$ rpki-client -vvf rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft File: RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft (raw, json) Hash identifier: Wx9+6DfPyrE7lrIq31N5OLP573xD41OLEIH9gnL93IM= Subject key identifier: 12:0A:52:C4:27:47:86:F0:98:C5:34:F9:04:5C:98:50:9B:09:09:FD Authority key identifier: 45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 Certificate issuer: /CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft Manifest number: 016D Signing time: Sat 09 Aug 2025 04:25:43 +0000 Manifest this update: Sat 09 Aug 2025 04:25:43 +0000 Manifest next update: Sat 16 Aug 2025 04:25:43 +0000 Files and hashes: 1: RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl (hash: wZVDuH4x6VoxzfpaWBgUBTZgPalXrkQSEDUguX0w8xE=) 2: 5D4FB6AA9AB711EE86E1D058C4F9AE02.roa (hash: /lY6MRoQmBol07GaZSzAkv2Tfx/7fsrdKUpKLuZMxDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174589, serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Validity Not Before: Aug 9 04:25:43 2025 GMT Not After : Aug 16 04:25:43 2025 GMT Subject: CN=6896cdc7-291e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:94:2d:97:c5:4e:b6:66:9c:b9:83:74:62:2a: d9:46:0e:73:bd:20:21:da:47:36:af:92:6f:a3:64: 40:c6:ba:2e:f8:5d:88:c5:3e:e4:92:9f:69:aa:fa: 7a:a9:27:bf:3b:90:4a:0b:b9:44:1c:c1:10:21:b2: a6:b5:b3:99:ec:33:de:54:e3:7a:be:90:05:e8:6e: 57:fa:78:82:73:ce:76:11:a8:43:f4:db:93:71:bf: ff:53:8e:40:dc:92:88:e7:46:95:7c:cf:a0:a9:1f: 3f:23:5a:31:4f:ec:6c:76:c0:65:22:cd:e0:bd:5c: a8:fe:73:29:3a:1d:55:3f:fb:73:4e:0c:ba:40:62: 5d:78:a4:58:ed:3b:79:9c:38:9c:5d:d9:c9:b3:7b: 1d:c2:f0:c9:f9:04:8b:6e:d7:96:f3:68:ea:a6:21: 4d:6c:f2:36:fb:e5:d5:ac:5e:d9:5f:be:90:5d:74: 24:34:c4:21:a1:40:1b:a3:ba:e6:09:9b:23:fb:6d: 7b:05:d7:91:34:b7:5a:99:44:cb:6b:59:e9:f0:4e: 60:3f:02:d7:99:62:68:b4:3d:cd:4d:c3:8c:95:ee: 30:99:8d:80:46:58:e6:56:eb:0e:b8:7a:23:c0:bf: 3f:19:f1:9b:b3:db:04:9e:ef:76:09:47:7e:b7:6e: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0A:52:C4:27:47:86:F0:98:C5:34:F9:04:5C:98:50:9B:09:09:FD X509v3 Authority Key Identifier: keyid:45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:21:d0:c1:5d:c3:ee:1f:87:df:11:b9:48:5f:31:34:c3:80: 07:f0:ac:68:06:bc:d3:14:49:90:95:97:ff:06:83:ce:2a:c1: c1:c6:71:05:c9:0c:21:1a:a9:d4:19:93:b1:26:a7:83:ba:1d: a3:6e:2a:69:04:fe:69:eb:e1:54:e2:f4:c0:3d:9b:81:92:b4: 2a:d8:ee:29:33:f0:f4:ff:3a:50:28:48:32:a3:2f:c9:d7:83: f3:fc:31:b4:e7:c6:7d:9a:f0:4b:63:a0:56:75:7a:8f:64:6f: 83:c8:2c:75:e9:48:78:be:5f:10:cd:ec:1a:4c:5b:54:3b:0d: ed:30:9f:3b:40:3e:1a:80:ff:d6:b2:99:ca:16:19:9e:0e:ad: 91:1e:ee:c2:f9:72:12:6f:6a:e9:bd:2f:ee:a2:d1:bf:1e:cc: 34:98:f7:1d:bb:57:79:03:c4:14:66:0b:58:dd:b4:2e:c0:be: 98:0b:d3:ec:5f:ec:33:81:b2:73:07:d0:da:1d:43:dc:27:bc: f0:56:a9:31:45:a8:ae:a5:c3:4b:2d:5d:09:ce:4d:7c:68:7a: 51:4e:6a:93:d4:26:c9:6c:0d:cf:19:88:00:49:47:c4:02:93: 4d:f0:70:1b:dc:a6:bd:d0:42:d6:08:14:f2:d8:de:64:c6:07: 91:c5:59:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ1ODkxMTAvBgNVBAUTKDQ1OENERENBM0U4RkI2NEM5RDFBMjM0OTI1MjhCQTc3 N0ZDREQyMzQwHhcNMjUwODA5MDQyNTQzWhcNMjUwODE2MDQyNTQzWjAYMRYwFAYD VQQDEw02ODk2Y2RjNy0yOTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+5Qtl8VOtmacuYN0YirZRg5zvSAh2kc2r5Jvo2RAxrou+F2IxT7kkp9pqvp6 qSe/O5BKC7lEHMEQIbKmtbOZ7DPeVON6vpAF6G5X+niCc852EahD9NuTcb//U45A 3JKI50aVfM+gqR8/I1oxT+xsdsBlIs3gvVyo/nMpOh1VP/tzTgy6QGJdeKRY7Tt5 nDicXdnJs3sdwvDJ+QSLbteW82jqpiFNbPI2++XVrF7ZX76QXXQkNMQhoUAbo7rm CZsj+217BdeRNLdamUTLa1np8E5gPwLXmWJotD3NTcOMle4wmY2ARljmVusOuHoj wL8/GfGbs9sEnu92CUd+t27d0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIKUsQn R4bwmMU0+QRcmFCbCQn9MB8GA1UdIwQYMBaAFEWM3co+j7ZMnRojSSUound/zdI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDU4OS81RkM2MjdDNDYx QzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRreWRHaU5KSlNpNmQzX04w alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZemR5ajZQdGt5ZEdpTkpKU2k2ZDNfTjBqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDU4OS81RkM2MjdDNDYxQzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRr eWRHaU5KSlNpNmQzX04walEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxIdDBXcPuH4ffEblIXzE0w4AH8KxoBrzTFEmQlZf/BoPOKsHBxnEF yQwhGqnUGZOxJqeDuh2jbippBP5p6+FU4vTAPZuBkrQq2O4pM/D0/zpQKEgyoy/J 14Pz/DG058Z9mvBLY6BWdXqPZG+DyCx16Uh4vl8QzewaTFtUOw3tMJ87QD4agP/W spnKFhmeDq2RHu7C+XISb2rpvS/uotG/Hsw0mPcdu1d5A8QUZgtY3bQuwL6YC9Ps X+wzgbJzB9DaHUPcJ7zwVqkxRaiupcNLLV0Jzk18aHpRTmqT1CbJbA3PGYgASUfE ApNN8HAb3Ka90ELWCBTy2N5kxgeRxVmw -----END CERTIFICATE-----Generated at Sun Aug 10 18:49:16 2025 by rpki-client