1:ef:db:eb:08:ad:a1:cc: 72:54:c6:6d:04:01:4b:8c:05:e5:3d:ad:24:65:1c:f9:a2:24: 4a:7a:cc:b9:80:3b:bf:f6:34:22:39:e0:1d:52:b2:05:ab:ce: 8c:9d:2b:2e:d9:38:54:e5:c4:8d:f1:71:2b:72:68:be:0b:86: b1:0b:c4:05:42:33:f6:f6:c8:55:c3:6d:1f:3f:05:03:96:a9: 2a:b1:d7:e3:5e:00:f1:bc:6d:73:f8:fe:e5:32:2d:e7:ec:70: 04:ec:38:f5:ef:d7:5b:0e:0f:67:32:ef:71:40:98:30:64:de: cf:f9:a5:60:db:a5:ba:06:58:8b:2c:6c:3b:53:52:f1:a0:a0: 26:8f:d5:a7:53:67:59:28:22:01:cb:ea:f9:25:a1:44:8c:63: 18:5a:a1:c9:17:8e:ee:d5:c2:64:c1:7d:8f:8c:e1:a6:c0:86: ec:8a:c6:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAwNTcxMTAvBgNVBAUTKEFEQjI3QUNBQjY1OUZENEU0MTY3NDU1NzNCNDVEN0Iw MkJEOEI4MDIwHhcNMjUwODA5MDMzOTQzWhcNMjUwODE2MDMzOTQzWjAYMRYwFAYD VQQDEw02ODk2YzMwMC01MmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1kJnVEXIBAPxQZ+36aylpWtOAgvSvZPLLQ+opM9Cn9xvpuYpqkBlGrpwRUA aWnJSb6q2oypsryU44L5hctFw2or1UCTCZSn2Apa4MbVe+vGG0SuJaf6GoZZbDxM WhxOaVNNDLAiYi9zc2CoqhEkOcfP2lS7mSnAevxOR4u0eE2QTymYPA66p0XSSScL iHODPHxs23gRdgpVUi3AVy5vzz/Kow2PI9Rw1ISY2dXc6aaXiSOPGgW3TYU9Zi+1 w+xy2oCSeopCU0U1X53DMJwtfxDruy5oPjBozYd9nGripanm9t2Y82jRy6nQTQhf vkQjR9rU12Hlw8oLWyAl3+4HpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc0J3dd Bdx6b8tiaZ3Q9ppGqohQMB8GA1UdIwQYMBaAFK2yesq2Wf1OQWdFVztF17Ar2LgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDA1Ny81N0I5MjE0OEY4 NUMxMUVEQTdFOEZFNzRDNEY5QUUwMi9yYko2eXJaWl9VNUJaMFZYTzBYWHNDdll1 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JiSjZ5clpaX1U1QlowVlhPMFhYc0N2WXVBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDA1Ny81N0I5MjE0OEY4NUMxMUVEQTdFOEZFNzRDNEY5QUUwMi9yYko2eXJaWl9V NUJaMFZYTzBYWHNDdll1QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEpBGq1bRMfTZcP4kLeUjw1amGKq85FsP0CotW9tXYd9OD4wBsyMU1 AWsIURiiucr1HyHbs3Ya4wI+S++DyR4nNmOmEPKLc1J0KSJMoLL4A+5Wse/b6wit ocxyVMZtBAFLjAXlPa0kZRz5oiRKesy5gDu/9jQiOeAdUrIFq86MnSsu2ThU5cSN 8XErcmi+C4axC8QFQjP29shVw20fPwUDlqkqsdfjXgDxvG1z+P7lMi3n7HAE7Dj1 79dbDg9nMu9xQJgwZN7P+aVg26W6BliLLGw7U1LxoKAmj9WnU2dZKCIBy+r5JaFE jGMYWqHJF47u1cJkwX2PjOGmwIbsisaT -----END CERTIFICATE-----Generated at Sun Aug 10 04:16:26 2025 by rpki-client