$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json) Hash identifier: sp7cDaw9yOvp9gE87gL2SbqxLaMK9RqqzRkHLFIyQ4Y= Subject key identifier: DE:2A:57:2A:4F:E2:CD:E3:8C:0E:10:A2:AF:64:13:61:F3:C2:85:9B Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft Manifest number: 0178 Signing time: Mon 21 Jul 2025 04:09:19 +0000 Manifest this update: Mon 21 Jul 2025 04:09:19 +0000 Manifest next update: Mon 28 Jul 2025 04:09:19 +0000 Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: lyhXcYuPeDNSBJScG0qqY0QPmVU75EyJKw1toxZMzwA=) 2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: 0UB6vf7tsJ4/eqdU0xPwdgNnTiXM+SW0/ez8sQsDOEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Validity Not Before: Jul 21 04:09:19 2025 GMT Not After : Jul 28 04:09:19 2025 GMT Subject: CN=687dbd6f-14a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:40:bb:c1:93:ae:c4:e1:bc:ea:66:31:a2: 21:cc:3a:ea:4c:f8:ad:e7:a9:68:f7:3e:21:65:38: 10:0a:20:63:04:04:27:23:d2:15:cb:5b:c8:e8:8b: c1:26:78:9e:0a:9d:f1:fe:7a:ff:c9:6a:2e:11:cf: 56:61:59:8d:c2:97:61:e4:7e:3e:9f:71:75:56:94: 7b:ee:2a:44:1f:8d:d0:3a:ba:93:28:40:a4:01:3b: 90:70:b5:bc:9d:cb:ed:d9:c1:34:56:f2:9d:8d:7c: 67:1f:47:8c:c8:ac:7a:cf:62:f7:8a:2c:d1:4a:84: cc:b1:07:d9:61:13:97:87:be:85:1e:6d:c1:96:fa: 81:03:42:17:6d:58:84:0f:e1:36:fd:b9:1c:a5:27: 75:0e:9f:c1:9e:21:d1:02:b9:74:cd:31:b1:cf:d4: d7:6d:f2:0f:c9:ae:be:9a:d0:3e:aa:83:39:75:f7: 23:5f:d6:be:5b:c5:7e:6f:75:a1:63:01:27:ee:5d: 55:c9:2a:c5:b3:69:56:4a:52:d2:fc:f2:87:a7:59: a2:81:28:08:47:3b:3b:14:3d:a5:4c:1b:37:a7:cd: fb:96:ff:bc:e0:b9:89:14:da:e0:db:4b:d0:42:a3: 34:47:a4:b5:17:68:e6:5c:02:26:aa:ad:1b:ab:07: 59:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2A:57:2A:4F:E2:CD:E3:8C:0E:10:A2:AF:64:13:61:F3:C2:85:9B X509v3 Authority Key Identifier: keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:26:a1:77:d1:48:6d:2a:97:60:17:26:b4:3f:bb:88:2e:0c: 73:7d:ab:e7:87:de:9b:e6:ce:37:f4:17:8f:51:ac:d3:84:4f: b9:ad:25:62:0e:aa:73:d1:de:18:be:0c:85:d2:55:51:22:b8: 91:32:72:48:59:00:67:7e:84:e0:a8:a3:19:cb:dd:fb:24:21: 44:d7:0a:b9:40:dc:75:ec:ff:38:55:7a:87:2b:ff:5a:b5:67: 36:55:f9:63:95:70:41:db:26:97:e9:0b:18:4e:b2:9a:9a:81: c0:d2:81:ae:09:45:4a:20:a2:fa:78:37:3d:70:e9:c9:fd:3c: a3:bf:e6:cd:ae:29:1d:b9:d7:15:ff:16:29:07:73:99:af:d0: 7a:7c:6b:8f:4d:a8:e8:fc:b4:d0:a4:33:a9:a5:cd:2d:23:7f: 19:4f:01:49:ce:6d:ce:11:95:a3:2b:98:73:32:5a:ce:bf:f5: 30:59:49:20:7e:1d:46:fa:9f:15:b0:b6:5b:15:7e:e5:d3:a0: 8b:51:cf:82:eb:83:b6:17:21:10:47:d4:bc:fb:bc:4a:e3:44: e0:c5:5b:e0:41:06:1a:5b:b1:d5:ba:ad:7c:fb:9c:a7:9e:52: f5:6b:ab:71:b4:0f:f2:27:4c:39:df:09:47:7f:4a:a4:c4:8d: 51:1f:8b:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2 RDY3NzU4MDkwHhcNMjUwNzIxMDQwOTE5WhcNMjUwNzI4MDQwOTE5WjAYMRYwFAYD VQQDEw02ODdkYmQ2Zi0xNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+tAu8GTrsThvOpmMaIhzDrqTPit56lo9z4hZTgQCiBjBAQnI9IVy1vI6IvB JnieCp3x/nr/yWouEc9WYVmNwpdh5H4+n3F1VpR77ipEH43QOrqTKECkATuQcLW8 ncvt2cE0VvKdjXxnH0eMyKx6z2L3iizRSoTMsQfZYROXh76FHm3BlvqBA0IXbViE D+E2/bkcpSd1Dp/BniHRArl0zTGxz9TXbfIPya6+mtA+qoM5dfcjX9a+W8V+b3Wh YwEn7l1VySrFs2lWSlLS/PKHp1migSgIRzs7FD2lTBs3p837lv+84LmJFNrg20vQ QqM0R6S1F2jmXAImqq0bqwdZeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4qVypP 4s3jjA4Qoq9kE2HzwoWbMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZX Nk9zVS1WUHExanR0WjNXQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKJqF30UhtKpdgFya0P7uILgxzfavnh96b5s439BePUazThE+5rSVi Dqpz0d4YvgyF0lVRIriRMnJIWQBnfoTgqKMZy937JCFE1wq5QNx17P84VXqHK/9a tWc2VfljlXBB2yaX6QsYTrKamoHA0oGuCUVKIKL6eDc9cOnJ/Tyjv+bNrikdudcV /xYpB3OZr9B6fGuPTajo/LTQpDOppc0tI38ZTwFJzm3OEZWjK5hzMlrOv/UwWUkg fh1G+p8VsLZbFX7l06CLUc+C64O2FyEQR9S8+7xK40TgxVvgQQYaW7HVuq18+5yn nlL1a6txtA/yJ0w53wlHf0qkxI1RH4sp -----END CERTIFICATE-----Generated at Mon Jul 21 12:46:02 2025 by rpki-client