$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json) Hash identifier: 8K1Dh2L013azuU02oZb/0FZeLyEO0CBR3DJFh/LnfYo= Subject key identifier: 73:FB:7F:57:B1:A0:A9:AD:21:5A:B3:A6:51:58:3A:55:89:7C:6E:B5 Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft Manifest number: 0423 Signing time: Sat 09 Aug 2025 01:01:54 +0000 Manifest this update: Sat 09 Aug 2025 01:01:53 +0000 Manifest next update: Sat 16 Aug 2025 01:01:53 +0000 Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: 4OObTlXs4BHEOozvDnovXADdpuFi6a/O5vQ8Ah/RwBk=) 2: F83346DA410211F097F43F85C4F9AE02.roa (hash: EnqZyVfj3TKzoAvrOL6tNqUILt/NgCo/Yq0hgyekdPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Validity Not Before: Aug 9 01:01:53 2025 GMT Not After : Aug 16 01:01:53 2025 GMT Subject: CN=68969e01-b093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:33:8a:17:f8:18:d3:d3:57:00:a4:1d:60: 5e:ae:5b:ea:44:61:a7:e4:07:23:e1:b8:77:6c:da: 26:e5:a8:8e:07:96:fd:9f:37:03:b5:7d:23:21:1a: 72:e2:4d:f9:47:75:ca:c9:6b:0c:85:64:c3:f8:6e: e3:0c:48:a9:d4:ff:7b:e8:f9:22:ce:83:d4:5b:25: 34:93:02:2b:70:8e:33:b8:67:1a:c7:34:e0:d4:6e: 1a:48:60:9d:b8:58:14:b1:91:d3:bc:aa:37:73:51: 5c:2b:93:a7:2a:f8:9e:ac:0c:df:30:3e:22:5f:e2: 0e:8f:7c:1f:61:be:0b:78:fc:a1:7f:85:41:93:53: 9c:14:c2:10:3b:11:4a:70:2e:78:3b:29:d0:e4:94: 3a:99:11:99:be:e2:9f:84:cc:64:04:f0:41:08:cf: 9c:9b:cd:c5:6c:41:47:9a:12:77:63:4b:6e:d8:2e: a6:71:70:00:ee:d7:cb:78:c7:62:85:e6:f9:72:7b: 7f:2e:a2:17:80:ff:94:d6:46:36:12:bf:26:ee:de: 4f:ea:b7:85:1a:15:db:09:d9:12:2e:8d:fd:ef:e8: 29:04:a2:4f:1f:6e:5c:5b:fd:df:c1:58:41:a0:46: 3b:28:72:d6:16:fd:1d:01:5a:ad:f3:0d:2b:00:29: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FB:7F:57:B1:A0:A9:AD:21:5A:B3:A6:51:58:3A:55:89:7C:6E:B5 X509v3 Authority Key Identifier: keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b6:df:92:6a:ce:2d:ca:bc:f8:27:4b:ef:7f:ea:35:25:a2: 5a:90:3b:de:51:2f:b5:52:7d:99:39:d8:5c:55:0c:d8:0c:6e: 83:b9:b0:39:da:6b:0b:4d:d0:e2:ae:1b:d4:9b:cd:cb:f0:1a: f8:5f:9d:73:d1:f4:93:9e:37:89:f2:8c:0d:41:47:31:57:ef: 7c:66:33:b1:61:72:3b:8b:e0:bc:db:1b:98:10:cc:f1:25:15: db:d3:69:dc:0b:8f:76:f0:8c:7f:73:02:38:77:70:93:e9:18: 4d:7e:00:84:a3:71:8a:da:2b:ac:33:ac:10:b9:8c:04:53:73: ae:9a:41:73:dd:9f:58:93:30:cf:d3:e4:f9:83:fe:ad:58:ef: cd:2d:33:8b:fd:ce:df:dd:0b:a9:c4:e1:95:98:0a:f1:63:65: 43:bd:c1:98:cd:97:2a:fe:f4:28:45:11:3c:27:cf:8b:ce:67: 99:82:29:ec:72:29:64:4c:a9:11:5b:58:23:fc:7b:3c:c4:79: d8:3a:31:e6:38:3d:0f:85:b2:bb:d3:60:73:e9:91:58:3a:04: c2:fa:7e:9d:a8:45:0d:4a:c8:5c:81:47:34:3f:c9:ce:3a:a1: 19:bb:1a:6c:3f:54:d8:d4:5c:ff:de:c9:59:39:d0:39:2e:1e: 5e:0b:0c:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBBRjExMC8GA1UEBRMoNjNCNzAxQjcyNzA2RjMxOTBCRUY4QkZCRkEzNEZGQTMz RjRGNkJENjAeFw0yNTA4MDkwMTAxNTNaFw0yNTA4MTYwMTAxNTNaMBgxFjAUBgNV BAMTDTY4OTY5ZTAxLWIwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN9zOKF/gY09NXAKQdYF6uW+pEYafkByPhuHds2iblqI4Hlv2fNwO1fSMhGnLi TflHdcrJawyFZMP4buMMSKnU/3vo+SLOg9RbJTSTAitwjjO4ZxrHNODUbhpIYJ24 WBSxkdO8qjdzUVwrk6cq+J6sDN8wPiJf4g6PfB9hvgt4/KF/hUGTU5wUwhA7EUpw Lng7KdDklDqZEZm+4p+EzGQE8EEIz5ybzcVsQUeaEndjS27YLqZxcADu18t4x2KF 5vlye38uoheA/5TWRjYSvybu3k/qt4UaFdsJ2RIujf3v6CkEok8fblxb/d/BWEGg RjsoctYW/R0BWq3zDSsAKRpNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc/t/V7Gg qa0hWrOmUVg6VYl8brUwHwYDVR0jBBgwFoAUY7cBtycG8xkL74v7+jT/oz9Pa9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEFGLzFFMzM5QjM2ODhE RTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhrTDc0djctalRfb3o5UGE5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTdjQnR5Y0c4eGtMNzR2Ny1qVF9vejlQYTlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE MEFGLzFFMzM5QjM2ODhERTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhr TDc0djctalRfb3o5UGE5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF2235Jqzi3KvPgnS+9/6jUlolqQO95RL7VSfZk52FxVDNgMboO5sDna awtN0OKuG9SbzcvwGvhfnXPR9JOeN4nyjA1BRzFX73xmM7FhcjuL4LzbG5gQzPEl FdvTadwLj3bwjH9zAjh3cJPpGE1+AISjcYraK6wzrBC5jARTc66aQXPdn1iTMM/T 5PmD/q1Y780tM4v9zt/dC6nE4ZWYCvFjZUO9wZjNlyr+9ChFETwnz4vOZ5mCKexy KWRMqRFbWCP8ezzEedg6MeY4PQ+FsrvTYHPpkVg6BML6fp2oRQ1KyFyBRzQ/yc46 oRm7Gmw/VNjUXP/eyVk50DkuHl4LDJA= -----END CERTIFICATE-----Generated at Sun Aug 10 05:36:53 2025 by rpki-client