$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json) Hash identifier: larXbXWiFJdSGhlMReFY0u4kiUfnFBwH1dCQlL1tt/g= Subject key identifier: CE:52:C4:34:7C:51:4B:19:B8:6A:B0:D8:25:51:4D:80:9A:9C:AE:3C Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft Manifest number: 07D2 Signing time: Sun 20 Jul 2025 21:14:26 +0000 Manifest this update: Sun 20 Jul 2025 21:14:26 +0000 Manifest next update: Sun 27 Jul 2025 21:14:26 +0000 Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: Gqk322BSfBiP8yxE9Ofqw2AWlIunoZduHY5obsAer7I=) 2: 7634D328351411EBBF864670C4F9AE02.roa (hash: gJ6rfZA4kdz2sP4zhVk5qWSiiFvdYYEjJ3d1LC4TVQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Validity Not Before: Jul 20 21:14:26 2025 GMT Not After : Jul 27 21:14:26 2025 GMT Subject: CN=687d5c32-8860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6b:13:5e:62:56:e9:a5:e1:a9:27:1c:26:27: fe:f3:d8:06:d3:fa:ae:31:b2:23:d8:13:e2:2c:6f: 47:0f:28:75:53:5d:2b:90:6e:1f:cd:4b:48:49:3b: 13:b9:d3:a9:ca:54:ca:06:33:02:2c:92:4c:a3:5b: d7:83:7f:32:f2:66:fc:89:f5:29:c2:ba:e7:7f:d5: 87:f1:5d:c8:9a:de:a2:29:0d:94:f0:1b:e3:c0:6e: e9:a2:04:ca:83:54:c4:4a:14:05:30:f8:0c:5b:37: 92:6d:8d:19:78:89:7a:cc:80:41:13:f2:70:dd:e9: 30:05:c6:46:32:2e:a6:31:ed:95:e4:3f:d8:31:f5: f3:a6:e1:a7:74:e5:e6:a5:a7:59:6b:d0:c7:d8:39: 30:ca:43:0e:5d:23:41:12:cc:7f:11:9b:7a:0d:17: 6d:b9:0e:21:36:fb:5d:72:e2:08:8f:e5:8c:23:4b: 09:9f:64:51:b1:0d:d4:ce:e5:70:54:22:24:13:62: 8c:b2:9f:22:08:f0:60:2a:df:4b:e5:0c:db:e2:5d: bb:f7:b8:4d:c5:cc:84:ef:8e:4e:44:eb:d8:4b:08: f2:14:3b:ce:86:bd:df:c9:f1:03:ad:07:be:63:e7: 80:9d:bc:fe:28:33:98:4d:47:0d:5a:53:d2:74:db: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:52:C4:34:7C:51:4B:19:B8:6A:B0:D8:25:51:4D:80:9A:9C:AE:3C X509v3 Authority Key Identifier: keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b6:5c:69:06:77:a6:c2:9c:e6:92:cf:f0:38:1a:63:ab:1c: c8:04:c7:2d:14:39:c6:e6:22:1f:5b:b2:8d:79:e2:ff:bc:76: ca:c9:26:1c:aa:35:4f:ea:ca:c2:38:1c:77:70:a6:bd:40:4c: c0:b3:84:9f:51:de:b6:b8:f4:8b:29:d9:31:ae:8a:47:0f:4e: 36:7b:f6:63:0a:d0:c2:eb:fb:bd:8b:57:a2:f3:6e:a4:bb:02: b1:c2:00:f0:27:b0:a3:ad:b5:0b:6f:ab:99:a0:bc:76:8c:71: 3e:b5:3a:3d:b6:8f:2c:d3:f9:6f:fb:f3:6a:4c:fd:5e:b2:80: f1:5a:1b:19:7b:12:90:8a:67:dc:dc:1e:45:5d:d1:4f:55:d0: ba:da:65:b0:99:a4:0f:b0:56:4b:dd:ae:8f:1c:5b:88:f4:1f: 56:b8:90:32:d5:00:a7:ba:97:0b:61:89:0f:62:b2:b6:af:ec: 54:28:8a:f1:92:ba:4e:36:19:a9:d1:d4:10:77:ec:68:1c:79: bf:9a:f8:52:1e:2d:de:5e:5a:88:e1:1c:22:8f:a0:29:58:1d: 6f:13:88:26:e8:99:5a:32:3a:15:48:6b:3a:99:00:89:fd:3a: 6e:13:48:37:03:62:0f:c2:3d:38:b2:97:1b:ce:3a:c0:cb:07: 92:f0:c2:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB RjYzMzNGMDAwHhcNMjUwNzIwMjExNDI2WhcNMjUwNzI3MjExNDI2WjAYMRYwFAYD VQQDEw02ODdkNWMzMi04ODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02sTXmJW6aXhqSccJif+89gG0/quMbIj2BPiLG9HDyh1U10rkG4fzUtISTsT udOpylTKBjMCLJJMo1vXg38y8mb8ifUpwrrnf9WH8V3Imt6iKQ2U8BvjwG7pogTK g1TEShQFMPgMWzeSbY0ZeIl6zIBBE/Jw3ekwBcZGMi6mMe2V5D/YMfXzpuGndOXm padZa9DH2DkwykMOXSNBEsx/EZt6DRdtuQ4hNvtdcuIIj+WMI0sJn2RRsQ3UzuVw VCIkE2KMsp8iCPBgKt9L5Qzb4l2797hNxcyE745OROvYSwjyFDvOhr3fyfEDrQe+ Y+eAnbz+KDOYTUcNWlPSdNut4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5SxDR8 UUsZuGqw2CVRTYCanK48MB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw UDJCMk1OM18xTEd2WXpQd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHtlxpBnemwpzmks/wOBpjqxzIBMctFDnG5iIfW7KNeeL/vHbKySYc qjVP6srCOBx3cKa9QEzAs4SfUd62uPSLKdkxropHD042e/ZjCtDC6/u9i1ei826k uwKxwgDwJ7CjrbULb6uZoLx2jHE+tTo9to8s0/lv+/NqTP1esoDxWhsZexKQimfc 3B5FXdFPVdC62mWwmaQPsFZL3a6PHFuI9B9WuJAy1QCnupcLYYkPYrK2r+xUKIrx krpONhmp0dQQd+xoHHm/mvhSHi3eXlqI4Rwij6ApWB1vE4gm6JlaMjoVSGs6mQCJ /TpuE0g3A2IPwj04spcbzjrAyweS8ML0 -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:37 2025 by rpki-client