$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft File: yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json) Hash identifier: ARyKnvSUEB70c59UeWGVDlD0oxLUv8IjriImY9kkHos= Subject key identifier: 44:66:0C:C0:43:8F:9B:B3:E8:26:04:D5:BD:E7:79:AA:49:A5:CC:80 Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 Certificate issuer: /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft Manifest number: 017A Signing time: Sat 19 Jul 2025 03:55:13 +0000 Manifest this update: Sat 19 Jul 2025 03:55:13 +0000 Manifest next update: Sat 26 Jul 2025 03:55:13 +0000 Files and hashes: 1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: jVmSRNKz1ChnPsGjrdnIG/sIY4ZRxytngUmQh1078+Q=) 2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: nmT4orl0cbcTc9NjDNiHdTsciwQkVU+9vdaYW2GwsKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Validity Not Before: Jul 19 03:55:13 2025 GMT Not After : Jul 26 03:55:13 2025 GMT Subject: CN=687b1721-4644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:6f:59:06:b6:d6:af:17:80:f7:65:ce:7a: 63:4b:c4:7b:1a:26:e2:71:77:31:39:02:65:23:85: 32:4e:dc:62:ee:a3:b6:08:16:dd:76:46:4b:b2:f7: af:50:51:fb:79:d4:d6:18:25:d4:5e:2e:2f:40:e4: f3:c8:da:17:ac:d3:6f:d9:22:2a:78:67:d0:d4:07: f3:c7:64:2d:9c:f1:07:c6:49:c5:88:b8:77:7a:fd: a7:e5:5c:d1:8d:c0:48:ae:f5:7a:13:53:cd:b9:e2: c5:48:8c:00:d1:75:42:24:b8:ba:eb:7b:e9:4a:29: 17:57:e1:55:d2:ea:3f:73:38:87:32:7b:2c:7c:97: fd:f8:ff:ec:ce:fc:b1:8e:60:48:71:25:2a:13:77: fa:c8:8d:1c:c7:82:f7:b5:78:5a:2b:d1:42:1f:39: 7e:8d:43:1a:3f:0e:a7:3b:56:46:41:16:a4:ee:8c: da:ec:67:a0:06:c8:55:2e:bc:40:b2:a7:52:4e:07: f5:ec:dc:1f:60:9b:fa:6c:de:19:c1:82:3c:16:71: 9f:f8:2d:31:c0:91:e8:0c:c4:39:af:39:54:bd:db: 2b:fc:1b:b4:3a:a7:5f:0e:a3:d9:16:d6:84:cc:74: 8f:57:35:26:79:ce:be:99:fb:9d:e2:56:e9:d9:ca: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:66:0C:C0:43:8F:9B:B3:E8:26:04:D5:BD:E7:79:AA:49:A5:CC:80 X509v3 Authority Key Identifier: keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:73:82:2e:55:3b:8d:58:23:dc:a5:68:30:b1:12:98:8b:df: e1:37:31:4c:87:27:14:a5:67:90:4e:31:2c:b6:ab:83:aa:52: e5:cf:fb:34:cd:e7:06:de:b1:74:9c:75:bb:be:2a:f4:43:25: a1:aa:b1:dd:f7:32:37:a2:05:77:4b:ba:79:bc:90:05:2f:48: af:be:32:25:d6:bb:40:b1:5d:5b:25:a2:c5:e8:00:80:16:80: 39:a7:33:0b:cf:e7:cf:cd:5b:8f:82:55:00:13:3d:3c:52:87: 7b:c3:e7:36:ee:fe:94:2a:c1:57:6b:89:39:e5:14:54:c6:eb: a2:b0:6e:8c:18:3b:87:03:31:a8:4e:87:1f:a8:8f:eb:76:ba: 9c:76:6d:92:43:9d:20:83:91:de:ed:a3:26:95:50:45:24:9e: ba:18:e1:a5:7c:7b:f3:7d:1e:86:9a:55:c5:73:84:aa:bc:ab: 1c:b4:b1:27:56:bc:e9:75:61:8c:a8:f2:de:74:1c:0b:28:5f: c9:b1:d1:af:f5:ff:6e:d6:f2:a5:cf:bf:10:2d:c6:25:37:0d: 11:b0:a8:87:4e:95:2e:96:31:41:a6:75:39:f3:69:02:d6:a5: 47:41:06:5e:80:bf:b3:e2:99:d6:a4:4e:16:0e:b7:97:4d:5e: 0a:f3:1e:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw NkRGNDdFOTEwHhcNMjUwNzE5MDM1NTEzWhcNMjUwNzI2MDM1NTEzWjAYMRYwFAYD VQQDEw02ODdiMTcyMS00NjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo75vWQa21q8XgPdlznpjS8R7GibicXcxOQJlI4UyTtxi7qO2CBbddkZLsvev UFH7edTWGCXUXi4vQOTzyNoXrNNv2SIqeGfQ1Afzx2QtnPEHxknFiLh3ev2n5VzR jcBIrvV6E1PNueLFSIwA0XVCJLi663vpSikXV+FV0uo/cziHMnssfJf9+P/szvyx jmBIcSUqE3f6yI0cx4L3tXhaK9FCHzl+jUMaPw6nO1ZGQRak7oza7GegBshVLrxA sqdSTgf17NwfYJv6bN4ZwYI8FnGf+C0xwJHoDMQ5rzlUvdsr/Bu0OqdfDqPZFtaE zHSPVzUmec6+mfud4lbp2co9jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERmDMBD j5uz6CYE1b3neapJpcyAMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2 MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU OVdtRFVfeUZzTWtHMzBmcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSc4IuVTuNWCPcpWgwsRKYi9/hNzFMhycUpWeQTjEstquDqlLlz/s0 zecG3rF0nHW7vir0QyWhqrHd9zI3ogV3S7p5vJAFL0ivvjIl1rtAsV1bJaLF6ACA FoA5pzMLz+fPzVuPglUAEz08Uod7w+c27v6UKsFXa4k55RRUxuuisG6MGDuHAzGo TocfqI/rdrqcdm2SQ50gg5He7aMmlVBFJJ66GOGlfHvzfR6GmlXFc4SqvKsctLEn VrzpdWGMqPLedBwLKF/JsdGv9f9u1vKlz78QLcYlNw0RsKiHTpUuljFBpnU582kC 1qVHQQZegL+z4pnWpE4WDreXTV4K8x6U -----END CERTIFICATE-----Generated at Sun Jul 20 06:57:55 2025 by rpki-client