$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: muGsQvrpDlxPTjAqScgm/Le2qjBr237yH6d1vMMtwiM= Subject key identifier: F0:C9:C7:F7:ED:89:F4:43:B6:7A:E0:A3:FF:9E:0E:A6:76:61:2F:B8 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 7A Signing time: Fri 25 Jul 2025 07:10:26 +0000 Manifest this update: Fri 25 Jul 2025 07:10:25 +0000 Manifest next update: Fri 01 Aug 2025 07:10:25 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: KaqOo5lsY+I7JVYW7zBgTbjy41zLRNJY8LUMhBwqiz8=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: Z9DYBfabGIxHjUBLevu5KvPw0ydtYOqQMGpRrWOIWpg=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: qXU62xBJEhF8s34iW9kLJHW6sq1BX3PHBxT3tX/weaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 07:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Jul 25 07:10:25 2025 GMT Not After : Aug 1 07:10:25 2025 GMT Subject: CN=68832de2-3620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:1a:d3:d2:3d:02:a9:35:bc:43:45:63:34: 2b:c5:25:40:0e:fc:f1:87:5f:5f:39:b2:8f:23:fd: 04:43:d1:9b:2f:12:0d:10:44:e4:50:2b:44:2f:4d: c4:8e:8c:90:86:64:ea:c9:5d:53:f3:50:c7:e7:f3: f5:ef:6e:52:a6:59:a7:14:ec:39:9e:48:2d:ec:ab: 7e:80:63:cd:84:c7:7a:a5:d7:5c:35:0d:83:99:da: db:a3:c0:9e:b5:f0:12:cb:a8:c5:38:cb:0d:37:b2: fe:f2:99:c3:2b:a8:d2:14:f2:42:03:9c:ff:7f:8b: d2:e2:6b:2f:ea:ff:eb:67:2b:b5:c3:6e:d3:56:8e: 9f:b7:77:16:e8:5e:62:b7:a9:2b:aa:ff:f5:a2:ee: 77:8d:9e:28:36:a0:02:9c:74:6f:c5:6f:8e:6e:8e: f8:e0:a5:7a:50:e4:1c:20:18:f3:e1:ce:9f:34:27: 8d:66:60:88:14:63:a1:64:ce:ef:1b:0f:a7:fb:dc: 78:94:27:de:e1:90:20:ed:68:08:f0:2f:0f:bb:61: 10:f1:e6:13:ad:56:5e:f6:34:5f:97:1e:98:ed:60: 5c:3c:af:bf:94:cb:54:80:7a:2c:96:c4:c9:dc:ea: d9:be:e4:4a:5a:e6:87:72:2a:cc:75:8b:6e:a8:36: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C9:C7:F7:ED:89:F4:43:B6:7A:E0:A3:FF:9E:0E:A6:76:61:2F:B8 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:45:4d:95:9e:73:f6:2c:8c:34:51:60:6f:07:ce:da:7b:ac: 15:15:bc:3d:04:16:e3:e0:51:d5:36:b4:34:7b:45:6f:e5:d7: ed:98:f2:04:47:20:45:73:b6:f5:f0:ec:53:20:d1:22:2e:fd: 62:f7:2a:74:15:e1:85:df:03:7a:83:88:bf:f5:62:9c:5c:3d: 26:c6:c5:80:2f:86:c0:42:43:ab:96:53:0a:d9:3d:04:03:bb: aa:75:bd:13:7f:8e:6c:cd:a3:3b:35:0e:25:1c:90:6a:f4:30: ea:35:46:c5:51:34:68:40:96:ab:1b:45:8f:d5:22:71:50:3a: b1:1b:bb:d4:4e:00:29:24:5f:f2:e4:4d:09:cd:32:80:b3:4f: 71:f4:16:f7:21:5b:97:7b:76:e4:14:64:fa:2f:8a:93:51:1f: 61:dc:44:0e:d0:39:bc:3d:e9:32:ac:fe:d1:3d:6f:04:f0:a8: 62:d3:9c:7f:ec:59:ae:7b:1c:87:89:b9:d3:57:0c:ba:75:dc: 6e:ff:04:b5:e0:5d:be:09:04:eb:e5:51:b9:95:c7:b4:ed:01: be:b0:62:1d:4c:07:57:7f:b5:c0:14:93:35:e6:0a:30:03:68: bd:6b:28:89:1e:78:ac:7a:e3:24:93:4c:a2:e3:13:b9:a2:03: 1c:76:b9:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODQ4NTExMC8GA1UEBRMoQTU4ODc4NkUyRkQ4OENGQUFGNTNBQUEyOTZDMzY0NDYw RUU2RUE2RDAeFw0yNTA3MjUwNzEwMjVaFw0yNTA4MDEwNzEwMjVaMBgxFjAUBgNV BAMTDTY4ODMyZGUyLTM2MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6/RrT0j0CqTW8Q0VjNCvFJUAO/PGHX185so8j/QRD0ZsvEg0QRORQK0QvTcSO jJCGZOrJXVPzUMfn8/XvblKmWacU7DmeSC3sq36AY82Ex3ql11w1DYOZ2tujwJ61 8BLLqMU4yw03sv7ymcMrqNIU8kIDnP9/i9Liay/q/+tnK7XDbtNWjp+3dxboXmK3 qSuq//Wi7neNnig2oAKcdG/Fb45ujvjgpXpQ5BwgGPPhzp80J41mYIgUY6Fkzu8b D6f73HiUJ97hkCDtaAjwLw+7YRDx5hOtVl72NF+XHpjtYFw8r7+Uy1SAeiyWxMnc 6tm+5Epa5odyKsx1i26oNhBVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8MnH9+2J 9EO2euCj/54OpnZhL7gwHwYDVR0jBBgwFoAUpYh4bi/YjPqvU6qilsNkRg7m6m0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NDg1LzJEQkNFRjQ2QjQx MjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFloNGJpX1lqUHF2VTZxaWxzTmtSZzdtNm0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 NDg1LzJEQkNFRjQ2QjQxMjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBx dlU2cWlsc05rUmc3bTZtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1FTZWec/YsjDRRYG8Hztp7rBUVvD0EFuPgUdU2tDR7RW/l1+2Y8gRH IEVztvXw7FMg0SIu/WL3KnQV4YXfA3qDiL/1YpxcPSbGxYAvhsBCQ6uWUwrZPQQD u6p1vRN/jmzNozs1DiUckGr0MOo1RsVRNGhAlqsbRY/VInFQOrEbu9ROACkkX/Lk TQnNMoCzT3H0FvchW5d7duQUZPovipNRH2HcRA7QObw96TKs/tE9bwTwqGLTnH/s Wa57HIeJudNXDLp13G7/BLXgXb4JBOvlUbmVx7TtAb6wYh1MB1d/tcAUkzXmCjAD aL1rKIkeeKx64ySTTKLjE7miAxx2uec= -----END CERTIFICATE-----Generated at Sat Jul 26 20:44:16 2025 by rpki-client