$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json) Hash identifier: jGPyT9uPXn7b1nIsZTZ0TIk80TyW6TMlhOlzYkU2EQw= Subject key identifier: 0D:EA:B0:E3:82:A4:C2:9B:93:06:C2:B3:D6:D1:9A:00:E6:D8:58:C7 Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft Manifest number: 010A Signing time: Sat 19 Jul 2025 05:13:33 +0000 Manifest this update: Sat 19 Jul 2025 05:13:33 +0000 Manifest next update: Sat 26 Jul 2025 05:13:33 +0000 Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: JtngWic7gKfF7zAs3F74kYpU/gy2CHs+WZwPdoVI1dM=) 2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: YjW6NRyoT2Yd6bOqBMqlNLXFCINZXzceER+JobJKz/s=) 3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: yJ7MqVkk1tgytYWvBl1+oFmFkyxkl54djaWZOByH5xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Validity Not Before: Jul 19 05:13:33 2025 GMT Not After : Jul 26 05:13:33 2025 GMT Subject: CN=687b297d-d2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:ca:0f:b5:df:e4:27:dc:50:60:5f:53:68: e2:4d:d7:33:5f:95:af:3d:95:67:67:dc:01:a9:4c: dd:d0:02:43:31:92:c2:bf:41:a3:35:5f:9f:b6:5c: 56:67:32:e6:c9:c1:3a:bb:be:e8:e0:2a:39:46:c1: 61:27:63:00:c2:51:ba:27:a3:c6:49:ab:31:20:af: 3a:77:cb:b6:79:f3:3f:d3:39:70:bd:61:a2:db:2d: 4a:63:63:a8:72:ea:e3:a3:cd:9d:a2:45:a2:35:d4: 86:8b:b2:43:60:9a:d4:a7:c9:78:c1:67:f3:4d:36: eb:99:64:62:f0:6f:82:a0:05:96:0b:80:76:81:f0: 2e:44:fa:8d:bd:d4:72:e6:0b:22:9a:ab:8c:50:07: 97:d4:ac:5b:86:ce:89:71:35:32:7e:37:c6:6f:82: a7:bb:b4:99:88:c1:44:46:b1:5e:06:1e:38:07:2a: db:00:7e:04:65:46:9a:d3:54:19:81:7c:ea:bc:c5: ba:af:94:6d:e0:08:e2:53:53:a2:fa:e1:1b:a9:3c: 9a:64:97:3b:85:5a:23:6a:02:2f:cd:38:aa:02:fe: 31:17:03:34:ac:77:40:0d:07:d4:a5:46:ec:fc:78: e4:da:4b:3e:ef:57:db:21:58:4b:51:fc:d9:de:95: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EA:B0:E3:82:A4:C2:9B:93:06:C2:B3:D6:D1:9A:00:E6:D8:58:C7 X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:84:ae:7f:1c:b6:c0:37:88:dc:9e:31:51:ae:98:e9:0f:c7: 47:83:00:b6:99:a6:14:ae:7f:6b:3c:b7:d9:45:50:d8:be:a3: 08:e3:e7:b7:ef:f9:20:d8:51:76:4e:c7:f5:a3:d7:28:e7:fe: ac:af:ff:02:09:bb:c1:f9:c9:64:8f:e7:df:25:7f:63:35:3b: 2d:fd:aa:fe:1b:47:4b:b3:f8:0c:1e:d9:66:4d:14:62:a7:13: f1:a4:e7:e0:c5:70:c3:36:af:ba:0f:02:28:02:0d:d0:e1:f4: 4e:55:fc:8d:89:30:f1:24:b6:b5:ea:b4:27:b2:c0:e1:df:04: 3b:35:01:ea:53:a6:d7:59:3d:3c:70:56:c9:a8:b4:d4:19:ef: 0f:24:7b:53:02:b1:79:00:88:a6:f0:f5:24:0c:d8:74:17:c9: da:a2:17:a9:62:00:f7:e2:46:25:ce:72:51:5e:0e:6b:3c:75: 4e:be:c9:40:9a:59:7d:b4:c4:65:1e:ef:ea:10:f1:fd:e3:14: bd:28:c8:ba:51:c4:68:f8:6d:d0:13:a5:a4:81:28:d0:1a:4b: 5c:3a:27:4d:35:ed:70:99:0a:a4:af:9e:b7:61:55:e2:80:d7: e0:13:14:eb:9a:31:bd:19:24:7a:ed:b6:cf:75:63:fe:34:5f: d6:bb:e8:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEJCREEyQTUyQjUwNDhGMUE4QUFCQkY1QzI0MTcyNjAx Mjc3Q0IyRjMwHhcNMjUwNzE5MDUxMzMzWhcNMjUwNzI2MDUxMzMzWjAYMRYwFAYD VQQDEw02ODdiMjk3ZC1kMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hbKD7Xf5CfcUGBfU2jiTdczX5WvPZVnZ9wBqUzd0AJDMZLCv0GjNV+ftlxW ZzLmycE6u77o4Co5RsFhJ2MAwlG6J6PGSasxIK86d8u2efM/0zlwvWGi2y1KY2Oo curjo82dokWiNdSGi7JDYJrUp8l4wWfzTTbrmWRi8G+CoAWWC4B2gfAuRPqNvdRy 5gsimquMUAeX1Kxbhs6JcTUyfjfGb4Knu7SZiMFERrFeBh44ByrbAH4EZUaa01QZ gXzqvMW6r5Rt4AjiU1Oi+uEbqTyaZJc7hVojagIvzTiqAv4xFwM0rHdADQfUpUbs /Hjk2ks+71fbIVhLUfzZ3pWLDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3qsOOC pMKbkwbCs9bRmgDm2FjHMB8GA1UdIwQYMBaAFLvaKlK1BI8aiqu/XCQXJgEnfLLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GMjYwMTRFOENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4cUtxNzljSkJjbUFTZDhz dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GMjYwMTRFOENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4 cUtxNzljSkJjbUFTZDhzdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQhK5/HLbAN4jcnjFRrpjpD8dHgwC2maYUrn9rPLfZRVDYvqMI4+e3 7/kg2FF2Tsf1o9co5/6sr/8CCbvB+clkj+ffJX9jNTst/ar+G0dLs/gMHtlmTRRi pxPxpOfgxXDDNq+6DwIoAg3Q4fROVfyNiTDxJLa16rQnssDh3wQ7NQHqU6bXWT08 cFbJqLTUGe8PJHtTArF5AIim8PUkDNh0F8naohepYgD34kYlznJRXg5rPHVOvslA mll9tMRlHu/qEPH94xS9KMi6UcRo+G3QE6WkgSjQGktcOidNNe1wmQqkr563YVXi gNfgExTrmjG9GSR67bbPdWP+NF/Wu+gr -----END CERTIFICATE-----Generated at Sat Jul 19 17:50:14 2025 by rpki-client