$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json) Hash identifier: UiDqbZZMs40ltkpuEojqHuZbpQhwocRxaetk1ZNoJAQ= Subject key identifier: A4:4B:B4:34:34:7B:07:B1:0C:45:C6:74:A5:F9:3C:C5:17:52:22:F9 Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft Manifest number: 0F49 Signing time: Wed 06 Aug 2025 21:39:55 +0000 Manifest this update: Wed 06 Aug 2025 21:39:55 +0000 Manifest next update: Wed 13 Aug 2025 21:39:55 +0000 Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: BZPtWP8vX5IaYHxRIUgEAWBxpyRr/lBIrKJqtYjTh40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Validity Not Before: Aug 6 21:39:55 2025 GMT Not After : Aug 13 21:39:55 2025 GMT Subject: CN=6893cbab-2623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:6b:a0:ea:e7:91:06:29:c0:7f:3a:95:92: d1:96:47:68:ce:14:ed:bb:68:94:18:29:d7:37:cc: 16:57:8e:fd:cc:7a:3c:b8:ab:c9:52:e7:8a:aa:bb: fb:e3:bb:bb:0d:69:30:d0:9a:a8:99:b3:fb:c4:35: d0:cd:12:13:0e:df:d2:e5:9e:6d:5c:3d:44:38:da: 1a:71:9d:99:d8:88:24:e4:58:1e:8f:ac:c0:17:7e: 65:25:69:00:1e:eb:22:2a:2f:18:53:c9:61:e9:03: 3b:0f:d7:62:5a:18:7a:d5:4d:0e:7b:25:d7:5d:2b: 7f:bb:0d:f3:a5:33:11:73:1b:f0:29:19:f3:24:a4: bd:85:50:51:20:f9:b6:2f:f0:87:2b:b5:61:4d:41: 5d:a4:bf:5e:7a:fa:d2:5f:b7:ff:fd:7c:de:8c:58: 51:fe:93:87:5e:0b:1e:b4:50:58:a3:9c:66:df:26: ee:c3:b8:c2:d0:77:a9:fc:08:e9:05:1b:28:f6:b6: 89:7b:6b:26:2f:6a:1b:bd:b9:ca:65:e3:8a:a7:d2: 51:0d:64:e3:c9:07:16:59:4e:a3:4a:e6:66:51:50: 4e:a1:a8:61:e3:7a:82:d4:b6:23:8c:cc:54:df:24: 5c:36:3c:6a:f5:5b:d0:d6:dc:56:c2:b9:a9:3c:bc: ac:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4B:B4:34:34:7B:07:B1:0C:45:C6:74:A5:F9:3C:C5:17:52:22:F9 X509v3 Authority Key Identifier: keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:18:80:6b:a5:2f:5b:11:d2:54:91:9a:39:3d:8f:fd:e3:bf: f1:0b:c2:88:09:b7:87:4e:d1:72:09:1c:84:49:ca:c6:59:19: 8c:44:e5:af:b3:c2:82:9a:4c:91:d8:6c:a4:c3:64:17:b1:ec: f9:6e:7e:3e:ba:b4:fc:ed:26:72:21:a4:4f:4e:4d:ee:37:4a: 8e:1f:bb:49:13:fd:10:a5:30:71:f1:64:40:9d:90:32:d3:8d: 60:9a:f9:d5:04:73:d7:75:5c:d5:a6:4a:d4:35:d0:1d:9d:16: e1:89:ce:29:e6:b9:27:2b:59:26:82:43:90:9d:c9:0e:5e:2a: ea:a2:da:8d:fe:e5:e6:97:ba:74:6a:27:7a:4a:73:dc:d7:11: 5d:39:5b:14:84:4a:b1:6b:fd:00:5b:22:45:a1:b9:86:53:c7: 85:53:4f:e5:fe:81:50:32:50:d6:61:ea:69:05:7b:78:5c:65: 3a:31:18:a5:e1:fa:31:db:9b:21:05:4d:68:cd:82:5b:84:33: 45:c1:06:f9:70:9f:af:87:7d:e3:1a:56:f3:e2:0b:98:fd:26: 90:ec:fa:18:f5:73:2d:f8:ca:ff:03:3c:72:92:8d:1d:ec:b5: 46:fd:a8:a0:ef:82:2a:29:28:db:2e:6c:03:6a:71:63:b3:e1: 03:87:dc:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD NTY3QkUzODgwHhcNMjUwODA2MjEzOTU1WhcNMjUwODEzMjEzOTU1WjAYMRYwFAYD VQQDEw02ODkzY2JhYi0yNjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1StroOrnkQYpwH86lZLRlkdozhTtu2iUGCnXN8wWV479zHo8uKvJUueKqrv7 47u7DWkw0JqombP7xDXQzRITDt/S5Z5tXD1EONoacZ2Z2Igk5Fgej6zAF35lJWkA HusiKi8YU8lh6QM7D9diWhh61U0OeyXXXSt/uw3zpTMRcxvwKRnzJKS9hVBRIPm2 L/CHK7VhTUFdpL9eevrSX7f//XzejFhR/pOHXgsetFBYo5xm3ybuw7jC0Hep/Ajp BRso9raJe2smL2obvbnKZeOKp9JRDWTjyQcWWU6jSuZmUVBOoahh43qC1LYjjMxU 3yRcNjxq9VvQ1txWwrmpPLysFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRLtDQ0 ewexDEXGdKX5PMUXUiL5MB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeGIBrpS9bEdJUkZo5PY/947/xC8KICbeHTtFyCRyEScrGWRmMROWv s8KCmkyR2Gykw2QXsez5bn4+urT87SZyIaRPTk3uN0qOH7tJE/0QpTBx8WRAnZAy 041gmvnVBHPXdVzVpkrUNdAdnRbhic4p5rknK1kmgkOQnckOXirqotqN/uXml7p0 aid6SnPc1xFdOVsUhEqxa/0AWyJFobmGU8eFU0/l/oFQMlDWYeppBXt4XGU6MRil 4fox25shBU1ozYJbhDNFwQb5cJ+vh33jGlbz4guY/SaQ7PoY9XMt+Mr/Azxyko0d 7LVG/aig74IqKSjbLmwDanFjs+EDh9wt -----END CERTIFICATE-----Generated at Thu Aug 7 03:52:10 2025 by rpki-client