$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json) Hash identifier: ofYAM/y6jzfElOCiCHdBkg6a7goPEwK3+HixMu9q/C0= Subject key identifier: 69:18:D3:24:EB:B2:C4:E6:F2:CB:D6:72:D8:19:9E:40:94:D8:E5:F2 Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft Manifest number: 0108 Signing time: Mon 21 Jul 2025 05:09:33 +0000 Manifest this update: Mon 21 Jul 2025 05:09:32 +0000 Manifest next update: Mon 28 Jul 2025 05:09:32 +0000 Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: MEKmooqL/BmgBkv6LD80YcgMIZ2C5t3txscBg9qM4qk=) 2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: ojSPB0ISIGRw3cOfBtrECwI7sYrCbgl9SiZcYTomn1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Validity Not Before: Jul 21 05:09:32 2025 GMT Not After : Jul 28 05:09:32 2025 GMT Subject: CN=687dcb8c-37d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:fe:99:a7:17:31:2b:ad:8e:2f:28:72:bf: 5c:cc:5a:7b:a4:56:b4:af:26:6a:b5:b2:9d:d6:e0: 21:5f:32:b2:04:79:36:71:c6:fd:88:8f:e4:73:33: 3a:97:49:24:34:9f:9d:78:1c:09:f6:57:01:9b:38: d2:7c:52:52:25:26:e7:42:1e:f8:27:00:ac:0f:39: 16:ca:2f:9a:ff:04:4b:f1:8c:82:3d:ed:b8:94:7b: 26:11:6e:59:51:df:71:7c:ee:7c:5b:01:a1:b8:d3: 34:e5:57:50:8d:47:b5:4a:38:fd:fb:48:95:85:a1: 3c:4d:31:96:84:24:4f:0a:71:11:cd:ea:44:c4:ce: 3b:11:75:8a:cd:b8:74:b4:7d:40:a9:3f:c1:47:f0: 2c:48:ca:8a:6a:64:f9:34:48:76:37:0d:2a:ab:5c: 32:81:8e:62:75:22:86:cd:d3:2f:d6:08:5d:cb:0b: 8e:d3:25:d1:39:ce:87:19:82:f0:86:0b:55:b9:b4: ad:e6:68:d4:3f:e3:f3:3e:19:f5:15:70:6c:9b:3e: 51:d8:9c:40:39:a4:52:81:00:f5:43:2a:2e:d0:1d: e8:db:49:f8:40:f0:46:e2:05:db:3d:65:d6:28:a4: ae:9f:95:d8:7e:5e:79:12:f6:d0:ae:a7:69:ab:61: 73:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:18:D3:24:EB:B2:C4:E6:F2:CB:D6:72:D8:19:9E:40:94:D8:E5:F2 X509v3 Authority Key Identifier: keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:bc:d5:d3:39:dc:99:fe:da:fd:00:bd:89:5c:15:f0:8e:d0: e7:bc:08:5b:1b:03:a3:67:14:3e:c4:dd:ee:a3:8a:f0:34:32: 1f:87:57:0b:1b:5f:0c:40:c2:18:f5:66:1e:51:0f:63:09:ed: 8c:c0:6f:0e:ba:ee:23:59:45:35:de:0f:71:49:21:20:98:ab: 0f:ff:a0:66:31:c2:cd:47:1d:66:88:b5:3b:b1:71:3c:67:f2: 21:00:06:2e:44:64:48:67:60:05:8f:cd:f9:23:6d:21:78:22: 98:9d:bf:ec:b2:77:3e:a0:64:7d:8d:d9:6a:0a:17:97:78:8f: df:0f:b1:49:30:5a:e7:09:bf:d6:98:29:a2:3b:d3:00:86:6a: 46:0b:65:7b:ac:9f:2d:59:9a:1f:34:bf:eb:2d:bf:1f:11:85: ff:1f:a1:ec:3b:3b:73:dd:c7:37:c3:93:db:8c:cb:bf:60:f7: 95:22:64:91:b8:f5:9c:a8:81:74:44:b6:e8:e8:80:80:69:4e: c5:5a:bc:df:62:43:5c:e2:5a:e1:22:7c:42:ad:40:2d:b5:be: d2:21:05:51:f9:94:53:ad:e8:0e:af:fa:da:75:ca:4d:6f:de: 68:08:35:c5:f1:95:7f:2a:92:05:58:3c:dc:32:b3:28:24:4a: a1:86:d2:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE QUQ5MUI0MDYwHhcNMjUwNzIxMDUwOTMyWhcNMjUwNzI4MDUwOTMyWjAYMRYwFAYD VQQDEw02ODdkY2I4Yy0zN2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc/+macXMSutji8ocr9czFp7pFa0ryZqtbKd1uAhXzKyBHk2ccb9iI/kczM6 l0kkNJ+deBwJ9lcBmzjSfFJSJSbnQh74JwCsDzkWyi+a/wRL8YyCPe24lHsmEW5Z Ud9xfO58WwGhuNM05VdQjUe1Sjj9+0iVhaE8TTGWhCRPCnERzepExM47EXWKzbh0 tH1AqT/BR/AsSMqKamT5NEh2Nw0qq1wygY5idSKGzdMv1ghdywuO0yXROc6HGYLw hgtVubSt5mjUP+PzPhn1FXBsmz5R2JxAOaRSgQD1Qyou0B3o20n4QPBG4gXbPWXW KKSun5XYfl55EvbQrqdpq2FzqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkY0yTr ssTm8svWctgZnkCU2OXyMB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0 ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow NVk1ZFRCODduUkxhMlJ0QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGvNXTOdyZ/tr9AL2JXBXwjtDnvAhbGwOjZxQ+xN3uo4rwNDIfh1cL G18MQMIY9WYeUQ9jCe2MwG8Ouu4jWUU13g9xSSEgmKsP/6BmMcLNRx1miLU7sXE8 Z/IhAAYuRGRIZ2AFj835I20heCKYnb/ssnc+oGR9jdlqCheXeI/fD7FJMFrnCb/W mCmiO9MAhmpGC2V7rJ8tWZofNL/rLb8fEYX/H6HsOztz3cc3w5PbjMu/YPeVImSR uPWcqIF0RLbo6ICAaU7FWrzfYkNc4lrhInxCrUAttb7SIQVR+ZRTregOr/radcpN b95oCDXF8ZV/KpIFWDzcMrMoJEqhhtJN -----END CERTIFICATE-----Generated at Mon Jul 21 13:15:11 2025 by rpki-client