$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json) Hash identifier: IAVNCALAOBZP0+jJbZ88TTCiKtn5igPC6upeS83Eeug= Subject key identifier: 7B:54:72:33:F2:36:6D:74:9E:EB:70:3E:F2:23:19:84:EF:4E:89:89 Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft Manifest number: 032D Signing time: Sat 19 Jul 2025 01:32:18 +0000 Manifest this update: Sat 19 Jul 2025 01:32:17 +0000 Manifest next update: Sat 26 Jul 2025 01:32:17 +0000 Files and hashes: 1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: hSVLPmFalnA4Bfm1cwiC9kGyE7wDT96I1YJi4lhGQ9I=) 2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: 2T9vsc4C1WKjq9QaM+1XQHhjEU7ftzmE6rg4euSNxbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Validity Not Before: Jul 19 01:32:17 2025 GMT Not After : Jul 26 01:32:17 2025 GMT Subject: CN=687af5a2-334c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:6e:26:40:78:4c:16:23:eb:08:56:46:ed: eb:85:d7:2b:f3:5d:e5:52:07:27:36:46:f5:40:50: 2c:3f:49:e6:80:d9:9a:66:25:84:2b:7a:27:a5:1f: 01:51:e8:05:be:7b:ef:1e:91:dc:af:ea:af:de:81: 36:a5:b6:ac:f7:04:2c:bd:3a:02:e5:ba:4e:e9:1e: f4:cc:6d:94:6d:cc:6e:0a:ec:ca:39:41:b8:00:34: 2f:8c:ae:5f:ee:65:84:9e:32:fe:b5:4d:cf:97:30: 4f:4a:c7:8b:41:73:48:df:09:50:fc:8d:59:45:17: 37:ca:78:b7:f0:45:b6:67:50:44:36:54:60:df:18: e2:4c:2d:69:f5:25:25:68:f2:81:17:9b:0c:f1:9f: 3f:c0:fb:e4:1d:63:75:66:ec:0a:1c:14:41:d0:e4: 97:83:1b:e2:af:d1:7f:30:6d:de:68:7d:ca:9b:bd: 05:39:51:65:3c:d3:94:bd:e7:d3:70:22:af:50:df: 68:d5:be:fe:a1:61:30:8c:e6:41:83:86:7c:fb:15: 5c:7c:2a:97:58:25:2b:ec:af:79:e0:1e:de:13:45: 9a:4c:4b:25:58:e3:88:2f:c0:29:06:ef:18:0a:ce: 19:5f:84:31:14:de:2f:0b:63:ec:cc:f4:63:90:a2: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:54:72:33:F2:36:6D:74:9E:EB:70:3E:F2:23:19:84:EF:4E:89:89 X509v3 Authority Key Identifier: keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d8:df:e9:6a:7a:10:e1:89:fb:74:3e:c7:fb:62:b7:1e:53: 48:88:f5:ab:17:8e:46:65:61:92:8c:c4:8f:56:8a:12:e2:85: 3a:7c:aa:f4:4b:97:98:c9:36:f1:0f:a4:01:fe:57:a9:f5:6c: 05:c5:e8:46:a7:79:57:03:21:32:1a:84:0b:b2:c3:44:07:3d: db:70:f4:bb:9d:05:65:66:63:c4:29:a7:69:1d:3f:55:45:67: b8:a4:80:92:f2:a0:6f:31:a2:8c:cf:2d:9e:f7:2d:75:54:9f: a8:32:c9:aa:f8:d4:85:94:2c:d3:40:52:ce:6e:a5:74:ad:33: b0:5f:7c:80:87:fa:44:75:c4:b4:65:c3:10:c7:12:8f:06:b7: 0e:ab:f0:68:7f:9a:f8:15:48:05:67:95:34:58:71:23:d4:4e: 3d:10:24:12:7a:fe:34:f8:02:78:19:5d:67:e5:a5:a2:93:38: 33:7a:35:6f:38:98:10:07:1a:73:06:39:fc:8c:6e:cf:04:b9: 60:f4:bc:48:b2:ca:c3:69:31:fe:07:08:b5:c4:fd:11:0d:28: 39:01:5c:30:3c:19:75:e5:88:c8:ac:38:6c:bb:78:ac:46:8a: 24:99:a3:59:19:45:d2:49:56:a5:ae:6d:7e:fc:e8:40:39:5d: dd:3a:de:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMzQxMTAvBgNVBAUTKEQzQzYyMkU3OTBGMURFRjE2OTI4QkJFNTU0MTgxNzI3 Q0Y4Qzg4RjgwHhcNMjUwNzE5MDEzMjE3WhcNMjUwNzI2MDEzMjE3WjAYMRYwFAYD VQQDEw02ODdhZjVhMi0zMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAluJkB4TBYj6whWRu3rhdcr813lUgcnNkb1QFAsP0nmgNmaZiWEK3onpR8B UegFvnvvHpHcr+qv3oE2pbas9wQsvToC5bpO6R70zG2UbcxuCuzKOUG4ADQvjK5f 7mWEnjL+tU3PlzBPSseLQXNI3wlQ/I1ZRRc3yni38EW2Z1BENlRg3xjiTC1p9SUl aPKBF5sM8Z8/wPvkHWN1ZuwKHBRB0OSXgxvir9F/MG3eaH3Km70FOVFlPNOUvefT cCKvUN9o1b7+oWEwjOZBg4Z8+xVcfCqXWCUr7K954B7eE0WaTEslWOOIL8ApBu8Y Cs4ZX4QxFN4vC2PszPRjkKJwKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtUcjPy Nm10nutwPvIjGYTvTomJMB8GA1UdIwQYMBaAFNPGIueQ8d7xaSi75VQYFyfPjIj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIzNC9CMEZGMzBGRUQw MjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2RnBLTHZsVkJnWEo4LU1p UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WWk1NUR4M3ZGcEtMdmxWQmdYSjgtTWlQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIzNC9CMEZGMzBGRUQwMjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2 RnBLTHZsVkJnWEo4LU1pUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA62N/panoQ4Yn7dD7H+2K3HlNIiPWrF45GZWGSjMSPVooS4oU6fKr0 S5eYyTbxD6QB/lep9WwFxehGp3lXAyEyGoQLssNEBz3bcPS7nQVlZmPEKadpHT9V RWe4pICS8qBvMaKMzy2e9y11VJ+oMsmq+NSFlCzTQFLObqV0rTOwX3yAh/pEdcS0 ZcMQxxKPBrcOq/Bof5r4FUgFZ5U0WHEj1E49ECQSev40+AJ4GV1n5aWikzgzejVv OJgQBxpzBjn8jG7PBLlg9LxIssrDaTH+Bwi1xP0RDSg5AVwwPBl15YjIrDhsu3is RookmaNZGUXSSValrm1+/OhAOV3dOt6E -----END CERTIFICATE-----Generated at Sun Jul 20 06:14:58 2025 by rpki-client