$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft File: yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft (raw, json) Hash identifier: UgwYxK8BxRn7UmNnmdQz1Hylb4+8Ra0eBI2++YdmULM= Subject key identifier: 37:D6:DD:8A:99:9D:B7:55:56:0E:C4:B1:A9:5B:35:C6:CA:50:78:D1 Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B Certificate issuer: /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft Manifest number: 0298 Signing time: Fri 25 Jul 2025 02:01:00 +0000 Manifest this update: Fri 25 Jul 2025 02:00:59 +0000 Manifest next update: Fri 01 Aug 2025 02:00:59 +0000 Files and hashes: 1: yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl (hash: zH81tVgxgFuyY1R57F60UnkaQNuQLS9C9+DGNwFfwiA=) 2: 755581D40D7E11EDA9F2CA4AC4F9AE02.roa (hash: zleKsAQ/UII/VAR0ip3wb38fmNdnLl5jIKA7jKftYvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162914, serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Validity Not Before: Jul 25 02:00:59 2025 GMT Not After : Aug 1 02:00:59 2025 GMT Subject: CN=6882e55c-9969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:93:69:10:9a:aa:e7:a9:60:d4:02:45:76: cd:c2:fe:37:ec:05:26:2b:0e:7f:0b:12:9a:45:85: c2:33:09:49:fd:7b:c1:dd:ce:b3:ec:ac:95:55:2a: 07:b2:1e:11:bd:de:6a:69:e6:c5:17:81:a8:a9:77: 0c:5a:dd:45:8a:a1:cd:fd:ce:61:9c:29:b1:1d:8c: 8a:14:3c:bf:34:6e:e8:8d:1a:e3:3a:57:02:86:93: 7d:06:74:a0:e4:49:50:06:33:8d:73:1e:82:46:75: 90:90:c9:bb:69:1a:e0:09:5e:1d:46:d4:97:0a:d2: 97:53:86:e6:71:0b:a3:e0:91:e6:85:45:77:41:e5: ce:b8:4c:fe:2e:17:ef:7b:be:df:5c:14:ab:cc:f1: a4:a5:31:de:95:ab:8b:63:d4:b8:9f:a4:23:f3:f1: 21:27:47:81:60:f4:a0:a0:87:10:ff:4b:b2:50:f5: 72:5e:51:0c:52:e7:d4:38:e4:c9:c3:14:75:7f:7a: 99:05:c3:9e:c9:cf:ce:dc:59:a1:02:0b:d2:0a:80: e9:3a:fd:d8:e9:2b:a7:e6:27:7f:55:ed:7e:fd:58: 9e:0b:4b:5d:69:e9:23:1e:b8:24:1a:82:d3:7e:40: 4d:2b:90:1c:91:4c:a1:c3:7a:bd:1d:e2:80:83:00: 25:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D6:DD:8A:99:9D:B7:55:56:0E:C4:B1:A9:5B:35:C6:CA:50:78:D1 X509v3 Authority Key Identifier: keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:f8:0e:59:81:81:19:6d:5e:1a:66:28:34:50:ef:44:b3:f5: a4:d3:0f:69:54:0d:43:2f:d6:d1:3a:f0:57:3d:42:36:dd:3e: 80:4f:a8:05:c4:af:b5:33:66:d4:7e:65:0f:bf:e0:cf:43:d3: cd:45:40:5a:5e:bf:53:60:ca:37:4b:82:e5:c8:b5:d9:6a:8c: 00:63:b9:fc:77:92:86:64:90:00:3c:04:64:f3:d7:dd:38:42: 54:e0:cc:5d:2e:21:5b:da:9e:9f:67:13:d7:57:33:88:da:69: f6:23:c5:0d:41:70:dd:8b:cf:c4:b6:b1:88:eb:f8:31:14:3b: b3:ab:74:31:0a:7d:5c:da:f4:14:af:10:33:c6:02:e8:2a:75: 3d:c5:91:34:9c:f6:fe:cd:3c:1d:da:ad:e6:9d:e6:bd:b0:96: 42:68:b4:9b:1a:e8:32:66:d8:a1:49:55:d4:68:df:e1:54:43: 61:22:33:59:d0:4d:c6:a6:34:3d:04:ae:62:ec:3b:03:15:24: a4:6d:4d:ae:19:80:85:ac:1b:f0:94:04:f4:d0:9f:04:ae:7c: 6b:53:bd:0d:8d:c7:56:d4:2a:bd:af:47:2e:a8:09:8f:3d:db: e4:18:47:8b:b1:00:9d:df:b6:2f:6a:b5:09:7b:bc:56:f6:e2: 57:8b:9e:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5MTQxMTAvBgNVBAUTKENCMUM4MEI0MDM0QkU0MUI1OEMzQzY0QjI0QTA4Q0Q5 Qzc3Qjk2M0IwHhcNMjUwNzI1MDIwMDU5WhcNMjUwODAxMDIwMDU5WjAYMRYwFAYD VQQDEw02ODgyZTU1Yy05OTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcWTaRCaquepYNQCRXbNwv437AUmKw5/CxKaRYXCMwlJ/XvB3c6z7KyVVSoH sh4Rvd5qaebFF4GoqXcMWt1FiqHN/c5hnCmxHYyKFDy/NG7ojRrjOlcChpN9BnSg 5ElQBjONcx6CRnWQkMm7aRrgCV4dRtSXCtKXU4bmcQuj4JHmhUV3QeXOuEz+Lhfv e77fXBSrzPGkpTHelauLY9S4n6Qj8/EhJ0eBYPSgoIcQ/0uyUPVyXlEMUufUOOTJ wxR1f3qZBcOeyc/O3FmhAgvSCoDpOv3Y6Sun5id/Ve1+/VieC0tdaekjHrgkGoLT fkBNK5AckUyhw3q9HeKAgwAlgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfW3YqZ nbdVVg7EsalbNcbKUHjRMB8GA1UdIwQYMBaAFMscgLQDS+QbWMPGSySgjNnHe5Y7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjkxNC9ENjZDOTNGQzBE NzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVCdFl3OFpMSktDTTJjZDds anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4eUF0QU5MNUJ0WXc4WkxKS0NNMmNkN2xqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjkxNC9ENjZDOTNGQzBENzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVC dFl3OFpMSktDTTJjZDdsanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE+A5ZgYEZbV4aZig0UO9Es/Wk0w9pVA1DL9bROvBXPUI23T6AT6gF xK+1M2bUfmUPv+DPQ9PNRUBaXr9TYMo3S4LlyLXZaowAY7n8d5KGZJAAPARk89fd OEJU4MxdLiFb2p6fZxPXVzOI2mn2I8UNQXDdi8/EtrGI6/gxFDuzq3QxCn1c2vQU rxAzxgLoKnU9xZE0nPb+zTwd2q3mnea9sJZCaLSbGugyZtihSVXUaN/hVENhIjNZ 0E3GpjQ9BK5i7DsDFSSkbU2uGYCFrBvwlAT00J8ErnxrU70NjcdW1Cq9r0cuqAmP PdvkGEeLsQCd37YvarUJe7xW9uJXi57v -----END CERTIFICATE-----Generated at Sat Jul 26 15:20:08 2025 by rpki-client