$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft File: Yl7U298nRjIvVZOFco6Ojl_4usI.mft (raw, json) Hash identifier: YAB7vk/n1Vxsby8jJGQrtUiYZpVM20RrH3z/MfAguoM= Subject key identifier: 57:2A:FB:22:FB:6A:6B:05:90:3A:B7:64:50:A3:74:E0:43:48:5A:5C Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2 Certificate issuer: /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2 Certificate serial: 07A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft Manifest number: 079B Signing time: Tue 22 Jul 2025 21:41:28 +0000 Manifest this update: Tue 22 Jul 2025 21:41:27 +0000 Manifest next update: Tue 29 Jul 2025 21:41:27 +0000 Files and hashes: 1: Yl7U298nRjIvVZOFco6Ojl_4usI.crl (hash: /rPPPXz+jNX5/SA8ROxfz8v4Q4dFP/L5dlTE/IibMC8=) 2: 9A1761AE360C11F0BE192015C4F9AE02.roa (hash: Fw26f1I4qdIDtPBFyxHtGDABfOJiQUm7+UVQXV1qLq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114899, serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2 Validity Not Before: Jul 22 21:41:27 2025 GMT Not After : Jul 29 21:41:27 2025 GMT Subject: CN=68800588-0e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fd:29:e2:04:f0:ef:13:a4:55:ae:ec:79:16: a4:7f:18:17:09:61:77:48:7f:b0:9a:7a:b9:46:74: e5:fa:24:31:b9:a8:8c:42:5f:54:fd:be:ee:e7:58: 0a:a0:f5:09:2a:c1:f6:5a:4d:9c:38:72:73:58:cd: a4:08:b5:f1:a5:a9:b4:94:f9:00:98:9c:f1:aa:0d: b3:f2:34:d4:fd:94:62:44:55:07:9f:3e:5a:95:b2: 99:2a:70:d6:83:36:83:e2:20:30:97:ba:15:24:bc: 7e:25:7d:32:7c:ea:1c:c8:15:ec:1d:3e:00:fe:db: f1:43:42:08:38:e6:0d:1e:21:cd:bb:69:82:f9:7b: 8d:3b:be:c4:41:27:9d:a0:b4:87:98:a7:f8:cb:7f: da:4a:0f:a0:9f:77:c3:8d:2e:ef:5b:a4:ad:94:d8: d2:f0:14:c3:28:57:6d:ff:b6:c0:c7:70:7b:38:24: 8a:ae:73:05:d5:9d:e1:20:10:b7:dc:57:75:95:fe: 78:4d:62:b4:d6:7b:a1:d0:3a:ef:8a:c2:5e:60:02: 1e:f3:d6:9d:a0:50:79:63:31:88:b5:5b:1c:2d:04: ac:2a:49:a7:71:5d:17:d0:f7:6b:0e:4b:7e:1e:4f: c0:8f:4f:77:ba:2f:4c:31:0f:20:41:ad:aa:ca:c7: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2A:FB:22:FB:6A:6B:05:90:3A:B7:64:50:A3:74:E0:43:48:5A:5C X509v3 Authority Key Identifier: keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:15:a8:ec:bf:ea:bd:ef:ff:46:1b:c1:83:61:98:f2:16:d5: 84:c4:5b:95:97:1c:e3:0b:59:83:b4:2a:f2:1a:db:8c:a5:27: 91:40:cd:23:aa:8b:28:ce:d3:18:e6:a1:c2:7f:52:36:97:16: 20:ee:97:2e:67:4d:e8:a2:57:4a:da:11:1a:0c:53:e6:11:63: 3f:2a:de:2f:3b:3d:cd:ea:16:9a:6c:95:19:e1:9c:67:d3:f9: 41:cd:2a:e4:58:b4:a2:a7:2d:05:13:b4:d9:ad:06:af:1c:01: 7c:1e:27:ad:9e:18:c8:b1:3c:04:73:21:f9:ce:6d:be:ae:46: 3b:de:2b:22:04:69:ea:c6:95:dd:09:7a:26:1d:e0:70:0b:85: cb:ef:81:e5:5c:1a:6c:3c:f2:bc:5d:02:75:5e:df:3b:63:c6: 38:f6:74:62:9b:59:f3:3e:02:23:1c:43:83:8e:f5:de:7d:55: ed:f2:6b:97:3b:8d:08:50:68:fe:d4:91:14:73:a8:59:68:3d: d5:00:cb:be:f0:89:5b:d4:40:dd:d0:5c:8b:73:6e:bc:d7:84: e5:87:83:07:82:f0:e4:76:38:30:ed:97:01:45:44:49:19:9f: ed:7d:39:e9:43:2f:95:26:78:fc:be:b4:08:44:cf:64:63:a9: 04:68:9a:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4OTkxMTAvBgNVBAUTKDYyNUVENERCREYyNzQ2MzIyRjU1OTM4NTcyOEU4RThF NUZGOEJBQzIwHhcNMjUwNzIyMjE0MTI3WhcNMjUwNzI5MjE0MTI3WjAYMRYwFAYD VQQDEw02ODgwMDU4OC0wZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5P0p4gTw7xOkVa7seRakfxgXCWF3SH+wmnq5RnTl+iQxuaiMQl9U/b7u51gK oPUJKsH2Wk2cOHJzWM2kCLXxpam0lPkAmJzxqg2z8jTU/ZRiRFUHnz5albKZKnDW gzaD4iAwl7oVJLx+JX0yfOocyBXsHT4A/tvxQ0IIOOYNHiHNu2mC+XuNO77EQSed oLSHmKf4y3/aSg+gn3fDjS7vW6StlNjS8BTDKFdt/7bAx3B7OCSKrnMF1Z3hIBC3 3Fd1lf54TWK01nuh0DrvisJeYAIe89adoFB5YzGItVscLQSsKkmncV0X0PdrDkt+ Hk/Aj093ui9MMQ8gQa2qysfYWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcq+yL7 amsFkDq3ZFCjdOBDSFpcMB8GA1UdIwQYMBaAFGJe1NvfJ0YyL1WThXKOjo5f+LrC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg5OS9FRjIzMjZDNjE0 MTgxMUVCOTI4RjhGNjZDNEY5QUUwMi9ZbDdVMjk4blJqSXZWWk9GY282T2psXzR1 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lsN1UyOThuUmpJdlZaT0ZjbzZPamxfNHVzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg5OS9FRjIzMjZDNjE0MTgxMUVCOTI4RjhGNjZDNEY5QUUwMi9ZbDdVMjk4blJq SXZWWk9GY282T2psXzR1c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClFajsv+q97/9GG8GDYZjyFtWExFuVlxzjC1mDtCryGtuMpSeRQM0j qosoztMY5qHCf1I2lxYg7pcuZ03ooldK2hEaDFPmEWM/Kt4vOz3N6haabJUZ4Zxn 0/lBzSrkWLSipy0FE7TZrQavHAF8HietnhjIsTwEcyH5zm2+rkY73isiBGnqxpXd CXomHeBwC4XL74HlXBpsPPK8XQJ1Xt87Y8Y49nRim1nzPgIjHEODjvXefVXt8muX O40IUGj+1JEUc6hZaD3VAMu+8Ilb1EDd0FyLc26814Tlh4MHgvDkdjgw7ZcBRURJ GZ/tfTnpQy+VJnj8vrQIRM9kY6kEaJod -----END CERTIFICATE-----Generated at Wed Jul 23 02:10:08 2025 by rpki-client