$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: cxtC4rG3b7Y7fTO0Mx8qkRSorvAe0i4+EYTlcY5/dNg= Subject key identifier: DD:A0:9E:0A:CC:35:14:0C:FD:E6:BC:46:2E:4B:98:A9:8C:EF:C4:19 Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 02BD Signing time: Sat 19 Jul 2025 01:51:28 +0000 Manifest this update: Sat 19 Jul 2025 01:51:28 +0000 Manifest next update: Sat 26 Jul 2025 01:51:28 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: rHYlBsjp3ZtjQVE3ev4il5Th5KBeQGHhZOBN0PXegM4=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: 9MRdrfgCzJPWi60WfDAHGFIjA+2Au5PPZv6A0PmrENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: Jul 19 01:51:28 2025 GMT Not After : Jul 26 01:51:28 2025 GMT Subject: CN=687afa20-9d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:37:19:35:05:56:7b:6f:79:23:bc:97:da: 72:54:fa:b7:f7:0f:4f:06:66:35:84:9d:51:df:c7: 9d:d3:ee:c9:af:a7:d1:af:d2:17:60:89:fc:f1:3a: 13:13:e7:87:25:2e:57:5a:ac:35:fb:35:86:d5:0a: b1:f4:b5:54:12:08:a9:1a:04:c7:36:af:ea:dd:8a: d3:e0:37:08:72:41:40:1a:a4:bb:97:c8:c3:8a:a1: 00:dd:66:d9:e6:3e:1f:25:04:c2:02:0a:e1:dc:b3: 6d:9d:39:04:4a:fa:8f:37:7e:eb:08:1d:b5:09:a8: b9:52:e0:18:a1:83:a7:5a:ba:8d:f6:ef:4a:09:e2: 91:1e:88:a8:b9:d8:19:dc:1a:07:4c:9b:65:46:18: 02:d3:3c:07:23:ba:6b:84:98:7a:f2:c9:32:c1:6c: b1:eb:46:e7:0a:d3:b4:db:1c:bb:25:6e:cf:ea:4f: 5c:8a:62:ec:b5:dd:bc:78:9e:59:7f:dc:0c:1b:36: e7:c5:a1:b3:83:55:1b:72:a5:e8:5c:8e:e3:40:ec: 20:9d:5d:a6:f5:58:54:52:e2:d5:84:ab:1b:88:7d: c5:ad:29:39:e1:fe:87:65:ff:74:47:bd:a9:04:56: eb:1b:71:00:6a:8e:c3:1e:a8:73:ba:9d:10:16:4f: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A0:9E:0A:CC:35:14:0C:FD:E6:BC:46:2E:4B:98:A9:8C:EF:C4:19 X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c8:0a:4c:ce:6c:f2:1c:f6:87:1b:83:e3:c4:b7:f2:5b:85: 47:f0:38:a5:0c:d3:be:18:d7:18:51:03:ad:41:5f:7f:74:cc: f5:45:f6:4a:06:d1:55:67:d3:9f:cb:36:e5:be:2d:7d:7c:ed: 36:b1:0f:df:bd:aa:17:58:ab:65:88:88:ff:09:1a:f4:c3:42: 68:99:c7:aa:23:a6:bb:00:2f:f4:06:96:b0:46:3c:a0:94:b9: 24:f8:82:0b:78:a2:e5:25:14:d0:40:f7:c4:d6:84:dc:e2:bb: f8:09:c2:3a:33:ea:b9:8c:65:76:bd:f5:be:3b:e9:ef:7e:c1: e1:c1:af:39:0b:ce:d3:8e:37:9c:57:d9:09:4b:77:48:f8:b4: 31:ab:5d:37:40:26:b7:31:34:65:f5:e8:da:82:9c:a9:9f:86: 26:90:f8:e3:eb:f9:d4:9f:6b:fc:32:92:38:ed:1c:9c:04:d3: 96:6b:99:72:d9:d4:7b:5a:3b:eb:ea:b7:8f:ef:ad:3a:f1:79: 43:6f:85:34:00:27:e4:4f:dd:ec:34:31:5d:00:7b:27:61:00: e1:54:c2:44:3d:89:f9:5d:14:77:a0:f5:f2:b2:ba:d9:eb:87: 32:7e:a0:07:a2:22:cb:27:81:ba:b2:f3:56:79:74:11:7c:03: 5a:87:05:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjUwNzE5MDE1MTI4WhcNMjUwNzI2MDE1MTI4WjAYMRYwFAYD VQQDEw02ODdhZmEyMC05ZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxU3GTUFVntveSO8l9pyVPq39w9PBmY1hJ1R38ed0+7Jr6fRr9IXYIn88ToT E+eHJS5XWqw1+zWG1Qqx9LVUEgipGgTHNq/q3YrT4DcIckFAGqS7l8jDiqEA3WbZ 5j4fJQTCAgrh3LNtnTkESvqPN37rCB21Cai5UuAYoYOnWrqN9u9KCeKRHoioudgZ 3BoHTJtlRhgC0zwHI7prhJh68skywWyx60bnCtO02xy7JW7P6k9cimLstd28eJ5Z f9wMGzbnxaGzg1UbcqXoXI7jQOwgnV2m9VhUUuLVhKsbiH3FrSk54f6HZf90R72p BFbrG3EAao7DHqhzup0QFk/7HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2gngrM NRQM/ea8Ri5LmKmM78QZMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPyApMzmzyHPaHG4PjxLfyW4VH8DilDNO+GNcYUQOtQV9/dMz1RfZK BtFVZ9Ofyzblvi19fO02sQ/fvaoXWKtliIj/CRr0w0JomceqI6a7AC/0BpawRjyg lLkk+IILeKLlJRTQQPfE1oTc4rv4CcI6M+q5jGV2vfW+O+nvfsHhwa85C87Tjjec V9kJS3dI+LQxq103QCa3MTRl9ejagpypn4YmkPjj6/nUn2v8MpI47RycBNOWa5ly 2dR7Wjvr6reP76068XlDb4U0ACfkT93sNDFdAHsnYQDhVMJEPYn5XRR3oPXysrrZ 64cyfqAHoiLLJ4G6svNWeXQRfANahwVq -----END CERTIFICATE-----Generated at Sun Jul 20 06:28:31 2025 by rpki-client