$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft (raw, json) Hash identifier: uRmD5BsWlNlI2Z4gsI5wAu0ccq+gxWHdW0foW+YSJmI= Subject key identifier: 51:9D:5A:24:7A:25:10:06:C9:4E:26:56:8D:DF:CB:80:E9:17:24:C2 Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A Certificate issuer: /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A Certificate serial: 04AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft Manifest number: 0491 Signing time: Sat 19 Jul 2025 00:23:19 +0000 Manifest this update: Sat 19 Jul 2025 00:23:19 +0000 Manifest next update: Sat 26 Jul 2025 00:23:19 +0000 Files and hashes: 1: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl (hash: IR6z10kFUwHo+ZqZJRX9uXSAM0rZiIoGHhSrpK/Qm/U=) 2: CA888654D0E011EC9E5ACC1CC4F9AE02.roa (hash: 4by10ick3aOPoEwL9MxmYZych/O61DB95JCCfpjs2l0=) 3: 52B98FDA46AF11ECB113AA4BC4F9AE02.roa (hash: zdWwyK62ezTqtldMx3AFhd08v1ee56JEEEGh/b+1bK8=) 4: 35A2418C45AE11ECB857890EC4F9AE02.roa (hash: yt5ul2v37If2OMAgvwlcXNvNlpOeU9vk4N82gRjp7ro=) 5: 9896BA2EB6DE11EC8DB17172C4F9AE02.roa (hash: tkC8VFhPaMMB7xHukmlTC8vVY5Lai1noTB/JDIdLAEc=) 6: 351AC73E45AE11ECB857890EC4F9AE02.roa (hash: ofwlwfDv/f2slgSdPa6hT78BUtn3LBZ837QvOITSXas=) 7: 346A2B4045AE11ECB857890EC4F9AE02.roa (hash: y6Yo94bVO58GlNbuqBWAfuC5sCH6iiyxweKo6sloNrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1194 (0x4aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A Validity Not Before: Jul 19 00:23:19 2025 GMT Not After : Jul 26 00:23:19 2025 GMT Subject: CN=687ae577-db7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:fd:06:bd:6c:99:f8:70:0c:40:a2:41:f8: 2c:91:a2:7e:5b:d3:8d:23:ae:c1:06:99:c2:3f:ad: 62:db:ea:a6:e6:8c:69:77:f0:d7:1c:1b:55:27:62: de:6e:9f:cd:ec:e6:e9:4e:a0:ea:6a:8f:e8:4e:7b: e4:31:05:5a:1a:96:d6:b5:71:63:e8:3f:f6:af:95: 05:0b:74:ec:91:67:81:8e:55:ec:97:c8:ff:46:23: dc:14:15:b6:4b:3c:4c:da:3d:67:1e:b0:50:46:e3: 65:29:d9:25:1f:eb:f1:21:cd:2b:c7:6a:55:19:00: 5f:55:6a:3f:70:68:a0:a0:28:e8:9d:11:a1:c5:a2: a1:ea:37:40:21:36:14:84:0e:fa:5f:08:7f:b1:28: 9a:1a:32:64:16:bd:5b:fa:41:2a:4f:95:0c:cc:9c: f5:c8:49:0d:f3:fe:da:90:93:98:63:6f:18:1a:69: dd:93:4e:5c:e3:1b:aa:ac:90:ff:d7:f8:79:93:d8: 7a:3f:fa:58:da:08:dd:21:62:5b:f9:7a:4a:f8:fb: be:77:17:9e:2d:50:b5:c5:88:30:ab:66:23:60:70: 03:d3:87:54:7d:e0:75:c6:0b:9f:fa:19:87:16:2f: 4d:48:4d:6a:3e:4b:d7:2f:5e:65:12:51:22:65:55: 02:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9D:5A:24:7A:25:10:06:C9:4E:26:56:8D:DF:CB:80:E9:17:24:C2 