$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft File: rUR6Z_B-gc0JwyLs0QrZQWvESys.mft (raw, json) Hash identifier: MbJlQAOedSmez7X3kYxxZI8QJF49l4padSPor3RcLaw= Subject key identifier: D8:78:F5:CB:92:FA:02:B8:59:33:DF:83:BA:3D:E7:FB:9E:13:2A:7D Authority key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B Certificate issuer: /CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft Manifest number: 0417 Signing time: Sat 19 Jul 2025 00:20:46 +0000 Manifest this update: Sat 19 Jul 2025 00:20:45 +0000 Manifest next update: Sat 26 Jul 2025 00:20:45 +0000 Files and hashes: 1: rUR6Z_B-gc0JwyLs0QrZQWvESys.crl (hash: 13x2pMOq3DnSPBHwutAmvGgHn0TqeZ3rGLyrU537on4=) 2: 09B2D8EC704C11ED97935E7DC4F9AE02.roa (hash: /8IJZqUqWTlleISqmqBCzCx51/D+1Ajxq0hCjjaBFnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6, serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B Validity Not Before: Jul 19 00:20:45 2025 GMT Not After : Jul 26 00:20:45 2025 GMT Subject: CN=687ae4dd-661c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d8:cd:9e:98:72:7b:eb:2e:06:aa:09:5d:50: fa:c6:f4:77:6d:fa:0e:1f:43:45:56:73:55:99:12: 43:1a:66:98:5c:fd:10:5a:d9:fb:03:15:2d:c3:89: 89:f4:ed:3a:7a:77:c9:44:40:fc:80:49:b0:f0:05: 78:c8:6e:2c:7b:84:76:21:d7:fe:87:48:4d:01:18: 2a:93:00:20:a1:3b:c0:13:54:c5:c2:da:4f:bf:81: 58:11:70:21:ef:60:ef:63:5f:03:f6:1e:39:b4:cf: 5d:80:7d:e0:d1:5b:f6:23:9d:26:5a:f8:c3:87:42: f9:35:b3:98:ca:de:b0:90:80:8b:d9:ba:10:24:bc: a4:87:db:da:a7:5b:11:d7:4e:05:c1:05:f4:de:82: 13:48:b9:c1:20:ee:f8:a4:1b:f4:e7:89:02:ed:43: 43:86:5d:36:82:f6:8c:6a:42:71:9e:9a:37:bc:dc: 14:03:c7:62:37:00:c1:8d:5f:63:8f:7b:75:5d:a0: 1f:7a:0c:ca:8e:6f:fa:70:a3:1f:97:2a:06:25:b0: 22:04:29:c9:8a:66:0c:01:b5:03:59:07:fa:34:3a: 3c:74:0b:a8:de:4f:a5:cb:e0:43:20:36:e9:19:57: a7:15:89:9e:18:06:f8:f3:2a:73:cf:ee:7c:f8:bb: e4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:78:F5:CB:92:FA:02:B8:59:33:DF:83:BA:3D:E7:FB:9E:13:2A:7D X509v3 Authority Key Identifier: keyid:AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6a:ae:1a:3f:e8:40:9b:ff:9b:a8:da:07:00:07:f6:03:28: 34:66:5a:20:ec:05:61:54:24:e6:24:79:9c:b2:a3:af:b2:f6: 6f:79:8e:7d:1d:7d:ae:14:19:4c:ce:45:a9:2b:c0:24:8d:8a: bc:08:03:12:05:7b:78:b5:0d:dd:64:42:5f:f1:4a:47:cf:83: cb:f5:ea:6c:8c:02:12:f1:55:39:a0:9c:e3:72:3b:a2:da:39: 53:67:2f:b2:f9:23:94:80:d0:41:7c:e8:26:b4:51:f2:19:20: 84:b3:29:bb:56:e0:02:92:ae:c3:82:7b:88:df:46:26:ca:34: 44:a8:63:f3:01:00:86:c7:7b:29:7a:ae:28:c4:2a:07:37:98: 24:0c:8a:63:02:28:1f:7c:f7:90:93:02:b4:de:a6:90:eb:b6: 0f:8a:ac:7e:b5:36:b6:02:b8:96:c6:31:be:7b:1e:1c:e2:a4: c5:e4:96:b5:6c:5b:37:96:ab:7b:ce:d1:48:61:84:05:6a:ce: fa:9d:d2:23:27:77:0a:01:74:01:bb:7b:9e:52:e9:2e:ee:a9: 45:04:72:60:73:29:1a:23:21:9e:5b:16:84:f8:07:a0:10:0d: a3:a1:2c:ed:73:bf:d4:84:54:9f:c6:de:86:1d:d2:65:e4:d4: 2a:ff:2f:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKEFENDQ3QTY3RjA3RTgxQ0QwOUMzMjJFQ0QxMEFEOTQx NkJDNDRCMkIwHhcNMjUwNzE5MDAyMDQ1WhcNMjUwNzI2MDAyMDQ1WjAYMRYwFAYD VQQDEw02ODdhZTRkZC02NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tjNnphye+suBqoJXVD6xvR3bfoOH0NFVnNVmRJDGmaYXP0QWtn7AxUtw4mJ 9O06enfJRED8gEmw8AV4yG4se4R2Idf+h0hNARgqkwAgoTvAE1TFwtpPv4FYEXAh 72DvY18D9h45tM9dgH3g0Vv2I50mWvjDh0L5NbOYyt6wkICL2boQJLykh9vap1sR 104FwQX03oITSLnBIO74pBv054kC7UNDhl02gvaMakJxnpo3vNwUA8diNwDBjV9j j3t1XaAfegzKjm/6cKMflyoGJbAiBCnJimYMAbUDWQf6NDo8dAuo3k+ly+BDIDbp GVenFYmeGAb48ypzz+58+LvkNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNh49cuS +gK4WTPfg7o95/ueEyp9MB8GA1UdIwQYMBaAFK1EemfwfoHNCcMi7NEK2UFrxEsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi85QzBFRjgzQTc0 RUMxMUVDOTNGODFBMzNDNEY5QUUwMi9yVVI2Wl9CLWdjMEp3eUxzMFFyWlFXdkVT eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JVUjZaX0ItZ2MwSnd5THMwUXJaUVd2RVN5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi85QzBFRjgzQTc0RUMxMUVDOTNGODFBMzNDNEY5QUUwMi9yVVI2Wl9CLWdj MEp3eUxzMFFyWlFXdkVTeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXaq4aP+hAm/+bqNoHAAf2Ayg0Zlog7AVhVCTmJHmcsqOvsvZveY59 HX2uFBlMzkWpK8AkjYq8CAMSBXt4tQ3dZEJf8UpHz4PL9epsjAIS8VU5oJzjcjui 2jlTZy+y+SOUgNBBfOgmtFHyGSCEsym7VuACkq7DgnuI30YmyjREqGPzAQCGx3sp eq4oxCoHN5gkDIpjAigffPeQkwK03qaQ67YPiqx+tTa2AriWxjG+ex4c4qTF5Ja1 bFs3lqt7ztFIYYQFas76ndIjJ3cKAXQBu3ueUuku7qlFBHJgcykaIyGeWxaE+Aeg EA2joSztc7/UhFSfxt6GHdJl5NQq/y/L -----END CERTIFICATE-----Generated at Sun Jul 20 15:03:41 2025 by rpki-client