$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json) Hash identifier: /5+kFiif6D4gD3wwQ5NpfbThz6yDYLH5LACPzFLjgz0= Subject key identifier: 9F:F3:E1:ED:73:D0:C2:4C:3A:12:96:A8:2D:74:52:F0:FE:07:CC:17 Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Certificate serial: 07D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft Manifest number: 07CF Signing time: Fri 22 Aug 2025 21:17:02 +0000 Manifest this update: Fri 22 Aug 2025 21:17:02 +0000 Manifest next update: Fri 29 Aug 2025 21:17:02 +0000 Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: gmKzbyjtGJaZDfl85hte/z8Ja7w6LK5UVjHQqyq7vh0=) 2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: MXW87fZ4qznNog7Mqv1dybumPTtWHlhfVDxRXuxWlk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144BAD, serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Validity Not Before: Aug 22 21:17:02 2025 GMT Not After : Aug 29 21:17:02 2025 GMT Subject: CN=68a8de4e-672d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:ae:ed:4d:08:9c:3b:73:f8:2b:0a:4d:15: 2a:e4:e5:dc:be:15:39:5b:a5:b7:1d:2d:44:dc:f1: 30:1d:f4:c9:a9:3e:f3:61:5d:20:d0:ef:48:0a:8b: 11:d7:b8:1b:f8:35:41:a3:c4:ec:18:45:7e:88:5c: cb:be:6e:5d:81:54:b1:39:ac:13:44:85:59:ff:ae: 98:60:73:05:42:4e:0e:3a:ad:a4:7d:61:95:a5:fd: 34:63:99:c6:dd:16:95:26:54:a4:96:b8:ba:7d:0c: 8b:7e:c4:58:5a:85:8d:f8:78:37:10:1a:b8:88:d9: 39:b5:21:88:88:1a:67:be:47:83:b2:a7:cf:83:5e: f5:4e:9c:19:9a:22:c6:37:f2:73:6c:9e:ef:08:0e: 79:5a:e2:28:5b:4c:bf:28:a6:e0:61:7e:c4:21:18: 7f:67:8e:f3:98:b8:85:97:ba:0b:3c:90:38:cf:14: 17:45:17:3f:6a:27:36:7c:3f:1f:e7:86:8c:48:87: 8b:73:a6:79:0d:02:ec:55:aa:ba:91:ea:35:98:27: 1f:82:af:35:36:ed:ae:32:d9:8d:f3:e4:6e:10:a8: df:4f:ac:d3:8a:16:a6:ae:fa:74:4c:fc:25:a0:28: 97:ef:98:82:d4:cd:4f:da:0b:85:a7:67:5c:d4:b0: 31:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F3:E1:ED:73:D0:C2:4C:3A:12:96:A8:2D:74:52:F0:FE:07:CC:17 X509v3 Authority Key Identifier: keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cc:9e:e8:d0:c5:30:53:8d:2b:2f:bf:20:54:b0:70:fa:6e: 75:ea:cf:41:2d:b2:8d:68:fc:62:1c:71:dc:a7:cf:7a:3c:e1: 16:65:b9:f4:94:99:b4:cc:11:79:91:75:31:d7:a9:e9:87:9f: d5:64:45:d3:98:42:d9:2c:e4:7c:c7:97:b4:b2:8b:bd:00:ec: 7a:7f:1b:47:a5:cf:05:b1:1f:e3:b2:63:77:37:78:cd:01:6e: 14:2f:3b:e9:79:13:0d:95:ea:2b:be:40:43:26:e1:16:9c:bf: d3:c0:f9:c3:53:e2:35:2f:23:a2:5f:3e:b0:f4:ef:a1:c0:6f: 1d:e0:a2:81:a2:49:2e:1b:83:94:0d:55:30:2f:56:12:e2:47: fc:92:50:27:2d:25:08:ec:74:bf:67:a2:3f:53:fc:29:34:9e: d2:91:c1:ed:cd:48:c3:a2:2f:80:e5:e7:48:f2:9c:c2:c5:86: e6:22:44:7f:91:65:40:1b:31:cf:ec:f8:dd:75:46:ff:e4:be: cf:e9:c3:a9:39:4f:b2:96:a3:10:c2:e8:83:52:0b:19:6f:2f: bc:d1:ff:9a:cb:8e:d3:0c:19:26:35:eb:6f:bf:43:c4:fb:99: ef:83:35:f7:9b:62:b6:ff:51:1b:9b:8c:29:5f:cc:89:57:ea: 14:28:3b:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRCQUQxMTAvBgNVBAUTKDAzMkFDMjI0MUQxOENGQkJDMUMzM0NBREY1RThGNjU1 NDEyRDRBOEIwHhcNMjUwODIyMjExNzAyWhcNMjUwODI5MjExNzAyWjAYMRYwFAYD VQQDEw02OGE4ZGU0ZS02NzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4iu7U0InDtz+CsKTRUq5OXcvhU5W6W3HS1E3PEwHfTJqT7zYV0g0O9ICosR 17gb+DVBo8TsGEV+iFzLvm5dgVSxOawTRIVZ/66YYHMFQk4OOq2kfWGVpf00Y5nG 3RaVJlSklri6fQyLfsRYWoWN+Hg3EBq4iNk5tSGIiBpnvkeDsqfPg171TpwZmiLG N/JzbJ7vCA55WuIoW0y/KKbgYX7EIRh/Z47zmLiFl7oLPJA4zxQXRRc/aic2fD8f 54aMSIeLc6Z5DQLsVaq6keo1mCcfgq81Nu2uMtmN8+RuEKjfT6zTihamrvp0TPwl oCiX75iC1M1P2guFp2dc1LAxKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/z4e1z 0MJMOhKWqC10UvD+B8wXMB8GA1UdIwQYMBaAFAMqwiQdGM+7wcM8rfXo9lVBLUqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEJBRC9ENUQ3NDM0NjA0 NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3dkJ3enl0OWVqMlZVRXRT b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F5ckNKQjBZejd2Qnd6eXQ5ZWoyVlVFdFNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEJBRC9ENUQ3NDM0NjA0NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3 dkJ3enl0OWVqMlZVRXRTb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANzJ7o0MUwU40rL78gVLBw+m516s9BLbKNaPxiHHHcp896POEWZbn0 lJm0zBF5kXUx16nph5/VZEXTmELZLOR8x5e0sou9AOx6fxtHpc8FsR/jsmN3N3jN AW4ULzvpeRMNleorvkBDJuEWnL/TwPnDU+I1LyOiXz6w9O+hwG8d4KKBokkuG4OU DVUwL1YS4kf8klAnLSUI7HS/Z6I/U/wpNJ7SkcHtzUjDoi+A5edI8pzCxYbmIkR/ kWVAGzHP7PjddUb/5L7P6cOpOU+ylqMQwuiDUgsZby+80f+ay47TDBkmNetvv0PE +5nvgzX3m2K2/1Ebm4wpX8yJV+oUKDt3 -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:25 2025 by rpki-client