$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: Zn6NG3Mpg9RSrCXp73S94VEgLVnOdxUOxUCc4jsCNS0= Subject key identifier: 13:24:AF:36:79:C5:4C:74:40:49:0B:9E:1F:F3:93:64:04:F6:AA:F2 Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 047E Signing time: Wed 23 Jul 2025 00:26:53 +0000 Manifest this update: Wed 23 Jul 2025 00:26:52 +0000 Manifest next update: Wed 30 Jul 2025 00:26:52 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: uB1L0plhNaVQNZTRMMXSpObPtAi7XSBFRtEhneWDLY0=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: 0K3q0dVCvDExh+rAvv97+F6NfiAcFtJOv8chW1CF1z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 00:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: Jul 23 00:26:52 2025 GMT Not After : Jul 30 00:26:52 2025 GMT Subject: CN=68802c4d-2276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:47:96:9e:e6:cb:2b:3c:28:07:c8:8c:9e: 42:8b:96:de:c8:2a:25:9c:e9:c5:6a:c7:65:7d:3a: 3b:b8:db:d4:e8:52:ab:51:35:c6:29:c6:96:ad:e0: 64:7b:51:11:30:8f:e4:0e:7b:0e:b3:7a:17:a0:65: d8:37:e8:34:70:29:85:fb:e1:4d:eb:f0:a6:3b:36: 46:9f:27:b9:e6:57:ff:e9:f5:70:79:a0:54:8d:f1: 18:00:42:93:e0:4c:57:b4:52:58:23:24:8b:aa:88: b9:7e:03:98:77:15:30:34:d1:d8:f7:f2:4f:11:3f: 86:54:bf:d6:48:e8:7b:46:a2:ed:af:c9:e0:02:8e: 89:f7:7e:93:82:21:d8:5e:f7:0c:8e:4f:bd:5d:bb: f3:e5:45:7f:fc:c1:63:9a:75:59:4c:96:ac:d8:2f: 83:69:77:6d:f0:49:38:9e:0e:6c:5d:60:41:83:72: 6e:f3:b2:6b:cb:85:b5:fe:f1:ad:66:4c:21:ac:ba: c9:4d:a3:55:e6:43:e0:2a:8d:d6:d8:c7:3c:e2:17: e2:b2:ce:2a:e7:72:e0:5d:0d:e3:78:b2:47:c2:c3: 7f:13:a7:ec:43:e5:49:62:84:30:b5:cd:f6:2b:40: b7:84:60:8c:43:2b:93:d7:4b:52:3b:b4:80:a2:67: 0b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:24:AF:36:79:C5:4C:74:40:49:0B:9E:1F:F3:93:64:04:F6:AA:F2 X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cd:0e:60:c2:51:b9:62:97:30:d3:ae:dd:0b:f6:d6:de:26: ac:60:e0:f9:86:8f:b4:60:73:77:8b:1d:ae:57:11:75:64:db: 00:db:7c:f9:d2:6d:9b:a7:46:09:a4:21:5e:64:e6:66:55:58: 28:e4:34:76:53:1d:ce:aa:0f:bf:ca:eb:f1:24:36:70:90:fb: e9:f7:c6:19:f4:91:a0:b9:e7:08:98:93:55:35:b6:dd:d7:5b: 8b:70:c4:13:29:57:f2:5e:a3:97:77:ca:90:58:b4:e0:b7:1e: a4:89:d7:5c:01:90:cb:d0:6a:24:05:f8:a5:bc:35:36:dc:61: 37:3c:d3:05:73:0e:2d:45:6d:38:80:de:35:81:61:ed:fb:a0: 49:33:23:d0:c2:63:50:c1:64:48:77:b3:a4:ec:1f:19:f8:c7: 9c:26:be:6b:03:42:cf:fd:2f:aa:d1:07:d0:a9:ab:a2:93:0f: 38:b3:a8:81:a2:bc:fc:19:60:63:9f:76:3f:a2:29:cc:b2:40: fc:61:be:05:a4:50:f6:d2:3c:54:5c:7d:a8:8b:1a:89:57:ea: e9:1e:7d:2a:d2:b8:f7:fc:9a:90:11:08:6b:fa:b0:7b:f5:f0: 63:ca:bb:0d:86:a7:92:38:ac:39:77:2c:cf:56:7a:2f:30:98: 84:0a:ac:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjUwNzIzMDAyNjUyWhcNMjUwNzMwMDAyNjUyWjAYMRYwFAYD VQQDEw02ODgwMmM0ZC0yMjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEdHlp7myys8KAfIjJ5Ci5beyColnOnFasdlfTo7uNvU6FKrUTXGKcaWreBk e1ERMI/kDnsOs3oXoGXYN+g0cCmF++FN6/CmOzZGnye55lf/6fVweaBUjfEYAEKT 4ExXtFJYIySLqoi5fgOYdxUwNNHY9/JPET+GVL/WSOh7RqLtr8ngAo6J936TgiHY XvcMjk+9Xbvz5UV//MFjmnVZTJas2C+DaXdt8Ek4ng5sXWBBg3Ju87Jry4W1/vGt ZkwhrLrJTaNV5kPgKo3W2Mc84hfiss4q53LgXQ3jeLJHwsN/E6fsQ+VJYoQwtc32 K0C3hGCMQyuT10tSO7SAomcLKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMkrzZ5 xUx0QEkLnh/zk2QE9qryMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdzQ5gwlG5Ypcw067dC/bW3iasYOD5ho+0YHN3ix2uVxF1ZNsA23z5 0m2bp0YJpCFeZOZmVVgo5DR2Ux3Oqg+/yuvxJDZwkPvp98YZ9JGguecImJNVNbbd 11uLcMQTKVfyXqOXd8qQWLTgtx6kiddcAZDL0GokBfilvDU23GE3PNMFcw4tRW04 gN41gWHt+6BJMyPQwmNQwWRId7Ok7B8Z+MecJr5rA0LP/S+q0QfQqauikw84s6iB orz8GWBjn3Y/oinMskD8Yb4FpFD20jxUXH2oixqJV+rpHn0q0rj3/JqQEQhr+rB7 9fBjyrsNhqeSOKw5dyzPVnovMJiECqzf -----END CERTIFICATE-----Generated at Wed Jul 23 12:19:44 2025 by rpki-client