$ rpki-client -vvf rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft File: RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft (raw, json) Hash identifier: khjZmRHRLdgineovsrJwbixEXUlGd/IhZdwbbwuT40o= Subject key identifier: 0C:B7:0B:CC:4C:00:77:4C:06:DD:2B:F3:E4:86:BE:0A:A3:AC:A3:A6 Authority key identifier: 45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 Certificate issuer: /CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft Manifest number: 0173 Signing time: Thu 21 Aug 2025 04:06:55 +0000 Manifest this update: Thu 21 Aug 2025 04:06:54 +0000 Manifest next update: Thu 28 Aug 2025 04:06:54 +0000 Files and hashes: 1: RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl (hash: vxKM+5qc0Rll/S85Sv3/NXUCDDrVc7zbSoS7xbj+Sgw=) 2: 5D4FB6AA9AB711EE86E1D058C4F9AE02.roa (hash: /lY6MRoQmBol07GaZSzAkv2Tfx/7fsrdKUpKLuZMxDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174589, serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Validity Not Before: Aug 21 04:06:54 2025 GMT Not After : Aug 28 04:06:54 2025 GMT Subject: CN=68a69b5f-9290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f3:61:be:47:4a:5f:46:c9:01:84:ad:fc:97: aa:53:38:8e:89:d9:28:c2:0a:15:54:d5:15:28:ce: 71:79:de:e8:93:5f:1b:a8:77:c7:95:fe:5a:48:0a: dc:76:59:4d:9a:30:75:0a:2f:35:3c:10:52:4a:c9: eb:8b:8f:af:78:28:ba:a5:08:ec:7d:b3:7a:6c:53: 77:3e:cf:40:9a:ab:6e:8c:1c:a1:bc:46:80:a3:c0: 00:05:a4:0a:19:b7:b1:7d:f6:07:db:57:fd:9d:28: cc:4c:68:08:75:3b:2c:29:27:eb:b0:5d:2a:bd:52: b5:f3:5a:50:6b:29:67:e3:4e:d8:49:86:3a:4c:ec: 32:b8:e6:37:aa:c0:14:85:9f:d8:5f:f9:0b:b5:62: fd:d1:f4:02:f1:1e:1f:d4:8e:41:88:fc:2d:2e:03: ef:0f:60:47:3d:b7:17:ad:ea:3c:3d:a5:11:75:3f: 52:15:8d:48:10:5f:c9:1e:6d:00:c8:84:e9:3c:6d: b6:12:4b:62:a5:ef:b4:65:33:c6:54:5c:58:a9:f6: 6d:cb:f0:e7:a7:b9:6a:9e:93:75:b5:28:27:a7:3b: 5f:11:02:8d:71:49:f1:49:ed:c3:f5:c0:0e:e3:1d: f7:33:e5:c8:a6:ae:65:f2:21:fe:30:1c:98:82:7e: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B7:0B:CC:4C:00:77:4C:06:DD:2B:F3:E4:86:BE:0A:A3:AC:A3:A6 X509v3 Authority Key Identifier: keyid:45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:cf:8d:56:5e:a0:e9:e5:68:71:a8:93:cd:0a:e2:5f:bc:03: 49:ee:2e:42:f6:24:e3:58:65:cb:f3:e5:99:13:37:a1:b7:a7: 1c:d5:fe:02:9d:cb:5d:6a:0f:6d:9b:b4:ec:ee:23:03:01:2e: c6:a3:07:43:78:83:2d:f5:7a:b8:d4:57:ba:dd:ad:cd:99:5f: 94:dc:b4:02:76:c2:33:c1:6c:45:ed:75:41:40:0c:8f:2f:04: e0:5c:50:35:a7:8b:7f:f6:33:24:6d:97:c6:10:2c:3b:94:8e: 71:c8:ad:5d:2a:e8:38:e9:52:7d:85:15:7f:c2:0d:9e:d4:36: f3:d5:d7:34:de:18:64:ac:e9:0c:35:70:f2:dd:3f:20:a1:cb: f7:db:d2:b8:f2:0f:6f:17:7f:b3:43:93:1a:bb:44:b3:ac:51: 83:cd:38:91:6d:ac:9b:cc:0f:9d:f4:3a:55:4e:37:1c:3d:07: b7:ed:77:58:2e:ca:1a:90:27:24:15:5f:e3:35:67:79:ed:e8: 8d:b8:86:eb:0b:a3:5a:ca:8f:e4:63:27:65:7d:4c:d4:a8:b5: b4:36:aa:2e:f1:ff:d5:ff:d7:92:63:c7:1e:21:d9:ff:74:e8: bd:ea:7d:46:cb:f5:1d:40:1c:51:e7:05:c4:10:39:d8:b5:35: 41:01:4f:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ1ODkxMTAvBgNVBAUTKDQ1OENERENBM0U4RkI2NEM5RDFBMjM0OTI1MjhCQTc3 N0ZDREQyMzQwHhcNMjUwODIxMDQwNjU0WhcNMjUwODI4MDQwNjU0WjAYMRYwFAYD VQQDEw02OGE2OWI1Zi05MjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PNhvkdKX0bJAYSt/JeqUziOidkowgoVVNUVKM5xed7ok18bqHfHlf5aSArc dllNmjB1Ci81PBBSSsnri4+veCi6pQjsfbN6bFN3Ps9AmqtujByhvEaAo8AABaQK GbexffYH21f9nSjMTGgIdTssKSfrsF0qvVK181pQayln407YSYY6TOwyuOY3qsAU hZ/YX/kLtWL90fQC8R4f1I5BiPwtLgPvD2BHPbcXreo8PaURdT9SFY1IEF/JHm0A yITpPG22Ektipe+0ZTPGVFxYqfZty/Dnp7lqnpN1tSgnpztfEQKNcUnxSe3D9cAO 4x33M+XIpq5l8iH+MByYgn4IRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy3C8xM AHdMBt0r8+SGvgqjrKOmMB8GA1UdIwQYMBaAFEWM3co+j7ZMnRojSSUound/zdI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDU4OS81RkM2MjdDNDYx QzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRreWRHaU5KSlNpNmQzX04w alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZemR5ajZQdGt5ZEdpTkpKU2k2ZDNfTjBqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDU4OS81RkM2MjdDNDYxQzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRr eWRHaU5KSlNpNmQzX04walEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtz41WXqDp5WhxqJPNCuJfvANJ7i5C9iTjWGXL8+WZEzeht6cc1f4C nctdag9tm7Ts7iMDAS7GowdDeIMt9Xq41Fe63a3NmV+U3LQCdsIzwWxF7XVBQAyP LwTgXFA1p4t/9jMkbZfGECw7lI5xyK1dKug46VJ9hRV/wg2e1Dbz1dc03hhkrOkM NXDy3T8gocv329K48g9vF3+zQ5Mau0SzrFGDzTiRbaybzA+d9DpVTjccPQe37XdY LsoakCckFV/jNWd57eiNuIbrC6Nayo/kYydlfUzUqLW0Nqou8f/V/9eSY8ceIdn/ dOi96n1Gy/UdQBxR5wXEEDnYtTVBAU/J -----END CERTIFICATE-----Generated at Sat Aug 23 02:09:13 2025 by rpki-client