$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: KoAlLLqHfr/sSi8HucM3F7lMruh1tnuozD8IL5p/zZk= Subject key identifier: 54:94:EA:92:16:5F:29:E8:70:06:53:B0:8E:84:0F:BA:B6:9D:97:A5 Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 02F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 02EE Signing time: Fri 25 Jul 2025 01:41:29 +0000 Manifest this update: Fri 25 Jul 2025 01:41:29 +0000 Manifest next update: Fri 01 Aug 2025 01:41:29 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: I6hLsT4iMa3ZCt1PzDcN0XYLzJIOF1sNM1Me4ERGGFA=) 2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: fawgiTLHzpx5EX5PXRfNoSCoBTl9+GYe2SP8BVC/WiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 01:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: Jul 25 01:41:29 2025 GMT Not After : Aug 1 01:41:29 2025 GMT Subject: CN=6882e0c9-ef15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:ac:45:b0:89:fa:45:32:d0:4e:b8:ef:db: 55:bc:fa:46:48:b7:03:32:15:15:d0:9a:fa:50:d2: 36:9c:c8:3b:16:91:27:51:ef:c5:c8:c4:06:bd:25: 1a:bb:8a:1d:4b:59:1e:41:99:b8:4f:70:89:69:66: f5:9a:84:97:27:99:53:d4:f8:ce:a9:b4:6d:bd:19: e4:75:88:2b:7c:90:85:45:af:7a:3a:04:d1:0f:6e: d1:cf:76:80:5a:38:2c:8e:ca:fd:22:dc:28:24:48: 97:ea:65:e2:10:e0:a4:c6:82:bb:6d:c7:e2:96:17: 2f:f6:77:cb:1b:41:6b:11:ce:7a:06:a4:cf:bf:78: b8:39:5a:db:4f:c2:c3:79:b6:34:af:1b:5f:27:2a: fc:31:f4:19:c3:31:a8:09:44:49:cc:8c:75:70:0e: d8:79:46:f6:5d:a1:3d:1d:10:b9:b9:26:ec:2e:bd: 49:da:f8:24:3e:a4:29:91:e5:92:a5:4c:3d:bb:ca: d7:ea:1f:86:7d:20:75:26:7c:55:d3:ff:8e:7a:d3: 27:82:6a:8e:65:f0:b5:97:fc:4e:28:25:68:3e:17: 02:e9:a9:0a:50:84:8b:08:9d:23:ab:74:7f:18:e4: 08:b2:db:8d:04:6f:de:ca:78:16:c4:69:f0:89:9e: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:94:EA:92:16:5F:29:E8:70:06:53:B0:8E:84:0F:BA:B6:9D:97:A5 X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:0a:60:a4:ae:fa:fb:02:cd:7e:6d:71:bf:f1:36:ce:89:49: 98:37:6a:a0:83:a3:a4:11:62:25:cf:14:c7:13:65:f8:d3:39: 75:a9:9e:89:bb:cf:9a:f4:b6:9c:68:18:21:4b:45:70:17:1f: 57:b7:66:5c:a9:64:7e:26:17:34:64:79:76:e3:32:ac:38:aa: 0e:19:ea:4b:5e:6a:54:04:ba:62:91:fd:33:aa:18:00:b3:a3: a7:8f:12:65:5e:8d:5f:2d:4d:2a:6f:0f:04:56:34:03:9b:de: 28:3e:05:96:26:3d:ce:23:20:bf:e8:31:0e:2e:a2:ac:1e:65: d0:b6:31:f5:44:fe:ae:55:ff:d2:c1:d9:95:7a:38:3c:b0:30: fc:e5:5b:6c:f3:5b:15:0a:cc:56:8d:c4:1f:8f:bb:32:a9:38: bd:a1:2c:ec:e5:a9:45:2a:eb:c8:a2:f4:51:de:08:2a:f3:18: 6d:af:8e:5a:29:0b:fe:2d:0c:70:c5:5b:cb:8f:2b:86:80:fa: 63:07:42:3a:45:ad:e7:7c:16:38:0a:85:f8:c1:98:59:60:d8: 48:96:db:64:7a:e7:d3:31:23:34:d0:08:7b:64:42:e1:af:90: 2e:71:a4:61:32:07:5d:97:59:4a:e0:db:e3:68:f5:35:b5:f6: 95:69:fe:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjUwNzI1MDE0MTI5WhcNMjUwODAxMDE0MTI5WjAYMRYwFAYD VQQDEw02ODgyZTBjOS1lZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOWsRbCJ+kUy0E6479tVvPpGSLcDMhUV0Jr6UNI2nMg7FpEnUe/FyMQGvSUa u4odS1keQZm4T3CJaWb1moSXJ5lT1PjOqbRtvRnkdYgrfJCFRa96OgTRD27Rz3aA Wjgsjsr9ItwoJEiX6mXiEOCkxoK7bcfilhcv9nfLG0FrEc56BqTPv3i4OVrbT8LD ebY0rxtfJyr8MfQZwzGoCURJzIx1cA7YeUb2XaE9HRC5uSbsLr1J2vgkPqQpkeWS pUw9u8rX6h+GfSB1JnxV0/+OetMngmqOZfC1l/xOKCVoPhcC6akKUISLCJ0jq3R/ GOQIstuNBG/eyngWxGnwiZ5nCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSU6pIW XynocAZTsI6ED7q2nZelMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADCmCkrvr7As1+bXG/8TbOiUmYN2qgg6OkEWIlzxTHE2X40zl1qZ6J u8+a9LacaBghS0VwFx9Xt2ZcqWR+Jhc0ZHl24zKsOKoOGepLXmpUBLpikf0zqhgA s6OnjxJlXo1fLU0qbw8EVjQDm94oPgWWJj3OIyC/6DEOLqKsHmXQtjH1RP6uVf/S wdmVejg8sDD85Vts81sVCsxWjcQfj7syqTi9oSzs5alFKuvIovRR3ggq8xhtr45a KQv+LQxwxVvLjyuGgPpjB0I6Ra3nfBY4CoX4wZhZYNhIlttkeufTMSM00Ah7ZELh r5AucaRhMgddl1lK4NvjaPU1tfaVaf5i -----END CERTIFICATE-----Generated at Fri Jul 25 05:27:22 2025 by rpki-client