$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json) Hash identifier: ZOB321sfSDz2UD5XU2h4v1u4yOYbO5O8vI5BJgDjq0Y= Subject key identifier: 4F:59:62:D3:B8:48:9C:4E:6D:3A:7D:69:2F:09:CC:7B:4C:24:B5:E1 Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Certificate serial: 078D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft Manifest number: 0F21 Signing time: Sat 28 Jun 2025 21:01:57 +0000 Manifest this update: Sat 28 Jun 2025 21:01:57 +0000 Manifest next update: Sat 05 Jul 2025 21:01:57 +0000 Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: 1R7ZxmgEC3ZmdIXGzC9uUb0RcnmthvB+LdRelsy4cW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1933 (0x78d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Validity Not Before: Jun 28 21:01:57 2025 GMT Not After : Jul 5 21:01:57 2025 GMT Subject: CN=68605845-8aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:5b:3d:39:cc:e8:49:23:0b:70:0c:b0:89: 3a:ee:6a:e9:2c:68:0a:8c:bc:23:7e:76:9a:3d:33: a5:51:d7:df:df:3a:11:7b:ec:43:d0:b8:76:7f:b0: 5a:50:93:22:60:df:9c:99:8d:81:8e:79:19:2c:e8: 20:b0:9f:d4:e7:34:f2:da:ae:1c:b4:a9:67:e6:a2: 49:30:21:d6:15:01:ba:6e:6d:cd:c4:24:32:38:f5: 61:a7:aa:82:5f:94:83:66:99:6c:ad:2d:f5:2e:72: 46:ad:9f:ad:3a:e2:de:2c:68:3f:26:46:51:cf:3b: 9a:5d:7f:a2:38:bb:ab:76:48:98:f3:79:d6:2c:c1: 51:66:aa:93:e4:85:85:2b:f1:ad:b5:ed:b3:6f:17: 2d:3a:8b:bd:ef:c7:2a:51:83:ee:6a:c6:f3:72:5c: 68:04:90:0c:20:7a:37:3f:d7:ca:d5:39:45:4d:99: 3c:2d:5e:90:e9:67:3e:38:c5:f8:1a:76:fc:df:dd: 45:c9:4e:5e:a0:bf:c3:5a:36:90:67:96:14:4c:9d: d6:9e:2c:49:2b:28:ef:7c:fb:00:32:9f:a1:a7:13: 8f:c2:88:b8:ad:8e:7b:d5:08:91:b4:77:cd:19:b6: fc:1e:73:58:de:a4:fc:43:2a:4b:41:b7:38:07:d1: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:59:62:D3:B8:48:9C:4E:6D:3A:7D:69:2F:09:CC:7B:4C:24:B5:E1 X509v3 Authority Key Identifier: keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:8f:05:4c:a2:00:c9:26:07:20:12:63:84:45:bc:ba:b7:25: 4b:8e:54:d0:41:fb:4e:b2:d7:4e:ef:ce:75:e2:5e:15:bd:e5: 6c:01:37:d8:fa:15:07:e2:a7:e8:db:a6:40:c1:fc:0b:5a:aa: bc:9a:ff:fd:22:94:07:c4:93:51:7f:07:33:04:64:a2:f0:e5: 35:86:eb:a5:95:16:2f:f1:53:61:d7:f8:2d:be:b8:55:2f:48: f5:ca:ad:22:68:54:ac:4b:30:04:66:7b:58:fe:bf:f0:d4:50: bb:cf:41:6a:78:71:8c:20:11:36:a8:72:0f:a7:8f:ec:1f:27: dc:60:40:51:96:c5:cd:dd:e6:65:d6:e3:5a:7a:aa:4c:c2:e5: 1a:01:69:58:c0:29:1c:c4:c8:3c:c0:a3:8c:8a:2d:e8:0a:17: c3:5a:4e:75:b6:d0:be:bc:32:5d:78:fb:c0:ba:46:8e:19:0f: 85:c3:e7:f7:47:b8:f1:03:19:76:4e:db:26:d0:0c:a4:a4:b3: 7d:2c:67:33:94:7c:91:58:e1:13:68:c4:1d:ed:5c:a2:9d:c9: 28:21:52:d9:ef:ed:ad:88:b6:33:cf:b3:25:10:8b:4a:6e:cb: d2:af:c8:1f:ab:ec:f6:87:29:63:ca:1a:ec:aa:0e:82:d7:db: 06:64:9c:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD NTY3QkUzODgwHhcNMjUwNjI4MjEwMTU3WhcNMjUwNzA1MjEwMTU3WjAYMRYwFAYD VQQDEw02ODYwNTg0NS04YWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4pbPTnM6EkjC3AMsIk67mrpLGgKjLwjfnaaPTOlUdff3zoRe+xD0Lh2f7Ba UJMiYN+cmY2BjnkZLOggsJ/U5zTy2q4ctKln5qJJMCHWFQG6bm3NxCQyOPVhp6qC X5SDZplsrS31LnJGrZ+tOuLeLGg/JkZRzzuaXX+iOLurdkiY83nWLMFRZqqT5IWF K/Gtte2zbxctOou978cqUYPuasbzclxoBJAMIHo3P9fK1TlFTZk8LV6Q6Wc+OMX4 Gnb8391FyU5eoL/DWjaQZ5YUTJ3WnixJKyjvfPsAMp+hpxOPwoi4rY571QiRtHfN Gbb8HnNY3qT8QypLQbc4B9FyCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9ZYtO4 SJxObTp9aS8JzHtMJLXhMB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5jwVMogDJJgcgEmOERby6tyVLjlTQQftOstdO78514l4VveVsATfY +hUH4qfo26ZAwfwLWqq8mv/9IpQHxJNRfwczBGSi8OU1huullRYv8VNh1/gtvrhV L0j1yq0iaFSsSzAEZntY/r/w1FC7z0FqeHGMIBE2qHIPp4/sHyfcYEBRlsXN3eZl 1uNaeqpMwuUaAWlYwCkcxMg8wKOMii3oChfDWk51ttC+vDJdePvAukaOGQ+Fw+f3 R7jxAxl2Ttsm0AykpLN9LGczlHyRWOETaMQd7VyinckoIVLZ7+2tiLYzz7MlEItK bsvSr8gfq+z2hyljyhrsqg6C19sGZJwa -----END CERTIFICATE-----Generated at Mon Jun 30 21:05:44 2025 by rpki-client