$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft File: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json) Hash identifier: AY7T+cgFn+I7gY0BfaowuFl0kTnDir4nQg6ujFSbKeU= Subject key identifier: 3C:C9:E8:CC:73:9F:75:BA:06:F0:CC:7A:B9:76:74:33:02:1E:7D:92 Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft Manifest number: 10 Signing time: Sun 15 Jun 2025 07:06:35 +0000 Manifest this update: Sun 15 Jun 2025 07:06:35 +0000 Manifest next update: Sun 22 Jun 2025 07:06:35 +0000 Files and hashes: 1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: 2RJ4pLj82A+I2Ef/iWn0Bez6nUxPx+7lDijf/6yqRF8=) 2: 84C145D230D911F082B14974C4F9AE02.roa (hash: mP2QQWqHYPeK0WY2IdG9TiulT78Yh4TwS3eeLc1a48k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Validity Not Before: Jun 15 07:06:35 2025 GMT Not After : Jun 22 07:06:35 2025 GMT Subject: CN=684e70fb-0d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:e5:26:a1:ea:65:fe:7c:1e:bd:82:19:8e: ab:5d:eb:6f:d5:ee:0f:7b:94:6a:9e:c2:39:66:ff: c6:9c:3c:fe:8a:86:3c:90:ee:71:bc:c6:09:8c:60: e7:75:fc:27:92:f1:1c:88:68:90:cb:9c:27:a3:a0: f2:25:a1:d7:b0:78:dc:fa:47:fd:fe:77:f1:d3:7d: e9:fb:82:d6:ac:bb:be:5d:ec:d3:51:3c:1c:fb:1e: a1:b9:72:20:e6:95:fe:ce:1c:7d:36:c8:5a:a0:ba: 1f:be:6c:58:fc:7e:69:fa:bb:5a:23:81:c3:e6:4a: 79:fb:df:d0:e1:12:8a:b9:70:58:df:9a:ce:ef:13: 58:7d:72:a7:22:a0:03:1c:94:92:80:93:fb:d2:ae: aa:58:dd:13:d8:d8:83:e6:67:97:7c:6f:1d:c9:53: 11:a7:17:19:df:01:22:e1:fa:4f:36:3b:5e:35:86: a4:d2:81:57:70:b4:22:9f:58:c6:18:65:a2:44:1d: be:d8:10:98:7f:9a:38:dc:df:a7:45:2c:3d:a4:de: e2:b4:7a:46:7c:cd:18:7b:63:3b:2c:50:9a:84:ff: 76:ae:f8:6d:a3:13:0b:49:67:6a:1c:3e:e0:a1:82: 68:7f:b2:26:69:e9:08:e2:7e:90:12:6d:d3:ec:95: 5e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C9:E8:CC:73:9F:75:BA:06:F0:CC:7A:B9:76:74:33:02:1E:7D:92 X509v3 Authority Key Identifier: keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:92:a2:04:66:80:85:7d:20:f5:b2:0b:e5:45:6e:50:78:d9: 58:fd:26:44:ee:39:2d:13:f7:c8:cf:ee:ea:ff:ff:98:46:81: cd:60:98:27:9f:22:34:91:ec:b0:e0:7d:77:e0:9f:83:0a:b1: fa:a7:3c:ea:37:c1:b2:a0:d5:ff:11:6c:16:20:f5:18:78:de: 95:82:7a:3a:c0:5e:0c:26:9b:cd:92:7f:01:4c:ed:eb:38:7d: 6e:e1:8d:7d:ec:2a:0e:0e:e0:7a:63:48:57:8c:ae:49:82:0c: 79:4c:26:25:68:35:12:b7:41:f3:33:16:6b:da:b2:27:eb:e2: b6:b6:40:2d:8c:fc:9b:5d:d0:bd:55:fb:69:b3:4f:ce:32:13: 21:fe:4c:47:81:19:8a:a8:5a:ec:28:a1:3e:fa:03:a2:dd:e0: c5:dc:61:31:73:79:9c:fc:fd:32:d1:04:7b:34:d5:ad:bf:74: 6e:05:c1:84:9d:07:f3:1d:5f:2d:00:79:7e:e9:6a:57:f5:44: 33:89:49:31:3e:aa:99:b5:b9:07:70:00:2f:19:87:8c:3c:41: 94:a4:c5:62:ed:83:82:d7:37:b2:f4:8c:a2:be:a7:0d:bc:d5: 33:22:cc:37:36:1a:b2:93:89:12:a8:a4:81:96:c9:ba:35:01: 43:99:67:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoRUY3NjJDQzk0MjE5RTA5OTIzQTExQjBEM0M0MzBFN0Yz NUM4RDg2NDAeFw0yNTA2MTUwNzA2MzVaFw0yNTA2MjIwNzA2MzVaMBgxFjAUBgNV BAMTDTY4NGU3MGZiLTBkMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPhOUmoepl/nwevYIZjqtd62/V7g97lGqewjlm/8acPP6KhjyQ7nG8xgmMYOd1 /CeS8RyIaJDLnCejoPIlodeweNz6R/3+d/HTfen7gtasu75d7NNRPBz7HqG5ciDm lf7OHH02yFqguh++bFj8fmn6u1ojgcPmSnn739DhEoq5cFjfms7vE1h9cqcioAMc lJKAk/vSrqpY3RPY2IPmZ5d8bx3JUxGnFxnfASLh+k82O141hqTSgVdwtCKfWMYY ZaJEHb7YEJh/mjjc36dFLD2k3uK0ekZ8zRh7YzssUJqE/3au+G2jEwtJZ2ocPuCh gmh/siZp6QjifpASbdPslV6NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPMnozHOf dboG8Mx6uXZ0MwIefZIwHwYDVR0jBBgwFoAU73YsyUIZ4JkjoRsNPEMOfzXI2GQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzI3QkU4NDBFMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzNZc3lVSVo0Smtqb1JzTlBFTU9melhJMkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzI3QkU4NDBFMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpr am9Sc05QRU1PZnpYSTJHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAmSogRmgIV9IPWyC+VFblB42Vj9JkTuOS0T98jP7ur//5hGgc1gmCef IjSR7LDgfXfgn4MKsfqnPOo3wbKg1f8RbBYg9Rh43pWCejrAXgwmm82SfwFM7es4 fW7hjX3sKg4O4HpjSFeMrkmCDHlMJiVoNRK3QfMzFmvasifr4ra2QC2M/Jtd0L1V +2mzT84yEyH+TEeBGYqoWuwooT76A6Ld4MXcYTFzeZz8/TLRBHs01a2/dG4FwYSd B/MdXy0AeX7palf1RDOJSTE+qpm1uQdwAC8Zh4w8QZSkxWLtg4LXN7L0jKK+pw28 1TMizDc2GrKTiRKopIGWybo1AUOZZ3Y= -----END CERTIFICATE-----Generated at Sun Jun 15 09:52:16 2025 by rpki-client