$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json) Hash identifier: qfeyirzUFBbLPjcX3K2K5mz0Cy9nj4QZKKnkuw3nHvA= Subject key identifier: 13:BF:72:CF:5B:38:A8:21:D1:2F:0B:FC:EE:FF:81:35:68:2F:E4:83 Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Certificate serial: 1B17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft Manifest number: 1B0C Signing time: Fri 18 Jul 2025 16:25:01 +0000 Manifest this update: Fri 18 Jul 2025 16:25:01 +0000 Manifest next update: Fri 25 Jul 2025 16:25:01 +0000 Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: sTmd7zA4jleNOjxyA15rmeJf2KzJNsXFbm9TTXrkqks=) 2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: XfYeKxfatX6id5bBv2XHc88RkA9A8XtPbM07HmC0bY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6935 (0x1b17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Validity Not Before: Jul 18 16:25:01 2025 GMT Not After : Jul 25 16:25:01 2025 GMT Subject: CN=687a755d-aad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:10:f2:0d:3e:49:3b:fc:17:47:a3:89:3c:b8: 39:fb:ea:92:92:9e:31:0f:b7:e1:a6:91:13:b0:e8: 8b:78:af:c7:26:3d:a7:b8:7a:e6:31:88:df:ce:73: bf:d6:e4:82:42:bd:d2:05:61:ff:11:ee:18:60:ee: ff:be:67:80:cb:1c:d8:9b:0f:7b:7d:d5:58:c4:ce: 66:1d:73:ba:42:9f:5c:8a:58:37:d1:b5:08:67:7a: 9c:53:70:0e:75:ea:62:b0:87:78:22:b4:dd:ba:fd: 20:e9:6f:e8:5f:55:1e:04:e1:2d:34:66:dc:63:59: 3a:21:07:7a:46:fc:ef:33:62:89:3f:0a:ef:bd:2b: 84:4b:ae:ab:f5:7f:5e:e0:b9:79:24:ad:c0:59:80: 7a:dc:92:70:18:84:e1:9c:0b:81:38:f7:2e:67:bd: 34:7e:9e:fb:e2:c4:66:17:b7:d9:73:f9:5f:1f:b1: 9f:9d:5c:c9:c3:ce:37:61:f8:73:d5:bd:81:0a:e4: da:d8:03:83:91:b0:8d:a4:69:56:60:12:73:b3:e5: 22:6c:a2:29:72:45:b3:9b:ca:14:3e:27:43:59:65: af:b0:91:82:df:6d:39:73:01:0d:cb:1d:6a:f1:2b: 6a:a6:5e:76:5d:b1:b1:50:97:7a:25:2b:ca:ac:a1: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BF:72:CF:5B:38:A8:21:D1:2F:0B:FC:EE:FF:81:35:68:2F:E4:83 X509v3 Authority Key Identifier: keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:35:cb:cd:87:76:e2:e8:b9:83:c5:0a:e2:85:2f:ba:a8:d1: 04:f1:60:af:8f:d4:ff:68:0f:69:36:17:2a:a6:59:2a:20:6b: 91:31:c3:0d:3f:c6:4e:4a:bd:e5:94:5e:b8:18:ac:0d:d4:a1: 08:ba:48:a8:77:8c:d9:22:1f:19:36:d3:64:35:08:b5:f2:9e: 4b:5c:49:7b:d2:75:2c:18:02:fa:25:63:a7:8a:f1:f7:21:67: 42:c1:fc:3e:56:af:29:3c:b5:e4:9a:3e:80:63:66:48:59:9e: a4:7d:a2:12:90:1b:57:04:49:96:84:e2:42:f8:f5:1f:64:44: 40:e5:2f:e4:4e:54:67:fb:04:f8:dd:9b:9f:30:b1:14:ed:43: 23:01:8d:5f:9f:78:74:71:9f:bb:9e:0d:03:00:56:7f:31:3d: 22:cf:37:c2:d2:16:01:01:11:26:fa:b4:7b:ce:03:6f:9f:53: 56:b6:0b:12:64:27:cd:11:71:da:29:33:94:03:91:07:0b:72: 71:ed:4b:4a:13:ba:81:4d:d0:a5:ae:4b:5f:75:96:95:16:91: 90:92:93:30:02:dd:03:d7:5a:cc:7b:bf:27:32:0b:7c:f1:4d: 82:df:44:63:c5:a2:7e:c0:0d:bd:25:f4:f1:3e:87:4b:b8:56: fd:75:de:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy OUUyRDVDMjIwHhcNMjUwNzE4MTYyNTAxWhcNMjUwNzI1MTYyNTAxWjAYMRYwFAYD VQQDEw02ODdhNzU1ZC1hYWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RDyDT5JO/wXR6OJPLg5++qSkp4xD7fhppETsOiLeK/HJj2nuHrmMYjfznO/ 1uSCQr3SBWH/Ee4YYO7/vmeAyxzYmw97fdVYxM5mHXO6Qp9cilg30bUIZ3qcU3AO depisId4IrTduv0g6W/oX1UeBOEtNGbcY1k6IQd6RvzvM2KJPwrvvSuES66r9X9e 4Ll5JK3AWYB63JJwGIThnAuBOPcuZ700fp774sRmF7fZc/lfH7GfnVzJw843Yfhz 1b2BCuTa2AODkbCNpGlWYBJzs+UibKIpckWzm8oUPidDWWWvsJGC3205cwENyx1q 8Stqpl52XbGxUJd6JSvKrKEknwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBO/cs9b OKgh0S8L/O7/gTVoL+SDMB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY2RC8xRUIwOTI1NDIzMzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVG Z1Bza2NzSnhvRlFwNHRYQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVNcvNh3bi6LmDxQrihS+6qNEE8WCvj9T/aA9pNhcqplkqIGuRMcMN P8ZOSr3llF64GKwN1KEIukiod4zZIh8ZNtNkNQi18p5LXEl70nUsGAL6JWOnivH3 IWdCwfw+Vq8pPLXkmj6AY2ZIWZ6kfaISkBtXBEmWhOJC+PUfZERA5S/kTlRn+wT4 3ZufMLEU7UMjAY1fn3h0cZ+7ng0DAFZ/MT0izzfC0hYBAREm+rR7zgNvn1NWtgsS ZCfNEXHaKTOUA5EHC3Jx7UtKE7qBTdClrktfdZaVFpGQkpMwAt0D11rMe78nMgt8 8U2C30RjxaJ+wA29JfTxPodLuFb9dd5b -----END CERTIFICATE-----Generated at Sun Jul 20 16:28:20 2025 by rpki-client