$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json) Hash identifier: OHzgdaPBB4zppgvEorBGMEK6w7xoXKe0Ng6trgD2Eho= Subject key identifier: 98:22:DB:01:99:B0:C6:E5:D7:47:4B:E2:42:D7:96:A3:41:34:4F:36 Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft Manifest number: 0A Signing time: Thu 19 Jun 2025 07:29:59 +0000 Manifest this update: Thu 19 Jun 2025 07:29:59 +0000 Manifest next update: Thu 26 Jun 2025 07:29:59 +0000 Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: jVcDkFQBFArfFmaV0u+mMLrsv/hdwMWqaLWWP4I6rqs=) 2: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: WkC734Z9YLqp46ED9zzrP9DX1ES2VdVVIimzvDKW6/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Validity Not Before: Jun 19 07:29:59 2025 GMT Not After : Jun 26 07:29:59 2025 GMT Subject: CN=6853bc77-069f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:40:79:ea:aa:73:5b:07:7f:26:ae:fb:3d: 32:12:42:d8:00:d4:e1:14:df:48:11:78:5f:ea:aa: 8d:6a:22:d7:c6:15:25:d5:f3:9b:2a:48:55:0f:17: 0e:a4:78:8e:eb:ed:50:1c:f8:bc:4b:2a:c0:ad:85: 80:4d:c1:ee:b6:e9:54:98:54:c8:2c:99:fd:91:63: 55:7f:95:06:1e:e4:92:be:37:05:dc:02:9f:ff:4d: a6:fb:3e:30:b8:60:03:e8:c8:ea:be:58:17:00:57: 98:1c:48:c7:f2:5b:11:71:2b:6b:41:9f:aa:bc:7b: 8e:55:3c:a7:fc:13:5c:a7:db:b2:7f:4b:d1:a3:e8: 92:fc:46:ac:e5:81:56:2a:69:65:55:b8:1d:15:35: d6:10:da:46:4f:ad:c3:bd:ba:d9:c7:8d:9e:5b:2e: ac:37:7a:d6:d1:13:69:1a:32:0a:1f:7a:e6:b8:88: 42:0b:ab:89:79:86:bc:28:c0:0f:78:8c:33:ca:20: c7:a7:93:fb:73:6e:0a:84:59:0d:81:91:f1:e2:ad: a9:3d:4b:be:01:e4:3a:d0:8e:55:a6:7a:17:3c:65: 4b:ef:a1:db:09:db:ad:67:22:5f:1e:2f:a8:8f:46: 8a:78:22:63:f9:70:fb:c4:a1:38:46:9e:e6:d8:aa: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:22:DB:01:99:B0:C6:E5:D7:47:4B:E2:42:D7:96:A3:41:34:4F:36 X509v3 Authority Key Identifier: keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:28:74:6e:a2:f9:b6:6c:b6:38:6d:32:c0:37:58:70:45:a4: 72:20:aa:7c:75:63:94:8e:4a:3c:48:17:80:e1:5e:fd:12:5a: 65:33:39:bb:33:2d:37:bd:fd:b1:fb:cf:3d:d5:07:3f:74:c3: da:aa:20:95:08:a5:ce:8a:b2:86:41:c8:cb:d5:77:00:bf:2b: ec:30:e1:bf:70:62:34:b1:2d:10:31:67:26:c0:13:de:5f:1d: 14:46:e7:2c:4a:e5:ca:50:1a:b3:be:57:fa:a9:1e:aa:02:8c: c1:d9:80:81:00:30:aa:66:cf:73:df:d8:77:9c:b4:30:4d:d7: f5:d5:e1:7f:ab:17:2c:db:af:c0:10:31:0b:80:a7:3d:c6:a8: 2b:7c:cc:77:5d:93:f9:12:24:74:26:12:9d:39:e7:28:e8:c5: 97:a3:1e:b8:d7:a7:cc:5b:e0:2b:ea:78:5f:2f:b8:5e:7f:dc: 98:12:e9:1b:e3:7e:c0:58:6b:e6:f4:90:55:d1:8d:e3:df:4c: b9:32:3d:ab:c0:da:f3:55:11:e0:11:d9:e4:54:00:95:56:28: 66:92:fc:53:bc:f0:24:92:fb:02:d5:61:79:a9:c1:a7:37:c2: 55:37:91:eb:bb:9d:53:30:7f:bb:ec:a9:49:2a:de:23:97:40: ff:e5:c1:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoQTU4QURBQ0VGOUQyNDU1M0E1NTY0NkI1QTZFQkNDRUFC MTlGMkZCQzAeFw0yNTA2MTkwNzI5NTlaFw0yNTA2MjYwNzI5NTlaMBgxFjAUBgNV BAMTDTY4NTNiYzc3LTA2OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqE0B56qpzWwd/Jq77PTISQtgA1OEU30gReF/qqo1qItfGFSXV85sqSFUPFw6k eI7r7VAc+LxLKsCthYBNwe626VSYVMgsmf2RY1V/lQYe5JK+NwXcAp//Tab7PjC4 YAPoyOq+WBcAV5gcSMfyWxFxK2tBn6q8e45VPKf8E1yn27J/S9Gj6JL8RqzlgVYq aWVVuB0VNdYQ2kZPrcO9utnHjZ5bLqw3etbRE2kaMgofeua4iEILq4l5hrwowA94 jDPKIMenk/tzbgqEWQ2BkfHirak9S74B5DrQjlWmehc8ZUvvodsJ261nIl8eL6iP Rop4ImP5cPvEoThGnubYqoN7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmCLbAZmw xuXXR0viQteWo0E0TzYwHwYDVR0jBBgwFoAUpYrazvnSRVOlVka1puvM6rGfL7ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzQ0RjE0QUZDNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL3BZcmF6dm5TUlZPbFZrYTFwdXZNNnJHZkw3 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcFlyYXp2blNSVk9sVmthMXB1dk02ckdmTDd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzQ0RjE0QUZDNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL3BZcmF6dm5TUlZP bFZrYTFwdXZNNnJHZkw3dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHsodG6i+bZstjhtMsA3WHBFpHIgqnx1Y5SOSjxIF4DhXv0SWmUzObsz LTe9/bH7zz3VBz90w9qqIJUIpc6KsoZByMvVdwC/K+ww4b9wYjSxLRAxZybAE95f HRRG5yxK5cpQGrO+V/qpHqoCjMHZgIEAMKpmz3Pf2HectDBN1/XV4X+rFyzbr8AQ MQuApz3GqCt8zHddk/kSJHQmEp055yjoxZejHrjXp8xb4CvqeF8vuF5/3JgS6Rvj fsBYa+b0kFXRjePfTLkyPavA2vNVEeAR2eRUAJVWKGaS/FO88CSS+wLVYXmpwac3 wlU3keu7nVMwf7vsqUkq3iOXQP/lwZY= -----END CERTIFICATE-----Generated at Fri Jun 20 08:12:15 2025 by rpki-client