$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft File: yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft (raw, json) Hash identifier: hZ4KXSGiqY3DZqWC2NLXORvUvfn9YKKPjnOfbaauM2A= Subject key identifier: 5C:CC:AD:40:AE:A4:CC:7C:7B:BC:09:AF:F4:DD:AF:D1:FD:4A:24:CE Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B Certificate issuer: /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft Manifest number: 028E Signing time: Sat 05 Jul 2025 02:12:36 +0000 Manifest this update: Sat 05 Jul 2025 02:12:36 +0000 Manifest next update: Sat 12 Jul 2025 02:12:36 +0000 Files and hashes: 1: yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl (hash: wWq7WsZ0gUgQkcPMkMyGJHKVFiw0ZrtGKFxJyvGKvRw=) 2: 755581D40D7E11EDA9F2CA4AC4F9AE02.roa (hash: zleKsAQ/UII/VAR0ip3wb38fmNdnLl5jIKA7jKftYvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162914, serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Validity Not Before: Jul 5 02:12:36 2025 GMT Not After : Jul 12 02:12:36 2025 GMT Subject: CN=68688a14-2332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:7c:05:27:45:22:5a:2d:bb:2e:36:d9:44: ca:f3:bc:1f:a2:e8:98:ac:13:57:9d:b3:61:23:75: 9c:53:36:94:fc:59:ed:d6:f6:5a:86:75:cc:6b:9a: fb:86:29:e2:c2:a2:55:f3:4c:76:b5:13:91:e8:e2: 0f:e4:b1:ff:8a:cf:54:3e:71:98:24:82:c0:ec:18: 0c:95:0e:4a:fe:19:4d:78:30:ea:4a:1e:65:d2:d6: bd:80:70:48:1a:1f:5c:06:d8:fc:1b:6e:95:70:b0: 88:18:74:ee:ac:02:0e:da:7a:9d:01:b9:9e:1b:44: e4:36:e2:f5:22:22:31:23:44:d7:bd:aa:0a:70:25: d9:ec:4b:a7:16:6b:28:2b:94:29:ad:27:87:9b:54: bd:0d:4d:36:29:9d:11:72:ad:d1:c1:fc:4e:39:6c: 57:91:9b:b1:4e:51:ac:a2:b6:31:12:5b:2d:e6:2c: 06:fa:03:eb:3d:5f:61:f3:20:30:42:d1:aa:ba:06: 4a:9c:fd:63:fd:e9:e9:26:d4:50:17:ee:1e:60:13: 7a:26:9c:d4:1d:f2:f1:1f:0c:8b:9d:25:76:2e:10: f4:5b:18:cb:18:48:06:c1:3f:85:16:a7:a6:12:84: 0c:4b:c3:fa:65:e8:14:9e:91:17:18:2b:7f:7f:1d: 14:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CC:AD:40:AE:A4:CC:7C:7B:BC:09:AF:F4:DD:AF:D1:FD:4A:24:CE X509v3 Authority Key Identifier: keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8a:10:6b:d0:a3:ef:72:8b:4a:69:50:e3:4e:f4:5b:96:47: d9:95:6e:18:d3:74:34:95:77:3f:15:95:12:57:ba:41:fc:06: 35:2e:26:71:cb:54:44:19:99:41:19:b6:66:f8:75:7c:ce:bc: b3:fa:e7:f3:6d:1b:ce:da:f1:d4:6e:4d:8a:1c:33:31:6d:26: bf:cc:05:6a:65:fd:9c:20:c0:4b:11:60:71:51:e5:a6:f6:36: f4:f0:30:c3:94:73:64:c6:3e:3b:05:de:37:e8:f4:b8:59:e3: 72:3d:9e:dc:22:7a:65:9f:d5:d8:5c:68:fe:c7:00:52:b3:15: 39:f2:d9:8e:94:4f:eb:2c:f4:99:9a:a8:fb:a5:35:e4:4a:b0: bf:ad:cb:0d:aa:5c:89:cf:82:db:3a:8d:96:ca:d0:bc:a3:17: e8:de:da:52:98:d6:22:01:65:b3:19:56:cf:53:65:09:41:13: 08:70:f4:f1:b2:02:57:bc:d3:97:ab:d6:aa:0d:63:e5:69:e2: 2f:d1:5e:8f:a2:70:1a:3b:0f:dd:b6:36:77:72:4e:bd:35:0f: 62:cd:29:e0:68:97:06:37:39:f4:1b:7e:ee:d4:b5:25:7a:44: 65:f1:62:e1:a2:35:41:f9:e7:e3:10:d5:b9:0c:4d:be:3a:2e: 47:cf:32:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5MTQxMTAvBgNVBAUTKENCMUM4MEI0MDM0QkU0MUI1OEMzQzY0QjI0QTA4Q0Q5 Qzc3Qjk2M0IwHhcNMjUwNzA1MDIxMjM2WhcNMjUwNzEyMDIxMjM2WjAYMRYwFAYD VQQDEw02ODY4OGExNC0yMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxat8BSdFIlotuy422UTK87wfouiYrBNXnbNhI3WcUzaU/Fnt1vZahnXMa5r7 hiniwqJV80x2tROR6OIP5LH/is9UPnGYJILA7BgMlQ5K/hlNeDDqSh5l0ta9gHBI Gh9cBtj8G26VcLCIGHTurAIO2nqdAbmeG0TkNuL1IiIxI0TXvaoKcCXZ7EunFmso K5QprSeHm1S9DU02KZ0Rcq3RwfxOOWxXkZuxTlGsorYxElst5iwG+gPrPV9h8yAw QtGqugZKnP1j/enpJtRQF+4eYBN6JpzUHfLxHwyLnSV2LhD0WxjLGEgGwT+FFqem EoQMS8P6ZegUnpEXGCt/fx0UaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzMrUCu pMx8e7wJr/Tdr9H9SiTOMB8GA1UdIwQYMBaAFMscgLQDS+QbWMPGSySgjNnHe5Y7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjkxNC9ENjZDOTNGQzBE NzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVCdFl3OFpMSktDTTJjZDds anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4eUF0QU5MNUJ0WXc4WkxKS0NNMmNkN2xqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjkxNC9ENjZDOTNGQzBENzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVC dFl3OFpMSktDTTJjZDdsanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKihBr0KPvcotKaVDjTvRblkfZlW4Y03Q0lXc/FZUSV7pB/AY1LiZx y1REGZlBGbZm+HV8zryz+ufzbRvO2vHUbk2KHDMxbSa/zAVqZf2cIMBLEWBxUeWm 9jb08DDDlHNkxj47Bd436PS4WeNyPZ7cInpln9XYXGj+xwBSsxU58tmOlE/rLPSZ mqj7pTXkSrC/rcsNqlyJz4LbOo2WytC8oxfo3tpSmNYiAWWzGVbPU2UJQRMIcPTx sgJXvNOXq9aqDWPlaeIv0V6PonAaOw/dtjZ3ck69NQ9izSngaJcGNzn0G37u1LUl ekRl8WLhojVB+efjENW5DE2+Oi5HzzIZ -----END CERTIFICATE-----Generated at Sat Jul 5 05:20:25 2025 by rpki-client