$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json) Hash identifier: EOTvyJsHrpcLz9AGMH7m3CH15LJoRzfK4wJ+C6tL4y0= Subject key identifier: 6A:DE:D2:E5:E6:E3:18:28:DD:CB:77:87:F0:17:B9:9E:87:C5:13:25 Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39 Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft Manifest number: 015A Signing time: Tue 05 Aug 2025 04:34:47 +0000 Manifest this update: Tue 05 Aug 2025 04:34:46 +0000 Manifest next update: Tue 12 Aug 2025 04:34:46 +0000 Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: 4IGqX4mSWrePL5BJ6Xa07Y7pLwXsMoHTgdUtvj+MfyM=) 2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: YwXGuIwLbAOZzPiPRemoc11a6IYzMpgzJQrMI7kN5fw=) 3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: NFu6vOIdrlQETQmdi2ziHOwoF9spOq/YA6DUc9jHTPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39 Validity Not Before: Aug 5 04:34:46 2025 GMT Not After : Aug 12 04:34:46 2025 GMT Subject: CN=689189e7-6ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:de:6e:8a:a1:64:28:79:63:9d:59:43:09: 71:59:aa:ea:ed:fb:d1:5d:7e:45:08:8a:8b:3f:95: 5f:2e:ee:5d:e7:48:0f:12:57:f7:26:ab:a8:f2:22: 0a:2d:d6:3e:1a:a1:e5:4a:05:42:f1:ae:bf:dd:a9: f8:04:2b:98:c0:c8:6f:64:32:84:9c:e4:0a:3c:0c: d1:53:fa:7e:0e:f0:c2:82:67:f7:d9:71:2b:1d:c8: f2:b9:6d:cd:e3:df:23:07:f9:fe:e2:72:cc:76:ed: 8f:e4:13:b1:52:c3:76:6a:d3:65:ba:8c:5f:8b:1c: 47:48:ab:bc:e9:15:2d:6d:1c:35:32:83:1e:53:8a: f6:19:a1:de:e8:8b:24:c4:69:52:23:74:c8:66:33: 02:51:6d:6e:ce:71:c3:57:41:5a:85:47:ec:a7:9b: 9a:99:1f:8e:6d:bf:15:b7:f8:fc:76:b3:44:fc:32: ab:ef:e8:16:bc:a2:81:ea:62:83:80:c5:a2:45:b3: 15:ef:fe:db:84:7f:4d:38:1b:74:ae:55:3a:94:38: 2b:95:7d:01:fc:02:22:df:f0:ac:27:c8:66:5c:10: 28:ae:56:d2:96:17:30:2d:1c:36:90:4e:ac:11:fa: f1:4e:58:9b:dd:80:e2:d3:cd:38:d9:2c:3e:e1:d8: 9e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DE:D2:E5:E6:E3:18:28:DD:CB:77:87:F0:17:B9:9E:87:C5:13:25 X509v3 Authority Key Identifier: keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:18:c7:7c:55:85:9a:cf:94:5c:31:ba:23:b8:77:2b:e3:fb: 4a:7a:17:29:e0:2d:e3:26:fb:4f:09:c3:97:a6:3c:3d:bf:14: 2a:98:d6:86:c0:47:f5:56:fc:94:9e:a4:05:7f:9d:49:a2:9b: 67:6b:d6:13:1e:a7:aa:71:39:af:b7:e6:70:6f:4d:d0:af:8a: 01:b2:32:cd:61:eb:c1:d8:0f:3f:78:f1:81:7b:c1:1a:2a:73: aa:ed:a9:16:68:c5:37:aa:44:c6:2f:66:77:1a:7b:37:9b:53: d9:19:aa:f5:47:35:7f:55:1e:b9:09:d8:75:ff:19:3d:c8:c6: 97:d1:9d:6e:14:ac:ae:d9:99:f6:b8:8b:e7:7e:0c:b2:a2:48: 6a:f7:e3:87:12:b2:39:2b:09:d2:cf:97:bd:f9:65:d5:2d:a3: de:b6:34:22:57:5f:d9:6e:96:ba:93:a5:57:34:3d:5f:ef:ed: 9d:ae:d8:52:f8:4e:cf:52:12:d7:53:85:6f:f8:bb:61:07:1a: 81:8a:5a:9a:d3:94:a0:a7:bd:95:48:f7:ea:d4:e4:d7:58:d7: 46:68:a5:7d:ba:2f:cc:3f:b1:bb:97:aa:ae:82:80:f9:ef:09: 47:c2:11:ca:af:60:09:bf:fb:1b:92:32:76:b4:a6:f5:34:3c: 1a:db:71:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVEOTMxMTAvBgNVBAUTKDcyRUYzMkRBRjRFODNGOTAxOTI5NjMyMDg3NEUzQjQ0 NTAwOEVDMzkwHhcNMjUwODA1MDQzNDQ2WhcNMjUwODEyMDQzNDQ2WjAYMRYwFAYD VQQDEw02ODkxODllNy02ZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymfeboqhZCh5Y51ZQwlxWarq7fvRXX5FCIqLP5VfLu5d50gPElf3Jquo8iIK LdY+GqHlSgVC8a6/3an4BCuYwMhvZDKEnOQKPAzRU/p+DvDCgmf32XErHcjyuW3N 498jB/n+4nLMdu2P5BOxUsN2atNluoxfixxHSKu86RUtbRw1MoMeU4r2GaHe6Isk xGlSI3TIZjMCUW1uznHDV0FahUfsp5uamR+Obb8Vt/j8drNE/DKr7+gWvKKB6mKD gMWiRbMV7/7bhH9NOBt0rlU6lDgrlX0B/AIi3/CsJ8hmXBAorlbSlhcwLRw2kE6s EfrxTlib3YDi08042Sw+4die1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGre0uXm 4xgo3ct3h/AXuZ6HxRMlMB8GA1UdIwQYMBaAFHLvMtr06D+QGSljIIdOO0RQCOw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUQ5My9BMzZDNjhGNDY4 QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1QVpLV01naDA0N1JGQUk3 RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N1OHkydlRvUDVBWktXTWdoMDQ3UkZBSTdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUQ5My9BMzZDNjhGNDY4QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1 QVpLV01naDA0N1JGQUk3RGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyGMd8VYWaz5RcMbojuHcr4/tKehcp4C3jJvtPCcOXpjw9vxQqmNaG wEf1VvyUnqQFf51Joptna9YTHqeqcTmvt+Zwb03Qr4oBsjLNYevB2A8/ePGBe8Ea KnOq7akWaMU3qkTGL2Z3Gns3m1PZGar1RzV/VR65Cdh1/xk9yMaX0Z1uFKyu2Zn2 uIvnfgyyokhq9+OHErI5KwnSz5e9+WXVLaPetjQiV1/Zbpa6k6VXND1f7+2drthS +E7PUhLXU4Vv+LthBxqBilqa05Sgp72VSPfq1OTXWNdGaKV9ui/MP7G7l6qugoD5 7wlHwhHKr2AJv/sbkjJ2tKb1NDwa23Fn -----END CERTIFICATE-----Generated at Wed Aug 6 16:10:56 2025 by rpki-client