$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json) Hash identifier: aomwOS4SJIF8sbkUNj9zuVzUKf5uphej5yDCid0H7gg= Subject key identifier: 83:F2:7B:D7:F8:96:F8:3F:CE:7E:16:FE:1F:5C:C6:ED:0D:6F:FB:4D Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft Manifest number: 07BD Signing time: Fri 18 Jul 2025 21:27:20 +0000 Manifest this update: Fri 18 Jul 2025 21:27:20 +0000 Manifest next update: Fri 25 Jul 2025 21:27:20 +0000 Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: dCtLwU5u9dACGWb4JW3/ugE8ZruYPPkPmVspdH3bFYk=) 2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: MXW87fZ4qznNog7Mqv1dybumPTtWHlhfVDxRXuxWlk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144BAD, serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Validity Not Before: Jul 18 21:27:20 2025 GMT Not After : Jul 25 21:27:20 2025 GMT Subject: CN=687abc38-ddae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:41:02:52:52:73:08:62:37:57:10:36:2e: 51:43:14:48:2b:1d:84:51:14:5e:b3:0d:ad:3a:25: 2f:ee:81:65:f7:06:5d:20:3c:8e:e2:7e:7c:cd:2f: f9:f2:18:b0:67:40:54:3c:c8:77:35:7b:49:f2:32: bd:f6:ac:44:89:89:fa:2d:e8:04:0d:2b:72:a2:f1: cd:d0:50:ef:1d:00:a9:5a:db:16:1b:7f:19:3a:06: c2:2c:c7:00:71:d9:36:b8:3b:b7:d8:75:4f:4e:59: 90:73:c7:35:3f:87:9b:a6:5d:9c:69:cc:94:90:5b: 4a:24:06:44:2f:69:7a:a4:3a:fa:e0:a3:7a:56:db: 98:af:14:62:66:b0:cb:83:e5:fb:4d:f3:ed:f3:a3: 7f:ec:22:8b:2c:55:92:f2:2b:9d:ab:92:1d:94:78: 64:46:e6:44:5a:2f:ff:11:5d:8a:34:4d:10:e6:f9: 5f:30:c6:1b:e2:e4:74:2f:a5:19:f1:a9:9c:88:b2: e5:fc:24:40:e2:4d:3e:f3:27:f4:4e:f3:4f:0f:b3: fa:6c:a6:17:12:68:05:79:b5:95:f4:a4:e3:be:b8: 7b:a7:c9:44:a6:33:ee:e8:9f:56:b2:89:ff:cc:e6: db:3c:d5:d3:10:02:b6:7d:c5:e8:27:14:50:68:08: ff:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F2:7B:D7:F8:96:F8:3F:CE:7E:16:FE:1F:5C:C6:ED:0D:6F:FB:4D X509v3 Authority Key Identifier: keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:75:0a:05:6b:a7:0a:8b:33:f6:7f:63:f5:f8:22:ec:72:2d: c0:07:a9:b7:3f:81:4a:47:dc:eb:40:a9:e7:3b:5f:3b:bf:14: 35:2c:eb:10:54:73:a8:6e:aa:fc:36:af:61:bf:75:34:25:de: ef:6d:a8:87:3d:ba:a3:55:e5:e6:41:10:8a:8b:b0:70:7a:6f: 4d:ff:9f:4f:f7:cc:dc:da:f2:f6:f7:fd:83:77:b5:23:58:86: a3:70:50:85:9d:bf:ed:0b:ac:63:33:52:22:a5:16:cd:cd:d7: 30:23:6b:c9:38:05:2e:cd:93:bb:bf:c3:a8:1e:4c:a9:ad:da: 96:f8:81:f6:4f:16:da:34:ee:50:76:b2:e6:d2:86:78:2a:a1: c4:d3:37:5a:d9:98:ac:e0:79:dd:85:24:1b:8e:e0:35:cf:80: 44:c1:62:48:7f:8d:5a:b0:09:ee:0c:9a:46:e9:43:ba:28:84: 7c:5b:f9:52:84:ba:eb:aa:8a:5b:ee:40:a1:53:5d:e7:13:af: ee:e7:55:c1:88:d7:b9:2a:cb:0c:34:07:cf:1b:95:59:4c:29: 7e:98:21:a3:42:73:6a:f2:66:17:3a:40:70:89:3d:d5:67:02: 7d:a5:3b:1c:56:a2:1a:4b:7e:7f:86:39:8f:ff:c0:90:2f:43: a1:06:9d:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRCQUQxMTAvBgNVBAUTKDAzMkFDMjI0MUQxOENGQkJDMUMzM0NBREY1RThGNjU1 NDEyRDRBOEIwHhcNMjUwNzE4MjEyNzIwWhcNMjUwNzI1MjEyNzIwWjAYMRYwFAYD VQQDEw02ODdhYmMzOC1kZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHRBAlJScwhiN1cQNi5RQxRIKx2EURResw2tOiUv7oFl9wZdIDyO4n58zS/5 8hiwZ0BUPMh3NXtJ8jK99qxEiYn6LegEDStyovHN0FDvHQCpWtsWG38ZOgbCLMcA cdk2uDu32HVPTlmQc8c1P4ebpl2cacyUkFtKJAZEL2l6pDr64KN6VtuYrxRiZrDL g+X7TfPt86N/7CKLLFWS8iudq5IdlHhkRuZEWi//EV2KNE0Q5vlfMMYb4uR0L6UZ 8amciLLl/CRA4k0+8yf0TvNPD7P6bKYXEmgFebWV9KTjvrh7p8lEpjPu6J9Wson/ zObbPNXTEAK2fcXoJxRQaAj/aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPye9f4 lvg/zn4W/h9cxu0Nb/tNMB8GA1UdIwQYMBaAFAMqwiQdGM+7wcM8rfXo9lVBLUqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEJBRC9ENUQ3NDM0NjA0 NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3dkJ3enl0OWVqMlZVRXRT b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F5ckNKQjBZejd2Qnd6eXQ5ZWoyVlVFdFNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEJBRC9ENUQ3NDM0NjA0NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3 dkJ3enl0OWVqMlZVRXRTb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7dQoFa6cKizP2f2P1+CLsci3AB6m3P4FKR9zrQKnnO187vxQ1LOsQ VHOobqr8Nq9hv3U0Jd7vbaiHPbqjVeXmQRCKi7Bwem9N/59P98zc2vL29/2Dd7Uj WIajcFCFnb/tC6xjM1IipRbNzdcwI2vJOAUuzZO7v8OoHkyprdqW+IH2TxbaNO5Q drLm0oZ4KqHE0zda2Zis4HndhSQbjuA1z4BEwWJIf41asAnuDJpG6UO6KIR8W/lS hLrrqopb7kChU13nE6/u51XBiNe5KssMNAfPG5VZTCl+mCGjQnNq8mYXOkBwiT3V ZwJ9pTscVqIaS35/hjmP/8CQL0OhBp3E -----END CERTIFICATE-----Generated at Sun Jul 20 10:04:19 2025 by rpki-client