$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft File: RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json) Hash identifier: rXM5J9w/1VqD0JTtwHR+GUSkDpL8EYIfar9WwFxCkWo= Subject key identifier: 1E:4A:A0:D2:C9:8A:B8:2D:EA:80:10:CD:52:B2:93:07:78:65:64:8D Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 Certificate issuer: /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft Manifest number: 0348 Signing time: Sat 19 Jul 2025 01:25:54 +0000 Manifest this update: Sat 19 Jul 2025 01:25:54 +0000 Manifest next update: Sat 26 Jul 2025 01:25:54 +0000 Files and hashes: 1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: 0sL6XfzsDHSukck/sa5j54TMqyDLeyDCs8/99N/0YFo=) 2: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: /wLCOfPhuY3TbRlUp4zKmXpIpLo+qttM1HDHUEGC0Us=) 3: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: qvqgBUl0a4zKeWl1I3fwpsPKJV0El11IrKtIQQYLmrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171235, serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Validity Not Before: Jul 19 01:25:54 2025 GMT Not After : Jul 26 01:25:54 2025 GMT Subject: CN=687af422-227a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:b6:1f:39:e1:cf:94:dd:db:69:ad:25:11: dc:9f:a3:af:80:78:3c:28:a4:16:eb:a0:2d:2a:07: ec:9c:4e:f9:03:86:47:72:af:ef:ea:6a:4e:fe:77: 6b:de:62:eb:49:7b:8a:9d:d7:a8:b0:8f:de:32:1b: e0:03:f4:55:1a:e5:18:4e:28:8a:9d:c2:5b:0f:3d: 0e:3f:86:5b:54:e1:fa:c7:c3:3d:a6:71:14:46:d0: ae:02:e1:73:f6:1a:75:9b:d8:34:43:1d:cd:80:db: c7:1d:4b:c6:77:03:f0:b9:e7:73:d7:65:ab:07:7d: a8:99:1b:db:31:ff:c6:df:3a:4d:01:13:c0:95:d6: 75:a6:31:3d:72:a1:80:06:e8:91:06:b1:1d:b2:1d: 9e:e8:41:83:44:a0:4a:38:1b:f3:ac:7a:18:b8:66: 10:3b:fa:2f:4d:78:84:cd:02:26:e6:12:37:ae:56: 38:f0:15:5f:ed:88:54:d7:8d:83:58:e6:d3:9c:a8: bc:85:71:c8:72:00:5a:e8:3c:de:8b:68:dd:1d:1c: 67:a4:0c:89:03:e6:d3:78:e1:0d:31:08:63:22:24: c8:26:06:76:04:fa:f5:0a:e0:37:57:ee:bf:11:a0: 33:a4:fd:68:be:0c:6b:ce:02:27:76:52:4d:6f:c1: e4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4A:A0:D2:C9:8A:B8:2D:EA:80:10:CD:52:B2:93:07:78:65:64:8D X509v3 Authority Key Identifier: keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:6f:b0:e0:5c:fd:1b:40:55:07:a0:8b:6b:69:a2:82:9d:00: 40:72:24:3d:c8:e2:d4:dc:b0:69:71:63:2f:f5:1c:c4:6e:99: c0:bd:65:a7:26:c4:43:02:10:ae:3d:6e:e0:a1:1f:b6:c8:b7: 14:f2:d9:89:ef:f8:7d:35:77:7f:4a:1a:f2:dd:0f:22:fd:e0: 9b:b5:91:d0:79:f9:35:12:76:78:5d:68:4c:06:fc:14:73:53: e7:4e:44:5b:4d:5b:84:31:c2:81:f6:5c:42:e6:ce:4d:1b:87: 9f:be:de:1e:2e:9d:80:40:eb:d9:90:22:7c:51:8f:d1:9c:7b: 90:b6:be:82:d7:0f:5b:62:ca:e1:c0:c2:f0:71:5a:ca:72:22: dd:63:1e:cc:1f:8d:00:69:f1:96:fb:bb:0b:44:b4:a1:3d:62: aa:78:09:51:76:b3:b5:6a:67:b3:00:e5:cb:40:20:a5:fd:a0: ad:e8:e4:9a:41:4d:17:2b:9e:24:12:f4:25:58:27:4f:bb:a0: a6:ff:bf:10:69:cc:aa:98:a0:5d:9f:e9:1f:5a:84:c2:5f:93: 11:28:9b:c2:7f:4a:f4:8e:af:bb:92:cc:a8:2f:82:f6:98:a8: b2:19:87:a4:43:3c:b6:f6:58:81:64:0f:85:f6:62:fc:2f:ae: 03:78:00:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyMzUxMTAvBgNVBAUTKDQ0MUNCMEQ4NkE5MkNFREZCRTgwODNERUQ2OTdBMjZE NjIzRUU2NTUwHhcNMjUwNzE5MDEyNTU0WhcNMjUwNzI2MDEyNTU0WjAYMRYwFAYD VQQDEw02ODdhZjQyMi0yMjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwo+2Hznhz5Td22mtJRHcn6OvgHg8KKQW66AtKgfsnE75A4ZHcq/v6mpO/ndr 3mLrSXuKndeosI/eMhvgA/RVGuUYTiiKncJbDz0OP4ZbVOH6x8M9pnEURtCuAuFz 9hp1m9g0Qx3NgNvHHUvGdwPwuedz12WrB32omRvbMf/G3zpNARPAldZ1pjE9cqGA BuiRBrEdsh2e6EGDRKBKOBvzrHoYuGYQO/ovTXiEzQIm5hI3rlY48BVf7YhU142D WObTnKi8hXHIcgBa6Dzei2jdHRxnpAyJA+bTeOENMQhjIiTIJgZ2BPr1CuA3V+6/ EaAzpP1ovgxrzgIndlJNb8HkKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5KoNLJ irgt6oAQzVKykwd4ZWSNMB8GA1UdIwQYMBaAFEQcsNhqks7fvoCD3taXom1iPuZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTIzNS9ERDYxRTIyRUM1 REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0LS1nSVBlMXBlaWJXSS01 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCeXcyR3FTenQtLWdJUGUxcGVpYldJLTVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTIzNS9ERDYxRTIyRUM1REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0 LS1nSVBlMXBlaWJXSS01bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7b7DgXP0bQFUHoItraaKCnQBAciQ9yOLU3LBpcWMv9RzEbpnAvWWn JsRDAhCuPW7goR+2yLcU8tmJ7/h9NXd/Shry3Q8i/eCbtZHQefk1EnZ4XWhMBvwU c1PnTkRbTVuEMcKB9lxC5s5NG4efvt4eLp2AQOvZkCJ8UY/RnHuQtr6C1w9bYsrh wMLwcVrKciLdYx7MH40AafGW+7sLRLShPWKqeAlRdrO1amezAOXLQCCl/aCt6OSa QU0XK54kEvQlWCdPu6Cm/78QacyqmKBdn+kfWoTCX5MRKJvCf0r0jq+7ksyoL4L2 mKiyGYekQzy29liBZA+F9mL8L64DeAC0 -----END CERTIFICATE-----Generated at Sun Jul 20 10:43:49 2025 by rpki-client