$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: DcLTsbblxj3O8fNm4dbGqdqYbZ9nWneWedi208oX8jg= Subject key identifier: 5C:D0:AD:F5:F9:B7:20:74:12:11:EE:DB:82:31:EC:0C:A6:DF:55:CF Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 0292 Signing time: Sat 19 Jul 2025 02:09:47 +0000 Manifest this update: Sat 19 Jul 2025 02:09:47 +0000 Manifest next update: Sat 26 Jul 2025 02:09:47 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: TkZtEAkvZvx0pRR8K1gsiKDgNLGwvZ2jLDoHCQir9YI=) 2: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: LeMbdehFC4fTf/TGuaoRSnOw0VY+BgZy7lQOEpG5vyc=) 3: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: 0dIG8fQMRzlILpkTDJVo/XSoC64SAKbRto45S4Eicvs=) 4: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ZQQKFp5iiDEIGLxVFz3G6lECRRriefFnadRp8yKcQoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Jul 19 02:09:47 2025 GMT Not After : Jul 26 02:09:47 2025 GMT Subject: CN=687afe6b-ede6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:09:b7:0f:0a:39:9c:4a:57:f5:d1:e6:16:fc: e0:d2:4d:1d:40:bb:eb:59:a0:79:19:c7:ed:58:39: cc:53:26:a3:f8:e7:6f:dc:16:2c:e6:01:f4:a2:ee: e4:8c:bf:83:f9:2a:80:5b:da:68:39:98:ee:a4:a8: e1:06:cc:e1:46:af:72:a5:86:c6:e4:5e:dd:4e:8f: 93:b0:40:6f:53:65:58:2e:9d:0c:7a:fe:fe:c9:5f: ac:fa:2b:3a:9b:4e:38:ad:e0:22:2b:52:63:e2:5d: 2d:87:59:8b:51:48:2f:e7:d1:5d:3e:51:99:f5:a6: e4:f0:ea:bf:be:2d:12:27:70:a5:80:e2:f2:6b:f2: 6e:4f:0a:28:d7:e5:81:c7:4b:3e:71:77:a9:66:13: 9c:4c:7a:dc:46:36:45:37:21:ca:0a:16:02:78:2a: 86:5c:ca:d5:41:b2:97:5b:13:2d:ed:8b:7c:6b:1b: bb:8b:4c:a4:c1:d3:16:28:c8:c0:fb:6e:2d:97:97: 05:39:04:e4:05:c6:64:27:de:e4:ed:d6:b0:62:00: 1c:33:9e:f0:1f:2e:db:bf:fb:e8:07:63:f9:40:4b: 04:f2:f3:52:8e:84:f1:43:ca:50:be:60:d2:31:d6: 45:bf:18:c3:7b:b4:ab:48:26:fd:03:7f:5a:1c:02: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D0:AD:F5:F9:B7:20:74:12:11:EE:DB:82:31:EC:0C:A6:DF:55:CF X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:52:2e:a9:2e:21:f1:a3:03:a7:25:49:d3:ba:97:5b:05:e1: 6c:39:94:d5:40:eb:4b:ac:e6:75:35:c0:3d:7b:b9:09:25:ab: a8:fe:dd:eb:40:c1:34:6e:07:d2:d6:47:3d:fc:bd:c8:c8:25: c0:bd:92:59:75:50:9c:a4:9e:37:a8:e1:45:be:64:d6:f6:c2: 3a:57:d7:33:7e:9a:f9:90:4a:48:e3:71:39:f5:65:eb:a1:52: 81:ce:13:03:b4:c3:24:3d:5c:4e:f4:4f:06:3a:69:64:6f:c5: 21:d5:50:91:0e:46:16:28:0e:d4:40:72:db:c4:24:5a:63:04: c4:52:9a:9e:70:5b:e8:1e:2e:92:b8:ec:99:9c:ca:1f:99:f6: 69:01:03:92:b7:8b:5f:44:65:e7:ad:f8:bf:17:19:ed:a9:a7: f1:c5:6e:a9:f6:1e:22:b9:09:4c:1e:d8:94:c6:3c:f0:c1:8e: ad:11:96:8a:8b:44:8f:bd:4c:d5:ee:8f:b8:53:56:e5:25:09: 6a:24:6f:0b:e6:11:ce:43:bd:d5:63:b7:53:65:0f:af:34:5a: 1e:44:cf:9c:db:fd:53:d8:48:45:13:cd:04:24:ff:f6:5f:cc: e6:59:9f:ec:94:cd:8b:e2:c4:d8:98:2f:b5:36:2e:19:4e:ab: de:9e:a5:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjUwNzE5MDIwOTQ3WhcNMjUwNzI2MDIwOTQ3WjAYMRYwFAYD VQQDEw02ODdhZmU2Yi1lZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQm3Dwo5nEpX9dHmFvzg0k0dQLvrWaB5GcftWDnMUyaj+Odv3BYs5gH0ou7k jL+D+SqAW9poOZjupKjhBszhRq9ypYbG5F7dTo+TsEBvU2VYLp0Mev7+yV+s+is6 m044reAiK1Jj4l0th1mLUUgv59FdPlGZ9abk8Oq/vi0SJ3ClgOLya/JuTwoo1+WB x0s+cXepZhOcTHrcRjZFNyHKChYCeCqGXMrVQbKXWxMt7Yt8axu7i0ykwdMWKMjA +24tl5cFOQTkBcZkJ97k7dawYgAcM57wHy7bv/voB2P5QEsE8vNSjoTxQ8pQvmDS MdZFvxjDe7SrSCb9A39aHAKJ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzQrfX5 tyB0EhHu24Ix7Aym31XPMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiUi6pLiHxowOnJUnTupdbBeFsOZTVQOtLrOZ1NcA9e7kJJauo/t3r QME0bgfS1kc9/L3IyCXAvZJZdVCcpJ43qOFFvmTW9sI6V9czfpr5kEpI43E59WXr oVKBzhMDtMMkPVxO9E8GOmlkb8Uh1VCRDkYWKA7UQHLbxCRaYwTEUpqecFvoHi6S uOyZnMofmfZpAQOSt4tfRGXnrfi/FxntqafxxW6p9h4iuQlMHtiUxjzwwY6tEZaK i0SPvUzV7o+4U1blJQlqJG8L5hHOQ73VY7dTZQ+vNFoeRM+c2/1T2EhFE80EJP/2 X8zmWZ/slM2L4sTYmC+1Ni4ZTqvenqUz -----END CERTIFICATE-----Generated at Sun Jul 20 16:49:51 2025 by rpki-client