$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: VdMETCNT245nHCPV/E3thyZLCdf6VZ7Bzrv6sx6OVMI= Subject key identifier: 8C:C0:0D:3F:D2:9C:BB:F2:29:E2:3C:14:BF:85:91:C2:53:CD:FB:A8 Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 318B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 3173 Signing time: Sun 20 Jul 2025 15:26:58 +0000 Manifest this update: Sun 20 Jul 2025 15:26:57 +0000 Manifest next update: Sun 27 Jul 2025 15:26:57 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: 4g7cF0rtcy1oU4YqsvTyplczJaJ+7R/yVpcDkcWGj7Q=) 2: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: ErhPkGRbX8uOsiv8BWxLJU0CPTjQbpalIipsBEye//M=) 3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: /EM/vo0t7hxhR1+u4hOK5kv/a5vaIBeuI2TOpMQ2J6U=) 4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: 4L/QBsPDgl5EFK4nBoxi1+onb9ozFugWEl6aDf8ffAI=) 5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: XqVyekJEjEzuH8hLRjew+hAKZkF1o9oKv8NocJP1RLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12683 (0x318b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Jul 20 15:26:57 2025 GMT Not After : Jul 27 15:26:57 2025 GMT Subject: CN=687d0ac1-5f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:73:5e:fe:77:81:c3:09:84:3a:fd:c8:d9: 76:7a:c7:ad:c2:ab:cc:23:3e:29:70:10:dd:86:c8: 83:a4:50:f2:0b:b3:5d:fc:80:71:fb:75:7c:47:d6: 51:59:9a:64:71:f3:1c:b7:b7:12:31:1b:40:81:da: e7:6f:41:c8:75:ea:e5:47:e4:e1:3e:38:3f:b6:fb: 68:6a:d1:a9:65:03:c4:1d:a4:83:9a:40:c5:10:e1: fc:07:44:af:6f:85:1a:6b:cb:74:9c:3f:4d:c4:58: 34:6e:c5:07:98:c9:f8:89:62:98:e8:68:b7:d0:11: ef:b5:67:ec:af:05:ce:28:b3:64:fd:73:96:56:82: 9e:b6:5f:82:8d:42:55:71:6f:3c:d7:e8:1a:b2:ff: d0:e1:05:64:00:73:88:99:8a:85:e6:72:2c:f9:82: 0e:4e:23:7f:90:3d:ed:7e:a6:ee:dd:79:d9:65:6c: d6:da:01:25:0f:d3:2c:9b:c8:f4:83:b1:6f:4a:00: 5a:a3:bc:13:04:de:25:71:24:1c:8f:d3:f2:57:49: 14:a2:0a:ce:53:63:90:5e:e6:bf:04:03:a4:58:65: 15:b5:bd:7a:4f:e4:b3:70:18:65:2b:0a:11:89:a3: 5f:d4:a0:18:de:33:ce:0f:ec:a2:1d:4b:38:6c:ba: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C0:0D:3F:D2:9C:BB:F2:29:E2:3C:14:BF:85:91:C2:53:CD:FB:A8 X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:24:1b:60:52:e6:e5:90:c2:44:60:12:54:e7:ca:54:87:13: 2a:50:7a:92:b3:81:79:e9:25:1b:d3:a4:b5:b5:33:82:9b:4c: d6:09:d1:87:8a:36:c3:42:4b:51:ef:99:16:93:aa:49:37:67: cc:9e:00:28:83:8e:3a:aa:8b:15:b1:8f:c0:1c:3c:f7:2b:1d: 9a:fb:68:96:ff:46:bc:59:8d:2b:6b:2c:9b:f1:a8:4b:62:40: 50:7a:ee:91:11:48:0e:9b:11:df:dd:30:1b:7b:b8:25:e3:11: 1d:3d:92:f1:d8:db:30:8b:69:6a:5f:66:a4:14:65:ee:da:e0: 29:9c:47:46:50:bd:9e:1a:fd:7f:2d:16:00:5b:54:d8:30:b5: 42:01:68:a5:87:8b:23:b9:c6:56:56:ac:57:28:7c:63:e3:00: 34:b5:ee:55:55:a9:0e:49:9b:07:35:97:c1:ec:89:d2:76:ae: 48:b8:c5:2d:0c:e4:75:0c:04:dd:ed:c5:1d:31:b2:aa:b9:a6: 46:6a:57:cb:f7:1e:a1:23:5a:28:42:61:7c:ad:7e:de:a2:85: 8d:7b:32:46:61:dc:19:a9:b2:43:0e:1c:56:04:d7:3a:09:6f: c9:80:05:fc:86:d1:05:8e:39:84:2b:aa:23:cd:62:b1:2b:bc: d7:95:b7:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjUwNzIwMTUyNjU3WhcNMjUwNzI3MTUyNjU3WjAYMRYwFAYD VQQDEw02ODdkMGFjMS01ZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycdzXv53gcMJhDr9yNl2esetwqvMIz4pcBDdhsiDpFDyC7Nd/IBx+3V8R9ZR WZpkcfMct7cSMRtAgdrnb0HIderlR+ThPjg/tvtoatGpZQPEHaSDmkDFEOH8B0Sv b4Uaa8t0nD9NxFg0bsUHmMn4iWKY6Gi30BHvtWfsrwXOKLNk/XOWVoKetl+CjUJV cW881+gasv/Q4QVkAHOImYqF5nIs+YIOTiN/kD3tfqbu3XnZZWzW2gElD9Msm8j0 g7FvSgBao7wTBN4lcSQcj9PyV0kUogrOU2OQXua/BAOkWGUVtb16T+SzcBhlKwoR iaNf1KAY3jPOD+yiHUs4bLoVtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzADT/S nLvyKeI8FL+FkcJTzfuoMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0JBtgUublkMJEYBJU58pUhxMqUHqSs4F56SUb06S1tTOCm0zWCdGH ijbDQktR75kWk6pJN2fMngAog446qosVsY/AHDz3Kx2a+2iW/0a8WY0rayyb8ahL YkBQeu6REUgOmxHf3TAbe7gl4xEdPZLx2Nswi2lqX2akFGXu2uApnEdGUL2eGv1/ LRYAW1TYMLVCAWilh4sjucZWVqxXKHxj4wA0te5VVakOSZsHNZfB7InSdq5IuMUt DOR1DATd7cUdMbKquaZGalfL9x6hI1ooQmF8rX7eooWNezJGYdwZqbJDDhxWBNc6 CW/JgAX8htEFjjmEK6ojzWKxK7zXlbcx -----END CERTIFICATE-----Generated at Mon Jul 21 12:44:16 2025 by rpki-client