$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft File: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json) Hash identifier: hnBjFiMLH7SQq+tkHkL1eAMT144ho4x5G7h6O7U35xw= Subject key identifier: 47:48:AF:B5:F2:24:D1:A1:79:FC:40:8C:6D:8F:4B:20:4C:CB:5B:41 Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft Manifest number: 2E Signing time: Sat 09 Aug 2025 08:12:14 +0000 Manifest this update: Sat 09 Aug 2025 08:12:14 +0000 Manifest next update: Sat 16 Aug 2025 08:12:13 +0000 Files and hashes: 1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: jBskx0lsuqkBssnEMqUQb7nlxxYxte4csYmdwXOopnY=) 2: 0E6E2FF4590A11F0B7FD292DC4F9AE02.roa (hash: 7soTZ6EDnpP6A/A05OpE2en3043bE7DF3odg+8Ew9cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Validity Not Before: Aug 9 08:12:14 2025 GMT Not After : Aug 16 08:12:13 2025 GMT Subject: CN=689702de-13cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:bc:79:97:5d:ac:99:c1:49:bb:8c:f8:d1: 2c:7a:e4:f5:75:f7:4c:08:2d:08:5c:53:b5:f4:23: ef:41:a1:b8:cc:d8:50:ef:46:27:1c:c6:da:3f:9d: 82:c7:f7:3a:35:c4:ec:a1:28:22:3d:cd:88:bb:38: c8:7b:13:3b:01:6b:b6:9e:52:e6:f1:c6:71:a4:11: be:25:4b:81:b2:18:4c:2e:76:17:23:08:49:4f:76: da:0e:49:18:10:5c:a4:77:41:97:5e:24:62:62:35: 2e:fe:be:91:38:b1:c4:76:65:09:56:6d:a0:f9:ad: f6:80:e2:8a:10:e6:bb:32:29:27:0d:05:e9:7c:43: f4:84:7b:6b:5e:d8:43:28:5e:02:68:b3:1f:63:a3: 68:6e:d9:ae:59:08:51:64:42:30:88:a2:53:21:86: 25:33:4c:94:e5:e7:ba:83:18:4e:f3:a8:7d:a2:0a: cb:b7:7a:6a:5c:16:19:13:b5:44:f8:8f:43:21:04: 4b:c9:38:76:87:84:2e:c7:b5:de:78:c7:ba:07:6f: 72:88:0c:50:71:f1:e5:ff:95:bd:4a:29:72:54:63: 75:28:57:8e:51:1a:ce:d3:11:12:6b:8d:74:69:be: 16:2d:17:eb:42:fc:8d:cd:f3:39:9e:4a:d5:1e:1a: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:48:AF:B5:F2:24:D1:A1:79:FC:40:8C:6D:8F:4B:20:4C:CB:5B:41 X509v3 Authority Key Identifier: keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:0b:54:e7:29:aa:79:1f:10:a7:18:67:57:d3:8a:0e:85:08: 36:72:80:38:70:d7:20:50:1c:b2:07:aa:66:79:d9:bd:2c:1d: ae:8b:3c:65:21:29:72:47:01:3c:29:f2:41:9a:46:6a:ad:8f: 6d:5f:0c:93:8d:f7:d1:cc:3b:ac:20:0e:10:14:d2:d8:7f:54: 07:0c:8f:79:95:59:4f:d6:24:11:79:e5:92:6a:6a:da:2d:21: ef:e3:6f:ba:5f:fb:4b:c1:3f:fa:f1:d2:39:6a:5e:f0:ae:77: 0e:6a:b7:eb:a0:8c:91:5c:e5:91:68:55:98:36:e8:a5:f8:4e: f1:38:76:1c:be:a2:68:36:5a:e5:c7:17:b4:fd:85:31:8c:5b: 38:da:14:79:bb:b7:03:85:8b:1c:29:f6:30:e5:92:25:2f:59: bb:6b:2a:ee:0d:51:1d:00:e4:37:a8:d9:5a:63:25:dd:8b:3d: 28:fc:ae:04:c1:20:68:2a:2f:f5:bc:20:b3:61:cf:8c:a7:f7: a4:30:cb:af:f4:8f:cc:d1:47:54:6a:24:72:2a:1f:81:09:1b: 3f:2a:9e:2b:49:8f:04:95:9e:74:dd:f9:c0:55:5a:af:4d:3a: cb:c9:47:d3:cc:67:a9:9b:81:3a:b4:bb:36:c9:40:d9:10:65: 35:94:2e:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoRUY3NjJDQzk0MjE5RTA5OTIzQTExQjBEM0M0MzBFN0Yz NUM4RDg2NDAeFw0yNTA4MDkwODEyMTRaFw0yNTA4MTYwODEyMTNaMBgxFjAUBgNV BAMTDTY4OTcwMmRlLTEzY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8Ubx5l12smcFJu4z40Sx65PV190wILQhcU7X0I+9BobjM2FDvRiccxto/nYLH 9zo1xOyhKCI9zYi7OMh7EzsBa7aeUubxxnGkEb4lS4GyGEwudhcjCElPdtoOSRgQ XKR3QZdeJGJiNS7+vpE4scR2ZQlWbaD5rfaA4ooQ5rsyKScNBel8Q/SEe2te2EMo XgJosx9jo2hu2a5ZCFFkQjCIolMhhiUzTJTl57qDGE7zqH2iCsu3empcFhkTtUT4 j0MhBEvJOHaHhC7Htd54x7oHb3KIDFBx8eX/lb1KKXJUY3UoV45RGs7TERJrjXRp vhYtF+tC/I3N8zmeStUeGqQDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR0ivtfIk 0aF5/ECMbY9LIEzLW0EwHwYDVR0jBBgwFoAU73YsyUIZ4JkjoRsNPEMOfzXI2GQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzI3QkU4NDBFMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzNZc3lVSVo0Smtqb1JzTlBFTU9melhJMkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzI3QkU4NDBFMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpr am9Sc05QRU1PZnpYSTJHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGMLVOcpqnkfEKcYZ1fTig6FCDZygDhw1yBQHLIHqmZ52b0sHa6LPGUh KXJHATwp8kGaRmqtj21fDJON99HMO6wgDhAU0th/VAcMj3mVWU/WJBF55ZJqatot Ie/jb7pf+0vBP/rx0jlqXvCudw5qt+ugjJFc5ZFoVZg26KX4TvE4dhy+omg2WuXH F7T9hTGMWzjaFHm7twOFixwp9jDlkiUvWbtrKu4NUR0A5Deo2VpjJd2LPSj8rgTB IGgqL/W8ILNhz4yn96Qwy6/0j8zRR1RqJHIqH4EJGz8qnitJjwSVnnTd+cBVWq9N OsvJR9PMZ6mbgTq0uzbJQNkQZTWULkw= -----END CERTIFICATE-----Generated at Sun Aug 10 16:09:31 2025 by rpki-client