$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json) Hash identifier: P95E4SOcdZxs/Q4keULb/CHJsygZ7rnlVlthQruOzrk= Subject key identifier: DD:8E:08:A4:7C:89:89:97:2D:0F:56:C5:A4:FD:00:6D:8D:07:A8:FE Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Certificate serial: 04DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft Manifest number: 04D5 Signing time: Fri 25 Jul 2025 00:09:15 +0000 Manifest this update: Fri 25 Jul 2025 00:09:14 +0000 Manifest next update: Fri 01 Aug 2025 00:09:14 +0000 Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: lGhvWGHyyEPRVV5u1qSTjekz8KUrcuKRhjXcRd6uzIw=) 2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ejQetAzLgqVtDolBJZWz4Zc5LEXRfg3VkvX111clMEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 00:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Validity Not Before: Jul 25 00:09:14 2025 GMT Not After : Aug 1 00:09:14 2025 GMT Subject: CN=6882cb2b-6499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e6:75:e7:63:ef:80:a8:56:d2:18:83:97:71: 00:ea:f1:d6:02:1d:21:c7:38:f9:c4:92:e5:33:5d: 4c:12:f7:39:0e:3d:ae:86:58:d6:c5:1e:65:01:f1: 9d:0a:24:ed:0b:db:58:f5:45:cf:c4:27:19:0b:5f: 57:6e:a8:43:3a:22:9d:77:0c:14:fc:64:2f:e6:76: 36:ec:50:37:5a:cf:7d:74:10:59:df:e3:51:18:93: 42:f7:17:1d:06:6c:db:cf:55:5c:86:5b:f2:57:2a: 4b:65:cc:78:e7:28:c9:d2:aa:02:53:4f:b8:03:2d: e8:eb:69:8c:29:08:34:82:ae:8f:36:dc:e6:6c:ad: 47:41:53:37:08:ef:e8:ab:be:99:8d:ee:d2:d5:0e: 7e:6e:13:c5:b5:bc:15:da:da:b0:cf:4a:99:5f:74: 1d:c3:5b:16:2f:42:79:75:a4:d1:4b:b5:73:46:cb: 65:ea:f4:e1:6f:05:93:1c:b3:fd:95:1e:78:4a:f9: 8c:5c:df:89:be:84:af:b8:8e:a7:cc:06:d8:79:1e: fa:2d:78:59:07:da:89:d5:f2:5c:46:13:a9:b1:cb: 7e:60:0c:7d:16:a0:95:c5:9b:86:6f:98:af:1d:28: bb:a0:84:63:35:55:26:28:f8:3b:f2:43:52:61:cd: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8E:08:A4:7C:89:89:97:2D:0F:56:C5:A4:FD:00:6D:8D:07:A8:FE X509v3 Authority Key Identifier: keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:fc:fd:bb:d7:c9:1c:3b:e1:4c:c1:95:1c:fa:42:c5:2c:98: 54:c5:c8:3c:cd:d0:c1:de:83:77:11:22:23:28:5b:ca:5f:9a: fb:21:7d:7f:9c:02:58:1f:02:a8:37:d7:8a:75:45:52:cc:8f: 75:f3:41:39:87:4b:39:c2:d5:c7:26:c3:33:6a:a7:84:a1:99: 36:80:ea:ac:39:ba:67:84:f3:28:c3:a3:6e:48:c3:15:e1:fa: 93:d0:20:65:bc:9b:73:53:df:c2:13:de:44:05:47:07:71:6e: ba:cd:30:06:57:ab:09:6f:d8:c8:a1:cc:db:ef:d6:3e:ae:ac: 89:37:06:89:58:aa:80:61:cb:f3:7d:6a:bd:91:2d:8c:73:5a: a0:ff:6e:e3:59:e1:2c:fb:e7:9d:d9:e2:bb:18:99:67:67:9c: ac:9b:bf:1d:1d:18:a6:d0:18:dc:51:3a:43:73:b8:f5:ec:a8: f7:e1:f6:7e:03:fe:b4:45:41:b9:fc:4b:b6:da:68:ff:e2:a2: b6:21:12:d7:24:70:77:56:18:39:91:bd:45:04:67:bd:72:dc: 6a:ac:10:d9:af:9f:38:c9:2a:14:65:0e:96:00:c8:e5:a5:7b: 45:09:2d:f0:17:93:eb:f5:ab:c0:13:0e:e0:fb:35:0b:37:44: a5:48:de:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4 NEMzRjI2MEIwHhcNMjUwNzI1MDAwOTE0WhcNMjUwODAxMDAwOTE0WjAYMRYwFAYD VQQDEw02ODgyY2IyYi02NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuZ152PvgKhW0hiDl3EA6vHWAh0hxzj5xJLlM11MEvc5Dj2uhljWxR5lAfGd CiTtC9tY9UXPxCcZC19XbqhDOiKddwwU/GQv5nY27FA3Ws99dBBZ3+NRGJNC9xcd Bmzbz1VchlvyVypLZcx45yjJ0qoCU0+4Ay3o62mMKQg0gq6PNtzmbK1HQVM3CO/o q76Zje7S1Q5+bhPFtbwV2tqwz0qZX3Qdw1sWL0J5daTRS7VzRstl6vThbwWTHLP9 lR54SvmMXN+JvoSvuI6nzAbYeR76LXhZB9qJ1fJcRhOpsct+YAx9FqCVxZuGb5iv HSi7oIRjNVUmKPg78kNSYc028wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2OCKR8 iYmXLQ9WxaT9AG2NB6j+MB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL TlFEdHliUUtWR3FFd19KZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz/P2718kcO+FMwZUc+kLFLJhUxcg8zdDB3oN3ESIjKFvKX5r7IX1/ nAJYHwKoN9eKdUVSzI9180E5h0s5wtXHJsMzaqeEoZk2gOqsObpnhPMow6NuSMMV 4fqT0CBlvJtzU9/CE95EBUcHcW66zTAGV6sJb9jIoczb79Y+rqyJNwaJWKqAYcvz fWq9kS2Mc1qg/27jWeEs++ed2eK7GJlnZ5ysm78dHRim0BjcUTpDc7j17Kj34fZ+ A/60RUG5/Eu22mj/4qK2IRLXJHB3Vhg5kb1FBGe9ctxqrBDZr584ySoUZQ6WAMjl pXtFCS3wF5Pr9avAEw7g+zULN0SlSN53 -----END CERTIFICATE-----Generated at Fri Jul 25 05:27:20 2025 by rpki-client