$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json) Hash identifier: vtglFNh6rsUqaA3N3RX1+W3hp1+OzPgiAmojejVWBH4= Subject key identifier: A1:7C:2A:71:7C:B2:62:61:EA:37:C5:91:84:BB:B4:23:5A:A9:A5:14 Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft Manifest number: 0112 Signing time: Sat 09 Aug 2025 05:20:15 +0000 Manifest this update: Sat 09 Aug 2025 05:20:15 +0000 Manifest next update: Sat 16 Aug 2025 05:20:15 +0000 Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: GeeEaDZhY/Plv2JFL6kSkz4vEQzOVxTGSfEOSyNy2SE=) 2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: ojSPB0ISIGRw3cOfBtrECwI7sYrCbgl9SiZcYTomn1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Validity Not Before: Aug 9 05:20:15 2025 GMT Not After : Aug 16 05:20:15 2025 GMT Subject: CN=6896da8f-2c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:42:20:c8:67:89:e3:ce:19:b8:82:a9:6b:65: 9a:c2:07:1b:b4:55:c0:15:b5:98:21:62:90:1f:40: 8c:6a:ef:f8:74:bc:a1:b8:ce:8d:67:1e:16:2b:cf: 3c:ce:db:e5:3e:c5:98:88:7a:4b:6a:a0:7a:85:cc: af:0e:6c:17:8d:e0:8f:0f:7f:42:6d:4f:70:c2:12: 3f:df:a2:7b:f7:2b:3b:37:c6:a3:92:28:76:7b:f3: fb:62:ad:3d:ae:5f:9b:be:03:6d:05:54:d3:7b:4a: d8:01:2a:2c:78:27:1a:a2:16:50:df:d1:a4:b8:a1: f8:3f:ce:d7:26:9f:eb:f0:07:69:75:21:9f:1d:eb: d3:82:8d:5e:ba:b5:f1:17:28:a9:52:50:dd:da:37: c0:26:74:00:24:24:c1:7d:76:f3:7b:a3:20:3a:ae: 67:35:04:1a:2d:88:67:df:4c:40:3c:36:d3:32:e3: bb:7f:28:da:02:95:b0:d3:0f:e5:91:dd:ad:59:b1: ea:1c:75:70:cd:fe:64:51:7c:6c:a6:36:b6:0e:a7: 8d:61:a0:53:14:f2:c0:ca:28:4f:8f:a8:c3:9f:20: 9b:38:d8:f2:ad:3d:e6:d1:b1:f9:02:e5:16:90:19: ff:cd:98:cd:e4:dd:49:4c:93:df:d4:18:71:83:86: 88:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7C:2A:71:7C:B2:62:61:EA:37:C5:91:84:BB:B4:23:5A:A9:A5:14 X509v3 Authority Key Identifier: keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2a:ef:1a:de:76:9e:d5:f7:65:cb:bb:f8:53:0a:bb:53:fd: 2d:cd:59:2a:1d:f1:3a:9a:fd:a0:38:7e:68:14:c7:44:76:1f: 59:94:e0:e9:84:79:38:36:69:46:4c:79:31:4b:1d:69:3b:f2: 22:df:27:fd:d2:ce:34:0b:1c:98:cc:06:ee:65:db:18:45:93: 81:a7:a9:10:93:a2:8d:e2:d2:8d:bd:bb:b8:4a:ce:71:fa:5e: 89:f8:86:02:52:b5:ab:af:68:e3:e7:a8:78:28:69:39:e8:93: 44:80:c3:7c:f1:be:b1:86:38:5b:c3:1c:ff:5b:57:bb:6e:49: 34:20:c9:98:ff:6c:3e:99:24:b5:60:bd:f8:4e:f0:2d:15:21: 1c:6e:4c:70:ce:67:4c:df:f8:cb:ca:57:9e:3f:e6:9c:73:0a: a5:9b:6c:09:52:63:3a:58:a3:0a:05:4a:2d:3c:08:30:c1:40: 97:91:e1:2f:c5:f2:e0:7a:33:1c:2a:3b:7d:05:ae:47:89:6b: 0a:c4:2b:09:02:46:4a:f1:a9:89:91:b6:d3:98:78:d2:5a:31: 7e:97:ef:27:26:a8:36:22:6a:f1:5a:3d:48:ba:73:33:c3:d0: 1a:02:9a:e6:ac:52:4a:43:91:ff:53:a9:3d:5b:cc:cd:d2:e3: d9:a8:63:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE QUQ5MUI0MDYwHhcNMjUwODA5MDUyMDE1WhcNMjUwODE2MDUyMDE1WjAYMRYwFAYD VQQDEw02ODk2ZGE4Zi0yYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5EIgyGeJ484ZuIKpa2WawgcbtFXAFbWYIWKQH0CMau/4dLyhuM6NZx4WK888 ztvlPsWYiHpLaqB6hcyvDmwXjeCPD39CbU9wwhI/36J79ys7N8ajkih2e/P7Yq09 rl+bvgNtBVTTe0rYASoseCcaohZQ39GkuKH4P87XJp/r8AdpdSGfHevTgo1eurXx FyipUlDd2jfAJnQAJCTBfXbze6MgOq5nNQQaLYhn30xAPDbTMuO7fyjaApWw0w/l kd2tWbHqHHVwzf5kUXxspja2DqeNYaBTFPLAyihPj6jDnyCbONjyrT3m0bH5AuUW kBn/zZjN5N1JTJPf1Bhxg4aI/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKF8KnF8 smJh6jfFkYS7tCNaqaUUMB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0 ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow NVk1ZFRCODduUkxhMlJ0QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNKu8a3nae1fdly7v4Uwq7U/0tzVkqHfE6mv2gOH5oFMdEdh9ZlODp hHk4NmlGTHkxSx1pO/Ii3yf90s40CxyYzAbuZdsYRZOBp6kQk6KN4tKNvbu4Ss5x +l6J+IYCUrWrr2jj56h4KGk56JNEgMN88b6xhjhbwxz/W1e7bkk0IMmY/2w+mSS1 YL34TvAtFSEcbkxwzmdM3/jLyleeP+accwqlm2wJUmM6WKMKBUotPAgwwUCXkeEv xfLgejMcKjt9Ba5HiWsKxCsJAkZK8amJkbbTmHjSWjF+l+8nJqg2ImrxWj1IunMz w9AaAprmrFJKQ5H/U6k9W8zN0uPZqGMG -----END CERTIFICATE-----Generated at Sun Aug 10 16:08:32 2025 by rpki-client