$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: kiYvSQCayy6vZhcOJAK3x+LsBSzlRONoYw0ul8g3iic= Subject key identifier: C5:86:79:82:BC:F3:6E:01:98:8F:1C:73:E4:C4:52:98:19:9A:98:9F Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 34B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 34AE Signing time: Sun 10 Aug 2025 14:55:26 +0000 Manifest this update: Sun 10 Aug 2025 14:55:25 +0000 Manifest next update: Sun 17 Aug 2025 14:55:25 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: GmPex5xVfCYU8t4mVjfUtUxFbNi5EikUu/0CIVjAuLg=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: w/zPMK06vnyoVLL/BGNp77uAUStxaD44YXARWWRfkvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13492 (0x34b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Aug 10 14:55:25 2025 GMT Not After : Aug 17 14:55:25 2025 GMT Subject: CN=6898b2dd-3d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:c6:3a:35:cc:41:dc:15:05:ca:e8:3a:c2: 6d:39:04:67:72:f1:4f:87:0a:2c:09:71:ac:f6:e2: 70:73:48:d6:a3:c0:22:36:fb:7d:42:0a:36:82:2c: 8e:3c:c0:8e:d3:d8:38:a8:b7:7b:28:ff:ad:84:4c: 40:23:79:f0:63:2a:fc:50:cf:36:6f:bb:13:ff:ff: e4:41:43:09:ac:f3:6f:71:78:41:97:7f:a7:39:81: 9b:fb:84:50:91:df:1b:9c:ac:ba:c3:29:5d:38:c5: ac:47:19:64:f8:d5:06:8d:f2:6f:68:70:5a:8c:c4: b4:d6:ec:2e:e7:76:a0:70:31:3e:84:73:c7:ef:9c: 2b:0a:9d:7a:4e:ca:53:69:79:70:e8:b6:c0:46:32: c5:74:1e:7d:f7:d3:6e:dd:a0:b7:3b:e9:88:ff:96: 7b:87:19:08:9b:ed:92:4f:78:3e:0a:4a:b1:4d:1e: 42:6c:a3:39:0d:aa:ee:fa:00:8b:a7:f5:73:7d:77: c0:13:67:fa:cf:8c:2e:e2:a5:65:1b:54:0a:18:2a: b5:d5:eb:f6:d6:ca:2f:ea:d4:7e:76:da:61:c4:b9: 63:96:e0:13:60:6e:12:34:a4:c8:70:57:f7:24:24: be:ea:d8:92:fc:cb:b7:3e:af:82:c5:f2:b1:36:18: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:86:79:82:BC:F3:6E:01:98:8F:1C:73:E4:C4:52:98:19:9A:98:9F X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9d:f8:09:88:95:6e:37:39:f0:73:78:1f:ab:6b:83:83:d7: 4f:45:2d:ea:ff:4e:f1:66:4b:09:3a:4e:13:7a:0b:4d:ab:af: 1e:22:2d:fa:25:ec:66:92:b4:36:12:1b:d7:f0:51:dd:3e:43: 79:56:f2:44:92:1b:e3:46:a0:fb:bb:f7:47:ac:50:36:68:fe: 0c:89:48:27:0f:9c:c1:dd:c6:df:5e:82:7b:4e:7c:cb:e6:49: 91:62:2e:cd:7c:80:2b:81:cb:f4:55:b4:49:6b:8a:a4:e4:d5: 29:bb:ea:00:79:64:3b:ed:1e:a6:7f:22:73:3a:67:fe:03:b2: d0:f3:fb:48:2a:38:49:c6:02:92:e5:4f:8b:f2:76:cb:ec:d9: ea:e1:9b:4b:71:d0:c3:55:90:7e:9f:a1:f3:51:72:5b:26:f0: b1:56:21:80:19:ba:0d:bb:d4:38:37:d3:74:c7:a7:76:2a:77: 94:2a:ce:5f:cc:84:36:7f:b4:99:d1:0d:1f:46:e0:f6:39:86: 07:39:39:cc:6e:d5:0b:1f:e5:bd:9f:03:6b:bd:d3:c9:27:48: d4:06:80:43:fe:71:ef:81:80:64:9f:4a:f3:a5:44:39:e0:7b: 16:09:0e:ee:5a:f7:64:a1:2e:8d:88:03:58:78:7b:65:6c:c4: 02:41:0a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjUwODEwMTQ1NTI1WhcNMjUwODE3MTQ1NTI1WjAYMRYwFAYD VQQDEw02ODk4YjJkZC0zZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21HGOjXMQdwVBcroOsJtOQRncvFPhwosCXGs9uJwc0jWo8AiNvt9Qgo2giyO PMCO09g4qLd7KP+thExAI3nwYyr8UM82b7sT///kQUMJrPNvcXhBl3+nOYGb+4RQ kd8bnKy6wyldOMWsRxlk+NUGjfJvaHBajMS01uwu53agcDE+hHPH75wrCp16TspT aXlw6LbARjLFdB5999Nu3aC3O+mI/5Z7hxkIm+2ST3g+CkqxTR5CbKM5Daru+gCL p/VzfXfAE2f6z4wu4qVlG1QKGCq11ev21sov6tR+dtphxLljluATYG4SNKTIcFf3 JCS+6tiS/Mu3Pq+CxfKxNhhBAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWGeYK8 824BmI8cc+TEUpgZmpifMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6nfgJiJVuNznwc3gfq2uDg9dPRS3q/07xZksJOk4TegtNq68eIi36 JexmkrQ2EhvX8FHdPkN5VvJEkhvjRqD7u/dHrFA2aP4MiUgnD5zB3cbfXoJ7TnzL 5kmRYi7NfIArgcv0VbRJa4qk5NUpu+oAeWQ77R6mfyJzOmf+A7LQ8/tIKjhJxgKS 5U+L8nbL7Nnq4ZtLcdDDVZB+n6HzUXJbJvCxViGAGboNu9Q4N9N0x6d2KneUKs5f zIQ2f7SZ0Q0fRuD2OYYHOTnMbtULH+W9nwNrvdPJJ0jUBoBD/nHvgYBkn0rzpUQ5 4HsWCQ7uWvdkoS6NiANYeHtlbMQCQQo0 -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:48 2025 by rpki-client