$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft File: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json) Hash identifier: jntA4HoTfDgNbWDXzThqu7J8k++lMdtb4O5RgZQYlB8= Subject key identifier: 97:ED:E5:B6:50:CC:88:F0:99:05:E4:48:13:D0:BD:4A:E9:EC:E2:11 Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 Certificate issuer: /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft Manifest number: 06A5 Signing time: Fri 18 Jul 2025 22:29:27 +0000 Manifest this update: Fri 18 Jul 2025 22:29:26 +0000 Manifest next update: Fri 25 Jul 2025 22:29:26 +0000 Files and hashes: 1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: vDGg/5WTIy7IBxK1z7k+/c1uL7sBkBaAQOYSCSbdDio=) 2: 56A937F2360411EF8AA77687C4F9AE02.roa (hash: jBtUWO90hOewkZT/IOz6vgpi/ww1P3BMTXwB63qoFnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0277, serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Validity Not Before: Jul 18 22:29:26 2025 GMT Not After : Jul 25 22:29:26 2025 GMT Subject: CN=687acac7-3c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:52:d1:4b:56:1b:06:07:f3:88:f4:cc:29: 27:d3:9d:a3:2b:7e:3a:3f:8f:3e:cc:1f:24:9b:c7: 07:1e:cf:2d:15:9b:68:65:b9:81:fd:c1:9a:af:a3: 98:e2:04:3c:6e:40:7d:d0:42:a0:be:52:24:89:30: 40:b0:86:b9:26:0d:d8:31:de:11:2e:ee:3b:99:e7: 09:54:d5:48:d9:a7:5c:42:d7:88:bd:05:c3:2f:e2: a6:bc:23:09:ea:8c:d9:02:64:c6:a9:61:74:00:6e: c0:13:3e:df:b3:5f:9a:19:86:6b:f7:45:09:e3:4c: d4:da:0c:a5:28:0c:df:25:b2:d3:b1:98:fc:08:c9: 8b:c4:b0:3d:5d:d0:6a:3d:c1:5f:3e:d2:70:a8:4e: b7:63:f6:b1:99:55:d6:65:36:57:56:85:68:73:f5: f0:a1:29:f0:58:c2:f6:06:b7:b7:17:fc:03:a5:18: c8:6e:24:fb:64:f0:cb:62:9f:8b:f9:e4:ef:0c:f2: d7:fc:0b:91:06:2f:dc:3b:62:25:1d:06:7d:bf:bc: 39:c6:85:e0:00:0e:41:c4:08:4a:f4:7b:45:74:f8: 17:97:7f:6b:0e:f7:a5:c8:22:dd:a3:2a:60:aa:84: 58:84:e4:28:4c:d6:a6:c5:ff:d4:67:f3:58:3c:50: cf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:ED:E5:B6:50:CC:88:F0:99:05:E4:48:13:D0:BD:4A:E9:EC:E2:11 X509v3 Authority Key Identifier: keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c7:0a:04:17:e4:cb:74:3c:17:0d:08:9d:ea:fc:12:03:8b: a9:58:a6:45:a2:66:a3:64:02:34:ef:fb:68:98:90:9a:6d:ce: a7:6e:6f:d8:f9:72:5a:60:16:76:6d:4f:3f:30:70:fd:5c:43: 56:da:d0:94:ce:20:ff:72:e6:9d:5e:bd:02:12:37:87:9d:dd: ab:3b:5b:eb:fd:5f:9a:67:07:7d:f7:2b:db:57:cb:e8:fb:32: 4e:c8:d3:ae:28:f2:c3:3c:a4:4d:a6:23:68:a5:01:80:3a:00: 49:d5:2e:69:da:cf:47:45:1e:18:20:b4:65:0e:0f:f6:74:a1: c4:c5:23:59:1f:33:f1:2e:a2:c6:01:2f:6e:60:a6:d5:82:7e: a6:40:fa:3c:88:40:74:43:8d:1d:56:03:d5:76:6a:41:11:3c: 04:c8:fc:24:45:66:6e:8e:f0:f8:96:72:5b:55:1a:0b:56:d1: a2:0d:51:f9:05:12:81:4e:6f:46:67:f7:df:01:b4:e2:f6:a7: b4:9e:bb:c0:43:49:8f:86:13:ed:27:c7:b4:36:bd:60:74:ef: 00:19:a5:e3:01:aa:70:53:96:b8:4c:ff:d5:ec:ae:5b:ff:5a: 7e:e6:36:2c:af:12:66:41:51:33:c2:99:cf:56:80:d8:b4:24: f7:d6:96:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyNzcxMTAvBgNVBAUTKDYxRDkwOTQ5NEFBQzA5OUU1REM2N0JEOURFQ0NGRUJF NDRCNzc3NzkwHhcNMjUwNzE4MjIyOTI2WhcNMjUwNzI1MjIyOTI2WjAYMRYwFAYD VQQDEw02ODdhY2FjNy0zYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuBS0UtWGwYH84j0zCkn052jK346P48+zB8km8cHHs8tFZtoZbmB/cGar6OY 4gQ8bkB90EKgvlIkiTBAsIa5Jg3YMd4RLu47mecJVNVI2adcQteIvQXDL+KmvCMJ 6ozZAmTGqWF0AG7AEz7fs1+aGYZr90UJ40zU2gylKAzfJbLTsZj8CMmLxLA9XdBq PcFfPtJwqE63Y/axmVXWZTZXVoVoc/XwoSnwWML2Bre3F/wDpRjIbiT7ZPDLYp+L +eTvDPLX/AuRBi/cO2IlHQZ9v7w5xoXgAA5BxAhK9HtFdPgXl39rDvelyCLdoypg qoRYhOQoTNamxf/UZ/NYPFDPgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJft5bZQ zIjwmQXkSBPQvUrp7OIRMB8GA1UdIwQYMBaAFGHZCUlKrAmeXcZ72d7M/r5Et3d5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDI3Ny9ENDE5RDgxMDc1 Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0NaNWR4bnZaM3N6LXZrUzNk M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lka0pTVXFzQ1o1ZHhudlozc3otdmtTM2Qzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDI3Ny9ENDE5RDgxMDc1Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0Na NWR4bnZaM3N6LXZrUzNkM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAxwoEF+TLdDwXDQid6vwSA4upWKZFomajZAI07/tomJCabc6nbm/Y +XJaYBZ2bU8/MHD9XENW2tCUziD/cuadXr0CEjeHnd2rO1vr/V+aZwd99yvbV8vo +zJOyNOuKPLDPKRNpiNopQGAOgBJ1S5p2s9HRR4YILRlDg/2dKHExSNZHzPxLqLG AS9uYKbVgn6mQPo8iEB0Q40dVgPVdmpBETwEyPwkRWZujvD4lnJbVRoLVtGiDVH5 BRKBTm9GZ/ffAbTi9qe0nrvAQ0mPhhPtJ8e0Nr1gdO8AGaXjAapwU5a4TP/V7K5b /1p+5jYsrxJmQVEzwpnPVoDYtCT31paG -----END CERTIFICATE-----Generated at Sun Jul 20 08:01:54 2025 by rpki-client