$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json) Hash identifier: mUueeGmQQMhMwe/gjxYVjADFQBOglNHsIUYqFb4LyzY= Subject key identifier: 24:60:6C:5D:06:0B:01:51:73:94:77:2D:53:90:EF:E1:29:9E:AE:13 Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft Manifest number: 05 Signing time: Sat 19 Jul 2025 08:29:37 +0000 Manifest this update: Sat 19 Jul 2025 08:29:37 +0000 Manifest next update: Sat 26 Jul 2025 08:29:37 +0000 Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: GNvyKOJCmoNVP4TIkjw8qhVzjJRL8BUAR7Hykec+ME8=) 2: 21C5B04263A311F096468248C4F9AE02.roa (hash: Xzb62xLJbAMEkevYXMmuNbI1IlT4POMgC4Yy3OA8C7k=) 3: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: OVSbJE+Pd0/Klp/U7r6paIfqVvKQjdcHWMz7l5HkgE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Validity Not Before: Jul 19 08:29:37 2025 GMT Not After : Jul 26 08:29:37 2025 GMT Subject: CN=687b5771-6d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:88:b0:54:6b:68:0a:c6:01:39:03:31:ee: fe:f8:6e:49:e0:96:3b:1c:62:75:b3:e5:fa:74:e5: e0:dc:ce:6e:fc:f8:9e:1a:f7:5e:32:56:bc:cf:2d: d8:2b:69:6d:ce:0d:af:d1:c3:5b:5d:e7:fc:61:09: 19:fe:82:9a:e0:9a:fe:9c:12:7e:2a:b2:2e:73:42: 4c:2a:c3:39:d1:bb:72:4e:63:45:8d:66:bd:43:21: 56:17:26:0e:cc:98:be:24:3c:53:04:f3:b4:ed:c6: 81:73:2f:a3:fa:eb:22:c1:cc:d1:00:ec:b6:65:47: 6e:24:48:d7:e0:06:38:dc:b3:a3:20:65:bf:a3:75: 8d:be:7b:68:75:5e:78:e6:04:a6:70:1a:c5:86:73: 72:36:36:59:5f:1d:49:5e:79:47:eb:2d:49:43:50: da:bb:95:78:1c:bb:5e:1e:09:c0:ae:a4:95:3e:2e: 37:14:c1:01:04:ef:e4:17:21:8a:ca:3a:82:5b:6c: cf:68:68:04:37:64:60:f5:99:49:ce:60:40:99:45: e3:7a:19:59:11:d2:e4:1c:1f:3b:68:9b:67:7c:e8: b7:89:36:88:84:0c:48:b2:0e:c9:b3:1e:36:29:5f: a4:21:f4:18:65:db:13:0b:eb:1a:8e:dc:d1:ba:4f: fd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:60:6C:5D:06:0B:01:51:73:94:77:2D:53:90:EF:E1:29:9E:AE:13 X509v3 Authority Key Identifier: keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:b2:50:0c:b3:5e:32:5f:23:08:26:6c:e1:74:74:71:ad:41: bf:f4:a5:a5:40:a1:ce:d7:07:f7:e2:cd:61:30:f7:7c:c5:2f: ef:d0:b0:b3:e8:a3:74:87:49:ea:5e:ca:4a:db:0e:56:a8:7b: 13:cd:2e:f3:54:01:95:87:9f:05:73:e0:56:8a:b3:75:c4:9b: bd:74:26:45:68:11:9a:2f:3e:76:a9:fa:1c:4d:c6:5f:41:75: 47:5b:3a:ff:69:1a:f9:e2:8c:94:66:3d:58:2d:53:f0:32:8d: 2c:9e:c3:7e:8e:b1:43:ea:76:68:c3:da:41:c7:b5:80:ab:bd: c6:90:4d:79:cf:cb:00:3b:ab:a1:1e:25:8d:20:e9:c0:b6:d3: 6a:d7:c7:53:be:38:4a:b9:1b:ac:6d:98:be:97:36:07:95:a9: c5:b9:4c:c6:71:17:7f:12:9e:87:c7:f1:13:f4:0c:36:e3:25: 22:36:b0:b2:24:cb:3e:3e:61:f5:8e:32:11:d0:0b:af:88:7b: e3:bd:f6:a9:12:d8:6a:be:ed:5f:fe:db:0d:b6:c5:f1:ec:b3: df:7e:61:67:a1:5b:d0:46:8d:32:a5:55:fe:64:62:fc:02:3e: bc:71:c3:f9:08:09:e0:77:fc:60:69:8d:36:46:e5:33:7f:46: ab:01:57:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTMwOTExMC8GA1UEBRMoN0Q4RkEwQkVGNkFFRjcxQkRGODgzODU4RjczNjE5RDNC NTlFMjc3NzAeFw0yNTA3MTkwODI5MzdaFw0yNTA3MjYwODI5MzdaMBgxFjAUBgNV BAMTDTY4N2I1NzcxLTZkMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0jYiwVGtoCsYBOQMx7v74bkngljscYnWz5fp05eDczm78+J4a914yVrzPLdgr aW3ODa/Rw1td5/xhCRn+gprgmv6cEn4qsi5zQkwqwznRu3JOY0WNZr1DIVYXJg7M mL4kPFME87TtxoFzL6P66yLBzNEA7LZlR24kSNfgBjjcs6MgZb+jdY2+e2h1Xnjm BKZwGsWGc3I2NllfHUleeUfrLUlDUNq7lXgcu14eCcCupJU+LjcUwQEE7+QXIYrK OoJbbM9oaAQ3ZGD1mUnOYECZReN6GVkR0uQcHztom2d86LeJNoiEDEiyDsmzHjYp X6Qh9Bhl2xML6xqO3NG6T/0fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJGBsXQYL AVFzlHctU5Dv4SmerhMwHwYDVR0jBBgwFoAUfY+gvvau9xvfiDhY9zYZ07WeJ3cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5Lzk4OTFFOTJFNjEz RDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUoz Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZlktZ3Z2YXU5eHZmaURoWTl6WVowN1dlSjNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 MzA5Lzk4OTFFOTJFNjEzRDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2 ZmlEaFk5ellaMDdXZUozYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMWyUAyzXjJfIwgmbOF0dHGtQb/0paVAoc7XB/fizWEw93zFL+/QsLPo o3SHSepeykrbDlaoexPNLvNUAZWHnwVz4FaKs3XEm710JkVoEZovPnap+hxNxl9B dUdbOv9pGvnijJRmPVgtU/AyjSyew36OsUPqdmjD2kHHtYCrvcaQTXnPywA7q6Ee JY0g6cC202rXx1O+OEq5G6xtmL6XNgeVqcW5TMZxF38SnofH8RP0DDbjJSI2sLIk yz4+YfWOMhHQC6+Ie+O99qkS2Gq+7V/+2w22xfHss99+YWehW9BGjTKlVf5kYvwC Prxxw/kICeB3/GBpjTZG5TN/RqsBVwY= -----END CERTIFICATE-----Generated at Sun Jul 20 19:04:02 2025 by rpki-client