$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: X9hfFCAv/T/wddVmmeNywz9EYT/Qq25gWMLGwbw+ZTI= Subject key identifier: 0F:EF:26:52:09:C1:B1:12:DB:60:50:1C:97:A2:26:64:9D:6D:97:CE Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 0176 Signing time: Thu 03 Jul 2025 04:08:42 +0000 Manifest this update: Thu 03 Jul 2025 04:08:42 +0000 Manifest next update: Thu 10 Jul 2025 04:08:42 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: +H25RapDQwx3UpZrfY05H3drTiy++Pp9Ap1LdfNiVxc=) 2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: T9bgb6w+YEKZ5F9ekCDjbubT5zB0ZkUsFds1ZxlsLrE=) 3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: Poe8WZPLlmMRopxum73vePC7h4bI4X/kM9rphS1LhLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Jul 3 04:08:42 2025 GMT Not After : Jul 10 04:08:42 2025 GMT Subject: CN=6866024a-4606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:32:f5:a8:b1:ac:d7:99:94:4a:47:43:ef: 32:86:72:d6:b5:a0:8a:b3:1a:5f:b9:25:9d:f9:06: ed:fd:2d:23:2a:8a:f5:53:65:6a:f5:2e:89:06:ef: c2:96:10:4d:3b:5b:62:c1:c7:e7:15:e1:00:f0:83: 35:f6:fe:1a:7b:be:3a:9b:3e:61:6e:24:0f:51:44: 49:7c:e6:58:ad:3b:78:79:a4:35:b9:df:40:91:11: e4:87:5b:7c:2d:c5:b3:b3:2e:aa:b6:a5:51:5b:aa: 0c:d8:44:23:0b:58:4c:b5:19:52:04:62:ea:c2:78: 2f:2f:53:2d:44:c7:e2:38:87:5c:76:93:4f:0c:3f: bb:f6:99:5a:10:eb:61:02:1c:32:d8:a2:24:63:9e: af:6f:0f:24:32:4a:38:12:61:4e:1f:66:02:f1:e0: d6:bb:da:81:d9:be:68:d6:c1:1f:b0:9a:5b:21:31: a8:51:7b:73:ad:26:7f:98:21:f3:36:77:40:bd:df: 70:a7:16:ba:1f:bf:48:4a:5e:99:cc:f3:69:07:d1: 05:33:7f:27:94:ee:83:e8:12:f8:3c:9a:d7:93:23: 5f:92:b9:54:80:ac:18:1e:a7:4b:ea:c0:ef:90:d9: 1f:dc:21:2c:ab:1f:5c:8d:54:14:a1:95:ab:83:65: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EF:26:52:09:C1:B1:12:DB:60:50:1C:97:A2:26:64:9D:6D:97:CE X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0a:72:18:e3:a5:83:38:6d:4b:df:44:8b:69:fd:8b:0c:1c: b4:0f:2c:7b:18:f4:de:4a:6e:7c:02:db:82:b1:4e:24:ca:72: bd:9f:71:02:5f:1d:2c:64:f9:ab:32:20:9e:bc:27:19:67:86: 72:67:5d:b8:ad:a3:ec:60:ab:93:6c:f3:86:a9:fb:ca:e5:d5: a4:0e:66:71:f5:21:0b:64:81:77:db:ad:eb:49:6d:cb:12:b8: cb:73:e1:5c:01:db:1a:2e:aa:1b:9c:8c:fb:bd:5f:ef:91:7c: b9:13:4d:86:f4:3d:dd:ac:77:4e:7b:d9:24:e1:2e:ce:16:df: 16:c7:39:43:8e:51:74:35:2e:28:6c:69:84:af:c3:87:ee:29: 7a:fd:1f:b1:b5:b9:da:78:44:ea:86:7d:2e:e5:64:ba:0f:01: d8:80:bf:60:fe:af:10:5e:8e:64:9c:00:60:db:f3:14:5b:9d: c3:5d:79:40:45:19:a0:33:cd:ff:af:f5:c2:62:d4:07:2b:68: e5:ba:af:fa:63:6f:bf:bc:7f:00:e6:9f:90:c1:dd:ad:d1:6e: 26:e8:19:a2:6f:ea:23:9c:c8:86:a4:20:a3:84:e2:96:6b:76: 62:65:af:b3:a4:ab:21:9c:92:ef:e8:6d:9c:10:ba:1c:1d:d1: 42:c4:1f:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjUwNzAzMDQwODQyWhcNMjUwNzEwMDQwODQyWjAYMRYwFAYD VQQDEw02ODY2MDI0YS00NjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoH4y9aixrNeZlEpHQ+8yhnLWtaCKsxpfuSWd+Qbt/S0jKor1U2Vq9S6JBu/C lhBNO1tiwcfnFeEA8IM19v4ae746mz5hbiQPUURJfOZYrTt4eaQ1ud9AkRHkh1t8 LcWzsy6qtqVRW6oM2EQjC1hMtRlSBGLqwngvL1MtRMfiOIdcdpNPDD+79plaEOth Ahwy2KIkY56vbw8kMko4EmFOH2YC8eDWu9qB2b5o1sEfsJpbITGoUXtzrSZ/mCHz NndAvd9wpxa6H79ISl6ZzPNpB9EFM38nlO6D6BL4PJrXkyNfkrlUgKwYHqdL6sDv kNkf3CEsqx9cjVQUoZWrg2WTIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/vJlIJ wbES22BQHJeiJmSdbZfOMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYCnIY46WDOG1L30SLaf2LDBy0Dyx7GPTeSm58AtuCsU4kynK9n3EC Xx0sZPmrMiCevCcZZ4ZyZ124raPsYKuTbPOGqfvK5dWkDmZx9SELZIF3263rSW3L ErjLc+FcAdsaLqobnIz7vV/vkXy5E02G9D3drHdOe9kk4S7OFt8WxzlDjlF0NS4o bGmEr8OH7il6/R+xtbnaeETqhn0u5WS6DwHYgL9g/q8QXo5knABg2/MUW53DXXlA RRmgM83/r/XCYtQHK2jluq/6Y2+/vH8A5p+Qwd2t0W4m6Bmib+ojnMiGpCCjhOKW a3ZiZa+zpKshnJLv6G2cELocHdFCxB/l -----END CERTIFICATE-----Generated at Thu Jul 3 08:57:44 2025 by rpki-client