$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json) Hash identifier: T25dHFWNl/j9MJq4O4Bsg38Tgmoh4VgCg9Cap8Mws+M= Subject key identifier: 01:A7:7C:E3:20:DB:DF:DD:B9:AB:30:14:54:D0:9E:AF:C2:9E:04:19 Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft Manifest number: 32 Signing time: Fri 05 Sep 2025 08:09:13 +0000 Manifest this update: Fri 05 Sep 2025 08:09:13 +0000 Manifest next update: Fri 12 Sep 2025 08:09:13 +0000 Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: CYoT2yWOJyJM4RnkxlyARZrzK2Qbgka0804RUvNExnc=) 2: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: WkC734Z9YLqp46ED9zzrP9DX1ES2VdVVIimzvDKW6/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Validity Not Before: Sep 5 08:09:13 2025 GMT Not After : Sep 12 08:09:13 2025 GMT Subject: CN=68ba9aa9-8633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:07:2a:37:1a:79:a2:7c:2a:a7:a4:de:b3:21: f6:21:ca:28:81:00:51:38:53:ef:68:40:7e:50:62: c4:45:fa:d6:29:6d:c7:3b:dd:ea:e4:e8:2f:e9:8e: c4:0b:c1:93:81:a7:ef:c3:44:28:b3:70:2d:d1:c1: 45:65:cd:3d:de:38:89:29:1b:63:11:a4:70:59:59: 0f:ce:3b:42:5e:7f:e4:bf:0b:c2:62:c0:fc:c5:ca: f8:fd:0a:49:43:d9:d5:71:26:af:23:5a:bb:14:ca: e0:e0:3d:78:49:d1:ec:b1:08:68:c1:95:b5:18:49: 3c:41:89:ff:dd:02:be:8b:71:24:c7:8f:47:c6:2c: 9d:3e:0c:8e:21:02:1c:45:89:ea:c7:a8:30:f6:b5: 99:c9:c0:51:13:db:5d:f8:4b:c7:aa:ed:a6:2d:e2: e1:08:9d:b9:01:dd:c9:43:d4:de:fd:e4:cd:5d:e9: 5d:77:e2:e0:9e:cf:19:73:68:c8:df:64:6c:51:a4: a0:98:02:e2:07:79:e1:9c:06:5a:3d:17:e3:6a:08: 2d:ee:f2:53:aa:f5:ad:30:c2:e5:5c:0c:51:bb:e0: bb:d0:3e:6a:5e:3d:b7:60:0d:76:d8:47:21:95:db: 25:eb:1c:02:9c:0f:d2:4a:74:4a:16:4f:2f:32:b1: 9c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A7:7C:E3:20:DB:DF:DD:B9:AB:30:14:54:D0:9E:AF:C2:9E:04:19 X509v3 Authority Key Identifier: keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b6:60:92:e2:04:82:44:0e:b3:de:db:fa:1d:b4:15:42:83: 95:a1:51:1b:5f:74:fe:9d:75:f9:a6:ec:76:78:14:9b:32:eb: 3b:b7:96:6d:d9:86:d0:bc:92:ad:27:c6:a6:19:45:14:95:9a: ec:b0:13:57:dd:cb:33:79:dd:94:b4:91:5e:bf:4f:f2:28:33: ab:73:f9:b6:b1:19:91:bd:01:eb:48:c3:26:d8:9c:ad:a5:f1: b5:51:70:3e:b3:04:da:39:b7:42:11:46:d9:a1:89:f3:b7:92: a8:25:75:87:15:e2:8c:af:65:d9:90:8e:dd:b9:58:6c:0b:cf: fb:0e:00:7b:eb:5f:c0:42:97:23:f7:34:49:e6:92:d7:34:eb: 0c:44:b4:b1:88:07:4a:7b:c0:cf:21:b7:ca:01:4e:64:2d:a5: 09:c6:55:55:b5:8c:29:76:13:bb:60:d2:5b:c5:0a:42:17:c0: 0b:07:e5:dd:94:b0:7b:7a:d3:3d:d2:f0:35:76:c7:a8:57:7e: 09:c4:d9:b3:a0:53:b4:d1:70:4e:29:09:a2:fb:f6:ed:d1:c6: 22:af:b3:05:51:0f:a3:52:3f:42:53:76:23:74:96:ba:ea:a4: eb:4e:ad:64:73:9f:fd:b9:b9:48:56:82:4e:37:c9:3c:d4:4e: 8b:ab:9d:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoQTU4QURBQ0VGOUQyNDU1M0E1NTY0NkI1QTZFQkNDRUFC MTlGMkZCQzAeFw0yNTA5MDUwODA5MTNaFw0yNTA5MTIwODA5MTNaMBgxFjAUBgNV BAMTDTY4YmE5YWE5LTg2MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2Byo3GnmifCqnpN6zIfYhyiiBAFE4U+9oQH5QYsRF+tYpbcc73erk6C/pjsQL wZOBp+/DRCizcC3RwUVlzT3eOIkpG2MRpHBZWQ/OO0Jef+S/C8JiwPzFyvj9CklD 2dVxJq8jWrsUyuDgPXhJ0eyxCGjBlbUYSTxBif/dAr6LcSTHj0fGLJ0+DI4hAhxF ierHqDD2tZnJwFET2134S8eq7aYt4uEInbkB3clD1N795M1d6V134uCezxlzaMjf ZGxRpKCYAuIHeeGcBlo9F+NqCC3u8lOq9a0wwuVcDFG74LvQPmpePbdgDXbYRyGV 2yXrHAKcD9JKdEoWTy8ysZyJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAad84yDb 3925qzAUVNCer8KeBBkwHwYDVR0jBBgwFoAUpYrazvnSRVOlVka1puvM6rGfL7ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzQ0RjE0QUZDNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL3BZcmF6dm5TUlZPbFZrYTFwdXZNNnJHZkw3 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcFlyYXp2blNSVk9sVmthMXB1dk02ckdmTDd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzQ0RjE0QUZDNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL3BZcmF6dm5TUlZP bFZrYTFwdXZNNnJHZkw3dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJO2YJLiBIJEDrPe2/odtBVCg5WhURtfdP6ddfmm7HZ4FJsy6zu3lm3Z htC8kq0nxqYZRRSVmuywE1fdyzN53ZS0kV6/T/IoM6tz+baxGZG9AetIwybYnK2l 8bVRcD6zBNo5t0IRRtmhifO3kqgldYcV4oyvZdmQjt25WGwLz/sOAHvrX8BClyP3 NEnmktc06wxEtLGIB0p7wM8ht8oBTmQtpQnGVVW1jCl2E7tg0lvFCkIXwAsH5d2U sHt60z3S8DV2x6hXfgnE2bOgU7TRcE4pCaL79u3RxiKvswVRD6NSP0JTdiN0lrrq pOtOrWRzn/25uUhWgk43yTzUTournb8= -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:07 2025 by rpki-client