$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json) Hash identifier: hu8PoeQ+TdwUgg9G9fEr2lrxcPaW2bRj2KYJQAoQ+bA= Subject key identifier: 11:C7:FB:F0:FF:76:B6:FF:6C:D9:71:19:55:0D:B6:14:24:3A:DD:88 Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft Manifest number: C9 Signing time: Sat 19 Jul 2025 05:53:29 +0000 Manifest this update: Sat 19 Jul 2025 05:53:29 +0000 Manifest next update: Sat 26 Jul 2025 05:53:29 +0000 Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: G+u05jwuA3LnGYFBxaibf4Q/N6nt+YwMjHUfGvPhACg=) 2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: Etmj0xt/W0SmV0Orr2NUt8hTe4pIwfnUtLKYwnR9+RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Validity Not Before: Jul 19 05:53:29 2025 GMT Not After : Jul 26 05:53:29 2025 GMT Subject: CN=687b32d9-88ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:05:0a:73:ad:1c:e7:79:cb:95:40:bd:4f: 55:2d:7f:d7:b8:ff:0c:75:9d:97:ba:a9:bb:43:a1: 77:28:f2:64:9f:83:12:69:64:25:66:17:14:65:77: 58:2c:a0:53:01:0a:87:b4:44:22:37:94:3f:f3:13: 0e:6b:17:c8:45:f7:12:a3:9e:c1:53:1c:49:0a:0b: ee:8a:06:f7:16:e6:29:15:b3:2c:aa:a7:83:c0:19: fa:c4:22:9a:c4:f6:36:91:a3:ca:8d:0c:e5:4b:3e: 20:73:e8:b6:36:bb:22:6e:2c:ef:bb:88:24:14:9f: 6e:bd:a6:eb:59:46:b6:42:6d:6a:67:6e:81:e7:19: d0:1f:94:d9:9b:ac:47:ad:27:89:eb:78:07:38:c5: 4a:12:c0:ca:06:a1:a6:fd:13:7b:ee:c6:13:95:05: dd:26:f6:9b:f4:d1:a7:a4:6f:b8:aa:75:c5:63:e2: d2:a7:d2:cf:8e:04:18:ba:32:ad:57:80:a5:b4:35: af:b8:45:2d:8e:20:c8:cb:68:27:4c:36:86:38:04: 06:0a:f7:21:79:cc:5a:f7:a9:08:90:d7:1d:f9:39: 7a:c8:0b:18:b2:fc:5e:31:0b:df:2a:6a:31:3a:96: 6c:ed:63:b1:0d:97:8a:d8:99:96:c4:38:91:7d:c2: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C7:FB:F0:FF:76:B6:FF:6C:D9:71:19:55:0D:B6:14:24:3A:DD:88 X509v3 Authority Key Identifier: keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:69:be:94:52:36:d3:85:61:03:0f:9c:ea:20:65:a0:f5:1e: 4b:e3:da:70:9b:b3:d2:d3:05:f0:1a:c5:ab:89:14:49:3d:64: 1a:8b:ee:55:33:28:18:13:92:02:fc:b5:09:44:9f:f9:a1:67: 6c:a2:20:56:ce:8f:90:99:52:5a:c3:24:d9:50:0f:43:4a:02: 7a:b0:66:fe:86:41:c0:af:53:fe:72:9f:20:93:9e:56:e7:4b: 75:db:be:1b:96:96:6b:21:54:9d:82:d3:ca:80:ab:54:07:4b: 22:43:90:8d:1d:ca:45:c0:b7:f1:99:f0:07:f8:a8:80:41:37: df:30:d9:6b:69:05:c1:8b:b1:ab:4a:bb:5d:76:9b:5f:04:eb: 4f:d1:f5:7a:fa:71:ea:bd:93:25:df:e6:75:2b:a8:b0:d5:81: 51:18:6e:9a:35:c2:f4:a5:46:ed:24:2f:b0:e7:bf:31:5a:78: e2:85:6d:d5:b3:32:91:b6:85:d6:0e:6c:7f:e4:af:31:6b:59: 57:55:9e:3a:2f:3b:6e:6c:0b:ef:c2:13:91:7a:5a:27:04:77: 07:5b:5a:62:7d:3a:cc:a3:bb:9d:03:d2:ea:2e:42:e7:e8:c3: ea:cb:42:10:1f:31:6e:e6:04:53:31:cf:3e:19:43:8e:99:8f: 8d:60:a0:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0 REQ2NzdGRUEwHhcNMjUwNzE5MDU1MzI5WhcNMjUwNzI2MDU1MzI5WjAYMRYwFAYD VQQDEw02ODdiMzJkOS04OGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIEFCnOtHOd5y5VAvU9VLX/XuP8MdZ2Xuqm7Q6F3KPJkn4MSaWQlZhcUZXdY LKBTAQqHtEQiN5Q/8xMOaxfIRfcSo57BUxxJCgvuigb3FuYpFbMsqqeDwBn6xCKa xPY2kaPKjQzlSz4gc+i2Nrsibizvu4gkFJ9uvabrWUa2Qm1qZ26B5xnQH5TZm6xH rSeJ63gHOMVKEsDKBqGm/RN77sYTlQXdJvab9NGnpG+4qnXFY+LSp9LPjgQYujKt V4CltDWvuEUtjiDIy2gnTDaGOAQGCvchecxa96kIkNcd+Tl6yAsYsvxeMQvfKmox OpZs7WOxDZeK2JmWxDiRfcJvIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHH+/D/ drb/bNlxGVUNthQkOt2IMB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiab6UUjbThWEDD5zqIGWg9R5L49pwm7PS0wXwGsWriRRJPWQai+5V MygYE5IC/LUJRJ/5oWdsoiBWzo+QmVJawyTZUA9DSgJ6sGb+hkHAr1P+cp8gk55W 50t1274blpZrIVSdgtPKgKtUB0siQ5CNHcpFwLfxmfAH+KiAQTffMNlraQXBi7Gr SrtddptfBOtP0fV6+nHqvZMl3+Z1K6iw1YFRGG6aNcL0pUbtJC+w578xWnjihW3V szKRtoXWDmx/5K8xa1lXVZ46LztubAvvwhORelonBHcHW1pifTrMo7udA9LqLkLn 6MPqy0IQHzFu5gRTMc8+GUOOmY+NYKBr -----END CERTIFICATE-----Generated at Sun Jul 20 07:09:45 2025 by rpki-client