$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: H7gNlKqYu/p+NLbteoBe8RZrLLka0PuuY0usy4IVcxE= Subject key identifier: 48:5C:90:A6:28:3B:9A:97:ED:26:8E:9C:F8:70:45:1D:62:2D:4C:BF Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 017E Signing time: Sat 19 Jul 2025 03:55:50 +0000 Manifest this update: Sat 19 Jul 2025 03:55:50 +0000 Manifest next update: Sat 26 Jul 2025 03:55:50 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: 6qrXH4iiyJVqMdRwx8P9hwPZCUuhgBsl9VlCdMKH6iY=) 2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: T9bgb6w+YEKZ5F9ekCDjbubT5zB0ZkUsFds1ZxlsLrE=) 3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: Poe8WZPLlmMRopxum73vePC7h4bI4X/kM9rphS1LhLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Jul 19 03:55:50 2025 GMT Not After : Jul 26 03:55:50 2025 GMT Subject: CN=687b1746-db86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:c6:c7:f1:ba:d1:65:25:f1:b2:87:f1:b0: e4:63:d7:c1:73:f0:64:5a:9a:c3:78:88:e0:68:89: 61:ea:33:a4:bc:a7:14:4b:7d:52:3e:f1:46:49:97: 9e:6e:1f:77:d2:52:6d:73:40:81:1b:c6:a5:1f:50: 2c:42:69:65:10:42:da:f7:ae:9c:ee:3e:e1:c8:31: 38:11:8f:e1:26:27:57:e4:e8:ff:06:65:2f:9d:7a: 9f:cc:a7:de:3c:d8:9f:bd:59:91:12:04:b4:d4:59: a8:bf:bf:29:33:a9:f5:d3:f0:b3:f3:c6:c4:73:56: dd:e1:b2:35:ef:48:b4:0d:1b:49:e4:02:7d:3d:f7: 9e:e5:6b:f0:7b:cb:d6:84:00:00:44:42:21:d0:3c: eb:19:1c:b3:31:60:b7:4a:21:b2:81:a4:58:85:a2: d5:58:0d:32:88:2e:db:1e:4f:6b:0d:b7:de:58:10: cd:af:dc:0e:2a:72:48:3b:82:36:fc:96:82:8a:5f: ec:4b:d1:87:7b:00:e1:44:2c:32:11:c3:c8:81:89: c4:39:2e:e8:1a:97:06:03:40:d0:36:74:71:9a:1c: f7:c9:bd:05:38:86:f7:76:52:a1:b8:17:a8:15:d5: 6d:b6:8d:d9:7b:b4:fe:94:5c:69:34:f0:d0:40:f5: 7d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5C:90:A6:28:3B:9A:97:ED:26:8E:9C:F8:70:45:1D:62:2D:4C:BF X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:82:c1:3a:f2:02:7c:6e:37:ef:56:c7:bf:55:c8:b0:dc:63: 36:4c:65:1c:14:fc:8f:41:18:7f:69:9e:70:54:57:b4:41:cc: 02:f7:91:00:2a:66:65:0c:25:1c:41:13:70:0a:1c:e5:e7:b7: f5:fb:2d:76:94:a9:6b:23:cc:81:3a:78:bc:46:77:12:c1:6e: 65:dd:46:ca:0c:60:62:a6:84:0b:51:67:bf:45:7e:60:dc:71: 81:61:65:82:a4:3a:e8:3f:31:e2:a2:70:60:75:51:06:1b:7f: 82:99:13:96:11:ec:8f:ee:bf:dd:6a:92:5f:29:6a:82:e2:ed: 84:77:a0:a5:f9:e6:c1:37:0f:7e:63:2a:d2:ee:08:75:67:54: 46:00:e5:27:9f:ec:2d:03:a3:54:85:4d:99:5b:f8:57:bb:ed: 40:0e:81:14:9d:fc:e2:d2:be:ae:48:f8:c7:34:7b:bf:04:ea: 52:2b:db:be:eb:20:d2:8e:aa:f2:c5:81:1c:4a:96:f0:81:ad: 74:5a:3f:13:09:ad:17:ae:6d:17:ac:1c:cf:08:4e:43:d1:ed: 8a:76:82:a8:a7:eb:55:ca:f0:60:9f:c0:15:7f:1a:a0:45:c2: 0d:39:f5:86:08:a9:5b:ce:32:57:f6:dd:25:f8:8e:21:4f:60: 9e:b1:2a:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjUwNzE5MDM1NTUwWhcNMjUwNzI2MDM1NTUwWjAYMRYwFAYD VQQDEw02ODdiMTc0Ni1kYjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4DGx/G60WUl8bKH8bDkY9fBc/BkWprDeIjgaIlh6jOkvKcUS31SPvFGSZee bh930lJtc0CBG8alH1AsQmllEELa966c7j7hyDE4EY/hJidX5Oj/BmUvnXqfzKfe PNifvVmREgS01Fmov78pM6n10/Cz88bEc1bd4bI170i0DRtJ5AJ9Pfee5Wvwe8vW hAAAREIh0DzrGRyzMWC3SiGygaRYhaLVWA0yiC7bHk9rDbfeWBDNr9wOKnJIO4I2 /JaCil/sS9GHewDhRCwyEcPIgYnEOS7oGpcGA0DQNnRxmhz3yb0FOIb3dlKhuBeo FdVtto3Ze7T+lFxpNPDQQPV9hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhckKYo O5qX7SaOnPhwRR1iLUy/MB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdgsE68gJ8bjfvVse/Vciw3GM2TGUcFPyPQRh/aZ5wVFe0QcwC95EA KmZlDCUcQRNwChzl57f1+y12lKlrI8yBOni8RncSwW5l3UbKDGBipoQLUWe/RX5g 3HGBYWWCpDroPzHionBgdVEGG3+CmROWEeyP7r/dapJfKWqC4u2Ed6Cl+ebBNw9+ YyrS7gh1Z1RGAOUnn+wtA6NUhU2ZW/hXu+1ADoEUnfzi0r6uSPjHNHu/BOpSK9u+ 6yDSjqryxYEcSpbwga10Wj8TCa0Xrm0XrBzPCE5D0e2KdoKop+tVyvBgn8AVfxqg RcINOfWGCKlbzjJX9t0l+I4hT2CesSql -----END CERTIFICATE-----Generated at Sun Jul 20 15:12:47 2025 by rpki-client