$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft File: _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json) Hash identifier: rJ1LLUgBrwT/lLQjA7nJsRlaJpggUTO/fmHfu1N21QM= Subject key identifier: CE:82:1B:D4:2E:E5:91:F8:19:6E:1A:93:62:1E:4B:0F:74:E7:A9:D3 Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 Certificate issuer: /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft Manifest number: 0B30 Signing time: Wed 20 Aug 2025 19:18:25 +0000 Manifest this update: Wed 20 Aug 2025 19:18:25 +0000 Manifest next update: Wed 27 Aug 2025 19:18:25 +0000 Files and hashes: 1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: /zkoWFd7no3UTZhzDd2EvnXErCgjngWDAFPvEu1g02s=) 2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: eJxhMumE24IdqZQ/I602N1y1cc9RwzoCVgJskzDB9CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DF6F, serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Validity Not Before: Aug 20 19:18:25 2025 GMT Not After : Aug 27 19:18:25 2025 GMT Subject: CN=68a61f81-6dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:27:4b:c7:de:cd:19:81:17:82:6a:90:1f: 3c:67:0c:69:e4:44:31:b7:46:28:fa:d0:a2:9c:a6: f5:01:34:c0:44:53:e5:ed:79:78:97:9d:ef:9c:61: 41:a3:e1:e7:30:ae:6e:70:5c:55:b2:1c:7b:80:4c: a5:0c:4b:25:df:4a:10:79:75:f7:2b:b6:33:89:df: 6e:60:03:9a:7d:a5:9d:a7:2c:4c:68:16:22:cc:83: ae:ad:42:4c:c6:9a:88:2b:56:d9:13:e0:6d:60:ac: 08:ef:b3:f4:f0:59:9c:41:99:b9:58:21:81:f2:9a: cb:e4:4d:b0:1c:53:ca:8e:f5:d0:62:ae:fc:26:b5: b9:e1:57:fd:c1:b6:cb:6c:b1:f1:e3:e9:34:cd:33: a2:e9:3d:30:8f:db:f5:a8:e5:27:fe:f4:a2:09:72: 58:c8:43:01:a4:9a:f4:fe:8a:13:55:bc:2e:1d:62: 97:96:22:05:ee:8a:a0:db:5b:5c:59:74:c5:0b:5e: 58:51:66:d8:cd:6c:3f:3a:89:47:6b:45:1e:62:09: ac:52:16:78:ec:fe:90:36:14:04:8c:ae:8e:03:3c: 5d:2b:41:e4:eb:9c:4b:0a:83:f6:07:3b:82:da:e3: 04:13:b0:88:fe:b8:9b:9f:db:0f:40:6a:08:e7:89: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:82:1B:D4:2E:E5:91:F8:19:6E:1A:93:62:1E:4B:0F:74:E7:A9:D3 X509v3 Authority Key Identifier: keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:39:f8:b7:fe:b9:a9:8c:f3:0d:0d:0e:bc:8f:19:3d:bc:fd: 8f:e2:81:a3:22:ea:5a:88:ca:3a:2d:9b:68:71:13:6d:aa:ac: 94:93:10:8e:30:81:20:2c:db:a5:3a:d2:92:0d:bd:2d:04:5d: be:ff:35:aa:4c:02:a6:a9:3a:38:0c:89:8f:a8:f3:ad:27:d5: ad:1a:fb:6f:2b:d5:d5:51:13:52:70:94:f8:f6:ec:3b:30:bd: a6:43:19:9e:3a:46:06:74:ea:a2:eb:02:ba:49:98:99:64:2e: ec:f9:4b:67:d4:b9:24:e5:27:27:7a:9e:28:3f:18:08:d6:88: 65:1a:83:c3:01:28:5f:f8:b4:f8:0b:7b:1c:37:f7:d4:6e:7e: e0:70:fb:d5:a8:f4:0e:fe:96:58:b7:2f:dc:a8:3d:19:8d:87: 41:b0:7c:db:48:d5:23:cb:4e:b7:a7:e0:42:4b:e1:f2:b4:b5: f0:e0:28:26:5d:ea:ff:b5:85:5f:da:87:99:b7:ee:ea:48:3b: e3:56:ff:a4:c7:2d:59:aa:6c:5d:84:d1:31:fc:b3:18:e6:5d: 9c:a3:8f:90:fd:1c:1c:4a:68:6c:ba:f0:9f:5a:cc:09:fe:cf: 1a:10:5c:06:14:fb:1d:1f:fe:d2:06:86:28:48:69:c6:98:5b: c8:fa:d5:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURGNkYxMTAvBgNVBAUTKEZEQzYxMzU1MTVENUQwMTVDOTQ0M0JCNEM1OUJDQkZC NkQwNjkzRDEwHhcNMjUwODIwMTkxODI1WhcNMjUwODI3MTkxODI1WjAYMRYwFAYD VQQDEw02OGE2MWY4MS02ZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCwnS8fezRmBF4JqkB88Zwxp5EQxt0Yo+tCinKb1ATTARFPl7Xl4l53vnGFB o+HnMK5ucFxVshx7gEylDEsl30oQeXX3K7Yzid9uYAOafaWdpyxMaBYizIOurUJM xpqIK1bZE+BtYKwI77P08FmcQZm5WCGB8prL5E2wHFPKjvXQYq78JrW54Vf9wbbL bLHx4+k0zTOi6T0wj9v1qOUn/vSiCXJYyEMBpJr0/ooTVbwuHWKXliIF7oqg21tc WXTFC15YUWbYzWw/OolHa0UeYgmsUhZ47P6QNhQEjK6OAzxdK0Hk65xLCoP2BzuC 2uMEE7CI/ribn9sPQGoI54ndYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6CG9Qu 5ZH4GW4ak2IeSw9056nTMB8GA1UdIwQYMBaAFP3GE1UV1dAVyUQ7tMWby/ttBpPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REY2Ri9EQTQwQThFODQy OTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBCWEpSRHUweFp2TC0yMEdr OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19jWVRWUlhWMEJYSlJEdTB4WnZMLTIwR2s5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REY2Ri9EQTQwQThFODQyOTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBC WEpSRHUweFp2TC0yMEdrOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASOfi3/rmpjPMNDQ68jxk9vP2P4oGjIupaiMo6LZtocRNtqqyUkxCO MIEgLNulOtKSDb0tBF2+/zWqTAKmqTo4DImPqPOtJ9WtGvtvK9XVURNScJT49uw7 ML2mQxmeOkYGdOqi6wK6SZiZZC7s+Utn1Lkk5Scnep4oPxgI1ohlGoPDAShf+LT4 C3scN/fUbn7gcPvVqPQO/pZYty/cqD0ZjYdBsHzbSNUjy063p+BCS+HytLXw4Cgm Xer/tYVf2oeZt+7qSDvjVv+kxy1ZqmxdhNEx/LMY5l2co4+Q/RwcSmhsuvCfWswJ /s8aEFwGFPsdH/7SBoYoSGnGmFvI+tV+ -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:15 2025 by rpki-client