$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft File: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json) Hash identifier: Ckbl0MbMUSdir9kEaSxNrWymX+/6HUzzAUrPknicmFc= Subject key identifier: 4A:03:C6:D4:7F:08:31:05:9D:B7:9D:C4:BA:1E:3C:21:30:20:7C:C3 Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft Manifest number: 35 Signing time: Sat 23 Aug 2025 07:50:36 +0000 Manifest this update: Sat 23 Aug 2025 07:50:36 +0000 Manifest next update: Sat 30 Aug 2025 07:50:36 +0000 Files and hashes: 1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: qjTC/bObWE9SZ6CzzKMRPbzCBaIM8stGosMde145WpI=) 2: 0E6E2FF4590A11F0B7FD292DC4F9AE02.roa (hash: 7soTZ6EDnpP6A/A05OpE2en3043bE7DF3odg+8Ew9cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Validity Not Before: Aug 23 07:50:36 2025 GMT Not After : Aug 30 07:50:36 2025 GMT Subject: CN=68a972cc-635c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:f4:bc:be:55:5f:0c:f6:24:27:8c:5b:de: e5:5d:55:bd:12:49:03:15:e4:65:81:ed:fb:9e:d2: b4:f3:c9:c7:54:e7:df:bb:0c:0f:00:ae:cb:bb:04: 3b:d8:02:5f:bd:47:a9:97:f1:8c:27:de:8a:55:8c: 23:e6:be:79:04:04:ff:e4:57:38:04:77:9e:be:ce: b1:43:d8:95:77:6b:9c:90:56:09:a0:4d:44:7c:35: 8c:b8:41:11:bf:23:74:24:14:c5:4d:76:4e:53:55: 74:f7:43:8a:a3:b6:79:41:3e:23:cb:72:4d:84:9a: 3f:87:7d:84:87:82:83:59:4e:4d:0f:7c:20:f9:07: 4c:f1:40:93:7c:13:06:a8:b2:a4:12:2d:b4:cb:09: 5c:e6:7b:67:b3:eb:43:62:28:1e:e0:e2:29:a2:a0: b5:bd:b2:8c:06:8e:e1:d1:d0:7f:96:ea:2b:43:55: e2:bd:2b:29:00:d5:75:f7:a6:24:a7:07:86:d5:f5: 8f:d6:96:58:a2:b0:14:4c:ce:40:83:ba:2a:e2:80: 6e:95:d5:fc:41:fd:32:43:15:52:c9:dc:bd:fb:16: ab:a1:e1:bf:b9:50:9b:76:aa:b7:48:63:9a:2b:34: d5:89:45:8b:b4:b8:2e:86:4b:84:5b:c1:ef:2f:07: b5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:03:C6:D4:7F:08:31:05:9D:B7:9D:C4:BA:1E:3C:21:30:20:7C:C3 X509v3 Authority Key Identifier: keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:87:91:fc:82:84:2c:db:a0:1b:c9:2f:dd:7b:41:99:b4:66: d7:81:db:6e:0b:53:e4:be:c7:e6:a7:7e:ed:a7:0e:27:0f:9e: bb:23:80:45:b0:09:9f:ef:d1:b0:c0:e5:39:42:a9:3b:f7:e6: 58:6d:68:be:36:4e:83:fd:60:6c:d0:b9:b7:1c:98:42:a8:f0: 50:5e:af:e9:ab:be:0e:51:2a:51:e8:65:5c:a3:cf:90:e6:59: 83:21:fb:c0:b8:6c:61:1e:f3:06:39:8d:d0:5f:60:e0:de:c0: 75:22:80:02:7b:87:a1:95:9c:46:83:a1:62:74:79:a2:c6:2d: 68:70:5a:26:2c:92:8c:a2:e7:a9:4a:66:2f:7b:3f:2b:47:18: de:4c:0e:77:bd:0c:00:4c:7d:d5:e2:f5:2e:ae:9e:a9:ae:33: 96:c6:27:1a:38:65:d9:fc:d7:02:27:e3:52:f0:e8:88:43:7d: 05:98:5e:29:e7:be:71:44:a5:04:58:71:aa:48:2b:68:88:ee: df:db:82:fe:95:1e:a6:30:3f:a2:c8:0d:36:69:16:70:64:21: a2:1d:5f:f4:47:63:e6:dc:8f:66:8c:dc:90:ac:dc:61:22:d0: e6:bb:3e:46:b1:fc:ac:38:2e:27:71:a8:61:9b:f8:3f:a7:25: c6:c9:d9:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoRUY3NjJDQzk0MjE5RTA5OTIzQTExQjBEM0M0MzBFN0Yz NUM4RDg2NDAeFw0yNTA4MjMwNzUwMzZaFw0yNTA4MzAwNzUwMzZaMBgxFjAUBgNV BAMTDTY4YTk3MmNjLTYzNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtWfS8vlVfDPYkJ4xb3uVdVb0SSQMV5GWB7fue0rTzycdU59+7DA8Arsu7BDvY Al+9R6mX8Ywn3opVjCPmvnkEBP/kVzgEd56+zrFD2JV3a5yQVgmgTUR8NYy4QRG/ I3QkFMVNdk5TVXT3Q4qjtnlBPiPLck2Emj+HfYSHgoNZTk0PfCD5B0zxQJN8Ewao sqQSLbTLCVzme2ez60NiKB7g4imioLW9sowGjuHR0H+W6itDVeK9KykA1XX3piSn B4bV9Y/WlliisBRMzkCDuirigG6V1fxB/TJDFVLJ3L37Fquh4b+5UJt2qrdIY5or NNWJRYu0uC6GS4Rbwe8vB7UZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSgPG1H8I MQWdt53Euh48ITAgfMMwHwYDVR0jBBgwFoAU73YsyUIZ4JkjoRsNPEMOfzXI2GQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzI3QkU4NDBFMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzNZc3lVSVo0Smtqb1JzTlBFTU9melhJMkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzI3QkU4NDBFMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpr am9Sc05QRU1PZnpYSTJHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF6HkfyChCzboBvJL917QZm0ZteB224LU+S+x+anfu2nDicPnrsjgEWw CZ/v0bDA5TlCqTv35lhtaL42ToP9YGzQubccmEKo8FBer+mrvg5RKlHoZVyjz5Dm WYMh+8C4bGEe8wY5jdBfYODewHUigAJ7h6GVnEaDoWJ0eaLGLWhwWiYskoyi56lK Zi97PytHGN5MDne9DABMfdXi9S6unqmuM5bGJxo4Zdn81wIn41Lw6IhDfQWYXinn vnFEpQRYcapIK2iI7t/bgv6VHqYwP6LIDTZpFnBkIaIdX/RHY+bcj2aM3JCs3GEi 0Oa7Pkax/Kw4LidxqGGb+D+nJcbJ2TM= -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:45 2025 by rpki-client