$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft File: YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json) Hash identifier: GstCDUaeQtWUBwjgBzitCJ6OP2CgW7mdx0bLCsQzv8M= Subject key identifier: 22:1C:30:B9:40:14:60:A5:D0:BB:E3:D6:24:E6:0B:ED:27:FF:1B:BF Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 Certificate issuer: /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft Manifest number: 0A97 Signing time: Thu 24 Jul 2025 20:35:11 +0000 Manifest this update: Thu 24 Jul 2025 20:35:10 +0000 Manifest next update: Thu 31 Jul 2025 20:35:10 +0000 Files and hashes: 1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: R+pN9P0sDwX1zWF897RFX0RjVH7O9ucQ+Jkb3dirH5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 20:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Validity Not Before: Jul 24 20:35:10 2025 GMT Not After : Jul 31 20:35:10 2025 GMT Subject: CN=688298fe-5a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0f:ac:ab:52:47:8b:9e:6d:52:ee:67:99:6a: c1:ec:fb:80:7d:be:7f:2e:ab:d9:06:a8:6d:5d:29: 5f:ce:97:a6:93:2c:b4:33:ea:7f:6d:66:11:66:ee: f4:9e:9d:4e:c3:d8:f8:b2:90:d5:b0:d4:df:19:8d: 14:b3:43:e7:d6:4b:fe:56:71:c1:d4:01:f6:7f:4e: 56:d0:b8:a5:f8:82:c2:53:70:6a:05:82:c5:83:f3: 37:6f:b1:d6:df:3d:2c:c5:f5:13:b9:6c:66:46:60: 81:77:a9:e2:d1:2e:cb:83:6c:93:49:33:9d:4a:62: 9e:16:87:6f:19:45:c2:bc:b4:fb:35:d2:ba:7c:8a: d8:06:cc:2a:3f:02:63:81:4f:36:92:c8:4e:65:50: 4f:92:ee:73:22:65:df:ce:0e:49:be:6f:f3:eb:70: 65:7b:b2:1c:f3:3c:1c:67:81:94:38:dd:0f:66:26: 8f:ca:50:3d:a7:93:14:ac:3d:86:cc:34:e7:c6:80: 3b:ba:f1:70:0b:74:71:08:d2:43:80:e5:b8:ea:c4: fb:6f:04:8f:8c:a2:65:da:7b:fe:04:90:f5:40:cd: 2a:e4:48:66:70:ea:86:05:2f:e3:6e:cb:81:2b:a6: 51:33:04:ea:89:8a:b2:d0:f1:3b:64:e1:46:26:93: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1C:30:B9:40:14:60:A5:D0:BB:E3:D6:24:E6:0B:ED:27:FF:1B:BF X509v3 Authority Key Identifier: keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:86:c9:d2:01:49:c2:79:84:ad:d2:90:45:47:e4:35:c2:41: 36:58:7e:c9:96:52:77:c3:31:e1:25:38:88:a3:7e:fa:f3:8d: cd:32:ea:26:af:20:e0:54:04:96:22:75:66:27:b3:5b:ce:86: fb:b7:84:07:58:23:23:6b:a2:01:cd:57:b8:80:82:66:a1:69: 09:68:0a:d4:2d:ab:dd:f8:f4:af:23:7c:c5:0a:32:f6:f7:df: d5:93:ad:43:92:26:a3:89:b1:e8:16:81:38:c9:c4:fd:77:79: cf:93:4c:9a:5d:a0:49:d3:9f:cf:57:9f:50:76:ff:df:e4:ce: bf:8d:3f:90:eb:4e:5e:06:62:1b:3c:46:06:fd:fe:4f:f6:99: 46:a5:12:8f:6b:ca:59:f0:26:a6:41:9f:5f:42:57:29:c2:42: 44:06:5e:00:ab:6b:6a:32:60:15:19:47:a1:21:16:6d:b0:f5: 0e:69:3b:e9:40:c0:88:90:66:54:e2:45:b9:20:66:a5:f2:21: 19:86:74:49:8b:aa:b2:75:b5:e2:f0:8b:f7:34:85:30:3d:76: c6:4d:f7:a2:e3:f7:8f:77:60:68:ad:12:98:2f:44:78:2c:54: 1e:e5:d0:ef:d6:27:d0:7a:e9:c6:d8:5b:d1:0f:41:02:90:fb: 5d:ce:58:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE3RTYxMTAvBgNVBAUTKDYwNzYyOEJFNDU1RUYzNzlCRTY2QUY5RDZDQTlCQThF Q0RFRDNGMDQwHhcNMjUwNzI0MjAzNTEwWhcNMjUwNzMxMjAzNTEwWjAYMRYwFAYD VQQDEw02ODgyOThmZS01YTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6A+sq1JHi55tUu5nmWrB7PuAfb5/LqvZBqhtXSlfzpemkyy0M+p/bWYRZu70 np1Ow9j4spDVsNTfGY0Us0Pn1kv+VnHB1AH2f05W0Lil+ILCU3BqBYLFg/M3b7HW 3z0sxfUTuWxmRmCBd6ni0S7Lg2yTSTOdSmKeFodvGUXCvLT7NdK6fIrYBswqPwJj gU82kshOZVBPku5zImXfzg5Jvm/z63Ble7Ic8zwcZ4GUON0PZiaPylA9p5MUrD2G zDTnxoA7uvFwC3RxCNJDgOW46sT7bwSPjKJl2nv+BJD1QM0q5EhmcOqGBS/jbsuB K6ZRMwTqiYqy0PE7ZOFGJpMHowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIcMLlA FGCl0Lvj1iTmC+0n/xu/MB8GA1UdIwQYMBaAFGB2KL5FXvN5vmavnWypuo7N7T8E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz QjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgzbS1acS1kYkttNmpzM3RQ d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIWW92a1ZlODNtLVpxLWRiS202anMzdFB3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgz bS1acS1kYkttNmpzM3RQd1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHhsnSAUnCeYSt0pBFR+Q1wkE2WH7JllJ3wzHhJTiIo376843NMuom ryDgVASWInVmJ7Nbzob7t4QHWCMja6IBzVe4gIJmoWkJaArULavd+PSvI3zFCjL2 99/Vk61DkiajibHoFoE4ycT9d3nPk0yaXaBJ05/PV59Qdv/f5M6/jT+Q605eBmIb PEYG/f5P9plGpRKPa8pZ8CamQZ9fQlcpwkJEBl4Aq2tqMmAVGUehIRZtsPUOaTvp QMCIkGZU4kW5IGal8iEZhnRJi6qydbXi8Iv3NIUwPXbGTfei4/ePd2BorRKYL0R4 LFQe5dDv1ifQeunG2FvRD0ECkPtdzliW -----END CERTIFICATE-----Generated at Fri Jul 25 05:26:20 2025 by rpki-client