$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft File: yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json) Hash identifier: P1DKMQJGxMyG/Y5AFe4BsNef9FJ7QysaZGmroDmdnhc= Subject key identifier: EB:7A:D4:84:2E:E6:15:87:CC:01:DA:39:C3:CD:BF:C1:1A:91:BA:37 Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Certificate serial: 0542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft Manifest number: 053C Signing time: Thu 24 Jul 2025 23:49:59 +0000 Manifest this update: Thu 24 Jul 2025 23:49:58 +0000 Manifest next update: Thu 31 Jul 2025 23:49:58 +0000 Files and hashes: 1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: LylCfuoktGsop4E6ptaekXDhYzfLWZWDTd/DaIorFRI=) 2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: azq2/w0vOg+2swjHdLzDRr5hvzTCb3H9CNSdtAvO6hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 23:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Validity Not Before: Jul 24 23:49:58 2025 GMT Not After : Jul 31 23:49:58 2025 GMT Subject: CN=6882c6a7-2279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:02:fa:32:7e:f6:05:d4:0f:6a:0d:de:75: ed:88:d7:4e:af:ca:ce:b5:30:34:c4:20:fe:8e:50: 6d:4d:35:92:e4:65:75:fa:cb:03:72:be:05:54:dc: ec:49:29:e8:3a:29:fa:76:d9:79:13:68:7a:3c:ae: f2:28:58:7a:b9:fb:b0:ee:40:f9:37:2a:23:8a:9d: 3d:39:f5:81:b8:ad:88:c2:4e:b6:9b:ca:b3:ec:fe: e1:d1:a4:99:04:dc:2a:26:ed:37:08:3c:b9:4b:7e: 29:88:ff:68:c7:04:d1:80:06:0a:61:5d:fe:1b:20: 43:e3:c2:fc:40:e2:a6:b9:47:53:63:bc:da:04:f0: 30:83:54:70:2a:f3:21:84:0c:26:56:68:bc:d7:73: cc:27:c9:4d:3e:42:d1:f1:c6:ed:74:98:4e:d9:59: fe:e7:60:ae:15:54:49:4d:3f:13:92:11:a3:ce:8f: 36:08:7c:dc:92:08:62:a6:06:15:f4:24:c1:62:2a: 07:d9:6f:c4:d1:c8:64:ee:65:75:eb:8e:cc:55:19: e0:96:c8:f5:46:4b:a9:85:16:4a:2d:2b:c0:42:f3: 0b:58:3c:76:ea:3c:50:cb:43:32:de:52:7e:d6:48: 0d:14:26:4b:64:85:53:de:05:81:23:ea:d6:55:66: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7A:D4:84:2E:E6:15:87:CC:01:DA:39:C3:CD:BF:C1:1A:91:BA:37 X509v3 Authority Key Identifier: keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:97:d6:2a:8b:1b:02:77:04:7a:31:14:3e:91:94:63:b9:3b: db:b1:91:20:73:83:31:d1:34:b5:7e:3f:50:3c:ea:8c:74:56: cc:2a:f3:dc:ca:b6:97:f8:12:0a:4a:ca:fa:69:74:3c:01:0d: 52:da:52:dc:7d:a9:39:4e:83:97:eb:ec:f2:04:e5:b8:ed:b6: 8e:0c:4c:1a:81:56:41:e7:26:dd:6d:8b:67:c9:ef:7d:3d:4d: fb:35:8a:f8:eb:91:03:b6:7f:cc:a9:07:a6:d0:9a:11:8f:dd: c3:3b:b8:85:ee:16:22:f5:e1:af:04:e6:cd:ae:ea:2e:a8:97: 63:d0:65:99:2a:ff:a0:37:74:5a:3b:ee:74:b5:fe:cf:b2:8a: d6:5b:63:f5:5d:d6:a7:a4:3e:3a:05:45:1f:16:65:c0:db:ac: 5a:97:21:65:be:67:8d:aa:b5:39:41:0a:71:bf:b5:ba:a9:00: b4:ef:6b:c3:02:28:21:0c:8b:34:8c:6a:77:70:61:a7:1f:f0: c2:e4:1d:22:9b:89:5d:20:07:65:c1:b8:5d:c7:1e:07:ee:dd: f8:7c:1f:7b:2d:76:b5:fd:52:ea:ef:b1:a7:ba:32:85:db:c7: a0:ac:f0:c9:da:d9:2e:18:35:cd:ce:d8:78:61:7b:73:57:a5: 4d:b1:74:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUzNTIxMTAvBgNVBAUTKENBQTZFQjk5QjNGRTBFRkI2NUQzOEYxNUIyQUFFNERD MzlEQUIzMUQwHhcNMjUwNzI0MjM0OTU4WhcNMjUwNzMxMjM0OTU4WjAYMRYwFAYD VQQDEw02ODgyYzZhNy0yMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUIC+jJ+9gXUD2oN3nXtiNdOr8rOtTA0xCD+jlBtTTWS5GV1+ssDcr4FVNzs SSnoOin6dtl5E2h6PK7yKFh6ufuw7kD5Nyojip09OfWBuK2Iwk62m8qz7P7h0aSZ BNwqJu03CDy5S34piP9oxwTRgAYKYV3+GyBD48L8QOKmuUdTY7zaBPAwg1RwKvMh hAwmVmi813PMJ8lNPkLR8cbtdJhO2Vn+52CuFVRJTT8TkhGjzo82CHzckghipgYV 9CTBYioH2W/E0chk7mV1647MVRnglsj1RkuphRZKLSvAQvMLWDx26jxQy0My3lJ+ 1kgNFCZLZIVT3gWBI+rWVWYMGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOt61IQu 5hWHzAHaOcPNv8Eakbo3MB8GA1UdIwQYMBaAFMqm65mz/g77ZdOPFbKq5Nw52rMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTM1Mi9DOEUyMkU4QTAx MTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2dGwwNDhWc3FyazNEbmFz eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxYnJtYlAtRHZ0bDA0OFZzcXJrM0RuYXN4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTM1Mi9DOEUyMkU4QTAxMTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2 dGwwNDhWc3FyazNEbmFzeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDql9YqixsCdwR6MRQ+kZRjuTvbsZEgc4Mx0TS1fj9QPOqMdFbMKvPc yraX+BIKSsr6aXQ8AQ1S2lLcfak5ToOX6+zyBOW47baODEwagVZB5ybdbYtnye99 PU37NYr465EDtn/MqQem0JoRj93DO7iF7hYi9eGvBObNruouqJdj0GWZKv+gN3Ra O+50tf7PsorWW2P1XdanpD46BUUfFmXA26xalyFlvmeNqrU5QQpxv7W6qQC072vD AighDIs0jGp3cGGnH/DC5B0im4ldIAdlwbhdxx4H7t34fB97LXa1/VLq77GnujKF 28egrPDJ2tkuGDXNzth4YXtzV6VNsXTq -----END CERTIFICATE-----Generated at Sat Jul 26 13:28:48 2025 by rpki-client