$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: VyrUYEz6InBiccm3IF8vI4tqY/aQRYKFo+chLiLVLp8= Subject key identifier: 82:88:3E:26:85:04:26:AA:10:AC:89:96:A4:1D:4B:65:79:2E:FC:39 Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 02EC Signing time: Mon 21 Jul 2025 01:34:07 +0000 Manifest this update: Mon 21 Jul 2025 01:34:07 +0000 Manifest next update: Mon 28 Jul 2025 01:34:07 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: EUPR0z9m++zZ7tukuVpUdF72QzKmdmPW83HjelnM+AM=) 2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: fawgiTLHzpx5EX5PXRfNoSCoBTl9+GYe2SP8BVC/WiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: Jul 21 01:34:07 2025 GMT Not After : Jul 28 01:34:07 2025 GMT Subject: CN=687d990f-0bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:5e:ff:eb:50:e8:38:0d:8e:93:63:1e:32: b3:66:2c:07:76:8e:58:c5:cd:22:6a:6e:df:68:7f: d0:12:fc:ba:d8:a0:73:69:c8:9f:86:94:b7:ea:c2: 7b:4d:65:f1:04:08:47:2f:14:f2:bb:35:f7:50:33: 20:11:87:d6:d7:af:95:3f:30:6c:eb:cc:9d:80:0a: 56:fc:ad:9d:05:5f:ee:77:db:f1:48:c5:f1:91:2c: 62:d0:5c:60:02:3b:8c:23:7e:89:e2:b2:83:8d:13: 3b:9e:a9:9c:b9:61:ab:ea:c6:ed:41:42:db:39:a6: 6d:6c:ae:6d:e6:44:81:61:05:f3:b3:30:10:8a:0a: 15:f0:15:a1:6a:62:cb:35:c0:8b:c6:f1:64:bd:14: 7c:e1:01:b9:80:21:7c:1d:e5:e1:b3:30:ac:b4:71: 41:56:99:9a:0c:d0:c4:d8:a1:71:c9:62:3b:10:df: fe:e0:0c:fd:94:71:82:3f:00:1c:fe:71:c6:e6:d2: 90:55:9a:07:6e:61:8b:83:bc:c4:ef:6d:eb:a3:a3: 74:e4:86:c6:ed:37:2f:78:18:a3:62:37:f0:93:15: c3:af:64:2a:08:0d:2b:a8:94:ab:d7:bc:f4:31:b6: 8a:c6:aa:a3:98:66:ae:60:2a:36:14:a2:ca:6b:09: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:88:3E:26:85:04:26:AA:10:AC:89:96:A4:1D:4B:65:79:2E:FC:39 X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a3:2f:da:cf:8b:eb:22:18:ff:7a:fe:f9:8c:94:33:9e:24: db:cd:32:ee:5a:7f:cf:10:31:fb:47:72:8e:18:a0:a8:c7:d0: 87:95:8d:e3:97:da:13:e2:bf:60:ca:4f:58:8c:0d:26:14:30: e6:8c:de:1e:23:ea:45:74:33:1d:49:51:d8:df:40:49:5a:18: 0f:17:c7:55:b2:21:99:95:a1:22:38:af:15:7d:88:a6:d2:64: 65:8f:34:95:01:7f:dd:76:4b:d1:15:d4:3d:df:b0:76:03:45: 15:68:10:5e:46:82:80:30:1f:c6:b2:95:84:7d:ee:20:e3:a7: 9e:91:98:ea:52:b7:6c:f4:f5:a4:dc:91:e3:ad:98:5d:7a:e7: f2:6d:10:33:4b:9a:55:e0:a4:3b:18:d9:63:dc:90:2b:80:74: 5a:2c:55:36:73:cc:af:1d:a9:b9:af:db:d3:9f:ec:b0:da:81: 49:5b:06:8c:28:9e:aa:8c:21:64:c9:2d:14:4c:c4:f4:82:86: c1:7f:84:96:64:19:2f:14:55:0a:9e:74:5b:9f:54:69:b3:0c: 37:f3:61:20:df:0d:a0:c0:29:0e:d6:1f:ce:ec:c9:08:30:b9: ad:20:66:56:e2:92:f0:cd:7c:2c:8d:cb:f6:fb:ea:08:2f:d3: d5:ea:fd:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjUwNzIxMDEzNDA3WhcNMjUwNzI4MDEzNDA3WjAYMRYwFAYD VQQDEw02ODdkOTkwZi0wYmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEJe/+tQ6DgNjpNjHjKzZiwHdo5Yxc0iam7faH/QEvy62KBzacifhpS36sJ7 TWXxBAhHLxTyuzX3UDMgEYfW16+VPzBs68ydgApW/K2dBV/ud9vxSMXxkSxi0Fxg AjuMI36J4rKDjRM7nqmcuWGr6sbtQULbOaZtbK5t5kSBYQXzszAQigoV8BWhamLL NcCLxvFkvRR84QG5gCF8HeXhszCstHFBVpmaDNDE2KFxyWI7EN/+4Az9lHGCPwAc /nHG5tKQVZoHbmGLg7zE723ro6N05IbG7TcveBijYjfwkxXDr2QqCA0rqJSr17z0 MbaKxqqjmGauYCo2FKLKawn1WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKIPiaF BCaqEKyJlqQdS2V5Lvw5MB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQoy/az4vrIhj/ev75jJQzniTbzTLuWn/PEDH7R3KOGKCox9CHlY3j l9oT4r9gyk9YjA0mFDDmjN4eI+pFdDMdSVHY30BJWhgPF8dVsiGZlaEiOK8VfYim 0mRljzSVAX/ddkvRFdQ937B2A0UVaBBeRoKAMB/GspWEfe4g46eekZjqUrds9PWk 3JHjrZhdeufybRAzS5pV4KQ7GNlj3JArgHRaLFU2c8yvHam5r9vTn+yw2oFJWwaM KJ6qjCFkyS0UTMT0gobBf4SWZBkvFFUKnnRbn1Rpsww382Eg3w2gwCkO1h/O7MkI MLmtIGZW4pLwzXwsjcv2++oIL9PV6v3W -----END CERTIFICATE-----Generated at Wed Jul 23 02:27:05 2025 by rpki-client