$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json) Hash identifier: 3YRCtoanSF/mBrjl8DVdpZ0Jhb60Z8MNudHqEA2JB7E= Subject key identifier: 95:45:60:EC:2D:C2:7B:A4:23:67:61:B1:6E:09:E8:74:3C:20:AE:40 Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Certificate serial: 07CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft Manifest number: 07C7 Signing time: Wed 06 Aug 2025 21:29:56 +0000 Manifest this update: Wed 06 Aug 2025 21:29:56 +0000 Manifest next update: Wed 13 Aug 2025 21:29:56 +0000 Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: XGPaPe7hd6mKcnafWBHhMz0ofOnw/c9l4l9qLBhYjfw=) 2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: MXW87fZ4qznNog7Mqv1dybumPTtWHlhfVDxRXuxWlk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144BAD, serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Validity Not Before: Aug 6 21:29:56 2025 GMT Not After : Aug 13 21:29:56 2025 GMT Subject: CN=6893c954-5a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:06:cb:fd:41:e0:b9:bf:9a:9e:54:7d:91: b4:70:b6:ab:42:4e:a7:2b:15:88:6b:45:18:25:9b: ae:fa:57:fa:bf:cb:89:6e:0d:40:bf:20:3e:fc:1c: 02:05:ea:e3:85:8f:d3:d7:55:eb:e0:b1:54:a1:27: 16:3e:05:6d:a3:a2:f2:1c:9e:ae:c4:47:0b:97:5a: d8:1b:82:08:60:71:5f:05:41:0f:32:72:36:af:b8: 01:89:f4:86:66:bb:2d:1a:88:e4:52:5e:5c:4d:33: 04:3a:a8:8e:5b:a9:a9:9c:3a:23:d1:98:eb:39:07: 94:4b:ec:6f:f9:da:e4:a2:ba:d8:f4:1b:84:05:fa: b6:62:c7:fb:79:6e:c9:a3:dc:9e:d4:1c:fa:ac:62: bc:02:cc:0e:94:66:ad:d8:78:9e:2f:ee:6f:b4:0a: 8f:b7:bc:87:01:47:9f:49:e6:ec:b5:6e:1f:d6:c5: 44:6d:c4:d9:f0:05:9e:d3:85:be:6a:7f:cd:72:b8: 3a:4a:15:c4:28:ed:ad:04:9e:79:03:d8:ea:22:35: cc:2c:1e:7b:c9:ff:d8:0c:c7:20:94:59:cb:7e:d6: 19:73:57:35:f7:4f:62:c3:3c:2a:ae:36:c5:40:6a: 30:a9:a0:7f:77:d3:e3:b9:03:c2:15:4f:47:70:2b: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:45:60:EC:2D:C2:7B:A4:23:67:61:B1:6E:09:E8:74:3C:20:AE:40 X509v3 Authority Key Identifier: keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d5:8b:4f:73:52:d4:27:44:c0:1e:8d:81:37:fa:fe:8a:20: 96:64:97:76:d5:83:7a:e5:3e:46:88:7b:09:00:91:1a:97:81: 21:f0:29:6e:8a:3a:9b:a8:48:f7:08:ba:f2:d7:ca:94:10:27: 5b:b1:6d:33:9b:3d:fd:4d:ef:44:24:c3:a6:dc:17:7a:1b:b7: 1d:dd:44:7d:21:23:d5:7a:de:21:42:4b:1b:41:b9:00:c7:16: 68:00:2e:0e:41:ca:77:ae:88:aa:08:1f:bf:d1:ab:07:57:0f: 78:77:73:c0:5d:3c:eb:7a:4b:3d:ae:4e:5d:fb:f4:a5:35:99: 1d:76:0e:c1:0b:a9:d5:2f:3a:d2:36:b9:4d:8d:a5:6b:32:d7: 09:7f:8a:e4:1b:16:d9:3d:95:de:60:2a:78:74:01:1b:65:cd: fa:15:90:3d:fa:df:ed:d0:2a:6b:24:38:c6:4f:b1:4a:fd:17: 9c:5a:d9:b0:c8:5e:ff:b8:6f:ef:71:73:76:5d:db:5a:a5:5f: ca:65:58:c0:ef:52:89:2a:a8:c8:13:b2:77:7b:f8:fe:0f:bd: 99:43:ae:73:f9:79:4c:ef:22:57:6b:94:8c:ba:f3:1d:16:92: 27:17:d1:bc:28:f8:a4:bb:12:a9:8a:35:4e:b6:ee:32:b6:12: 82:14:53:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRCQUQxMTAvBgNVBAUTKDAzMkFDMjI0MUQxOENGQkJDMUMzM0NBREY1RThGNjU1 NDEyRDRBOEIwHhcNMjUwODA2MjEyOTU2WhcNMjUwODEzMjEyOTU2WjAYMRYwFAYD VQQDEw02ODkzYzk1NC01YTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrQGy/1B4Lm/mp5UfZG0cLarQk6nKxWIa0UYJZuu+lf6v8uJbg1AvyA+/BwC BerjhY/T11Xr4LFUoScWPgVto6LyHJ6uxEcLl1rYG4IIYHFfBUEPMnI2r7gBifSG ZrstGojkUl5cTTMEOqiOW6mpnDoj0ZjrOQeUS+xv+drkorrY9BuEBfq2Ysf7eW7J o9ye1Bz6rGK8AswOlGat2HieL+5vtAqPt7yHAUefSebstW4f1sVEbcTZ8AWe04W+ an/Ncrg6ShXEKO2tBJ55A9jqIjXMLB57yf/YDMcglFnLftYZc1c1909iwzwqrjbF QGowqaB/d9PjuQPCFU9HcCvLDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVFYOwt wnukI2dhsW4J6HQ8IK5AMB8GA1UdIwQYMBaAFAMqwiQdGM+7wcM8rfXo9lVBLUqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEJBRC9ENUQ3NDM0NjA0 NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3dkJ3enl0OWVqMlZVRXRT b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F5ckNKQjBZejd2Qnd6eXQ5ZWoyVlVFdFNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEJBRC9ENUQ3NDM0NjA0NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3 dkJ3enl0OWVqMlZVRXRTb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn1YtPc1LUJ0TAHo2BN/r+iiCWZJd21YN65T5GiHsJAJEal4Eh8Clu ijqbqEj3CLry18qUECdbsW0zmz39Te9EJMOm3Bd6G7cd3UR9ISPVet4hQksbQbkA xxZoAC4OQcp3roiqCB+/0asHVw94d3PAXTzreks9rk5d+/SlNZkddg7BC6nVLzrS NrlNjaVrMtcJf4rkGxbZPZXeYCp4dAEbZc36FZA9+t/t0CprJDjGT7FK/RecWtmw yF7/uG/vcXN2XdtapV/KZVjA71KJKqjIE7J3e/j+D72ZQ65z+XlM7yJXa5SMuvMd FpInF9G8KPikuxKpijVOtu4ythKCFFM3 -----END CERTIFICATE-----Generated at Fri Aug 8 20:41:10 2025 by rpki-client