$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json) Hash identifier: 3Ck4EzT1XputP2+ndkZtnKpy8zdCrn6UMrbNoxK5/i8= Subject key identifier: 59:24:46:CB:6A:D0:58:3B:1C:F0:40:F8:8E:7E:DB:78:EF:37:94:8C Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft Manifest number: 0186 Signing time: Tue 29 Jul 2025 04:01:47 +0000 Manifest this update: Tue 29 Jul 2025 04:01:47 +0000 Manifest next update: Tue 05 Aug 2025 04:01:47 +0000 Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: Bq/8ByUYYRgzsCc/qZWt/u7+FIPHzCYH6G00ssL9mFA=) 2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=) 3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=) 4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 04:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Validity Not Before: Jul 29 04:01:47 2025 GMT Not After : Aug 5 04:01:47 2025 GMT Subject: CN=688847ab-a16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:bf:ab:3f:bc:1e:75:62:5f:8b:42:ff:d2: 46:f1:38:f7:3b:59:ea:c1:94:cd:ae:2d:84:d5:8e: 72:ce:57:7f:89:d6:94:b5:a6:d4:79:9d:35:0d:d1: 05:0b:42:c1:97:24:45:f5:0e:5e:f4:70:20:92:66: 8f:39:1c:03:95:34:75:cf:e9:36:9a:06:a2:35:64: 1d:d7:96:63:09:8d:a3:df:17:43:fe:86:c5:bf:f4: bb:bd:f0:ad:f7:9c:0e:a0:c6:b8:6b:cf:55:3d:56: 00:61:82:5f:bf:3c:ef:f9:fc:fd:a4:41:16:6e:28: 37:4d:b4:71:75:7d:0c:83:2b:38:31:b1:6d:db:4e: 09:57:cc:48:4a:7b:08:08:0d:fb:71:30:24:66:c5: 71:c8:fc:20:1b:b4:d9:e3:be:7a:b6:2d:6b:d3:b7: 40:67:53:cb:c1:0a:4d:a8:8c:6a:92:a7:e6:fa:09: f3:59:5e:08:31:0d:46:ec:97:93:b2:42:dc:80:77: aa:bb:e2:ab:a7:0b:0d:04:6b:84:6e:d3:b8:16:bd: d3:70:85:11:49:06:b3:0d:5e:5a:0d:b9:bf:e4:d4: 51:12:a9:7b:eb:5a:09:d4:67:10:d8:b3:4a:9f:6c: 2a:61:f2:44:21:44:46:1b:72:a3:91:98:bc:b7:7d: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:24:46:CB:6A:D0:58:3B:1C:F0:40:F8:8E:7E:DB:78:EF:37:94:8C X509v3 Authority Key Identifier: keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:fb:ce:ce:24:96:ca:b6:74:b3:e3:04:63:56:61:88:fa:a5: 86:a7:9a:f0:c5:c2:65:5f:82:ad:1a:d0:70:1c:92:0e:b5:62: 92:9a:91:e5:58:a2:66:d5:c1:4d:a9:04:54:d7:7a:d6:30:e2: a3:b2:0e:30:c0:ea:e8:7c:87:74:be:86:39:f1:27:e8:0f:74: 12:1f:1a:8f:ad:a1:7a:9f:ef:0b:05:1c:1a:f0:e5:02:9c:89: 5d:6d:a6:80:d2:30:80:86:3f:42:46:fc:09:1f:11:55:9c:ba: 78:28:e6:22:c2:00:91:98:64:95:8d:9e:21:14:49:66:e1:4f: 59:a8:a8:fb:b1:8c:97:f5:7d:6c:76:ba:8c:fe:60:ec:ed:b9: 47:1a:0e:a5:fe:2b:6c:fa:88:12:96:0d:2c:73:41:8b:25:70: 03:21:c7:2e:46:59:d7:e2:ae:6c:d1:99:43:63:85:b2:7f:81: 99:a2:8e:1d:40:63:eb:b5:52:8b:60:af:e6:58:2d:10:a1:73: 71:cf:ea:c9:bc:25:d8:fd:82:ea:62:db:99:95:70:54:86:b5: ec:ae:a3:66:71:33:f9:97:db:4a:04:3b:1e:e1:8e:04:35:32: 58:d3:f9:cc:39:ba:65:5a:24:b4:90:a7:0d:df:5b:47:58:78: 1c:5b:d8:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC M0VCOEI2MzAwHhcNMjUwNzI5MDQwMTQ3WhcNMjUwODA1MDQwMTQ3WjAYMRYwFAYD VQQDEw02ODg4NDdhYi1hMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeq/qz+8HnViX4tC/9JG8Tj3O1nqwZTNri2E1Y5yzld/idaUtabUeZ01DdEF C0LBlyRF9Q5e9HAgkmaPORwDlTR1z+k2mgaiNWQd15ZjCY2j3xdD/obFv/S7vfCt 95wOoMa4a89VPVYAYYJfvzzv+fz9pEEWbig3TbRxdX0Mgys4MbFt204JV8xISnsI CA37cTAkZsVxyPwgG7TZ4756ti1r07dAZ1PLwQpNqIxqkqfm+gnzWV4IMQ1G7JeT skLcgHequ+KrpwsNBGuEbtO4Fr3TcIURSQazDV5aDbm/5NRREql761oJ1GcQ2LNK n2wqYfJEIURGG3KjkZi8t33XSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkkRstq 0Fg7HPBA+I5+23jvN5SMMB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2 VS1rcE9LTTA3R3V6NjR0akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi+87OJJbKtnSz4wRjVmGI+qWGp5rwxcJlX4KtGtBwHJIOtWKSmpHl WKJm1cFNqQRU13rWMOKjsg4wwOrofId0voY58SfoD3QSHxqPraF6n+8LBRwa8OUC nIldbaaA0jCAhj9CRvwJHxFVnLp4KOYiwgCRmGSVjZ4hFElm4U9ZqKj7sYyX9X1s drqM/mDs7blHGg6l/its+ogSlg0sc0GLJXADIccuRlnX4q5s0ZlDY4Wyf4GZoo4d QGPrtVKLYK/mWC0QoXNxz+rJvCXY/YLqYtuZlXBUhrXsrqNmcTP5l9tKBDse4Y4E NTJY0/nMObplWiS0kKcN31tHWHgcW9iK -----END CERTIFICATE-----Generated at Wed Jul 30 08:10:08 2025 by rpki-client