$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft File: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json) Hash identifier: IBH41h3+EaxKftKw73nG/dPKhwZftjRlP2HgpoL63Q4= Subject key identifier: 2C:1A:45:77:B6:95:BA:8A:53:85:DC:26:46:03:09:AA:A2:79:88:89 Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft Manifest number: 3E Signing time: Tue 09 Sep 2025 07:38:08 +0000 Manifest this update: Tue 09 Sep 2025 07:38:08 +0000 Manifest next update: Tue 16 Sep 2025 07:38:08 +0000 Files and hashes: 1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: FKMtMIWqwaLVs++Ey051IQy4faw/oa2lOBG9Kcg0ZJE=) 2: 0E6E2FF4590A11F0B7FD292DC4F9AE02.roa (hash: 7soTZ6EDnpP6A/A05OpE2en3043bE7DF3odg+8Ew9cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Validity Not Before: Sep 9 07:38:08 2025 GMT Not After : Sep 16 07:38:08 2025 GMT Subject: CN=68bfd960-425b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:70:82:53:d1:17:3d:88:95:5a:ae:13:47:c3: 56:97:b4:d8:cb:18:b1:4e:48:92:bc:15:9f:2e:2c: 66:27:e1:99:39:35:a5:19:e9:8c:99:5e:b3:67:4e: 18:df:88:fb:05:90:7c:94:a1:ed:0e:9a:47:08:0e: 50:9a:61:f6:06:19:1f:53:f7:b2:5d:22:ee:b9:a3: 4d:56:9a:dc:f1:06:9d:85:f2:06:bc:68:c7:c5:cd: 70:df:67:2f:bd:b9:8a:d8:05:8a:7c:f4:46:a7:8e: ee:75:c0:7c:48:c2:d8:7d:64:10:3b:bf:9b:e2:09: 4b:20:c4:1a:87:f1:1b:ff:d2:72:2f:09:7c:16:61: 6f:88:9d:aa:d9:b7:3e:ea:de:ab:e7:1b:77:72:a4: 24:f2:84:56:ec:ad:a7:bc:f6:9c:d9:a0:29:53:f0: 3b:94:c9:a8:99:52:75:aa:d5:20:af:6a:39:27:42: 84:2c:6e:69:2e:39:a4:5e:91:4a:36:44:3b:9a:63: bb:49:aa:c5:cf:f4:38:74:e7:49:73:7f:19:e1:73: 92:44:6c:9d:7e:a6:59:62:98:65:17:a3:59:79:3f: ef:fa:e3:f3:69:f9:9c:89:74:42:46:53:bc:68:ac: 31:db:74:16:44:3c:3e:04:31:56:4c:85:dd:e6:ff: f8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1A:45:77:B6:95:BA:8A:53:85:DC:26:46:03:09:AA:A2:79:88:89 X509v3 Authority Key Identifier: keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a8:ab:27:47:8d:01:86:96:08:5b:b9:79:36:b6:dc:90:0a: 2f:f1:8e:da:eb:0f:8f:8e:e6:70:6e:a9:b0:13:53:0b:dc:bc: 68:04:37:31:0c:73:a3:d4:e8:8a:1c:95:db:37:ec:47:ed:16: 89:39:77:87:d1:6a:c8:f4:7b:8a:4c:4d:b3:90:24:9e:80:31: 44:a1:ef:26:ed:22:0e:c0:4b:59:ad:67:dc:0d:27:2a:69:6a: 52:a9:c8:16:62:75:8a:59:99:0e:43:27:2e:eb:34:e0:7a:d6: fa:f8:2f:ab:4b:50:82:7a:dd:cc:0f:68:83:1b:b9:dc:17:16: 29:e6:85:90:ac:29:1f:a3:8d:32:ac:47:5d:89:e4:11:17:2a: 2b:20:49:8e:2b:b6:12:ac:b8:02:84:88:7b:4f:b0:cf:0f:a8: e6:a2:d9:bb:43:bf:30:cf:2d:d3:60:ee:e9:8d:02:a5:dc:9b: 60:90:1a:a2:03:16:05:a9:8d:95:c8:e9:5f:d4:50:c4:0b:27: 0d:32:79:b9:ad:d8:12:e0:dc:ff:dc:cb:be:f9:d5:ba:97:70: 25:fe:7f:1e:3a:cc:1d:96:f8:e4:b4:58:a5:2e:1c:ae:84:d5: 9c:68:45:56:86:90:23:60:e5:1d:87:a4:85:0a:81:90:1e:f2: 0b:e0:60:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoRUY3NjJDQzk0MjE5RTA5OTIzQTExQjBEM0M0MzBFN0Yz NUM4RDg2NDAeFw0yNTA5MDkwNzM4MDhaFw0yNTA5MTYwNzM4MDhaMBgxFjAUBgNV BAMTDTY4YmZkOTYwLTQyNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDccIJT0Rc9iJVarhNHw1aXtNjLGLFOSJK8FZ8uLGYn4Zk5NaUZ6YyZXrNnThjf iPsFkHyUoe0OmkcIDlCaYfYGGR9T97JdIu65o01WmtzxBp2F8ga8aMfFzXDfZy+9 uYrYBYp89Eanju51wHxIwth9ZBA7v5viCUsgxBqH8Rv/0nIvCXwWYW+InarZtz7q 3qvnG3dypCTyhFbsrae89pzZoClT8DuUyaiZUnWq1SCvajknQoQsbmkuOaRekUo2 RDuaY7tJqsXP9Dh050lzfxnhc5JEbJ1+pllimGUXo1l5P+/64/Np+ZyJdEJGU7xo rDHbdBZEPD4EMVZMhd3m//jfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULBpFd7aV uopThdwmRgMJqqJ5iIkwHwYDVR0jBBgwFoAU73YsyUIZ4JkjoRsNPEMOfzXI2GQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzI3QkU4NDBFMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzNZc3lVSVo0Smtqb1JzTlBFTU9melhJMkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzI3QkU4NDBFMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpr am9Sc05QRU1PZnpYSTJHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHaoqydHjQGGlghbuXk2ttyQCi/xjtrrD4+O5nBuqbATUwvcvGgENzEM c6PU6Ioclds37EftFok5d4fRasj0e4pMTbOQJJ6AMUSh7ybtIg7AS1mtZ9wNJypp alKpyBZidYpZmQ5DJy7rNOB61vr4L6tLUIJ63cwPaIMbudwXFinmhZCsKR+jjTKs R12J5BEXKisgSY4rthKsuAKEiHtPsM8PqOai2btDvzDPLdNg7umNAqXcm2CQGqID FgWpjZXI6V/UUMQLJw0yebmt2BLg3P/cy7751bqXcCX+fx46zB2W+OS0WKUuHK6E 1ZxoRVaGkCNg5R2HpIUKgZAe8gvgYKY= -----END CERTIFICATE-----Generated at Tue Sep 9 17:09:36 2025 by rpki-client