$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json) Hash identifier: fz8SPBT596SbyRkrjH1R9YvkBVRANbNc6roQyDKqHUw= Subject key identifier: 25:FA:3F:1F:B5:65:4D:CE:26:E4:50:3B:95:65:01:1E:32:A3:3C:1D Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Certificate serial: 0914 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft Manifest number: 090E Signing time: Sun 20 Jul 2025 20:24:37 +0000 Manifest this update: Sun 20 Jul 2025 20:24:36 +0000 Manifest next update: Sun 27 Jul 2025 20:24:36 +0000 Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: K/gLtJvlkUz30rIgz8bHYAT5IpfjyimD3JiZvcxZeHc=) 2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: SjfL0z+V8r1mG2yvSd88vw9Fy41PjMV8KGz6ODEkn2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2324 (0x914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Validity Not Before: Jul 20 20:24:36 2025 GMT Not After : Jul 27 20:24:36 2025 GMT Subject: CN=687d5084-bfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:36:d0:25:f2:87:ee:e8:4e:18:fd:00:90:7a: c2:af:19:ae:12:6a:9f:55:4b:dc:cd:e3:a3:cc:fb: 34:d7:98:76:79:61:09:49:3f:82:cf:35:a4:9e:52: 92:e7:ad:fe:73:89:b9:5d:c0:3f:19:b3:8f:73:be: 63:ac:2d:37:3a:09:f5:e9:4f:59:10:2d:d5:1a:1a: b8:a2:c7:21:61:0b:01:c0:3c:46:45:5f:dd:84:b0: 6c:47:f0:b2:73:f7:29:b8:64:2d:e4:fd:a7:94:2b: 82:b8:2f:a2:6b:90:43:d0:c0:df:7a:4f:e9:42:e0: 59:f8:80:15:15:d8:6e:a2:3f:2b:8e:3e:dd:a2:ca: 6b:a4:f1:61:88:d6:1b:87:5a:6d:2f:a2:ea:5b:0e: 09:c1:ae:da:ab:0b:78:ac:52:1b:ae:5a:65:e6:c4: 81:f2:ba:7a:36:57:97:6a:2e:12:93:43:03:a3:a1: 7c:bf:1a:e9:f1:e0:75:41:66:3f:e1:a5:f1:a9:db: 40:57:e1:84:10:f1:fe:8c:9a:02:e4:16:bd:f1:ba: 0a:4b:74:91:18:40:7e:40:9d:17:5c:ea:f1:b6:9a: 01:fc:b9:92:66:31:c6:f0:50:f6:ad:a9:ed:60:94: 5f:dd:0b:b1:7a:8c:26:5c:a3:d7:14:d4:24:4f:c5: 69:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FA:3F:1F:B5:65:4D:CE:26:E4:50:3B:95:65:01:1E:32:A3:3C:1D X509v3 Authority Key Identifier: keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:68:22:cc:03:55:15:11:2a:ad:b0:a2:ab:f8:46:b7:69:3f: 7c:a6:01:e1:3a:ab:69:17:02:5b:ac:c2:ab:ea:8d:e5:9d:b8: dd:60:ce:c3:60:2d:09:10:c4:2e:d0:6e:b9:ee:32:b6:4f:ae: e8:00:f0:62:9e:e9:fb:9b:9a:ef:b6:40:df:c3:1d:c3:39:ff: 2f:93:6d:5a:92:6c:7f:14:ca:95:1c:47:27:7d:bc:c7:bb:94: 7b:1e:71:69:61:31:d9:1d:de:4e:0a:b8:a4:0b:00:df:69:b4: 4c:bc:37:41:a4:53:2c:b0:5a:71:fe:2e:c6:0d:82:b9:8b:c3: f1:71:08:db:bf:80:8b:df:d8:cd:0e:4d:f0:bf:40:88:c4:5c: b1:da:89:bc:cb:34:bc:d8:e7:69:bd:2e:5b:26:14:83:06:a9: 4f:fe:f5:ed:f6:ed:0b:c1:88:07:66:a9:ad:ea:0b:5c:3d:d5: 0a:2b:0d:0e:41:94:b0:1f:e3:fb:52:3a:68:c1:91:56:45:7d: 71:68:18:15:ea:95:78:3d:35:b0:6e:69:a5:4e:78:f0:1a:0f: 56:2d:12:0e:75:55:a0:ce:66:9e:c4:fe:0b:72:43:43:15:4d: 13:a0:b8:ad:e4:3f:81:3d:ec:a9:49:aa:17:df:e5:7e:7b:b0: ec:3d:d6:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC QzRFMjY1NkIwHhcNMjUwNzIwMjAyNDM2WhcNMjUwNzI3MjAyNDM2WjAYMRYwFAYD VQQDEw02ODdkNTA4NC1iZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TbQJfKH7uhOGP0AkHrCrxmuEmqfVUvczeOjzPs015h2eWEJST+CzzWknlKS 563+c4m5XcA/GbOPc75jrC03Ogn16U9ZEC3VGhq4oschYQsBwDxGRV/dhLBsR/Cy c/cpuGQt5P2nlCuCuC+ia5BD0MDfek/pQuBZ+IAVFdhuoj8rjj7dosprpPFhiNYb h1ptL6LqWw4Jwa7aqwt4rFIbrlpl5sSB8rp6NleXai4Sk0MDo6F8vxrp8eB1QWY/ 4aXxqdtAV+GEEPH+jJoC5Ba98boKS3SRGEB+QJ0XXOrxtpoB/LmSZjHG8FD2rant YJRf3QuxeowmXKPXFNQkT8VpwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX6Px+1 ZU3OJuRQO5VlAR4yozwdMB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO bnRZQ2R6MHAySGk4VGlaV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9aCLMA1UVESqtsKKr+Ea3aT98pgHhOqtpFwJbrMKr6o3lnbjdYM7D YC0JEMQu0G657jK2T67oAPBinun7m5rvtkDfwx3DOf8vk21akmx/FMqVHEcnfbzH u5R7HnFpYTHZHd5OCrikCwDfabRMvDdBpFMssFpx/i7GDYK5i8PxcQjbv4CL39jN Dk3wv0CIxFyx2om8yzS82OdpvS5bJhSDBqlP/vXt9u0LwYgHZqmt6gtcPdUKKw0O QZSwH+P7UjpowZFWRX1xaBgV6pV4PTWwbmmlTnjwGg9WLRIOdVWgzmaexP4LckND FU0ToLit5D+BPeypSaoX3+V+e7DsPdYq -----END CERTIFICATE-----Generated at Mon Jul 21 06:56:11 2025 by rpki-client