$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft File: yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json) Hash identifier: z6qArY7DEyHkDIymuv/pgdQz8NuOR+jIokLx/5dxagI= Subject key identifier: DA:8E:D5:77:A2:FF:D3:E8:3E:8B:79:08:47:AC:BA:50:97:B4:FA:81 Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft Manifest number: 52 Signing time: Mon 21 Jul 2025 07:25:38 +0000 Manifest this update: Mon 21 Jul 2025 07:25:38 +0000 Manifest next update: Mon 28 Jul 2025 07:25:38 +0000 Files and hashes: 1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: DRfwlkc+vw+9ESlMQLNbGtGRdytD2/c4lUKYKBe0j4g=) 2: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: LcUO14s0wegdTiNX+dgH1WWwhW/HYrgfbp8JINcrU+U=) 3: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: FSLv08dRTBFk7OJGwtktmBOjNRJNtTBGwj1NskH7kyw=) 4: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: mLH/qF33HuSxb2ZOhtlDD/C41cd08Ge05vK6Yy9o0+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Validity Not Before: Jul 21 07:25:38 2025 GMT Not After : Jul 28 07:25:38 2025 GMT Subject: CN=687deb72-d7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:64:dd:14:db:55:89:3c:95:ad:a3:26:20: ba:65:37:9f:ec:40:1b:85:60:1c:ed:30:30:cc:bb: 50:9a:a6:ea:75:f7:93:ed:89:79:d5:2d:a5:df:95: 53:bc:78:e3:d1:5b:e9:a2:cd:65:dd:c8:5a:f2:79: 90:a3:63:23:fa:c4:59:61:47:17:13:cf:25:51:88: 1f:0f:63:a7:ac:46:8c:cf:54:8d:2a:93:95:3a:65: fa:a3:9d:63:25:2f:81:79:c9:85:b1:5f:19:4a:0f: 14:13:4d:b8:a7:06:72:08:11:cc:7a:f2:4e:75:8e: 00:fa:da:31:8a:12:4d:a9:65:51:97:fd:38:19:17: fd:cf:42:33:20:1f:0d:f3:2e:f5:7a:10:c2:8d:d5: 5e:5f:fd:8c:b8:29:1a:18:cf:c2:80:b5:90:bf:82: 29:60:a2:87:a2:4b:35:9a:9c:a2:c2:67:99:f1:ec: 8f:b3:2b:fd:35:6c:62:7b:a1:89:41:e4:c3:12:e4: 22:fc:de:74:45:76:46:17:4f:81:53:3e:19:db:a4: 65:18:ea:e3:b1:fc:34:62:7b:c0:b1:0f:89:90:a2: 1e:d6:e8:a1:3c:26:73:05:4c:96:87:95:38:56:62: 08:89:21:e3:63:29:3e:06:fc:b7:b5:42:3b:05:11: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8E:D5:77:A2:FF:D3:E8:3E:8B:79:08:47:AC:BA:50:97:B4:FA:81 X509v3 Authority Key Identifier: keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ae:d8:07:a2:03:6e:f0:b7:8d:94:6c:e9:c4:98:28:b7:8c: 57:6a:8a:38:7d:6e:29:e9:2e:40:26:32:c5:7a:4a:6f:ad:d1: cc:a4:69:59:9f:a8:dd:b8:e7:8a:1f:b3:bd:43:a6:cb:e0:6a: b8:99:6c:a7:5e:8e:9a:8f:4d:d8:0c:04:99:91:c6:ec:ea:0e: 68:88:d9:46:80:c3:20:48:bf:5b:ea:79:65:43:4b:69:15:c7: 7e:5b:c7:17:b4:e0:9b:65:c2:cd:04:b8:08:ff:29:62:0d:d8: 59:2e:f8:18:4e:07:a6:0f:90:58:ae:e0:bf:7c:d2:ac:cd:0a: b2:a4:b4:be:3b:ae:84:ad:bc:ed:ff:99:58:a6:2e:4f:df:9c: be:f2:b8:93:1d:8f:22:8e:ee:38:05:cb:2b:d6:2d:be:e2:3b: 68:a3:8e:d8:14:7d:35:25:2c:24:05:de:9f:3b:66:18:66:2b: 8f:a8:d2:41:86:76:dc:87:e6:6d:9b:17:05:67:b6:bc:83:33: 2d:26:7b:93:08:5e:12:f3:d4:fa:64:a6:77:9c:80:7f:f7:7c: eb:75:49:d3:d3:39:c6:d3:e3:58:e6:98:da:1d:35:31:5a:b5: 8e:52:6b:38:1a:cd:6e:a4:62:6f:b3:72:30:5c:f8:d0:bc:61: 5b:49:fb:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTFGQzExMC8GA1UEBRMoQ0E1RjdBMzEyMUMxRjVGOTg5NTIwQzdBNTE5NzEzRkIz QTY4Q0E3RTAeFw0yNTA3MjEwNzI1MzhaFw0yNTA3MjgwNzI1MzhaMBgxFjAUBgNV BAMTDTY4N2RlYjcyLWQ3ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwlGTdFNtViTyVraMmILplN5/sQBuFYBztMDDMu1Capup195PtiXnVLaXflVO8 eOPRW+mizWXdyFryeZCjYyP6xFlhRxcTzyVRiB8PY6esRozPVI0qk5U6ZfqjnWMl L4F5yYWxXxlKDxQTTbinBnIIEcx68k51jgD62jGKEk2pZVGX/TgZF/3PQjMgHw3z LvV6EMKN1V5f/Yy4KRoYz8KAtZC/gilgooeiSzWanKLCZ5nx7I+zK/01bGJ7oYlB 5MMS5CL83nRFdkYXT4FTPhnbpGUY6uOx/DRie8CxD4mQoh7W6KE8JnMFTJaHlThW YgiJIeNjKT4G/Le1QjsFEUTjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2o7Vd6L/ 0+g+i3kIR6y6UJe0+oEwHwYDVR0jBBgwFoAUyl96MSHB9fmJUgx6UZcT+zpoyn4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFMUZDLzVCMzI1RkE2RTlC OTExRUZCNkRBNDE0Q0M0RjlBRTAyL3lsOTZNU0hCOWZtSlVneDZVWmNULXpwb3lu NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWw5Nk1TSEI5Zm1KVWd4NlVaY1QtenBveW40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF MUZDLzVCMzI1RkE2RTlCOTExRUZCNkRBNDE0Q0M0RjlBRTAyL3lsOTZNU0hCOWZt SlVneDZVWmNULXpwb3luNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ6u2AeiA27wt42UbOnEmCi3jFdqijh9binpLkAmMsV6Sm+t0cykaVmf qN2454ofs71DpsvgariZbKdejpqPTdgMBJmRxuzqDmiI2UaAwyBIv1vqeWVDS2kV x35bxxe04Jtlws0EuAj/KWIN2Fku+BhOB6YPkFiu4L980qzNCrKktL47roStvO3/ mVimLk/fnL7yuJMdjyKO7jgFyyvWLb7iO2ijjtgUfTUlLCQF3p87ZhhmK4+o0kGG dtyH5m2bFwVntryDMy0me5MIXhLz1PpkpnecgH/3fOt1SdPTOcbT41jmmNodNTFa tY5SazgazW6kYm+zcjBc+NC8YVtJ+wc= -----END CERTIFICATE-----Generated at Tue Jul 22 05:14:07 2025 by rpki-client