X509v3 Authority Key Identifier: keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:49:dc:d4:09:5c:22:60:a7:f8:e7:d9:b4:2f:ef:45:1f:f6: f9:7f:90:8e:e5:2d:2a:a2:73:ef:7f:8c:88:04:0b:a2:90:27: 26:47:17:a3:c0:b9:5e:64:e9:90:6d:17:a3:34:16:a4:21:a0: e9:8e:3b:d4:ad:cf:53:f0:7a:d2:ce:81:12:d0:18:28:3f:18: 1e:a1:ed:a5:28:bb:b9:5d:fa:1b:ba:c2:89:8f:08:a5:3a:85: 42:6a:40:86:ad:08:15:bd:2a:f8:7c:72:9f:46:0e:6f:ba:42: ad:42:5a:38:b7:65:12:61:70:63:d9:77:69:22:3f:e5:f0:b9: 58:8a:2a:08:84:aa:9a:5f:05:1b:a4:a0:8e:75:5b:d4:47:bb: c9:4c:65:3c:0d:73:69:0f:05:85:73:d8:9f:9f:8f:05:51:33: 14:27:80:16:5a:17:7f:70:4d:cb:96:ce:d9:fa:a1:b2:66:8d: 0b:23:e5:f7:28:dc:05:01:78:33:c2:66:53:53:a1:27:d7:e3: 61:c9:6d:d3:ad:bd:9d:7b:d5:c1:dd:2f:b1:1c:fd:1f:e8:85: 4e:4e:29:c4:1c:29:32:ab:91:2d:a3:99:1c:2e:62:8a:2d:13: cf:b5:fb:dd:16:e4:be:da:e5:b5:bd:84:6c:46:65:62:38:0c: 31:c8:63:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzNTcxMTAvBgNVBAUTKENCMTY1NjgxMUQwODQ1Nzk5M0U4RDgxQjlGOTc5OERB RDYxNjk3MUEwHhcNMjUwNzE5MDAyMzE5WhcNMjUwNzI2MDAyMzE5WjAYMRYwFAYD VQQDEw02ODdhZTU3Ny1kYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0b9Br1smfhwDECiQfgskaJ+W9ONI67BBpnCP61i2+qm5oxpd/DXHBtVJ2Le bp/N7ObpTqDqao/oTnvkMQVaGpbWtXFj6D/2r5UFC3TskWeBjlXsl8j/RiPcFBW2 SzxM2j1nHrBQRuNlKdklH+vxIc0rx2pVGQBfVWo/cGigoCjonRGhxaKh6jdAITYU hA76Xwh/sSiaGjJkFr1b+kEqT5UMzJz1yEkN8/7akJOYY28YGmndk05c4xuqrJD/ 1/h5k9h6P/pY2gjdIWJb+XpK+Pu+dxeeLVC1xYgwq2YjYHAD04dUfeB1xguf+hmH Fi9NSE1qPkvXL15lElEiZVUCNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGdWiR6 JRAGyU4mVo3fy4DpFyTCMB8GA1UdIwQYMBaAFMsWVoEdCEV5k+jYG5+XmNrWFpca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDM1Ny9CODRCMTBFQzQ1 QTgxMUVDOEIxNDA1NThDNEY5QUUwMi95eFpXZ1IwSVJYbVQ2TmdibjVlWTJ0WVds eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4WldnUjBJUlhtVDZOZ2JuNWVZMnRZV2x4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDM1Ny9CODRCMTBFQzQ1QTgxMUVDOEIxNDA1NThDNEY5QUUwMi95eFpXZ1IwSVJY bVQ2TmdibjVlWTJ0WVdseG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXSdzUCVwiYKf459m0L+9FH/b5f5CO5S0qonPvf4yIBAuikCcmRxej wLleZOmQbRejNBakIaDpjjvUrc9T8HrSzoES0BgoPxgeoe2lKLu5XfobusKJjwil OoVCakCGrQgVvSr4fHKfRg5vukKtQlo4t2USYXBj2XdpIj/l8LlYiioIhKqaXwUb pKCOdVvUR7vJTGU8DXNpDwWFc9ifn48FUTMUJ4AWWhd/cE3Lls7Z+qGyZo0LI+X3 KNwFAXgzwmZTU6En1+NhyW3Trb2de9XB3S+xHP0f6IVOTinEHCkyq5Eto5kcLmKK LRPPtfvdFuS+2uW1vYRsRmViOAwxyGP3 -----END CERTIFICATE-----Generated at Sun Jul 20 10:04:18 2025 by rpki-client