$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft File: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json) Hash identifier: 8IPIJ0WRJ8ipAtuaKHPsEyzphzrKL1MMrnSVndYttOQ= Subject key identifier: 51:A7:84:72:79:47:C9:C3:F0:C9:B1:8F:CE:65:66:59:4F:D8:BE:0D Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft Manifest number: 24 Signing time: Mon 21 Jul 2025 08:00:29 +0000 Manifest this update: Mon 21 Jul 2025 08:00:29 +0000 Manifest next update: Mon 28 Jul 2025 08:00:29 +0000 Files and hashes: 1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: 8V9dks91D3v53i1R7Bgv9ZRmzfovc2totiBZ8Vlxq5k=) 2: 0E6E2FF4590A11F0B7FD292DC4F9AE02.roa (hash: 7soTZ6EDnpP6A/A05OpE2en3043bE7DF3odg+8Ew9cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Validity Not Before: Jul 21 08:00:29 2025 GMT Not After : Jul 28 08:00:29 2025 GMT Subject: CN=687df39d-7c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7c:29:0f:9b:ca:75:64:11:77:c3:20:34:7f: c7:c5:5e:34:db:40:fd:ed:d6:e3:1d:2c:60:34:c4: 43:81:fa:5a:b1:36:c4:e9:66:78:c5:36:57:e2:e0: d3:69:81:14:09:3b:1f:b6:c8:d8:c4:71:79:37:e9: 75:f9:f8:74:5e:9f:4f:87:5a:27:47:ad:40:1b:10: 93:7a:16:38:61:27:de:a5:56:a4:73:c9:30:ea:c1: 8e:ac:f1:c1:e1:06:d6:e4:50:fd:52:07:b9:36:f8: c4:e1:6b:6c:c6:d7:c2:61:f1:f5:e2:7e:1d:44:d4: 0f:4e:84:c7:f4:bc:06:d9:e7:3f:d3:e3:e4:fc:01: ca:fd:e7:27:3f:73:f9:85:8a:b7:b0:15:9e:b9:a4: 50:d6:45:e7:21:88:80:fd:c5:b6:4b:f2:f8:f2:25: b4:a7:96:19:75:3f:86:77:d3:16:f3:fa:ec:0e:24: 24:f8:9f:f3:0d:e4:f4:18:ea:2e:ab:24:cc:c0:c6: 10:44:03:64:cc:de:d6:af:5f:76:86:cc:e5:b7:30: c3:93:65:42:64:df:bc:2b:82:6e:20:94:2b:3e:cb: d2:55:4d:4d:f6:9c:d3:96:0e:0c:23:14:ed:f1:c4: 25:10:ef:e2:29:bd:ae:73:94:d1:ae:49:55:08:ff: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A7:84:72:79:47:C9:C3:F0:C9:B1:8F:CE:65:66:59:4F:D8:BE:0D X509v3 Authority Key Identifier: keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:61:c1:89:6d:a7:c9:ea:15:45:02:c8:44:9c:b4:4a:ee:f7: b7:2d:8e:55:3f:64:08:25:14:a3:d2:8f:bc:c0:3d:e3:69:58: 36:82:0e:fd:53:a2:5a:9d:0f:ea:33:f9:76:47:48:98:2c:a6: fc:81:2b:b1:43:1e:35:16:32:d5:a9:9a:e0:16:70:43:8d:5a: 60:e7:ab:af:82:93:b0:c5:a6:9b:44:a5:26:7d:6c:27:86:92: a4:70:64:6b:9f:0c:f0:2a:71:7f:b6:7d:e3:59:7d:eb:09:38: 58:3b:d1:f7:bf:cc:1b:df:a8:34:c0:52:f5:8a:d3:81:db:0c: 82:ad:76:9b:3c:70:8e:2d:c4:1a:92:c0:43:f2:86:61:b9:4a: 35:32:5d:54:5e:27:ea:36:75:5f:44:50:3e:d0:32:f9:c5:ad: 69:7e:4a:4c:75:2e:b1:93:ff:c8:63:98:d2:5a:2e:bf:c0:45: 0b:b8:83:0e:02:fe:f9:b5:34:44:bb:5c:bf:9e:8a:96:aa:76: bb:8d:82:ac:24:e5:80:8c:1b:05:df:fc:2d:ce:56:db:1e:fe: f1:82:fd:6a:87:a8:9d:a2:1d:6e:eb:ea:58:f1:c2:d2:4e:7b: 10:02:a7:b8:97:bb:74:27:a4:59:1a:66:b5:7f:2a:f9:9c:21: d9:2b:24:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoRUY3NjJDQzk0MjE5RTA5OTIzQTExQjBEM0M0MzBFN0Yz NUM4RDg2NDAeFw0yNTA3MjEwODAwMjlaFw0yNTA3MjgwODAwMjlaMBgxFjAUBgNV BAMTDTY4N2RmMzlkLTdjMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgfCkPm8p1ZBF3wyA0f8fFXjTbQP3t1uMdLGA0xEOB+lqxNsTpZnjFNlfi4NNp gRQJOx+2yNjEcXk36XX5+HRen0+HWidHrUAbEJN6FjhhJ96lVqRzyTDqwY6s8cHh BtbkUP1SB7k2+MTha2zG18Jh8fXifh1E1A9OhMf0vAbZ5z/T4+T8Acr95yc/c/mF irewFZ65pFDWRechiID9xbZL8vjyJbSnlhl1P4Z30xbz+uwOJCT4n/MN5PQY6i6r JMzAxhBEA2TM3tavX3aGzOW3MMOTZUJk37wrgm4glCs+y9JVTU32nNOWDgwjFO3x xCUQ7+Ipva5zlNGuSVUI/xzrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUaeEcnlH ycPwybGPzmVmWU/Yvg0wHwYDVR0jBBgwFoAU73YsyUIZ4JkjoRsNPEMOfzXI2GQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzI3QkU4NDBFMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzNZc3lVSVo0Smtqb1JzTlBFTU9melhJMkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzI3QkU4NDBFMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpr am9Sc05QRU1PZnpYSTJHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNhwYltp8nqFUUCyESctEru97ctjlU/ZAglFKPSj7zAPeNpWDaCDv1T olqdD+oz+XZHSJgspvyBK7FDHjUWMtWpmuAWcEONWmDnq6+Ck7DFpptEpSZ9bCeG kqRwZGufDPAqcX+2feNZfesJOFg70fe/zBvfqDTAUvWK04HbDIKtdps8cI4txBqS wEPyhmG5SjUyXVReJ+o2dV9EUD7QMvnFrWl+Skx1LrGT/8hjmNJaLr/ARQu4gw4C /vm1NES7XL+eipaqdruNgqwk5YCMGwXf/C3OVtse/vGC/WqHqJ2iHW7r6ljxwtJO exACp7iXu3QnpFkaZrV/KvmcIdkrJIE= -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:47 2025 by rpki-client