$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: oExL2NnbBSC65c438ALoqiGhTn9PjaJu0aat2rN9WdQ= Subject key identifier: 5E:25:EE:A2:B2:2F:62:5B:63:34:38:FC:52:F1:FF:5A:97:F2:88:4F Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1B81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1B77 Signing time: Sun 20 Jul 2025 16:17:52 +0000 Manifest this update: Sun 20 Jul 2025 16:17:52 +0000 Manifest next update: Sun 27 Jul 2025 16:17:52 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: 09e4N8DVb60iXJ98Sn8186t5QlwTBOmS/Uop/BhR6vg=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: CIx5a/KDORd4MxJLQ+psYC26naN8iQLI+AuxYnr9L/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7041 (0x1b81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: Jul 20 16:17:52 2025 GMT Not After : Jul 27 16:17:52 2025 GMT Subject: CN=687d16b0-b10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:01:4d:13:32:1e:ec:88:1a:20:d4:97:e0: ac:a0:9f:9a:4c:68:e2:31:9a:ed:03:37:8a:20:82: ba:65:8b:48:3b:ac:08:1a:a5:f6:e5:5c:2e:1d:f8: 27:03:9e:6a:e5:1b:fe:d5:bb:e2:46:ad:e2:16:c8: d9:ab:a5:cd:92:35:cb:e7:1f:9f:04:f7:6e:bb:9b: 9f:99:1d:6b:7c:56:c8:88:f7:c3:dc:62:78:67:56: 78:95:8f:ca:41:f8:36:e3:e1:1c:c1:7b:44:9b:f9: fd:2d:67:87:ba:b3:ee:e8:e1:3b:09:67:86:a2:97: 86:ff:20:4a:51:cd:7b:d4:2e:5c:38:a0:99:63:5e: 8b:cf:03:60:50:54:23:29:9a:84:4a:06:5e:36:92: 07:75:9e:22:71:db:b2:24:6e:74:39:87:3a:f5:98: 0c:b7:23:25:4a:a6:66:2e:82:e2:3f:ad:f0:c6:a0: 58:b5:75:54:f8:d8:49:70:15:e9:1d:71:8c:fe:41: c4:68:41:25:82:7a:f1:e2:b0:d2:80:bf:9f:84:11: cd:4a:dd:44:2d:a8:2e:3f:3c:b6:86:59:c3:7b:f0: b6:d4:c1:e3:b6:0b:ef:41:57:9d:14:46:bb:07:5c: 65:e1:ee:76:c1:81:b7:6f:25:07:36:a5:50:0b:a7: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:25:EE:A2:B2:2F:62:5B:63:34:38:FC:52:F1:FF:5A:97:F2:88:4F X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:39:09:74:d4:69:af:d9:55:87:74:a5:62:83:30:11:a6:60: 87:e0:11:d4:7e:0c:d1:e1:9a:15:43:9f:0e:ef:57:2d:60:42: bf:97:0a:ae:8c:2a:79:f7:10:f6:b7:55:81:a1:a3:ef:f2:db: 5a:c3:9c:57:c2:e0:f8:22:ff:ce:41:68:e5:cd:58:c2:61:f1: b9:0a:d4:e9:ff:31:62:ab:74:cd:76:b4:91:ff:c0:32:f0:55: 9d:78:9c:2f:9e:8a:85:79:e4:b3:95:2b:78:6d:52:1e:f2:b5: 90:3d:63:82:e7:1f:bd:73:40:40:c9:fe:88:6a:80:22:c7:1c: ff:53:c2:67:f2:c7:48:d9:f1:c5:f6:a0:cc:44:27:aa:64:7a: c5:f7:6f:56:41:64:93:cc:d6:7c:54:2a:ba:3e:db:23:77:68: 7f:5f:8a:74:c9:36:18:1e:3f:a0:65:72:41:69:71:e6:4e:d2: 9c:06:fe:81:91:1b:39:ff:07:fc:00:5b:3b:5d:ac:57:06:31: 50:b5:9b:b4:04:1b:1d:7c:77:bc:69:8a:10:6d:68:9d:23:d5: 2d:04:ce:91:53:8d:0f:12:65:52:50:87:32:21:3c:1b:0d:6d: ff:f8:e3:dd:a9:be:03:84:9a:e6:f3:03:8c:bf:48:12:9c:b0: db:6b:ad:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjUwNzIwMTYxNzUyWhcNMjUwNzI3MTYxNzUyWjAYMRYwFAYD VQQDEw02ODdkMTZiMC1iMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTUBTRMyHuyIGiDUl+CsoJ+aTGjiMZrtAzeKIIK6ZYtIO6wIGqX25VwuHfgn A55q5Rv+1bviRq3iFsjZq6XNkjXL5x+fBPduu5ufmR1rfFbIiPfD3GJ4Z1Z4lY/K Qfg24+EcwXtEm/n9LWeHurPu6OE7CWeGopeG/yBKUc171C5cOKCZY16LzwNgUFQj KZqESgZeNpIHdZ4icduyJG50OYc69ZgMtyMlSqZmLoLiP63wxqBYtXVU+NhJcBXp HXGM/kHEaEElgnrx4rDSgL+fhBHNSt1ELaguPzy2hlnDe/C21MHjtgvvQVedFEa7 B1xl4e52wYG3byUHNqVQC6cgRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4l7qKy L2JbYzQ4/FLx/1qX8ohPMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgOQl01Gmv2VWHdKVigzARpmCH4BHUfgzR4ZoVQ58O71ctYEK/lwqu jCp59xD2t1WBoaPv8ttaw5xXwuD4Iv/OQWjlzVjCYfG5CtTp/zFiq3TNdrSR/8Ay 8FWdeJwvnoqFeeSzlSt4bVIe8rWQPWOC5x+9c0BAyf6IaoAixxz/U8Jn8sdI2fHF 9qDMRCeqZHrF929WQWSTzNZ8VCq6Ptsjd2h/X4p0yTYYHj+gZXJBaXHmTtKcBv6B kRs5/wf8AFs7XaxXBjFQtZu0BBsdfHe8aYoQbWidI9UtBM6RU40PEmVSUIcyITwb DW3/+OPdqb4DhJrm8wOMv0gSnLDba60f -----END CERTIFICATE-----Generated at Mon Jul 21 13:26:16 2025 by rpki-client