$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json) Hash identifier: EHqApIcGfzIXeXO+kjM9Wl4nyuZw1DhhsMFT/bSiX5Q= Subject key identifier: 97:01:51:0E:EE:6A:0F:DC:05:18:20:01:75:EC:6B:39:64:7A:A1:DE Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft Manifest number: 25 Signing time: Mon 11 Aug 2025 08:05:33 +0000 Manifest this update: Mon 11 Aug 2025 08:05:32 +0000 Manifest next update: Mon 18 Aug 2025 08:05:32 +0000 Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: cv6gp1PYkStPRPiUKcake6d4U0nLAreDHPEUVj48k2g=) 2: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: WkC734Z9YLqp46ED9zzrP9DX1ES2VdVVIimzvDKW6/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Validity Not Before: Aug 11 08:05:32 2025 GMT Not After : Aug 18 08:05:32 2025 GMT Subject: CN=6899a44d-9671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:24:a0:1c:4a:b9:39:3e:07:f5:ca:96:7d: 5f:fb:14:8d:88:34:d9:ec:7f:de:5c:49:5c:5f:01: 11:70:91:bc:94:2d:a4:b3:13:e9:d6:55:6f:61:0d: f9:4e:68:b4:36:80:ab:d9:7a:46:a5:9d:0a:a6:8c: 1c:69:56:7a:ca:5d:a7:1c:b9:cf:b3:86:7a:98:59: 9e:42:da:50:40:7d:46:88:2a:79:fe:f2:63:68:00: f1:46:a0:51:fd:55:b1:9b:ca:22:a6:7a:e1:11:8c: 07:8d:b8:cc:68:fc:d8:8f:46:89:52:c4:0f:f7:d6: 8b:bd:8d:6a:2f:41:86:69:c0:e2:ff:50:a3:a0:4b: bd:ed:90:13:c0:22:78:e9:8c:59:4e:12:21:a1:05: d1:59:2d:71:b2:17:0b:1a:9a:1a:25:ef:aa:8a:e7: a5:3b:41:bb:2d:cb:51:75:2c:86:62:c3:9f:48:c3: ed:b8:dd:87:00:ec:37:c5:d4:fb:c5:5f:31:a8:37: 76:1f:62:b5:17:63:6b:b1:6b:c9:fa:36:2e:84:a4: 19:ee:17:1e:9b:35:64:3a:90:b1:f3:9e:68:af:b9: 2d:e7:99:d7:a0:15:7c:ce:1b:c4:a8:cb:99:61:cd: 04:e3:15:8e:50:44:e7:58:2c:2c:f5:ee:10:69:ee: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:01:51:0E:EE:6A:0F:DC:05:18:20:01:75:EC:6B:39:64:7A:A1:DE X509v3 Authority Key Identifier: keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:eb:0d:8f:82:33:12:b8:73:b3:85:54:92:24:60:21:6b:b8: 39:dd:57:de:e3:40:a7:03:42:07:0d:fa:45:24:b1:85:f1:1b: a2:67:71:e8:f5:b4:4d:13:1b:c7:4d:ef:28:02:df:04:fc:86: 9d:70:30:a0:fa:4b:7c:1a:93:16:23:6b:7e:85:e0:83:dc:50: a1:c5:0d:fe:03:36:52:9d:ae:ba:05:b3:8c:1d:98:a7:a3:c9: ee:57:1d:c1:1c:26:be:5a:0b:92:8c:da:44:9c:1e:e3:d0:76: ae:63:25:57:c1:15:46:bc:58:9a:3a:df:cf:f8:db:b0:22:7b: 79:36:b1:8e:0c:20:f1:78:9d:71:c2:ca:2c:4c:29:ae:34:91: d9:a0:b8:2e:8f:fb:e9:9b:65:ef:d2:67:5d:e7:7a:5e:53:64: 29:49:15:f0:4c:1b:f7:72:c4:3a:b8:39:c3:16:04:31:ef:a9: d6:36:b2:79:d7:fa:18:44:5c:54:2f:af:db:d8:4b:52:29:17: e8:a0:43:14:b6:7f:98:84:40:66:f8:56:ea:0b:2f:53:5c:21: fa:02:11:28:90:24:d6:d4:88:c0:6c:a6:a5:32:c2:86:2e:6c: 49:e3:ca:5f:6a:78:ef:eb:8d:c3:6f:c9:4f:3d:6a:6d:03:10: f6:2d:1e:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoQTU4QURBQ0VGOUQyNDU1M0E1NTY0NkI1QTZFQkNDRUFC MTlGMkZCQzAeFw0yNTA4MTEwODA1MzJaFw0yNTA4MTgwODA1MzJaMBgxFjAUBgNV BAMTDTY4OTlhNDRkLTk2NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy9CSgHEq5OT4H9cqWfV/7FI2INNnsf95cSVxfARFwkbyULaSzE+nWVW9hDflO aLQ2gKvZekalnQqmjBxpVnrKXaccuc+zhnqYWZ5C2lBAfUaIKnn+8mNoAPFGoFH9 VbGbyiKmeuERjAeNuMxo/NiPRolSxA/31ou9jWovQYZpwOL/UKOgS73tkBPAInjp jFlOEiGhBdFZLXGyFwsamhol76qK56U7Qbsty1F1LIZiw59Iw+243YcA7DfF1PvF XzGoN3YfYrUXY2uxa8n6Ni6EpBnuFx6bNWQ6kLHznmivuS3nmdegFXzOG8Soy5lh zQTjFY5QROdYLCz17hBp7hIfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlwFRDu5q D9wFGCABdexrOWR6od4wHwYDVR0jBBgwFoAUpYrazvnSRVOlVka1puvM6rGfL7ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzQ0RjE0QUZDNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL3BZcmF6dm5TUlZPbFZrYTFwdXZNNnJHZkw3 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcFlyYXp2blNSVk9sVmthMXB1dk02ckdmTDd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzQ0RjE0QUZDNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL3BZcmF6dm5TUlZP bFZrYTFwdXZNNnJHZkw3dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIjrDY+CMxK4c7OFVJIkYCFruDndV97jQKcDQgcN+kUksYXxG6Jncej1 tE0TG8dN7ygC3wT8hp1wMKD6S3wakxYja36F4IPcUKHFDf4DNlKdrroFs4wdmKej ye5XHcEcJr5aC5KM2kScHuPQdq5jJVfBFUa8WJo638/427Aie3k2sY4MIPF4nXHC yixMKa40kdmguC6P++mbZe/SZ13nel5TZClJFfBMG/dyxDq4OcMWBDHvqdY2snnX +hhEXFQvr9vYS1IpF+igQxS2f5iEQGb4VuoLL1NcIfoCESiQJNbUiMBspqUywoYu bEnjyl9qeO/rjcNvyU89am0DEPYtHsw= -----END CERTIFICATE-----Generated at Wed Aug 13 07:40:43 2025 by rpki-client