$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft File: YB71rSfD3A1NmC22u0dsBsvHAKA.mft (raw, json) Hash identifier: NRm97EtKwJh0RNpYPGx2c2dPjM761qT0i7D/tOl9+fY= Subject key identifier: E9:BD:61:CB:3C:9F:A3:D3:F4:89:1B:FE:88:4F:02:3C:05:7B:E5:72 Authority key identifier: 60:1E:F5:AD:27:C3:DC:0D:4D:98:2D:B6:BB:47:6C:06:CB:C7:00:A0 Certificate issuer: /CN=A91BFE4E/serialNumber=601EF5AD27C3DC0D4D982DB6BB476C06CBC700A0 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft Manifest number: 98 Signing time: Sat 19 Jul 2025 06:33:52 +0000 Manifest this update: Sat 19 Jul 2025 06:33:52 +0000 Manifest next update: Sat 26 Jul 2025 06:33:52 +0000 Files and hashes: 1: YB71rSfD3A1NmC22u0dsBsvHAKA.crl (hash: QlRCdmziXqWNR8WClcN1kpQv8IPMqaTWnVLqonmtK8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.crl rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE4E, serialNumber=601EF5AD27C3DC0D4D982DB6BB476C06CBC700A0 Validity Not Before: Jul 19 06:33:52 2025 GMT Not After : Jul 26 06:33:52 2025 GMT Subject: CN=687b3c50-2620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9a:35:9c:da:96:11:cd:77:74:a5:69:ea:0e: 76:1d:0e:62:97:14:ae:6a:68:44:5f:ae:80:ab:68: f0:ec:80:1c:d2:6e:52:67:de:1e:de:23:fe:cc:93: b2:54:5e:73:7d:4a:a7:6c:4f:c2:f4:ea:e3:e8:0f: 23:ba:3e:1f:cd:07:4e:a3:c9:b5:64:8a:54:86:b7: 07:7e:b3:87:ea:cb:62:d5:61:d8:dc:6e:f1:9f:04: 0a:d7:b3:59:8b:bb:a4:41:2b:bc:fa:d0:07:db:09: b6:21:03:88:ad:5b:59:51:f2:9b:39:fa:7e:72:0d: d8:45:c1:52:fe:6a:68:35:9c:ce:58:ab:c1:53:af: fa:fc:0c:d4:fc:6c:98:c4:5a:0e:19:8b:a0:4c:30: ce:a0:83:52:ad:a1:3a:85:67:8a:c3:4d:f3:b7:15: 92:66:01:f7:c5:31:a4:11:14:ca:3b:c8:50:f3:c2: f9:e9:c6:55:ed:9c:7a:fe:bd:94:2d:eb:54:79:76: 3a:a2:04:39:47:57:8e:de:f8:d6:20:aa:24:a7:3d: 70:0e:9c:44:83:72:23:aa:0c:9d:02:fc:2a:02:b8: 77:5a:57:f7:8f:b1:74:b9:2e:7b:7f:19:2c:3e:2a: 7e:89:60:95:89:05:a2:2a:d3:74:03:cb:92:af:17: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BD:61:CB:3C:9F:A3:D3:F4:89:1B:FE:88:4F:02:3C:05:7B:E5:72 X509v3 Authority Key Identifier: keyid:60:1E:F5:AD:27:C3:DC:0D:4D:98:2D:B6:BB:47:6C:06:CB:C7:00:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3d:05:77:6e:ca:a0:f3:25:64:f4:19:d7:d0:30:2a:0f:b7: df:09:d3:25:39:12:fe:55:cc:46:bd:0b:8f:20:a1:ff:70:18: 