$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft File: _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json) Hash identifier: cnHXRq8IRjH3HUQTKG5XrQHva88wf4rdOWUiTkbk9HI= Subject key identifier: ED:74:4E:AF:57:24:B0:C5:36:EA:43:FC:E6:14:D0:09:57:E1:81:E0 Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 Certificate issuer: /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Certificate serial: 0B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft Manifest number: 0B2B Signing time: Sun 10 Aug 2025 19:15:16 +0000 Manifest this update: Sun 10 Aug 2025 19:15:16 +0000 Manifest next update: Sun 17 Aug 2025 19:15:16 +0000 Files and hashes: 1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: GqmIBui4DYiS/9oVGl+vDIpee33o2/gkJRhD8rrXS24=) 2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: eJxhMumE24IdqZQ/I602N1y1cc9RwzoCVgJskzDB9CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DF6F, serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Validity Not Before: Aug 10 19:15:16 2025 GMT Not After : Aug 17 19:15:16 2025 GMT Subject: CN=6898efc4-b7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:21:e7:86:88:ab:7f:54:22:ea:b0:80:a4: 33:66:43:b7:51:6e:66:d7:ac:ff:cc:bd:63:cb:58: d7:63:68:63:a4:a3:a9:1a:7d:a8:39:67:b1:37:39: a7:55:c9:1b:79:cc:60:80:c1:4b:64:6a:23:5c:24: 92:b8:63:d7:19:4c:92:1d:2f:91:a0:c9:71:5c:c0: 38:08:87:2e:45:c0:c9:69:fc:6f:75:33:59:52:fb: 11:51:03:f6:3f:72:76:26:0b:3c:54:45:c8:fe:88: e3:54:c8:43:f2:0e:d7:7e:8d:21:c0:a3:2e:c7:4b: 86:d8:3a:a7:89:43:1d:83:4a:b5:3c:ef:12:17:3d: 0a:31:16:0f:54:6b:ec:1d:36:5c:1d:a8:c1:b2:a9: 9e:e7:3c:fc:c9:60:b0:b1:70:d5:08:d2:fb:2e:8b: 8c:19:82:be:dc:cf:49:67:0d:47:2a:82:57:4a:8d: 3e:4a:70:e1:12:d0:88:c1:7b:64:50:54:d7:50:5a: 3e:45:e0:b3:b8:c6:17:ff:31:99:62:c6:ef:c6:61: fe:0e:7b:9a:f2:e1:a7:38:17:c5:52:cd:02:59:1a: 37:82:15:2b:b3:fc:11:8b:95:5b:75:b4:97:a6:ee: f4:9b:d1:07:e0:cc:95:f9:4e:02:0c:b9:ad:bf:1e: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:74:4E:AF:57:24:B0:C5:36:EA:43:FC:E6:14:D0:09:57:E1:81:E0 X509v3 Authority Key Identifier: keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c2:1b:80:7e:2a:5a:c0:57:49:e1:6c:ca:8c:75:69:09:37: 47:ac:5d:78:51:1d:73:0d:f9:52:2c:db:05:7d:92:1e:86:10: e8:3c:e3:43:8f:39:8f:91:2a:19:cd:9e:a1:e2:04:4f:cb:84: 73:76:c5:cb:06:ca:0e:36:80:4e:5f:35:15:b7:39:a8:82:e7: 34:78:d0:28:f3:64:20:63:2f:5a:1a:3e:a6:14:70:82:22:d5: 5d:c9:d9:21:62:0a:cb:e7:2a:83:0d:c2:83:2b:82:33:56:c5: 38:bc:0d:ad:43:53:61:3a:24:4a:d8:06:6c:4a:e4:30:be:c5: 55:1c:79:e2:2a:b0:db:a4:cd:b6:1c:2c:fe:34:e8:20:5a:59: 6a:dd:c2:53:82:ce:c7:fe:0f:e0:4c:d8:b1:4e:6a:8b:3a:75: 56:a8:02:00:af:fb:78:85:e0:68:7f:d1:0c:cc:37:13:af:8c: 6f:20:c0:be:8b:80:3a:c0:c2:8c:c1:b8:34:8e:cf:e7:d9:2e: c2:c2:20:7f:9d:86:ab:d9:7b:db:bb:3d:52:c7:ef:f9:2e:96: 3c:01:ac:45:27:96:3e:8e:5b:8a:7f:28:3d:09:1d:2c:b5:a2: d2:b2:82:f4:9c:2e:cb:ff:f0:97:88:35:e3:02:4b:af:dd:8d: 8a:ac:3e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURGNkYxMTAvBgNVBAUTKEZEQzYxMzU1MTVENUQwMTVDOTQ0M0JCNEM1OUJDQkZC NkQwNjkzRDEwHhcNMjUwODEwMTkxNTE2WhcNMjUwODE3MTkxNTE2WjAYMRYwFAYD VQQDEw02ODk4ZWZjNC1iN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7Mh54aIq39UIuqwgKQzZkO3UW5m16z/zL1jy1jXY2hjpKOpGn2oOWexNzmn VckbecxggMFLZGojXCSSuGPXGUySHS+RoMlxXMA4CIcuRcDJafxvdTNZUvsRUQP2 P3J2Jgs8VEXI/ojjVMhD8g7Xfo0hwKMux0uG2DqniUMdg0q1PO8SFz0KMRYPVGvs HTZcHajBsqme5zz8yWCwsXDVCNL7LouMGYK+3M9JZw1HKoJXSo0+SnDhEtCIwXtk UFTXUFo+ReCzuMYX/zGZYsbvxmH+Dnua8uGnOBfFUs0CWRo3ghUrs/wRi5VbdbSX pu70m9EH4MyV+U4CDLmtvx6OAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO10Tq9X JLDFNupD/OYU0AlX4YHgMB8GA1UdIwQYMBaAFP3GE1UV1dAVyUQ7tMWby/ttBpPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REY2Ri9EQTQwQThFODQy OTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBCWEpSRHUweFp2TC0yMEdr OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19jWVRWUlhWMEJYSlJEdTB4WnZMLTIwR2s5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REY2Ri9EQTQwQThFODQyOTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBC WEpSRHUweFp2TC0yMEdrOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZwhuAfipawFdJ4WzKjHVpCTdHrF14UR1zDflSLNsFfZIehhDoPOND jzmPkSoZzZ6h4gRPy4RzdsXLBsoONoBOXzUVtzmoguc0eNAo82QgYy9aGj6mFHCC ItVdydkhYgrL5yqDDcKDK4IzVsU4vA2tQ1NhOiRK2AZsSuQwvsVVHHniKrDbpM22 HCz+NOggWllq3cJTgs7H/g/gTNixTmqLOnVWqAIAr/t4heBof9EMzDcTr4xvIMC+ i4A6wMKMwbg0js/n2S7CwiB/nYar2Xvbuz1Sx+/5LpY8AaxFJ5Y+jluKfyg9CR0s taLSsoL0nC7L//CXiDXjAkuv3Y2KrD4W -----END CERTIFICATE-----Generated at Mon Aug 11 10:31:56 2025 by rpki-client