$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: 8sD6+gWLjur2FfAm7prSaFmxXP4ByVdJYP4ykVlj1h8= Subject key identifier: 83:EC:EA:66:DD:4C:80:BD:41:D6:52:9A:DA:C5:14:2C:84:BD:01:88 Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 0188 Signing time: Sat 19 Jul 2025 03:46:41 +0000 Manifest this update: Sat 19 Jul 2025 03:46:40 +0000 Manifest next update: Sat 26 Jul 2025 03:46:40 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: omZDJGKcIlj+OUipNcCaBuA3Hrqq7EYBUOWctEPV2oU=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: LAaO1vZcTPGfjnPzmYmWNC40SxBUckX2iI6WDTxLjTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Jul 19 03:46:40 2025 GMT Not After : Jul 26 03:46:40 2025 GMT Subject: CN=687b1520-26b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:39:14:8f:4b:09:20:94:a6:b5:90:23:cd: 72:15:d9:54:0c:8a:4b:95:a7:cf:ef:2c:fd:0a:0d: 0c:e4:36:b5:54:cb:b7:40:97:00:34:8d:91:80:df: f9:d9:33:db:4d:4c:9f:a1:f6:89:9f:d8:24:09:e2: 04:2d:a5:74:0f:dc:3b:93:98:d5:c2:a9:89:ad:08: 4a:e9:6e:bc:a4:1f:42:0f:a0:f7:74:8d:73:38:38: 62:0f:bf:e1:6c:7e:df:5b:69:a0:34:e6:24:65:34: 08:f2:02:75:59:95:c7:f9:db:f1:80:e9:ea:0b:56: 1a:1c:eb:e2:55:2d:67:57:07:ee:3a:bb:04:80:ba: 24:94:37:1e:58:e6:b5:8e:98:c5:46:4a:64:2f:40: 83:fe:16:72:48:72:66:3f:ab:bf:ca:25:0d:58:07: 5e:80:f0:25:66:54:d5:fc:07:45:45:7c:ae:9e:49: 20:d3:14:6e:f7:e2:ae:fe:2c:76:4c:2a:34:0e:de: d2:22:b3:df:5c:c6:a7:0c:9e:6d:49:1f:2a:24:ae: ac:f7:0c:63:ca:dc:dd:b6:7a:fa:9a:05:38:b7:92: 94:2f:38:cd:90:49:2c:47:bf:e8:d9:25:3a:95:83: d7:c2:d7:f3:65:53:89:27:c9:1b:5e:91:15:a8:a0: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EC:EA:66:DD:4C:80:BD:41:D6:52:9A:DA:C5:14:2C:84:BD:01:88 X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:cf:a6:ea:08:68:38:23:e4:b5:7d:05:58:78:ad:e2:13:a5: 8a:1d:01:e5:df:a4:88:29:2d:ef:1f:e6:5e:23:de:5c:44:85: d1:99:32:31:e0:80:73:29:d8:52:2e:7f:db:77:2a:ec:77:7f: 19:88:f1:4c:a1:68:a4:31:69:c6:86:e3:a9:67:73:5a:c8:32: 45:ec:17:b3:c7:33:7a:82:64:14:f3:17:8b:c8:88:79:c0:e8: 74:6b:5e:24:91:95:50:36:ad:be:9e:76:16:95:5c:7c:d8:9c: cc:ba:98:38:71:53:4e:ce:0b:a3:ef:97:6c:71:8e:83:13:46: 64:51:7d:c0:16:52:45:27:0f:c2:66:8e:4a:76:6e:83:af:01: 69:a6:6e:0c:c7:a7:da:ef:dc:4a:03:ae:f7:b0:48:42:87:78: b8:34:fe:2f:74:05:dc:cc:d6:25:22:6c:3a:af:0c:60:21:1d: 58:c5:73:dd:4b:45:96:b2:f8:b2:38:64:27:7a:02:63:a1:b0: d7:cc:04:c8:5e:4a:af:3c:9b:cd:d2:26:2f:e0:d0:d4:f4:71: fd:05:68:54:25:5e:52:ae:5f:11:73:0a:bd:b7:55:eb:af:58: d3:91:92:5e:a7:69:f6:2b:79:af:0e:75:04:0b:45:54:d2:d8: 23:0f:30:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjUwNzE5MDM0NjQwWhcNMjUwNzI2MDM0NjQwWjAYMRYwFAYD VQQDEw02ODdiMTUyMC0yNmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyH85FI9LCSCUprWQI81yFdlUDIpLlafP7yz9Cg0M5Da1VMu3QJcANI2RgN/5 2TPbTUyfofaJn9gkCeIELaV0D9w7k5jVwqmJrQhK6W68pB9CD6D3dI1zODhiD7/h bH7fW2mgNOYkZTQI8gJ1WZXH+dvxgOnqC1YaHOviVS1nVwfuOrsEgLoklDceWOa1 jpjFRkpkL0CD/hZySHJmP6u/yiUNWAdegPAlZlTV/AdFRXyunkkg0xRu9+Ku/ix2 TCo0Dt7SIrPfXManDJ5tSR8qJK6s9wxjytzdtnr6mgU4t5KULzjNkEksR7/o2SU6 lYPXwtfzZVOJJ8kbXpEVqKAnXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPs6mbd TIC9QdZSmtrFFCyEvQGIMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEz6bqCGg4I+S1fQVYeK3iE6WKHQHl36SIKS3vH+ZeI95cRIXRmTIx 4IBzKdhSLn/bdyrsd38ZiPFMoWikMWnGhuOpZ3NayDJF7BezxzN6gmQU8xeLyIh5 wOh0a14kkZVQNq2+nnYWlVx82JzMupg4cVNOzguj75dscY6DE0ZkUX3AFlJFJw/C Zo5Kdm6DrwFppm4Mx6fa79xKA673sEhCh3i4NP4vdAXczNYlImw6rwxgIR1YxXPd S0WWsviyOGQnegJjobDXzATIXkqvPJvN0iYv4NDU9HH9BWhUJV5Srl8Rcwq9t1Xr r1jTkZJep2n2K3mvDnUEC0VU0tgjDzDQ -----END CERTIFICATE-----Generated at Sun Jul 20 08:04:16 2025 by rpki-client