$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft File: pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json) Hash identifier: BDbw94EgPxfUGZV353KA9MFzaW96Smd2zv1DEWoUJqQ= Subject key identifier: 21:C3:50:B3:5E:06:30:D8:4B:08:E4:F1:1F:D3:47:C7:E3:44:16:2C Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 Certificate issuer: /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft Manifest number: 03EC Signing time: Fri 01 Aug 2025 01:44:13 +0000 Manifest this update: Fri 01 Aug 2025 01:44:13 +0000 Manifest next update: Fri 08 Aug 2025 01:44:13 +0000 Files and hashes: 1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: uonlqJg68UGjDWGLj+48W8HVM+7X6syoTr7RGNL0kYg=) 2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: XoAJoR31rueqw0a2nwDJzng/mfgTR8dQxHSL0vNo72U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 01:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Validity Not Before: Aug 1 01:44:13 2025 GMT Not After : Aug 8 01:44:13 2025 GMT Subject: CN=688c1bed-89be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:2d:53:e8:e5:f2:53:11:5d:c2:27:4f:e4: 76:ac:fd:ae:69:fb:2f:bf:08:82:10:06:aa:65:90: 82:3c:cb:03:d5:9c:6f:fd:6e:d6:31:ce:65:a2:db: fc:ae:b5:2f:a0:61:02:99:81:89:47:7b:f5:67:37: 80:40:de:3b:4d:92:fe:f4:04:b5:21:ce:b5:6b:cf: 9e:95:0d:12:4c:4a:2c:92:e5:1e:aa:d6:85:a1:09: 63:07:7c:21:d4:c7:93:05:14:da:d9:49:54:0c:2a: c1:f3:fb:9f:78:aa:49:63:a8:95:e3:d0:c4:71:a2: 54:cb:b1:29:aa:ac:b9:04:7a:f7:5e:ad:5e:fa:5e: d8:77:bf:7b:b3:96:55:00:bb:6a:8f:9d:c5:d6:1b: 41:dd:8e:a8:ee:d3:a5:d9:d6:f1:00:bb:ca:01:bd: 9f:58:4f:ca:ab:af:dd:92:9c:2d:99:67:16:f7:a6: 74:18:09:89:fa:65:72:e5:2f:8f:f8:dd:47:2a:c0: f8:c8:d9:24:8b:c4:64:42:16:65:28:f5:66:b0:25: 3b:c4:11:53:d7:03:b3:94:93:84:d7:c5:c5:dc:47: ec:ac:5c:1c:93:b8:f5:fe:0c:3b:77:4b:66:48:f1: 61:ee:33:78:e7:f8:47:b7:5c:c4:de:13:ff:bc:f3: c6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C3:50:B3:5E:06:30:D8:4B:08:E4:F1:1F:D3:47:C7:E3:44:16:2C X509v3 Authority Key Identifier: keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:36:ec:3f:65:75:51:40:27:07:33:59:3f:58:4e:b0:a8:b8: a3:94:a9:1a:3d:42:5e:28:2e:5f:57:df:84:1e:40:40:5b:b3: 97:ef:bb:b4:51:ec:f1:0b:c8:2f:d4:34:19:4a:1c:34:06:17: 18:a3:92:ab:9c:c2:21:5a:e4:df:b2:42:54:45:9d:30:91:3a: 26:79:5d:0e:6d:da:94:84:68:a9:e7:7a:48:36:14:ec:72:a3: a7:c6:c7:c6:e6:5b:be:d3:76:f9:96:0a:6f:1c:36:ab:f1:8c: 3a:bc:1f:97:9f:b2:79:d5:b5:df:71:a7:af:07:f4:9b:f1:2d: 49:b8:82:2d:26:8e:9e:e7:c7:d3:90:c7:8a:91:c3:97:72:49: ef:39:82:fb:30:17:f5:e9:50:49:23:b1:b0:32:f7:2e:9d:ad: c0:2c:f1:4c:6e:53:e6:63:39:4a:3f:fe:c6:20:ba:f2:59:9f: 5a:7a:40:1f:9c:06:8e:d9:d2:b8:dc:8b:db:69:59:b4:3e:0b: 16:28:52:0e:08:a4:72:26:32:84:a8:bb:3c:ff:c1:fe:db:f7: ac:3f:16:bf:2c:b3:60:55:5a:f0:e7:ef:da:4b:49:1f:5a:f7: 24:25:25:6e:18:c7:14:8d:45:93:5a:9c:31:fb:01:2e:b2:4e: 97:b8:e3:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMDQxMTAvBgNVBAUTKEE1ODI1MEFFQUIxM0I4RDNEMzI3OUUzMjJFMTgxMkZE QUQ0NkQ2MjkwHhcNMjUwODAxMDE0NDEzWhcNMjUwODA4MDE0NDEzWjAYMRYwFAYD VQQDEw02ODhjMWJlZC04OWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cktU+jl8lMRXcInT+R2rP2uafsvvwiCEAaqZZCCPMsD1Zxv/W7WMc5lotv8 rrUvoGECmYGJR3v1ZzeAQN47TZL+9AS1Ic61a8+elQ0STEoskuUeqtaFoQljB3wh 1MeTBRTa2UlUDCrB8/ufeKpJY6iV49DEcaJUy7Epqqy5BHr3Xq1e+l7Yd797s5ZV ALtqj53F1htB3Y6o7tOl2dbxALvKAb2fWE/Kq6/dkpwtmWcW96Z0GAmJ+mVy5S+P +N1HKsD4yNkki8RkQhZlKPVmsCU7xBFT1wOzlJOE18XF3EfsrFwck7j1/gw7d0tm SPFh7jN45/hHt1zE3hP/vPPGrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHDULNe BjDYSwjk8R/TR8fjRBYsMB8GA1UdIwQYMBaAFKWCUK6rE7jT0yeeMi4YEv2tRtYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIwNC82NDJFMDdEQzg4 QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVOUFRKNTR5TGhnU19hMUcx aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZSlFycXNUdU5QVEo1NHlMaGdTX2ExRzFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIwNC82NDJFMDdEQzg4QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVO UFRKNTR5TGhnU19hMUcxaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeNuw/ZXVRQCcHM1k/WE6wqLijlKkaPUJeKC5fV9+EHkBAW7OX77u0 UezxC8gv1DQZShw0BhcYo5KrnMIhWuTfskJURZ0wkTomeV0ObdqUhGip53pINhTs cqOnxsfG5lu+03b5lgpvHDar8Yw6vB+Xn7J51bXfcaevB/Sb8S1JuIItJo6e58fT kMeKkcOXcknvOYL7MBf16VBJI7GwMvcuna3ALPFMblPmYzlKP/7GILryWZ9aekAf nAaO2dK43IvbaVm0PgsWKFIOCKRyJjKEqLs8/8H+2/esPxa/LLNgVVrw5+/aS0kf WvckJSVuGMcUjUWTWpwx+wEusk6XuONO -----END CERTIFICATE-----Generated at Sat Aug 2 05:39:25 2025 by rpki-client