$ rpki-client -vvf rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft File: aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft (raw, json) Hash identifier: yzh6i6+L6+p1L4D/Dzvp6zttP01FHV8pP065WcgQiI8= Subject key identifier: 65:4A:1F:00:94:99:33:E8:7B:BF:FF:E1:F9:EA:04:5B:B7:69:9D:A2 Authority key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 Certificate issuer: /CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710 Certificate serial: 14CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft Manifest number: 14CC Signing time: Sun 10 Aug 2025 16:50:01 +0000 Manifest this update: Sun 10 Aug 2025 16:50:00 +0000 Manifest next update: Sun 17 Aug 2025 16:50:00 +0000 Files and hashes: 1: aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl (hash: Uv4s9nD2pgvYd5Up6CoZCX1FTvVRUxQrH0EYUDGpePM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5324 (0x14cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174125, serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710 Validity Not Before: Aug 10 16:50:00 2025 GMT Not After : Aug 17 16:50:00 2025 GMT Subject: CN=6898cdb9-56f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:89:39:f5:ee:3d:74:3d:80:d2:09:95:65:79: a9:44:6b:c7:ad:16:e4:e6:23:62:40:cc:70:5d:c6: 5e:96:ef:7d:09:84:22:af:a1:98:93:2e:bf:61:f7: 56:79:05:8f:b1:79:4e:49:9b:3d:e4:71:94:77:49: 2e:36:ad:75:9d:e0:73:5b:a3:59:8e:e6:0f:34:7c: 81:cf:e9:cf:66:e4:fe:09:db:2f:52:ca:ef:c8:1f: ab:82:38:47:24:53:86:35:ca:cf:f1:19:ff:24:42: 27:06:39:27:2c:82:d6:11:80:04:33:62:79:c2:5b: e3:2c:0f:b5:1e:97:7a:7e:25:40:d7:b0:8f:8e:3b: 92:46:b6:4a:00:c3:f2:3b:53:22:a7:52:99:60:65: 91:5c:43:f7:6a:cd:4c:50:58:fd:ab:dc:5b:32:c0: 56:ec:a3:4b:5c:9e:78:3d:3f:8d:a0:99:5d:94:59: 04:5e:c7:db:50:ed:37:1b:e0:40:9e:3b:5a:58:82: 52:a4:10:64:60:08:80:ba:ba:24:79:0d:57:78:bd: 75:71:42:06:7c:c7:83:b1:03:2a:2a:83:3a:a1:1e: b2:9a:aa:2f:dd:fd:75:4a:f5:20:16:ce:c6:46:72: fa:ea:b3:40:29:0c:5a:30:1c:26:f4:55:5b:cb:16: 7c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4A:1F:00:94:99:33:E8:7B:BF:FF:E1:F9:EA:04:5B:B7:69:9D:A2 X509v3 Authority Key Identifier: keyid:68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:64:5d:2d:0e:04:27:d3:da:3c:9c:5b:7a:28:80:59:b9:2a: a2:d0:4c:44:49:1b:30:eb:84:28:80:2f:95:86:19:09:fc:a0: 19:a6:6f:db:ee:13:08:34:86:4b:25:55:8e:74:85:33:45:1a: 2f:3e:6e:10:36:06:70:1c:13:32:56:b5:e8:94:67:89:3d:c4: 35:e5:cf:7c:80:fa:f4:0b:55:6d:fd:3e:f3:c2:ea:fa:d7:08: 9f:c5:c5:61:59:9e:df:1e:2d:2c:5d:d7:c9:4e:f4:90:58:64: 46:68:6a:cf:b3:80:ec:f9:36:b5:ce:39:44:25:62:24:76:37: fb:fe:a0:0f:d2:50:57:f7:51:77:d5:4b:46:ce:86:39:63:88: 6b:a0:28:cd:83:a2:f8:a7:d1:fc:ac:f3:32:c5:0e:e8:f8:06: 2e:8c:88:8a:4d:a7:ee:92:a7:b6:e0:49:bc:6b:4b:44:bf:13: 5f:6e:85:51:9d:cc:66:db:f6:7c:20:f7:23:19:cf:0b:e4:1f: 9f:50:a3:e0:42:60:1e:86:52:8a:35:18:fb:00:af:56:b4:7e: ce:e4:1b:1b:2c:45:7e:d0:98:3c:25:92:3f:06:b2:15:0c:9e: 56:07:b2:df:ae:5a:fa:2f:2e:90:c3:a3:7c:ac:70:67:b0:b4: f9:c5:31:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMjUxMTAvBgNVBAUTKDY4QzYxMTk3RUJBNDFBNjREODVGMjU1OUUxRDQwRDZF NzVGQ0I3MTAwHhcNMjUwODEwMTY1MDAwWhcNMjUwODE3MTY1MDAwWjAYMRYwFAYD VQQDEw02ODk4Y2RiOS01NmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4k59e49dD2A0gmVZXmpRGvHrRbk5iNiQMxwXcZelu99CYQir6GYky6/YfdW eQWPsXlOSZs95HGUd0kuNq11neBzW6NZjuYPNHyBz+nPZuT+CdsvUsrvyB+rgjhH JFOGNcrP8Rn/JEInBjknLILWEYAEM2J5wlvjLA+1Hpd6fiVA17CPjjuSRrZKAMPy O1Mip1KZYGWRXEP3as1MUFj9q9xbMsBW7KNLXJ54PT+NoJldlFkEXsfbUO03G+BA njtaWIJSpBBkYAiAurokeQ1XeL11cUIGfMeDsQMqKoM6oR6ymqov3f11SvUgFs7G RnL66rNAKQxaMBwm9FVbyxZ8NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVKHwCU mTPoe7//4fnqBFu3aZ2iMB8GA1UdIwQYMBaAFGjGEZfrpBpk2F8lWeHUDW51/LcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyNS9GQUI2QkU4ODVE NjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dtVFlYeVZaNGRRTmJuWDh0 eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNWVJsLXVrR21UWVh5Vlo0ZFFOYm5YOHR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyNS9GQUI2QkU4ODVENjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dt VFlYeVZaNGRRTmJuWDh0eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTZF0tDgQn09o8nFt6KIBZuSqi0ExESRsw64QogC+VhhkJ/KAZpm/b 7hMINIZLJVWOdIUzRRovPm4QNgZwHBMyVrXolGeJPcQ15c98gPr0C1Vt/T7zwur6 1wifxcVhWZ7fHi0sXdfJTvSQWGRGaGrPs4Ds+Ta1zjlEJWIkdjf7/qAP0lBX91F3 1UtGzoY5Y4hroCjNg6L4p9H8rPMyxQ7o+AYujIiKTafukqe24Em8a0tEvxNfboVR ncxm2/Z8IPcjGc8L5B+fUKPgQmAehlKKNRj7AK9WtH7O5BsbLEV+0Jg8JZI/BrIV DJ5WB7Lfrlr6Ly6Qw6N8rHBnsLT5xTHr -----END CERTIFICATE-----Generated at Sun Aug 10 21:16:16 2025 by rpki-client