$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft File: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json) Hash identifier: BXG4+ahWZlgDAPYxP9/d2Okgtk55LBbhI+s9iI4hres= Subject key identifier: C1:CA:2C:75:A0:AF:53:0E:74:4D:7E:52:69:68:47:A0:C0:D2:EB:D5 Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft Manifest number: 72 Signing time: Sat 09 Aug 2025 07:19:48 +0000 Manifest this update: Sat 09 Aug 2025 07:19:48 +0000 Manifest next update: Sat 16 Aug 2025 07:19:48 +0000 Files and hashes: 1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: 1bddm9XWH+si0KRanAMZBkG8q8r89fMUEOV5O4prZbY=) 2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: HaAP7uUg1XzzgFWY/CdSRARMCuA2gGNyuumYnBvV1lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Validity Not Before: Aug 9 07:19:48 2025 GMT Not After : Aug 16 07:19:48 2025 GMT Subject: CN=6896f694-8287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:99:1e:b9:fc:59:8e:2e:99:70:43:2c:d6: c3:1d:b2:28:6e:9b:13:47:47:b7:9a:07:77:8d:e9: 19:88:fd:d5:dd:e3:5b:ee:bf:f5:69:49:81:3e:67: e7:4b:2e:1a:4f:79:8d:b4:f7:e8:51:34:54:fb:8c: 03:a8:cc:d6:19:1d:19:1e:0e:d8:2d:79:7c:ac:0f: c6:0d:4f:bc:32:62:aa:9c:0c:19:34:4b:84:fc:30: 91:1e:f1:7b:ea:dc:54:eb:42:46:bb:00:04:53:e6: 0a:f5:25:fa:1e:f1:90:34:55:0d:76:bc:a8:2e:a2: fc:27:c1:a5:6c:7b:68:99:14:68:c0:5e:62:15:00: fa:c2:ff:7a:89:ba:6d:f7:12:fb:95:f5:fd:a5:8e: bb:95:ee:b9:b2:16:c3:d1:28:e2:16:2c:8d:48:3f: 1b:be:ba:08:f2:c5:2f:06:19:3d:d0:14:bb:ca:f8: 4f:ed:22:3c:9d:2e:1e:c5:89:6f:17:62:32:6b:e1: fd:fc:28:7f:b0:3f:7e:60:01:85:79:95:7e:15:02: f4:5b:5c:30:f8:b4:48:81:2a:c4:1b:e6:fe:92:ee: af:24:86:ea:18:05:ba:74:04:fa:15:af:ac:c9:cc: 88:66:1e:8c:fe:ed:7f:6f:a7:32:1b:26:f7:80:21: 0b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CA:2C:75:A0:AF:53:0E:74:4D:7E:52:69:68:47:A0:C0:D2:EB:D5 X509v3 Authority Key Identifier: keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:6b:4c:c4:70:38:95:56:4d:4f:58:f2:3f:1c:9d:d5:0d:81: 8a:bf:be:52:e8:77:3a:07:fb:29:42:f5:b0:95:ad:b9:b7:66: d4:6e:91:4d:98:97:bf:9b:5c:03:26:38:b6:f2:20:51:96:9f: ad:4c:9b:79:c2:08:2a:b9:90:3f:c1:17:43:9c:94:74:3e:b1: 91:88:b5:73:ec:89:54:aa:45:6a:09:5d:cb:e7:a6:9b:5b:62: 8d:c8:6c:7b:7a:cc:bc:4e:6c:9a:ee:5d:38:33:7d:75:65:fb: 88:8b:92:3c:d7:7e:1e:d3:9c:7e:71:42:bb:e4:52:be:74:29: f9:49:1d:14:a9:00:b0:e0:67:ad:79:11:48:37:36:95:f4:8a: 49:a8:11:37:80:18:7d:f6:2a:b9:f9:3b:c6:dc:1a:58:f0:5f: 5f:35:26:f2:fd:d4:e0:9c:12:6f:88:a7:06:e7:89:b3:d6:48: b6:08:43:0c:ba:cd:19:a7:83:bd:2f:ef:d0:65:8c:38:0a:5c: ef:27:6d:7a:20:eb:5c:c6:5e:fb:e8:84:a4:e0:7b:26:fe:86: bc:de:fc:bc:c2:d1:5b:43:dc:45:f1:89:5e:f3:97:2f:87:18: 36:a9:88:e9:f1:bc:73:61:9c:b6:cd:f1:f9:ce:3d:18:01:4f: 18:b0:03:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDQTExMC8GA1UEBRMoQUU3M0I3MDU0OEZGNDIyRUQwMkQ1OUQxQ0EyNTc5M0Ew NUU5RTQyQTAeFw0yNTA4MDkwNzE5NDhaFw0yNTA4MTYwNzE5NDhaMBgxFjAUBgNV BAMTDTY4OTZmNjk0LTgyODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3GZkeufxZji6ZcEMs1sMdsihumxNHR7eaB3eN6RmI/dXd41vuv/VpSYE+Z+dL LhpPeY209+hRNFT7jAOozNYZHRkeDtgteXysD8YNT7wyYqqcDBk0S4T8MJEe8Xvq 3FTrQka7AART5gr1Jfoe8ZA0VQ12vKguovwnwaVse2iZFGjAXmIVAPrC/3qJum33 EvuV9f2ljruV7rmyFsPRKOIWLI1IPxu+ugjyxS8GGT3QFLvK+E/tIjydLh7FiW8X YjJr4f38KH+wP35gAYV5lX4VAvRbXDD4tEiBKsQb5v6S7q8khuoYBbp0BPoVr6zJ zIhmHoz+7X9vpzIbJveAIQutAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwcosdaCv Uw50TX5SaWhHoMDS69UwHwYDVR0jBBgwFoAUrnO3BUj/Qi7QLVnRyiV5OgXp5Cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RENBLzUwMTA5ODc2Q0Ix RjExRUZCN0FDMjc4NkM0RjlBRTAyL3JuTzNCVWpfUWk3UUxWblJ5aVY1T2dYcDVD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcm5PM0JVal9RaTdRTFZuUnlpVjVPZ1hwNUNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RENBLzUwMTA5ODc2Q0IxRjExRUZCN0FDMjc4NkM0RjlBRTAyL3JuTzNCVWpfUWk3 UUxWblJ5aVY1T2dYcDVDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFFrTMRwOJVWTU9Y8j8cndUNgYq/vlLodzoH+ylC9bCVrbm3ZtRukU2Y l7+bXAMmOLbyIFGWn61Mm3nCCCq5kD/BF0OclHQ+sZGItXPsiVSqRWoJXcvnpptb Yo3IbHt6zLxObJruXTgzfXVl+4iLkjzXfh7TnH5xQrvkUr50KflJHRSpALDgZ615 EUg3NpX0ikmoETeAGH32Krn5O8bcGljwX181JvL91OCcEm+IpwbnibPWSLYIQwy6 zRmng70v79BljDgKXO8nbXog61zGXvvohKTgeyb+hrze/LzC0VtD3EXxiV7zly+H GDapiOnxvHNhnLbN8fnOPRgBTxiwA1E= -----END CERTIFICATE-----Generated at Sun Aug 10 10:36:11 2025 by rpki-client