$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: 00q5Ti5pUjek8Piz3BZ87Jpeo4hlRFFbJhZSE51gECI= Subject key identifier: 0B:E7:AD:B0:5F:1A:97:C6:8D:F9:52:F8:B9:AD:28:CE:CB:63:F8:37 Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 0142 Signing time: Sat 19 Jul 2025 04:33:22 +0000 Manifest this update: Sat 19 Jul 2025 04:33:22 +0000 Manifest next update: Sat 26 Jul 2025 04:33:22 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: MXO0ceFrzVE0CluDUJcMvr3FRfZBeLzR2Bqj+/Bz328=) 2: E8E76DFA77E111EEAD38F454C4F9AE02.roa (hash: fU/RkpVL4z6Cr0cyCUfNUkgmOGc3QWQsXd03NlJ0kdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Validity Not Before: Jul 19 04:33:22 2025 GMT Not After : Jul 26 04:33:22 2025 GMT Subject: CN=687b2012-23b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:b7:47:62:8b:cd:a7:7b:dd:fd:da:31:85: 20:9b:6d:5a:2e:84:f9:b9:cc:75:9f:68:cf:a5:ae: 57:a0:ab:07:11:0b:51:d9:b9:4d:41:5a:12:b9:5f: bb:46:18:83:de:d5:81:c3:7b:62:51:20:61:93:d7: 1b:c0:f0:1e:ff:b7:64:a5:66:d6:44:12:4e:9c:1e: f3:76:90:a5:5e:61:ef:39:35:2d:ce:68:80:07:ee: dc:10:2c:17:7b:1d:d0:cf:57:00:ef:f3:e2:69:be: c8:29:94:60:5d:5f:25:a8:da:06:16:68:5a:12:b8: 91:89:88:8f:49:67:79:45:61:2b:3a:39:6a:c2:6f: 3f:fd:57:c1:cb:ab:71:ba:f2:98:22:26:b9:af:3e: 75:56:dc:46:b6:9c:e6:df:91:e1:37:2b:10:46:d9: d2:14:a4:43:97:87:2d:b7:e1:f5:4a:5f:7e:8b:50: 43:a1:c0:06:55:c0:f9:18:bd:0f:a4:32:90:4a:52: ef:f1:dc:22:b5:05:02:d2:49:20:84:c6:3b:bc:14: 3d:eb:1b:e9:3c:95:fd:b9:34:5e:31:5f:33:41:06: cf:aa:f5:c9:9b:97:ef:ad:b2:0a:b6:23:08:f2:4a: 59:a8:b2:de:f1:a1:1a:77:da:7a:a5:65:eb:2b:7d: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E7:AD:B0:5F:1A:97:C6:8D:F9:52:F8:B9:AD:28:CE:CB:63:F8:37 X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ff:d7:15:2d:38:b0:a2:e0:2e:8e:21:f1:2c:9b:75:9a:a2: bf:64:fc:88:f0:88:64:39:db:69:e7:bb:c2:30:e1:95:39:b0: 25:c3:57:54:a0:86:18:b4:36:e6:3d:0e:8a:bd:4d:32:ff:b4: 62:c7:56:f1:16:c6:d9:18:60:17:9f:44:8a:87:5c:3b:99:c2: 54:79:72:01:9c:38:41:a6:97:90:ce:40:db:54:1b:30:ac:e7: cb:cb:31:46:dd:c6:76:63:85:b3:f5:46:e2:2e:5a:4a:fb:6e: 70:8b:0e:6b:c2:36:01:ee:fe:38:c9:df:87:b9:cc:ba:f8:7c: 8f:57:8c:03:5e:98:63:3b:4f:c8:30:1c:d0:75:09:71:5d:24: a1:8f:97:4f:94:00:3f:90:71:a8:59:37:68:32:f5:6e:ac:ee: 82:92:98:db:d3:61:81:fd:ee:b3:e5:b2:bc:24:64:86:26:0b: 1d:78:81:d7:c7:88:50:f2:9b:ae:d3:a8:0a:05:24:cc:43:49: ba:b4:cd:32:45:f0:cc:54:3a:17:9e:b6:81:89:f3:63:c9:51: cb:40:7f:6c:02:30:f9:65:c8:1f:66:9c:e1:b0:1d:25:d2:34: f8:c5:0e:5e:5e:63:d6:b1:a9:fd:15:9c:e4:88:ac:00:00:04: 8f:14:da:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG MkI1OTYyMDQwHhcNMjUwNzE5MDQzMzIyWhcNMjUwNzI2MDQzMzIyWjAYMRYwFAYD VQQDEw02ODdiMjAxMi0yM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI23R2KLzad73f3aMYUgm21aLoT5ucx1n2jPpa5XoKsHEQtR2blNQVoSuV+7 RhiD3tWBw3tiUSBhk9cbwPAe/7dkpWbWRBJOnB7zdpClXmHvOTUtzmiAB+7cECwX ex3Qz1cA7/Piab7IKZRgXV8lqNoGFmhaEriRiYiPSWd5RWErOjlqwm8//VfBy6tx uvKYIia5rz51VtxGtpzm35HhNysQRtnSFKRDl4ctt+H1Sl9+i1BDocAGVcD5GL0P pDKQSlLv8dwitQUC0kkghMY7vBQ96xvpPJX9uTReMV8zQQbPqvXJm5fvrbIKtiMI 8kpZqLLe8aEad9p6pWXrK31dPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvnrbBf GpfGjflS+LmtKM7LY/g3MB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3 RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4 ZGpscFFYUER6LVh5dFpZZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd/9cVLTiwouAujiHxLJt1mqK/ZPyI8IhkOdtp57vCMOGVObAlw1dU oIYYtDbmPQ6KvU0y/7Rix1bxFsbZGGAXn0SKh1w7mcJUeXIBnDhBppeQzkDbVBsw rOfLyzFG3cZ2Y4Wz9UbiLlpK+25wiw5rwjYB7v44yd+Hucy6+HyPV4wDXphjO0/I MBzQdQlxXSShj5dPlAA/kHGoWTdoMvVurO6Ckpjb02GB/e6z5bK8JGSGJgsdeIHX x4hQ8puu06gKBSTMQ0m6tM0yRfDMVDoXnraBifNjyVHLQH9sAjD5ZcgfZpzhsB0l 0jT4xQ5eXmPWsan9FZzkiKwAAASPFNr/ -----END CERTIFICATE-----Generated at Sun Jul 20 10:22:06 2025 by rpki-client