$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: Ch2EHRPFT1Nha15VryLBAmYw6FxOK1m05jRPEecB3wY= Subject key identifier: 3D:EA:31:9C:7F:3D:6E:DD:99:7F:4A:32:FF:42:2E:92:AD:AB:57:E6 Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 34B4 Signing time: Fri 22 Aug 2025 14:58:25 +0000 Manifest this update: Fri 22 Aug 2025 14:58:25 +0000 Manifest next update: Fri 29 Aug 2025 14:58:25 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: wuIqyLKfRhoNiF8Eb5iMtZFLVnh1oW+xxh1mYXrC7xE=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: w/zPMK06vnyoVLL/BGNp77uAUStxaD44YXARWWRfkvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Aug 22 14:58:25 2025 GMT Not After : Aug 29 14:58:25 2025 GMT Subject: CN=68a88591-dbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:81:7a:16:00:b6:53:32:f0:02:10:df:7a:68: 62:7e:cd:ab:18:66:6d:50:b8:42:0b:f1:7e:24:0f: 45:1d:93:f4:db:55:f9:5e:5b:b0:6f:28:59:dd:73: 6c:0b:95:4d:e6:5a:d8:18:d5:03:e1:74:2d:a7:52: c9:ba:31:cf:04:2f:b1:1a:2a:95:00:a6:88:96:ae: 9c:db:af:af:90:d6:a1:b4:03:8a:83:54:e4:33:4e: 02:7b:ed:07:d2:ef:81:45:9d:d3:c1:1e:88:ba:35: bc:d3:2a:5e:7a:13:58:34:31:b7:5b:da:b1:b7:0a: 26:7e:e8:b4:d4:69:a0:4a:71:26:b7:25:56:92:14: d1:b6:7d:8c:70:e8:b3:e7:f5:d2:5b:63:13:30:37: e6:79:3b:8e:06:16:d2:32:65:28:85:a6:1a:5b:aa: 3d:80:57:8a:06:1f:40:7d:fa:0c:fc:5a:30:60:ec: b7:e2:36:8e:6e:bf:c8:c2:36:b0:0d:c9:b3:41:55: e5:0e:0c:ea:78:53:96:b9:a2:47:42:dc:c9:d4:d3: c6:3d:34:0d:53:bb:a1:0c:98:5c:0f:92:e1:a9:67: d5:6a:d5:34:e8:56:29:ff:b1:17:18:a3:dc:73:c4: c0:4b:92:58:61:ac:86:cc:df:91:d4:2d:93:9b:38: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EA:31:9C:7F:3D:6E:DD:99:7F:4A:32:FF:42:2E:92:AD:AB:57:E6 X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:02:2e:97:d7:d9:52:a2:38:ac:6b:4b:23:f9:1d:fd:5a:de: 38:90:d9:95:b7:58:aa:2f:d5:80:e0:2a:e1:cd:56:71:bb:b7: 2b:66:ec:70:27:45:b8:7d:f9:3c:55:59:92:e0:3b:c9:d0:12: fb:7e:bb:cf:af:cf:69:e1:f2:23:9b:53:1f:c1:ce:1f:d2:a9: ec:df:5c:97:16:ab:97:36:16:1c:75:8e:6b:31:c1:6d:ab:ea: 3c:7d:24:f2:4e:35:74:1c:fd:b5:71:b4:79:48:aa:f0:42:59: a0:d8:ff:a7:54:ca:73:41:0f:7e:82:f6:77:21:6a:33:7a:19: bc:6e:dc:f3:12:6b:72:71:33:69:e4:43:1b:1c:fd:0e:00:77: 28:9a:f0:31:4c:24:81:ab:f0:9e:0f:f8:81:2e:68:12:fa:1d: ce:b4:ae:4b:ef:ae:4e:43:d3:18:19:bf:46:10:9d:d7:29:3a: 2e:67:75:25:d2:bb:a7:16:4c:57:09:5f:96:c7:c7:19:28:77: cc:75:eb:91:ce:49:87:e7:3d:00:06:c5:97:af:9e:f5:83:13: 2a:7d:46:0e:65:a4:99:3f:44:7f:cf:5b:a9:48:1e:c5:be:49: ff:36:c8:49:59:ac:af:b7:20:f6:03:73:56:8b:c6:bf:89:3a: f0:96:7f:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjUwODIyMTQ1ODI1WhcNMjUwODI5MTQ1ODI1WjAYMRYwFAYD VQQDEw02OGE4ODU5MS1kYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YF6FgC2UzLwAhDfemhifs2rGGZtULhCC/F+JA9FHZP021X5XluwbyhZ3XNs C5VN5lrYGNUD4XQtp1LJujHPBC+xGiqVAKaIlq6c26+vkNahtAOKg1TkM04Ce+0H 0u+BRZ3TwR6IujW80ypeehNYNDG3W9qxtwomfui01GmgSnEmtyVWkhTRtn2McOiz 5/XSW2MTMDfmeTuOBhbSMmUohaYaW6o9gFeKBh9AffoM/FowYOy34jaObr/Iwjaw DcmzQVXlDgzqeFOWuaJHQtzJ1NPGPTQNU7uhDJhcD5LhqWfVatU06FYp/7EXGKPc c8TAS5JYYayGzN+R1C2TmzhknQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3qMZx/ PW7dmX9KMv9CLpKtq1fmMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmAi6X19lSojisa0sj+R39Wt44kNmVt1iqL9WA4CrhzVZxu7crZuxw J0W4ffk8VVmS4DvJ0BL7frvPr89p4fIjm1Mfwc4f0qns31yXFquXNhYcdY5rMcFt q+o8fSTyTjV0HP21cbR5SKrwQlmg2P+nVMpzQQ9+gvZ3IWozehm8btzzEmtycTNp 5EMbHP0OAHcomvAxTCSBq/CeD/iBLmgS+h3OtK5L765OQ9MYGb9GEJ3XKTouZ3Ul 0runFkxXCV+Wx8cZKHfMdeuRzkmH5z0ABsWXr571gxMqfUYOZaSZP0R/z1upSB7F vkn/NshJWayvtyD2A3NWi8a/iTrwln86 -----END CERTIFICATE-----Generated at Sun Aug 24 03:13:22 2025 by rpki-client