$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: P7r9ieiTrDOG6iroy4HJddFCUDrmcfWeddt2Ksu3N3w= Subject key identifier: 5E:2E:6D:93:95:F3:79:E6:EA:38:35:46:CC:B7:D0:97:70:42:9C:A2 Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: 62 Signing time: Sat 19 Jul 2025 07:16:55 +0000 Manifest this update: Sat 19 Jul 2025 07:16:55 +0000 Manifest next update: Sat 26 Jul 2025 07:16:55 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: CvWPwzJ1/MNMWXXvhlBZoxmlo65WrFPlZZCg6nm6Cyw=) 2: C4B41888CF3911EFBA26F564C4F9AE02.roa (hash: PeoexpeZuhtxvOaSUXuGABP7Es0mdREYJbAZJzL28uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Jul 19 07:16:55 2025 GMT Not After : Jul 26 07:16:55 2025 GMT Subject: CN=687b4667-943a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ad:dc:95:83:97:7b:67:02:c9:0b:48:d8:3e: 0c:1e:f4:19:2c:1d:2d:47:53:fa:8d:e8:4e:2f:7a: a7:35:8d:1b:07:aa:7f:17:83:f4:9b:4f:02:0e:75: c3:11:59:18:ab:1a:1a:2f:44:2c:4a:22:59:68:ec: 84:c1:f1:e2:8d:2c:ca:1e:00:4d:95:44:bf:29:f4: f6:46:46:bd:b9:13:50:a5:54:32:20:ec:4d:9f:a8: e4:00:d9:6d:6c:bc:1c:a1:42:da:87:05:05:c7:14: 8e:b7:da:49:24:50:94:48:cb:06:98:75:43:45:1e: 5b:6f:2b:07:e1:00:de:63:4c:c0:42:6e:ee:3e:ec: 72:88:5e:cc:5a:a9:de:ba:fc:9d:aa:c4:74:bf:53: b8:14:5e:2e:50:f6:5f:5b:9e:ef:80:65:c6:46:aa: ab:46:38:d9:46:38:1e:35:0f:07:45:f9:d8:43:57: 26:5b:02:29:15:03:89:d1:08:63:64:41:6d:f0:1d: c2:f0:0b:0a:f9:14:69:0e:fb:72:65:16:a9:f9:0e: 7d:c5:18:ee:bd:f8:63:40:0f:df:b3:e8:3b:50:42: ed:33:16:9f:f4:67:58:52:f0:2b:0b:8d:5e:2c:35: 3a:1f:1d:73:50:58:bb:97:35:c0:73:1c:3a:b2:e1: 58:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2E:6D:93:95:F3:79:E6:EA:38:35:46:CC:B7:D0:97:70:42:9C:A2 X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c1:4c:8c:2d:43:a7:c7:c1:2d:ab:b9:9f:da:fb:a7:fd:8e: 0a:0d:30:55:d0:e5:3e:ef:3c:bb:26:98:32:85:6a:c1:32:a0: 44:39:8a:bf:d7:7c:66:57:ed:82:af:0c:e8:f4:e0:90:70:f4: c4:6b:e2:3c:d7:c0:65:a9:79:a0:1b:31:47:76:1a:eb:49:19: f4:63:ea:4d:cf:72:f4:89:71:f6:4f:c8:17:ee:65:c0:bb:33: 26:29:5c:04:a6:ac:33:0e:01:e5:80:b5:95:3d:76:ab:96:e1: ba:b8:ac:48:ad:ad:56:f7:e1:19:88:b9:61:25:23:cf:0c:7e: 3e:28:e7:69:fd:7d:13:ce:a7:f2:f3:3b:c5:c4:97:a1:32:24: eb:9f:85:d8:22:38:e8:ef:b4:36:35:52:26:23:17:08:9c:5f: 64:bb:a7:d4:e9:ad:a7:74:6e:db:74:38:67:c6:fe:76:dc:cc: 13:55:04:cf:89:b7:31:93:c5:ce:9d:da:9a:89:00:54:e3:52: f4:7b:c7:26:af:95:72:5e:b3:90:be:fc:66:dd:ba:84:41:8d: 98:ed:27:3a:06:b7:fd:db:51:19:1b:b9:e5:fd:f5:4f:cc:2f: 82:10:85:e2:ec:59:c2:e6:7e:e9:8b:0f:bd:b8:c9:20:1f:e2: 4b:45:f2:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0I0QjExMC8GA1UEBRMoQzg3N0NERjIyRDI1QjZFMzNGQzVFNDk1QkU1NUU1OUQw QTk0OTg3RTAeFw0yNTA3MTkwNzE2NTVaFw0yNTA3MjYwNzE2NTVaMBgxFjAUBgNV BAMTDTY4N2I0NjY3LTk0M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWrdyVg5d7ZwLJC0jYPgwe9BksHS1HU/qN6E4veqc1jRsHqn8Xg/SbTwIOdcMR WRirGhovRCxKIllo7ITB8eKNLMoeAE2VRL8p9PZGRr25E1ClVDIg7E2fqOQA2W1s vByhQtqHBQXHFI632kkkUJRIywaYdUNFHltvKwfhAN5jTMBCbu4+7HKIXsxaqd66 /J2qxHS/U7gUXi5Q9l9bnu+AZcZGqqtGONlGOB41DwdF+dhDVyZbAikVA4nRCGNk QW3wHcLwCwr5FGkO+3JlFqn5Dn3FGO69+GNAD9+z6DtQQu0zFp/0Z1hS8CsLjV4s NTofHXNQWLuXNcBzHDqy4VivAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXi5tk5Xz eebqODVGzLfQl3BCnKIwHwYDVR0jBBgwFoAUyHfN8i0ltuM/xeSVvlXlnQqUmH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QjRCL0UxNTZBMDRDQ0Yz ODExRUY4NDg0RTkyRkM0RjlBRTAyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1I NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUhmTjhpMGx0dU1feGVTVnZsWGxuUXFVbUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 QjRCL0UxNTZBMDRDQ0YzODExRUY4NDg0RTkyRkM0RjlBRTAyL3lIZk44aTBsdHVN X3hlU1Z2bFhsblFxVW1INC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHHBTIwtQ6fHwS2ruZ/a+6f9jgoNMFXQ5T7vPLsmmDKFasEyoEQ5ir/X fGZX7YKvDOj04JBw9MRr4jzXwGWpeaAbMUd2GutJGfRj6k3PcvSJcfZPyBfuZcC7 MyYpXASmrDMOAeWAtZU9dquW4bq4rEitrVb34RmIuWElI88Mfj4o52n9fRPOp/Lz O8XEl6EyJOufhdgiOOjvtDY1UiYjFwicX2S7p9Tprad0btt0OGfG/nbczBNVBM+J tzGTxc6d2pqJAFTjUvR7xyavlXJes5C+/GbduoRBjZjtJzoGt/3bURkbueX99U/M L4IQheLsWcLmfumLD724ySAf4ktF8kY= -----END CERTIFICATE-----Generated at Sun Jul 20 10:23:41 2025 by rpki-client