$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft File: y6GXwEyqm9KV9XiEcqahCqP773A.mft (raw, json) Hash identifier: 00q/7wbLFMFIm4crz75nplcFuyOGt88eRY+E7AupntQ= Subject key identifier: AD:5C:B0:A8:6B:7F:EF:93:4A:33:40:F5:7D:FB:5D:78:38:FD:50:8A Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70 Certificate serial: 1B45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft Manifest number: 1B19 Signing time: Sun 20 Jul 2025 16:20:19 +0000 Manifest this update: Sun 20 Jul 2025 16:20:19 +0000 Manifest next update: Sun 27 Jul 2025 16:20:19 +0000 Files and hashes: 1: y6GXwEyqm9KV9XiEcqahCqP773A.crl (hash: wInpRC8cLQuCbJJ958ZNCUWzSfKTXOVTjfkmNe2JuUo=) 2: D90961489C1311EFA0BF1480C4F9AE02.roa (hash: Jv1d6fF3qu1qMz0c/kGUVQ3xOsIZk2UWH2dC2+4vagE=) 3: DE0A76C805B511EE95562E2AC4F9AE02.roa (hash: hMIakiTTivB+fRa4Rnc2jL//XFH58YMCoj5LWIbNoBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6981 (0x1b45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB3, serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70 Validity Not Before: Jul 20 16:20:19 2025 GMT Not After : Jul 27 16:20:19 2025 GMT Subject: CN=687d1743-65c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:12:4a:d0:3b:6e:4d:3b:83:8a:5d:29:35: 4a:cc:40:97:8f:fb:c0:b1:83:18:52:a9:28:c2:04: 5c:4b:9a:51:44:b3:85:6c:ce:5b:a7:b4:9b:f2:ba: 6d:00:97:fe:0e:40:87:0d:66:f4:be:e5:a0:da:02: fa:a7:83:c9:09:a6:d5:c6:49:60:a8:d0:9d:19:2b: 76:0c:73:60:c0:c9:1f:7e:2b:57:d4:b2:08:1b:45: 43:26:2e:68:0a:11:08:ce:5d:9a:08:f9:c7:61:ba: 41:ac:65:c8:52:30:58:f0:e5:d0:d3:23:72:5f:4f: 4c:02:d6:11:16:a1:79:48:e4:81:92:ca:3b:01:8c: 27:99:4d:bd:40:ec:64:81:96:2e:76:2c:ff:3e:b8: d6:b0:59:ca:fa:b6:32:90:d8:d4:72:76:24:b1:2d: db:75:0d:77:ac:19:37:b0:4f:64:84:ba:f8:db:26: 24:73:15:3a:8b:75:67:86:94:62:5f:3a:19:0d:84: 9d:d7:52:c7:c3:af:86:5e:40:fe:bd:29:bf:67:fd: e2:56:2f:94:08:28:c3:c8:98:c5:b8:7c:ef:70:a7: be:b2:b0:8c:55:f7:19:74:76:3e:20:c7:41:04:d8: 58:fd:d8:62:dc:73:28:9f:03:c9:83:9a:93:c1:60: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5C:B0:A8:6B:7F:EF:93:4A:33:40:F5:7D:FB:5D:78:38:FD:50:8A X509v3 Authority Key Identifier: keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cd:0d:31:ab:c3:29:6e:08:a4:43:14:e3:74:34:5f:71:24: ee:95:57:ac:ad:35:b0:18:ad:17:74:71:ab:84:11:3e:3d:5d: d8:21:3e:80:e4:14:f5:a6:72:7c:9a:39:03:d2:19:46:10:fb: 49:22:a2:46:39:2d:77:69:e8:f8:de:eb:15:a0:b3:3c:4d:d3: b6:a4:ee:3d:0b:6a:e2:c4:65:5a:46:29:20:51:65:6f:2b:f3: be:3a:86:52:31:72:e8:3e:f1:69:6c:22:28:43:39:39:77:00: c9:8c:53:68:83:db:2e:ea:2e:35:f0:94:aa:3a:5e:00:fd:d8: 18:3e:40:d5:93:4b:db:ec:07:60:12:51:df:d6:84:d8:cf:82: 4c:c4:fa:ea:f3:53:7f:7e:a8:a5:b6:0a:b9:ae:60:8c:35:45: ce:4b:67:e7:44:3e:5c:a9:35:80:aa:2a:98:4b:37:8f:f7:fc: 4c:de:c7:c2:78:e7:f4:0f:1b:60:18:f3:6b:5c:8e:a4:67:34: 01:d9:81:45:59:62:0b:d5:f4:82:56:d2:3e:65:15:62:89:5b: 27:0e:4d:ff:44:c5:e7:c1:5a:1a:b3:e0:34:39:f0:29:eb:34: e3:3b:a6:54:78:7c:91:ae:bc:1d:50:c1:37:ed:5d:44:e8:b8: c7:3f:90:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDQjMxMTAvBgNVBAUTKENCQTE5N0MwNENBQTlCRDI5NUY1Nzg4NDcyQTZBMTBB QTNGQkVGNzAwHhcNMjUwNzIwMTYyMDE5WhcNMjUwNzI3MTYyMDE5WjAYMRYwFAYD VQQDEw02ODdkMTc0My02NWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtH8SStA7bk07g4pdKTVKzECXj/vAsYMYUqkowgRcS5pRRLOFbM5bp7Sb8rpt AJf+DkCHDWb0vuWg2gL6p4PJCabVxklgqNCdGSt2DHNgwMkffitX1LIIG0VDJi5o ChEIzl2aCPnHYbpBrGXIUjBY8OXQ0yNyX09MAtYRFqF5SOSBkso7AYwnmU29QOxk gZYudiz/PrjWsFnK+rYykNjUcnYksS3bdQ13rBk3sE9khLr42yYkcxU6i3VnhpRi XzoZDYSd11LHw6+GXkD+vSm/Z/3iVi+UCCjDyJjFuHzvcKe+srCMVfcZdHY+IMdB BNhY/dhi3HMonwPJg5qTwWBoFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1csKhr f++TSjNA9X37XXg4/VCKMB8GA1UdIwQYMBaAFMuhl8BMqpvSlfV4hHKmoQqj++9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0NCMy8xREI3OTgzQzI1 OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05S1Y5WGlFY3FhaENxUDc3 M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k2R1h3RXlxbTlLVjlYaUVjcWFoQ3FQNzczQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0NCMy8xREI3OTgzQzI1OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05 S1Y5WGlFY3FhaENxUDc3M0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtzQ0xq8MpbgikQxTjdDRfcSTulVesrTWwGK0XdHGrhBE+PV3YIT6A 5BT1pnJ8mjkD0hlGEPtJIqJGOS13aej43usVoLM8TdO2pO49C2rixGVaRikgUWVv K/O+OoZSMXLoPvFpbCIoQzk5dwDJjFNog9su6i418JSqOl4A/dgYPkDVk0vb7Adg ElHf1oTYz4JMxPrq81N/fqiltgq5rmCMNUXOS2fnRD5cqTWAqiqYSzeP9/xM3sfC eOf0DxtgGPNrXI6kZzQB2YFFWWIL1fSCVtI+ZRViiVsnDk3/RMXnwVoas+A0OfAp 6zTjO6ZUeHyRrrwdUME37V1E6LjHP5B+ -----END CERTIFICATE-----Generated at Mon Jul 21 12:46:54 2025 by rpki-client