$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json) Hash identifier: WQJiAS+Df4kSAz9aV3WJ+Rl4ByY90my/ToCLSMO70/o= Subject key identifier: 74:78:EA:3A:94:A0:6B:BD:95:2A:AD:57:43:91:09:2D:C2:51:0E:E8 Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Certificate serial: 07B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft Manifest number: 07B4 Signing time: Mon 30 Jun 2025 21:25:37 +0000 Manifest this update: Mon 30 Jun 2025 21:25:37 +0000 Manifest next update: Mon 07 Jul 2025 21:25:37 +0000 Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: J45RcRtZ+zZ9Z4hThISFVHUKn72VkRuxudP2GypTjYI=) 2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: MXW87fZ4qznNog7Mqv1dybumPTtWHlhfVDxRXuxWlk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144BAD, serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Validity Not Before: Jun 30 21:25:37 2025 GMT Not After : Jul 7 21:25:37 2025 GMT Subject: CN=686300d1-84a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:35:a3:61:66:37:01:a8:6a:3f:00:06:00: ea:a7:4f:ba:72:4f:24:6a:05:60:6a:0a:b5:4e:86: c3:5f:68:71:53:f1:86:13:95:73:47:b6:5b:8f:cb: dd:ab:65:10:b1:76:89:70:67:4c:c8:6b:ab:2c:76: b7:ca:37:e2:81:19:28:21:80:f8:36:c2:2c:38:68: 6b:a0:65:44:eb:48:f2:46:31:85:89:c3:98:f7:7e: 51:ab:c9:61:35:b2:7b:fb:d7:dc:88:fd:d8:7d:d5: 81:aa:7f:b8:f6:9c:5d:d4:f2:1c:6a:0c:cd:bf:12: 64:69:12:00:0d:09:7f:36:d6:2f:a4:20:3a:1a:12: 49:c3:e1:c7:01:38:3d:f0:87:32:25:cf:bd:7d:8b: dc:95:59:f1:c2:94:65:f6:3c:30:59:ed:4d:df:91: 9a:6c:71:87:67:22:13:58:9b:d1:f4:f0:a6:21:c6: aa:89:9d:a5:91:e3:b5:ec:53:88:8e:01:85:57:74: 49:e3:86:ed:a5:72:e0:d1:81:e7:75:ad:23:c4:65: 94:85:53:8d:89:2f:78:fa:40:e0:81:0d:1e:96:11: 6f:af:14:5e:cb:d0:bb:f2:55:93:b3:54:94:61:e3: 64:77:3b:d7:6b:38:05:6e:5e:aa:2d:b6:8a:ca:db: d6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:78:EA:3A:94:A0:6B:BD:95:2A:AD:57:43:91:09:2D:C2:51:0E:E8 X509v3 Authority Key Identifier: keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4f:13:8e:4a:71:f3:52:d2:5c:4d:91:26:78:e5:b4:f2:27: be:ec:05:c8:02:12:06:11:a9:21:1d:46:0e:84:08:39:a1:d1: 05:1f:1d:29:e4:0f:b0:53:8f:23:0f:5c:32:85:87:6e:7c:93: 54:0b:eb:94:60:c3:f3:7a:27:99:cc:81:dd:ce:db:e4:24:bc: 4c:3a:71:2c:c9:62:4f:91:5d:de:73:bc:27:5b:7a:b7:05:dd: 4f:2f:3e:13:1a:65:9d:2b:d3:fa:63:4b:1f:13:73:4c:a7:fb: 00:32:81:41:7e:9e:27:76:9c:04:3c:cc:e0:38:ec:db:6c:81: f2:d4:6c:da:4c:71:58:49:a0:aa:5a:f5:ca:7e:35:8c:ae:ac: d3:6d:88:7c:a2:f4:9d:c3:5b:e7:0a:90:fc:c9:9c:5e:82:c8: a9:e3:fb:51:b2:de:38:79:77:17:f9:8d:72:49:00:35:7e:48: a1:9f:93:84:83:ef:76:cc:2e:1c:a8:4b:df:08:08:09:f9:6a: 6e:aa:18:e5:03:87:cd:56:50:3d:5a:48:2f:bc:bc:e4:9c:4c: bb:76:29:2b:da:9d:96:03:f2:0a:c1:25:71:09:f2:7f:ae:a0: 88:a5:d1:7e:70:2a:3e:a9:a9:d6:dc:39:87:bc:a1:2a:87:8a: f2:6b:b0:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRCQUQxMTAvBgNVBAUTKDAzMkFDMjI0MUQxOENGQkJDMUMzM0NBREY1RThGNjU1 NDEyRDRBOEIwHhcNMjUwNjMwMjEyNTM3WhcNMjUwNzA3MjEyNTM3WjAYMRYwFAYD VQQDEw02ODYzMDBkMS04NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulw1o2FmNwGoaj8ABgDqp0+6ck8kagVgagq1TobDX2hxU/GGE5VzR7Zbj8vd q2UQsXaJcGdMyGurLHa3yjfigRkoIYD4NsIsOGhroGVE60jyRjGFicOY935Rq8lh NbJ7+9fciP3YfdWBqn+49pxd1PIcagzNvxJkaRIADQl/NtYvpCA6GhJJw+HHATg9 8IcyJc+9fYvclVnxwpRl9jwwWe1N35GabHGHZyITWJvR9PCmIcaqiZ2lkeO17FOI jgGFV3RJ44btpXLg0YHnda0jxGWUhVONiS94+kDggQ0elhFvrxRey9C78lWTs1SU YeNkdzvXazgFbl6qLbaKytvWkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHR46jqU oGu9lSqtV0ORCS3CUQ7oMB8GA1UdIwQYMBaAFAMqwiQdGM+7wcM8rfXo9lVBLUqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEJBRC9ENUQ3NDM0NjA0 NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3dkJ3enl0OWVqMlZVRXRT b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F5ckNKQjBZejd2Qnd6eXQ5ZWoyVlVFdFNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEJBRC9ENUQ3NDM0NjA0NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3 dkJ3enl0OWVqMlZVRXRTb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKTxOOSnHzUtJcTZEmeOW08ie+7AXIAhIGEakhHUYOhAg5odEFHx0p 5A+wU48jD1wyhYdufJNUC+uUYMPzeieZzIHdztvkJLxMOnEsyWJPkV3ec7wnW3q3 Bd1PLz4TGmWdK9P6Y0sfE3NMp/sAMoFBfp4ndpwEPMzgOOzbbIHy1GzaTHFYSaCq WvXKfjWMrqzTbYh8ovSdw1vnCpD8yZxegsip4/tRst44eXcX+Y1ySQA1fkihn5OE g+92zC4cqEvfCAgJ+WpuqhjlA4fNVlA9WkgvvLzknEy7dikr2p2WA/IKwSVxCfJ/ rqCIpdF+cCo+qanW3DmHvKEqh4rya7Ch -----END CERTIFICATE-----Generated at Wed Jul 2 03:39:43 2025 by rpki-client