$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft File: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json) Hash identifier: qWxgn+HeiRvhSmb8zM56aUHhKCwPwJcxI9OH/nEIZvU= Subject key identifier: 1B:1B:15:85:64:E8:EE:10:43:56:26:3A:8D:26:AD:35:7F:A5:67:97 Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft Manifest number: 18 Signing time: Tue 01 Jul 2025 08:44:17 +0000 Manifest this update: Tue 01 Jul 2025 08:44:17 +0000 Manifest next update: Tue 08 Jul 2025 08:44:17 +0000 Files and hashes: 1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: +sPlzE8o7/7cJhhmleTt+G4YqH839E9LbeBuVJNz/W0=) 2: 84C145D230D911F082B14974C4F9AE02.roa (hash: mP2QQWqHYPeK0WY2IdG9TiulT78Yh4TwS3eeLc1a48k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Validity Not Before: Jul 1 08:44:17 2025 GMT Not After : Jul 8 08:44:17 2025 GMT Subject: CN=68639fe1-955f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:40:49:00:65:e8:ed:e5:df:dd:d0:5b:15: 65:b7:46:23:54:27:33:e8:e3:40:45:1a:1b:eb:e1: b8:99:c2:ca:ac:57:5c:ac:a4:87:df:04:dc:46:a2: b5:8f:a9:54:7c:8b:53:43:83:22:cd:ab:bd:81:2d: 93:9b:8e:31:10:ea:fc:a6:89:42:2d:86:16:7c:47: cf:47:24:69:6d:2c:c8:f1:75:94:e2:e4:ed:86:9d: 95:07:a4:ed:86:c6:9a:d0:f7:df:52:5d:f2:f4:b3: 49:de:68:c9:09:8b:89:fe:a0:8e:ce:67:87:8c:1c: b1:0a:ac:73:12:6b:05:fd:a8:f2:9b:9e:ca:41:e7: 92:8a:01:56:17:dc:ab:52:6a:a0:56:19:49:53:8f: ae:b2:84:6b:4f:13:bf:7f:13:72:1b:bf:70:ba:4f: bd:6d:3b:1a:e1:8f:32:a2:af:da:c6:03:50:11:da: 59:1e:0c:4f:75:73:7f:f0:5b:5b:a7:af:ad:5e:25: 63:43:1c:23:28:a6:91:ca:e0:8d:13:db:6d:65:5a: ae:b5:63:8f:f9:4f:48:39:91:db:45:35:c7:90:bf: 27:0a:dc:d3:0a:4e:21:aa:5c:bf:13:30:67:ea:09: 9b:90:6f:6e:62:cd:40:3e:85:56:36:06:f6:48:8b: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1B:15:85:64:E8:EE:10:43:56:26:3A:8D:26:AD:35:7F:A5:67:97 X509v3 Authority Key Identifier: keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:53:ab:3b:e3:59:d5:6e:77:88:f2:9b:8b:1d:d7:80:db:a9: 95:83:12:c0:ad:42:62:33:68:b8:16:4d:d9:58:4e:5f:10:6e: ab:de:8f:22:a6:c6:4b:dc:6d:5c:0b:88:92:0b:7a:5e:b1:80: d4:9c:8f:01:c2:bb:49:83:af:9a:2e:3c:f2:0d:64:92:a1:7d: b4:b3:e4:48:2c:1f:2e:d4:21:0e:83:0d:d5:ce:d6:32:a7:67: 17:07:3a:aa:02:d4:d3:70:e0:fd:ab:27:3e:26:6c:8f:aa:e8: 20:01:6b:6a:41:44:11:12:46:4a:c2:6c:77:3d:94:a7:1e:36: 6b:b2:ab:9a:e1:e8:40:8d:86:5f:d2:59:1f:e6:18:fa:8f:ca: a4:aa:ff:e2:9c:b6:8c:66:e6:8f:ac:5e:3c:33:61:fa:32:79: e1:92:95:94:dc:03:a1:6d:7b:57:e9:be:78:da:48:18:33:f6: 14:b1:9c:2a:0b:86:f9:49:76:25:ec:9a:47:94:4c:cc:a0:ee: c2:ef:d1:c4:4a:f5:58:a0:20:8e:a1:97:17:bc:40:57:f4:43: 6a:c7:20:f6:03:a1:4c:8c:1a:55:b6:7e:10:b1:75:60:ab:99: a2:38:f2:ba:65:b4:cc:88:d0:81:a2:51:35:28:ef:58:82:6d: d6:f4:16:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoRUY3NjJDQzk0MjE5RTA5OTIzQTExQjBEM0M0MzBFN0Yz NUM4RDg2NDAeFw0yNTA3MDEwODQ0MTdaFw0yNTA3MDgwODQ0MTdaMBgxFjAUBgNV BAMTDTY4NjM5ZmUxLTk1NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwAEBJAGXo7eXf3dBbFWW3RiNUJzPo40BFGhvr4biZwsqsV1yspIffBNxGorWP qVR8i1NDgyLNq72BLZObjjEQ6vymiUIthhZ8R89HJGltLMjxdZTi5O2GnZUHpO2G xprQ999SXfL0s0neaMkJi4n+oI7OZ4eMHLEKrHMSawX9qPKbnspB55KKAVYX3KtS aqBWGUlTj66yhGtPE79/E3Ibv3C6T71tOxrhjzKir9rGA1AR2lkeDE91c3/wW1un r61eJWNDHCMoppHK4I0T221lWq61Y4/5T0g5kdtFNceQvycK3NMKTiGqXL8TMGfq CZuQb25izUA+hVY2BvZIi+ndAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGxsVhWTo 7hBDViY6jSatNX+lZ5cwHwYDVR0jBBgwFoAU73YsyUIZ4JkjoRsNPEMOfzXI2GQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzI3QkU4NDBFMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzNZc3lVSVo0Smtqb1JzTlBFTU9melhJMkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzI3QkU4NDBFMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpr am9Sc05QRU1PZnpYSTJHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAINTqzvjWdVud4jym4sd14DbqZWDEsCtQmIzaLgWTdlYTl8QbqvejyKm xkvcbVwLiJILel6xgNScjwHCu0mDr5ouPPINZJKhfbSz5EgsHy7UIQ6DDdXO1jKn ZxcHOqoC1NNw4P2rJz4mbI+q6CABa2pBRBESRkrCbHc9lKceNmuyq5rh6ECNhl/S WR/mGPqPyqSq/+Kctoxm5o+sXjwzYfoyeeGSlZTcA6Fte1fpvnjaSBgz9hSxnCoL hvlJdiXsmkeUTMyg7sLv0cRK9VigII6hlxe8QFf0Q2rHIPYDoUyMGlW2fhCxdWCr maI48rpltMyI0IGiUTUo71iCbdb0Fk8= -----END CERTIFICATE-----Generated at Thu Jul 3 02:08:23 2025 by rpki-client