$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft File: y-PSoWWxlLlY7sO2qURXdyo6CSo.mft (raw, json) Hash identifier: pTx13IB4NwulzN3My73+YgoXWN4CSMrnlxnvAhq2vMI= Subject key identifier: ED:A4:6F:23:10:D8:DC:C4:B6:E4:9C:84:E7:79:00:88:73:FC:33:83 Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft Manifest number: 082F Signing time: Tue 22 Jul 2025 21:01:31 +0000 Manifest this update: Tue 22 Jul 2025 21:01:30 +0000 Manifest next update: Tue 29 Jul 2025 21:01:30 +0000 Files and hashes: 1: y-PSoWWxlLlY7sO2qURXdyo6CSo.crl (hash: U7pzmtkaTLe/ME0tftsq0VJwFTA4uO6za+9T3CsxE/I=) 2: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (hash: hwrYZn+i2OUNCmUoK3ena1siLJOV1HVO2m5EjPVb3kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154FE7, serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Validity Not Before: Jul 22 21:01:30 2025 GMT Not After : Jul 29 21:01:30 2025 GMT Subject: CN=687ffc2b-ce3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:11:fe:5a:16:96:97:c2:17:1c:9b:ed:ec:9d: cb:fd:fa:a1:4a:ec:4d:b4:e3:9e:f2:97:7d:d0:32: d0:06:6a:77:3e:0d:7d:ac:77:31:4a:ef:90:1a:67: 73:e7:ce:77:4e:37:ff:6d:37:e4:c7:6b:3c:98:fe: 5e:db:29:37:57:81:8e:89:48:a9:4b:ec:9d:53:44: c2:fd:41:8f:f5:5d:7a:a9:1f:0c:79:5e:86:e4:0c: 83:b9:71:45:72:2c:85:e3:38:fc:05:b8:d4:a3:f6: 91:95:75:ba:d9:ba:7c:6c:29:a9:ef:46:9b:9c:93: 56:4f:8d:3d:10:6b:b6:62:59:e1:11:ab:81:05:fa: b3:5a:24:85:2f:cd:8b:b0:d6:59:5e:4b:8e:96:d6: e5:7c:4b:77:98:8d:e6:67:84:8f:fe:c3:f4:8f:61: 88:24:10:6d:1e:e3:f3:ff:1f:37:25:28:1e:88:61: 2f:b4:aa:b4:8b:77:50:e2:81:2d:82:ac:b4:43:22: 01:fc:88:a5:7a:d6:ea:c7:6d:93:30:f4:87:94:ea: ad:35:d2:61:a0:23:2f:bf:c3:e4:0f:9f:db:ef:a7: 09:ca:9d:55:5a:3d:c5:7d:b9:93:e3:27:0e:96:44: 3d:ff:e8:aa:8a:54:bc:97:58:72:9a:ab:58:ef:34: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A4:6F:23:10:D8:DC:C4:B6:E4:9C:84:E7:79:00:88:73:FC:33:83 X509v3 Authority Key Identifier: keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:af:d3:68:cc:b7:c2:d5:f6:41:a8:91:f5:48:78:1d:47:1b: f3:03:9f:57:bf:ee:cd:d7:7e:35:d0:11:1d:c0:c2:a1:00:78: e1:00:1e:6e:6e:3e:5d:17:1d:d9:4b:53:80:ec:55:58:96:79: 52:2e:8b:e3:f2:64:2b:ef:6b:01:5b:7c:2d:4a:ce:a7:ab:4f: 84:40:dc:22:67:f8:ee:b6:78:e2:ec:58:88:e5:b7:bb:aa:0b: 7a:5f:c2:94:ff:7e:07:20:20:58:14:f6:8b:6c:dd:b8:87:b9: d1:a0:d3:4f:f5:6c:9a:4e:2a:a3:1d:59:97:9c:d4:7c:6b:77: fc:17:80:83:ce:21:46:7d:3c:9f:7b:d9:f5:3a:31:70:2e:7b: 3f:50:cd:0c:60:55:b7:06:e8:92:45:f2:92:38:cb:24:db:02: 5f:ee:a7:d4:f8:fd:2d:3a:c9:fe:35:f1:4c:87:52:49:3f:3c: bc:d7:78:a6:66:ff:b9:2c:f7:e2:a2:cd:12:d4:4f:50:66:4a: 44:05:82:ed:0c:b9:62:b9:e6:a0:27:d2:f6:74:32:d5:0a:65: 94:7c:ed:d3:68:e9:c5:08:66:fb:3e:04:d1:d1:e8:83:5b:df: 87:ab:8d:43:42:50:d7:a3:4c:2d:88:f4:72:fc:be:94:0d:e3: 19:3b:6d:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRGRTcxMTAvBgNVBAUTKENCRTNEMkExNjVCMTk0Qjk1OEVFQzNCNkE5NDQ1Nzc3 MkEzQTA5MkEwHhcNMjUwNzIyMjEwMTMwWhcNMjUwNzI5MjEwMTMwWjAYMRYwFAYD VQQDEw02ODdmZmMyYi1jZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RH+WhaWl8IXHJvt7J3L/fqhSuxNtOOe8pd90DLQBmp3Pg19rHcxSu+QGmdz 5853Tjf/bTfkx2s8mP5e2yk3V4GOiUipS+ydU0TC/UGP9V16qR8MeV6G5AyDuXFF ciyF4zj8BbjUo/aRlXW62bp8bCmp70abnJNWT409EGu2YlnhEauBBfqzWiSFL82L sNZZXkuOltblfEt3mI3mZ4SP/sP0j2GIJBBtHuPz/x83JSgeiGEvtKq0i3dQ4oEt gqy0QyIB/Iiletbqx22TMPSHlOqtNdJhoCMvv8PkD5/b76cJyp1VWj3FfbmT4ycO lkQ9/+iqilS8l1hymqtY7zQQ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2kbyMQ 2NzEtuSchOd5AIhz/DODMB8GA1UdIwQYMBaAFMvj0qFlsZS5WO7DtqlEV3cqOgkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEZFNy81QTJEODlFQURC N0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxMbFk3c08ycVVSWGR5bzZD U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktUFNvV1d4bExsWTdzTzJxVVJYZHlvNkNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEZFNy81QTJEODlFQURCN0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxM bFk3c08ycVVSWGR5bzZDU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkr9NozLfC1fZBqJH1SHgdRxvzA59Xv+7N13410BEdwMKhAHjhAB5u bj5dFx3ZS1OA7FVYlnlSLovj8mQr72sBW3wtSs6nq0+EQNwiZ/jutnji7FiI5be7 qgt6X8KU/34HICBYFPaLbN24h7nRoNNP9WyaTiqjHVmXnNR8a3f8F4CDziFGfTyf e9n1OjFwLns/UM0MYFW3BuiSRfKSOMsk2wJf7qfU+P0tOsn+NfFMh1JJPzy813im Zv+5LPfios0S1E9QZkpEBYLtDLliueagJ9L2dDLVCmWUfO3TaOnFCGb7PgTR0eiD W9+Hq41DQlDXo0wtiPRy/L6UDeMZO23u -----END CERTIFICATE-----Generated at Thu Jul 24 12:01:23 2025 by rpki-client