$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: +QHvhzLB7Lb0NPQdr3EBusBej0WOJv7d30QC2rOAgHY= Subject key identifier: B9:49:02:BB:E6:5A:B2:88:1C:64:12:30:74:56:FF:51:BE:33:E4:7C Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0DC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0D8B Signing time: Sun 10 Aug 2025 17:59:55 +0000 Manifest this update: Sun 10 Aug 2025 17:59:55 +0000 Manifest next update: Sun 17 Aug 2025 17:59:54 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: ORc9WGg0jPKMVpd6puxqX0rGV/8VTO7fY/ARed52G9I=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 4: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=) 5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: WZVD3OFnLCd+Z+EztJUmZvetknrgOnaCpDqtEU+1mk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3520 (0xdc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Aug 10 17:59:55 2025 GMT Not After : Aug 17 17:59:54 2025 GMT Subject: CN=6898de1b-93e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:8f:4e:cf:1f:09:dc:e8:78:0d:56:71:53: 30:df:28:97:64:f4:7f:c6:0f:1c:34:44:88:90:31: 77:0e:6a:06:ce:ee:33:84:55:5b:22:cc:9d:06:ea: ea:0b:6e:2b:ef:2e:f6:d7:0a:01:a3:ef:86:85:72: 42:52:b0:f5:bc:ee:77:c8:66:ed:bf:ef:a3:a6:6c: 8e:7f:05:29:de:19:ea:ee:b3:16:8a:13:ed:84:7c: 9e:97:b3:fe:08:44:64:a7:56:a1:74:b4:00:24:02: e3:18:da:1f:e3:d0:ec:9d:2a:f8:d2:64:c1:32:b0: d8:19:e9:f5:86:8c:bc:08:1b:2f:a0:e2:93:97:3a: b9:1e:45:0b:fb:24:7e:da:c5:22:53:94:5f:17:5f: 17:d5:76:e7:5e:35:1d:f4:08:2c:57:d3:b0:2c:77: dc:92:28:11:ac:6b:54:19:a6:35:b9:27:93:73:6b: c5:65:34:62:ad:9f:73:f4:d4:b9:ea:05:d7:f3:11: d4:1c:48:4b:4a:e7:b9:0d:a8:d1:bd:0b:0b:d8:ab: 76:c5:1e:89:05:99:84:bb:64:5c:e7:0d:38:60:88: 2e:96:ef:31:32:05:7e:ae:fe:eb:92:97:6d:bf:6a: 9f:91:68:c0:99:7a:16:da:34:e1:1f:d6:cf:3a:f5: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:49:02:BB:E6:5A:B2:88:1C:64:12:30:74:56:FF:51:BE:33:E4:7C X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:7a:70:e1:43:7b:bb:e0:f8:0d:f1:36:f0:fd:a3:14:63:9f: 7d:5d:a2:df:47:75:01:b9:0b:07:3c:62:34:5a:93:e9:97:0f: 53:21:b4:97:e5:9b:75:83:cf:ae:a3:d8:3c:40:61:e4:55:d5: b5:17:93:3a:84:5c:be:1d:d6:c5:20:a6:10:2b:0a:f6:ff:d2: 9f:ec:3a:64:75:fd:fc:af:19:e7:0a:95:01:4c:a1:58:d0:3a: 97:a0:c9:5a:ae:65:df:98:37:f9:eb:fb:28:7b:19:24:6f:f8: 1f:39:93:62:b3:9a:e7:d3:20:88:55:2f:d7:13:59:13:23:7a: 0e:73:de:ef:f1:86:98:96:5c:ba:00:3c:2d:38:24:a1:5f:7c: cb:eb:1c:8f:9e:29:0d:a9:54:a2:4d:61:51:61:11:09:47:5f: 2d:65:1c:ff:ff:3b:80:20:10:d7:34:f2:d7:bd:e4:80:38:e8: ae:8f:18:4c:91:37:7c:67:0f:07:3e:f7:f8:34:20:dc:e8:95: 10:d0:1b:fc:4d:f6:34:38:bc:63:57:9e:2c:8e:86:00:81:bc: e4:5f:90:36:c4:9c:5f:97:89:36:a3:4a:ec:3d:c5:0a:77:70: bd:95:39:fd:fe:dd:9a:c8:6e:c9:1a:89:67:5c:8b:65:06:a2: e4:4a:c2:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjUwODEwMTc1OTU1WhcNMjUwODE3MTc1OTU0WjAYMRYwFAYD VQQDEw02ODk4ZGUxYi05M2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKaPTs8fCdzoeA1WcVMw3yiXZPR/xg8cNESIkDF3DmoGzu4zhFVbIsydBurq C24r7y721woBo++GhXJCUrD1vO53yGbtv++jpmyOfwUp3hnq7rMWihPthHyel7P+ CERkp1ahdLQAJALjGNof49DsnSr40mTBMrDYGen1hoy8CBsvoOKTlzq5HkUL+yR+ 2sUiU5RfF18X1XbnXjUd9AgsV9OwLHfckigRrGtUGaY1uSeTc2vFZTRirZ9z9NS5 6gXX8xHUHEhLSue5DajRvQsL2Kt2xR6JBZmEu2Rc5w04YIgulu8xMgV+rv7rkpdt v2qfkWjAmXoW2jThH9bPOvWiaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlJArvm WrKIHGQSMHRW/1G+M+R8MB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZenDhQ3u74PgN8Tbw/aMUY599XaLfR3UBuQsHPGI0WpPplw9TIbSX 5Zt1g8+uo9g8QGHkVdW1F5M6hFy+HdbFIKYQKwr2/9Kf7Dpkdf38rxnnCpUBTKFY 0DqXoMlarmXfmDf56/soexkkb/gfOZNis5rn0yCIVS/XE1kTI3oOc97v8YaYlly6 ADwtOCShX3zL6xyPnikNqVSiTWFRYREJR18tZRz//zuAIBDXNPLXveSAOOiujxhM kTd8Zw8HPvf4NCDc6JUQ0Bv8TfY0OLxjV54sjoYAgbzkX5A2xJxfl4k2o0rsPcUK d3C9lTn9/t2ayG7JGolnXItlBqLkSsIf -----END CERTIFICATE-----Generated at Mon Aug 11 08:58:52 2025 by rpki-client