6d:d7:f0:9a:19:bd:72:40:f0:84:40:d6:77:02:65:a8:cb:57: a3:0d:6d:b8:90:e3:36:c4:60:f4:b7:47:2b:11:fe:72:cc:ec: 2e:14:6f:f8:51:a9:4a:c9:cc:b2:60:10:c5:bb:d1:b8:5a:56: 24:bb:d6:11:ac:d3:91:48:ed:fb:ca:8b:de:29:6f:26:40:16: 5d:ba:d3:f8:44:59:ee:29:c9:3c:05:c7:db:73:9e:f7:36:01: a9:02:ed:9c:bf:26:25:96:ea:ba:a9:a4:ba:41:e0:a6:8e:4b: ea:25:fb:8f:26:aa:2a:3b:3b:31:c4:e3:b6:30:32:3d:28:e8: 8b:68:c5:ac:16:a1:d8:55:3a:43:53:3b:8d:1f:ce:8e:86:54: 5c:2b:37:1b:4c:4e:3a:60:bd:c3:d5:ce:e0:c7:ca:72:3d:1d: b1:31:8f:62:c3:c9:58:f7:c0:62:6b:96:7c:db:33:e3:da:77: 87:1c:cd:ef:5f:f8:3c:05:25:d8:1f:54:98:f4:f0:d3:5f:75: bf:c9:b1:64:d6:45:3d:c1:b0:ef:a8:23:e4:aa:8f:b5:84:21: 92:bc:68:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNEUxMTAvBgNVBAUTKDYwMUVGNUFEMjdDM0RDMEQ0RDk4MkRCNkJCNDc2QzA2 Q0JDNzAwQTAwHhcNMjUwNzE5MDYzMzUyWhcNMjUwNzI2MDYzMzUyWjAYMRYwFAYD VQQDEw02ODdiM2M1MC0yNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75o1nNqWEc13dKVp6g52HQ5ilxSuamhEX66Aq2jw7IAc0m5SZ94e3iP+zJOy VF5zfUqnbE/C9Orj6A8juj4fzQdOo8m1ZIpUhrcHfrOH6sti1WHY3G7xnwQK17NZ i7ukQSu8+tAH2wm2IQOIrVtZUfKbOfp+cg3YRcFS/mpoNZzOWKvBU6/6/AzU/GyY xFoOGYugTDDOoINSraE6hWeKw03ztxWSZgH3xTGkERTKO8hQ88L56cZV7Zx6/r2U LetUeXY6ogQ5R1eO3vjWIKokpz1wDpxEg3IjqgydAvwqArh3Wlf3j7F0uS57fxks Pip+iWCViQWiKtN0A8uSrxdOgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm9Ycs8 n6PT9Ikb/ohPAjwFe+VyMB8GA1UdIwQYMBaAFGAe9a0nw9wNTZgttrtHbAbLxwCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU0RS9EQTNENzFBODdC RTMxMUVGODhEOUM3NTNDNEY5QUUwMi9ZQjcxclNmRDNBMU5tQzIydTBkc0JzdkhB S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCNzFyU2ZEM0ExTm1DMjJ1MGRzQnN2SEFLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU0RS9EQTNENzFBODdCRTMxMUVGODhEOUM3NTNDNEY5QUUwMi9ZQjcxclNmRDNB MU5tQzIydTBkc0JzdkhBS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoPQV3bsqg8yVk9BnX0DAqD7ffCdMlORL+VcxGvQuPIKH/cBht1/Ca Gb1yQPCEQNZ3AmWoy1ejDW24kOM2xGD0t0crEf5yzOwuFG/4UalKycyyYBDFu9G4 WlYku9YRrNORSO37yoveKW8mQBZdutP4RFnuKck8Bcfbc573NgGpAu2cvyYlluq6 qaS6QeCmjkvqJfuPJqoqOzsxxOO2MDI9KOiLaMWsFqHYVTpDUzuNH86OhlRcKzcb TE46YL3D1c7gx8pyPR2xMY9iw8lY98Bia5Z82zPj2neHHM3vX/g8BSXYH1SY9PDT X3W/ybFk1kU9wbDvqCPkqo+1hCGSvGjA -----END CERTIFICATE-----Generated at Mon Jul 21 05:53:20 2025 by rpki-client