$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft File: y1sC0Pxzbip6stKIoPwzFnpLvO0.mft (raw, json) Hash identifier: KUeRdktYFb3W8L85AKCkYAa0Je2x3AriTBN9yxyZlhI= Subject key identifier: FF:98:41:B3:95:F0:9A:DE:EA:84:13:16:27:FA:A7:E1:F1:E6:FA:51 Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft Manifest number: 01DB Signing time: Sat 19 Jul 2025 02:53:51 +0000 Manifest this update: Sat 19 Jul 2025 02:53:50 +0000 Manifest next update: Sat 26 Jul 2025 02:53:50 +0000 Files and hashes: 1: y1sC0Pxzbip6stKIoPwzFnpLvO0.crl (hash: wITQkE2BxomlA1yOuDitGTW42Vy3I6h2C/Xhdtt3UvM=) 2: 3E122AE0876011ED84335D46C4F9AE02.roa (hash: bMGYEkxmsNwyimLtEml2g/yxjeK2QwKmxudQ/0mQEOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Validity Not Before: Jul 19 02:53:50 2025 GMT Not After : Jul 26 02:53:50 2025 GMT Subject: CN=687b08be-f74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:af:f1:dd:a0:20:f5:00:cd:bc:f3:45:df: 23:f1:af:d6:09:82:a0:12:4e:8e:f5:29:a3:8a:37: 34:20:f0:f2:49:b3:96:f3:78:07:c9:89:01:2d:53: 55:2a:86:5d:58:4c:e1:86:d5:4d:32:bf:96:87:89: 16:f7:aa:4b:9a:d2:07:cb:94:40:63:30:69:6b:48: 7b:12:70:f5:d0:8c:75:d2:89:67:0b:61:8b:46:05: 81:65:ed:fc:80:d4:65:29:ef:c5:96:fd:70:32:7a: b3:d9:ff:2f:a2:27:b7:b6:98:f0:00:4f:62:6e:68: ba:87:64:31:5a:13:d4:a6:1c:ae:7c:73:33:68:14: f4:a0:92:4a:61:86:32:fd:2f:16:c3:df:a3:fd:7e: f5:d9:1e:21:ac:f0:a3:f5:85:7a:c8:c2:75:bb:e0: e3:b6:73:42:5c:c0:5f:5f:2e:00:25:85:39:56:33: 38:30:b0:16:65:e5:6d:59:90:8d:70:a3:b5:23:e4: a2:92:6e:a3:c8:74:0b:16:b7:af:84:b8:f3:1a:d0: 6c:5c:36:a4:cb:1b:82:1c:1a:c3:f8:b1:41:ff:0e: c3:6f:fd:27:aa:e5:e1:79:d8:c2:dc:0a:72:03:03: 14:35:ea:1b:a7:aa:b1:00:49:c1:79:c2:0c:47:2c: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:98:41:B3:95:F0:9A:DE:EA:84:13:16:27:FA:A7:E1:F1:E6:FA:51 X509v3 Authority Key Identifier: keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fa:5a:06:9b:fc:55:4c:82:01:82:50:af:6d:ab:d5:4d:a4: 08:ab:89:66:21:0c:92:be:50:73:0d:4f:ad:ba:13:98:2f:ba: 5a:71:04:a9:aa:0b:1c:63:4c:6f:72:3c:71:c4:bc:40:db:e7: c9:53:a0:ea:33:25:b6:61:aa:d1:82:a2:f4:d0:9b:d6:b2:58: 10:b4:d2:c5:b9:be:a2:bd:e6:ce:e9:10:96:6b:b2:0d:ba:74: 9a:be:f0:10:6b:b3:46:ed:9a:ac:e5:8d:b8:d1:a3:24:6b:17: a0:31:6a:d9:72:22:8a:28:96:43:73:d5:92:f7:82:3c:ca:17: 09:70:df:ea:e8:f9:47:e0:3d:d9:c2:20:a5:31:6e:c3:6c:2c: 62:87:18:43:15:43:ae:50:51:b8:c6:d8:cb:50:f5:10:d6:18: 54:51:9a:04:c2:a7:a4:fc:76:f5:df:96:fc:04:55:0e:53:eb: d9:8b:bc:39:19:45:7f:97:87:78:9b:0e:50:70:6d:cd:bc:66: 84:b3:bc:dd:b8:29:5d:e1:fa:93:59:2b:ce:b1:5b:34:56:d8: 91:52:90:33:2d:c5:d6:d5:a9:7c:53:d9:f7:85:93:69:84:ef: 08:d3:b8:e1:fe:34:15:03:77:a6:93:83:32:2b:9e:68:4b:ba: 22:84:65:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGMUQxMTAvBgNVBAUTKENCNUIwMkQwRkM3MzZFMkE3QUIyRDI4OEEwRkMzMzE2 N0E0QkJDRUQwHhcNMjUwNzE5MDI1MzUwWhcNMjUwNzI2MDI1MzUwWjAYMRYwFAYD VQQDEw02ODdiMDhiZS1mNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlmv8d2gIPUAzbzzRd8j8a/WCYKgEk6O9Smjijc0IPDySbOW83gHyYkBLVNV KoZdWEzhhtVNMr+Wh4kW96pLmtIHy5RAYzBpa0h7EnD10Ix10olnC2GLRgWBZe38 gNRlKe/Flv1wMnqz2f8voie3tpjwAE9ibmi6h2QxWhPUphyufHMzaBT0oJJKYYYy /S8Ww9+j/X712R4hrPCj9YV6yMJ1u+DjtnNCXMBfXy4AJYU5VjM4MLAWZeVtWZCN cKO1I+Sikm6jyHQLFrevhLjzGtBsXDakyxuCHBrD+LFB/w7Db/0nquXhedjC3Apy AwMUNeobp6qxAEnBecIMRyyW1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+YQbOV 8Jre6oQTFif6p+Hx5vpRMB8GA1UdIwQYMBaAFMtbAtD8c24qerLSiKD8MxZ6S7zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUYxRC8yMUNBQkE1Qzg3 NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJpcDZzdEtJb1B3ekZucEx2 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxc0MwUHh6YmlwNnN0S0lvUHd6Rm5wTHZPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUYxRC8yMUNBQkE1Qzg3NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJp cDZzdEtJb1B3ekZucEx2TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL+loGm/xVTIIBglCvbavVTaQIq4lmIQySvlBzDU+tuhOYL7pacQSp qgscY0xvcjxxxLxA2+fJU6DqMyW2YarRgqL00JvWslgQtNLFub6ivebO6RCWa7IN unSavvAQa7NG7Zqs5Y240aMkaxegMWrZciKKKJZDc9WS94I8yhcJcN/q6PlH4D3Z wiClMW7DbCxihxhDFUOuUFG4xtjLUPUQ1hhUUZoEwqek/Hb135b8BFUOU+vZi7w5 GUV/l4d4mw5QcG3NvGaEs7zduCld4fqTWSvOsVs0VtiRUpAzLcXW1al8U9n3hZNp hO8I07jh/jQVA3emk4MyK55oS7oihGV9 -----END CERTIFICATE-----Generated at Sun Jul 20 11:24:04 2025 by rpki-client