$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: KoL9WuTUmw7MX9TAa+7kc+hcXSh2+muxcT0XaPs8S9g= Subject key identifier: B5:E6:45:EB:FD:AF:1D:96:91:59:62:D8:9E:84:1E:99:4D:2C:9E:A8 Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: DA Signing time: Mon 21 Jul 2025 05:44:06 +0000 Manifest this update: Mon 21 Jul 2025 05:44:06 +0000 Manifest next update: Mon 28 Jul 2025 05:44:05 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: 8ZeaFL9NvDFXApvJKJVqbpwvivG4/tGWSumwtnYghe0=) 2: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: bUpgZDyaaNx2o4Iq2csQK5MMpOoGsf0d7wS0X/AlYLQ=) 3: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: iGJZ5nKtqdpr8XQ5xRp8ABn+d8XHdqoNNsqJjwgQg3Y=) 4: 680D797023E611EF8165F17BC4F9AE02.roa (hash: oa8frv8vlg1vBn275l50HRx0PnZyi1FiU/lJjWPqNdo=) 5: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: sopaYIQ7VXvlTBIzsDAOnSetWGJ3UTk1u9wD33/qnLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Jul 21 05:44:06 2025 GMT Not After : Jul 28 05:44:05 2025 GMT Subject: CN=687dd3a6-1502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:ba:82:42:3a:44:0c:c3:f1:d7:ac:2b:ca: 52:21:03:d5:74:f8:bc:a6:bd:57:34:74:88:b7:1e: 72:7c:e1:bd:e4:83:70:0f:a3:95:b2:e3:5a:65:28: 20:7d:d8:e0:3f:54:05:a8:1d:4c:75:95:76:08:5d: 63:55:be:d3:46:95:bf:a7:95:53:4b:36:36:0d:1c: 65:43:e5:8d:b7:d0:f1:2a:07:57:f8:10:72:c3:79: 7b:6f:90:f7:02:8d:63:c5:54:6b:8c:c9:10:96:e8: 1f:dc:26:d8:84:3d:fd:80:bf:81:19:8f:ab:6a:a4: 11:69:d7:f7:12:ac:de:ae:12:c8:ea:04:d5:5f:4f: 0f:06:2f:9a:bc:29:ba:7d:e3:9d:c5:b3:db:c9:5f: f0:57:f6:3d:68:8e:90:27:35:1f:07:0a:75:db:55: 6a:39:cd:a9:84:1e:36:d7:f0:f7:cd:9d:b1:78:4c: c3:6a:e0:43:0f:ad:2a:68:c5:0f:92:df:bd:91:c4: 84:fe:0a:fa:47:b4:d6:46:b7:e6:c6:11:36:14:3d: fc:a3:fc:70:42:7a:05:24:8c:19:9e:bc:3f:87:85: 7e:15:ac:61:65:63:f4:d3:64:d4:d6:90:b8:89:c9: c3:8c:2f:84:0f:c9:6f:61:3f:c8:ec:92:7e:d7:0f: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:45:EB:FD:AF:1D:96:91:59:62:D8:9E:84:1E:99:4D:2C:9E:A8 X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:21:eb:a7:61:27:de:49:76:4c:15:a8:39:38:ee:6d:88:bb: 2c:19:df:6d:50:01:20:f5:16:3b:0f:11:d2:0c:78:0a:6b:a4: ec:71:ee:4a:e5:15:ec:c1:73:26:47:43:47:5b:7c:86:9f:00: 0c:c2:82:d2:e9:94:da:c8:f4:b4:40:92:ae:f1:68:9e:75:a4: cd:fb:08:a8:f8:3b:76:6e:4b:1f:ea:e7:24:81:ee:f9:17:74: 7c:d8:66:cb:20:e3:a0:b9:06:0c:a7:c4:db:89:47:24:9c:a2: 6d:5f:c4:60:57:57:0e:8e:52:3f:a7:6f:57:41:c2:dd:45:6c: 09:75:5a:67:a7:2b:bd:36:c4:5b:fc:e1:e9:dc:86:d6:da:3c: ee:f3:94:58:29:ad:5a:dc:cf:b8:b0:48:4a:d5:af:25:20:2a: 19:01:cc:88:48:1a:54:26:70:a1:c8:a4:a6:8a:5a:de:37:c1: de:b2:9e:23:f9:6b:6b:2a:ed:c3:ea:78:17:e8:9e:77:28:8c: b4:1b:5d:b8:38:a5:4a:12:bc:b6:da:ac:a8:57:69:25:3c:45: 96:03:48:c5:f7:e8:f2:f6:33:eb:88:8f:16:36:90:fe:e7:fb: e7:14:7d:31:39:cd:82:4b:03:64:90:23:64:13:e6:2c:10:ff: 10:ea:7b:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2 NTQ0MDY3NzMwHhcNMjUwNzIxMDU0NDA2WhcNMjUwNzI4MDU0NDA1WjAYMRYwFAYD VQQDEw02ODdkZDNhNi0xNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbq6gkI6RAzD8desK8pSIQPVdPi8pr1XNHSItx5yfOG95INwD6OVsuNaZSgg fdjgP1QFqB1MdZV2CF1jVb7TRpW/p5VTSzY2DRxlQ+WNt9DxKgdX+BByw3l7b5D3 Ao1jxVRrjMkQlugf3CbYhD39gL+BGY+raqQRadf3EqzerhLI6gTVX08PBi+avCm6 feOdxbPbyV/wV/Y9aI6QJzUfBwp121VqOc2phB421/D3zZ2xeEzDauBDD60qaMUP kt+9kcSE/gr6R7TWRrfmxhE2FD38o/xwQnoFJIwZnrw/h4V+FaxhZWP002TU1pC4 icnDjC+ED8lvYT/I7JJ+1w+8CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXmRev9 rx2WkVli2J6EHplNLJ6oMB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0 dEVZeEFOc3VsYkJsUkFaM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8IeunYSfeSXZMFag5OO5tiLssGd9tUAEg9RY7DxHSDHgKa6Tsce5K 5RXswXMmR0NHW3yGnwAMwoLS6ZTayPS0QJKu8WiedaTN+wio+Dt2bksf6uckge75 F3R82GbLIOOguQYMp8TbiUcknKJtX8RgV1cOjlI/p29XQcLdRWwJdVpnpyu9NsRb /OHp3IbW2jzu85RYKa1a3M+4sEhK1a8lICoZAcyISBpUJnChyKSmilreN8Hesp4j +WtrKu3D6ngX6J53KIy0G124OKVKEry22qyoV2klPEWWA0jF9+jy9jPriI8WNpD+ 5/vnFH0xOc2CSwNkkCNkE+YsEP8Q6nsT -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:45 2025 by rpki-client