$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft File: y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json) Hash identifier: Eh7Ofjkxl1ORZAWYbLGGheq6QFXSAHMXb0l4RJr8/QA= Subject key identifier: E8:7C:39:05:83:88:1F:1B:CB:64:ED:5D:0D:5F:8E:68:54:54:96:11 Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 Certificate issuer: /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft Manifest number: 017B Signing time: Mon 21 Jul 2025 03:45:50 +0000 Manifest this update: Mon 21 Jul 2025 03:45:50 +0000 Manifest next update: Mon 28 Jul 2025 03:45:50 +0000 Files and hashes: 1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: cGbfttZXpAg+aX9uV2ACD8wGKgs8zsaVCkr9KPz/wnE=) 2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: Ae2kzkiPbHsneEUo3gobHEERA3S8mH2dAIJpdvxeRck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Validity Not Before: Jul 21 03:45:50 2025 GMT Not After : Jul 28 03:45:50 2025 GMT Subject: CN=687db7ee-ce7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b6:9c:16:df:ef:5b:0d:04:14:da:bd:f6:8e: e1:57:7d:4d:1a:07:da:71:95:b5:32:a5:bb:aa:cb: c2:b6:c0:8b:9f:13:65:95:90:68:24:37:6c:ed:97: f5:a7:eb:aa:d1:81:34:40:22:64:71:07:89:be:df: 42:99:24:6d:2b:72:93:70:4e:4b:cd:40:36:de:18: f9:09:4f:e7:82:fc:36:e0:78:cd:4d:7a:3c:be:4d: 88:0a:38:89:28:60:8a:e0:c9:16:ae:76:09:46:e0: 4a:2a:55:53:0f:9c:6d:ff:3a:2a:3e:ae:7c:2a:74: ff:31:62:f6:a4:e8:cb:7d:2f:69:58:c4:44:75:e7: 03:02:98:9b:8f:10:55:59:14:12:38:f3:0b:b7:e8: 86:fe:d0:3d:0f:4e:6f:09:a3:b3:e2:d7:cf:1c:75: a1:1f:29:26:48:1d:ba:7c:1b:ed:d9:68:c1:9b:f8: 7e:b1:83:cd:ee:1a:35:37:c5:36:d4:e9:e7:d3:f3: dc:91:74:f9:28:18:95:8a:97:80:89:b3:85:46:32: e1:1a:2a:96:1e:61:15:e7:f4:42:eb:63:a6:ee:a5: 92:2b:78:68:d3:f3:d0:d0:40:02:d9:0a:d6:8d:c4: 81:48:9e:dc:73:ca:0b:58:90:87:68:68:5c:1b:89: 77:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7C:39:05:83:88:1F:1B:CB:64:ED:5D:0D:5F:8E:68:54:54:96:11 X509v3 Authority Key Identifier: keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:08:12:5b:97:b6:94:08:6c:ba:7d:83:0a:21:39:33:59:5d: 18:b5:ae:82:e7:42:15:e1:a8:08:71:1d:b1:6e:ef:39:a1:43: cf:9a:de:dc:19:d4:ab:8e:7b:d9:56:a3:b0:c1:4c:70:17:63: e3:fc:b4:c3:b2:86:1a:30:85:b7:a5:84:3d:5c:2c:ee:02:0a: a4:07:7f:86:33:c5:c8:3c:ab:dd:8a:b7:60:4d:e1:91:36:0e: 96:20:52:dd:16:fa:8e:87:f5:65:e1:20:7c:ca:a7:ad:a0:7f: fc:5d:9c:0b:09:88:33:ba:6e:39:37:9f:a3:5b:51:98:3d:57: 50:27:78:fd:49:4a:f2:2e:4f:ce:66:ca:21:0a:9d:a4:58:aa: d5:e5:93:43:b9:bb:18:40:b6:a1:64:f7:30:e7:2d:22:00:a3: af:84:40:3e:53:e9:9e:4b:f6:59:00:fb:3d:6d:fc:3f:82:6a: 4b:55:85:ec:12:f7:b4:0d:a4:3d:44:d0:a8:69:a0:c2:93:cf: 67:70:37:96:2a:07:c5:95:90:41:cd:f8:67:67:2f:d2:d7:68: bf:ac:b8:1e:d1:14:9e:a3:c0:2a:98:71:ab:15:42:f9:a8:40: 34:25:a5:69:f4:1c:be:31:92:fa:57:92:31:c8:59:8d:4d:18: 88:a1:0e:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0NUIxMTAvBgNVBAUTKENCNzRENTYxM0Q3MzQyQ0ZCOUI3Rjc5REVGMEM5RkFE ODg1Qzc4MjIwHhcNMjUwNzIxMDM0NTUwWhcNMjUwNzI4MDM0NTUwWjAYMRYwFAYD VQQDEw02ODdkYjdlZS1jZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9LacFt/vWw0EFNq99o7hV31NGgfacZW1MqW7qsvCtsCLnxNllZBoJDds7Zf1 p+uq0YE0QCJkcQeJvt9CmSRtK3KTcE5LzUA23hj5CU/ngvw24HjNTXo8vk2ICjiJ KGCK4MkWrnYJRuBKKlVTD5xt/zoqPq58KnT/MWL2pOjLfS9pWMREdecDApibjxBV WRQSOPMLt+iG/tA9D05vCaOz4tfPHHWhHykmSB26fBvt2WjBm/h+sYPN7ho1N8U2 1Onn0/PckXT5KBiVipeAibOFRjLhGiqWHmEV5/RC62Om7qWSK3ho0/PQ0EAC2QrW jcSBSJ7cc8oLWJCHaGhcG4l3FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOh8OQWD iB8by2TtXQ1fjmhUVJYRMB8GA1UdIwQYMBaAFMt01WE9c0LPubf3ne8Mn62IXHgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQ1Qi85NzM2OUI0NjIx NzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFzLTV0X2VkN3d5ZnJZaGNl Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzVFZZVDF6UXMtNXRfZWQ3d3lmclloY2VDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQ1Qi85NzM2OUI0NjIxNzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFz LTV0X2VkN3d5ZnJZaGNlQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZCBJbl7aUCGy6fYMKITkzWV0Yta6C50IV4agIcR2xbu85oUPPmt7c GdSrjnvZVqOwwUxwF2Pj/LTDsoYaMIW3pYQ9XCzuAgqkB3+GM8XIPKvdirdgTeGR Ng6WIFLdFvqOh/Vl4SB8yqetoH/8XZwLCYgzum45N5+jW1GYPVdQJ3j9SUryLk/O ZsohCp2kWKrV5ZNDubsYQLahZPcw5y0iAKOvhEA+U+meS/ZZAPs9bfw/gmpLVYXs Eve0DaQ9RNCoaaDCk89ncDeWKgfFlZBBzfhnZy/S12i/rLge0RSeo8AqmHGrFUL5 qEA0JaVp9By+MZL6V5IxyFmNTRiIoQ5h -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:45 2025 by rpki-client