$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json) Hash identifier: q9+13h0kb49DhFoxdn/SKW/nwQ5SGjB9ew7HWfGlT3U= Subject key identifier: 92:95:E4:5D:34:C2:40:FD:9F:00:C8:CD:E7:FF:29:3D:12:7A:1A:76 Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft Manifest number: 1651 Signing time: Fri 18 Jul 2025 17:42:47 +0000 Manifest this update: Fri 18 Jul 2025 17:42:46 +0000 Manifest next update: Fri 25 Jul 2025 17:42:46 +0000 Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: cIBeP2Mc5uHeU7ZU9cOl3iXszJe1lhb7MyRj6oK3S6Y=) 2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: xyf+NgV/qzZzzx4oyqEQT3Z/16fLP6Y40HqsQl4nZiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Validity Not Before: Jul 18 17:42:46 2025 GMT Not After : Jul 25 17:42:46 2025 GMT Subject: CN=687a8796-928a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:00:8a:a0:0a:18:0d:95:c9:73:1d:d4:bc: fa:28:fa:23:67:21:97:12:0e:3f:8f:b4:be:79:a1: e2:ac:c2:ac:8d:9b:9b:82:fe:b5:bf:9c:0d:c2:d0: 95:7f:e8:d2:13:e5:c2:d3:94:41:ce:0f:0d:e4:f3: d4:5e:ed:2f:00:16:21:a0:b6:5f:c1:f9:bd:fb:03: 17:f2:d3:a3:22:4e:3b:38:77:1d:98:0d:a1:6c:67: a1:5f:f4:cf:c0:60:be:d6:2d:29:36:2a:5b:4b:dc: df:71:c0:f0:d1:e3:93:29:2c:43:ad:fe:dd:81:a1: 74:f9:1f:2b:b2:74:52:42:40:c8:91:c9:61:d5:eb: 9e:fc:ae:d1:dc:92:97:67:3d:9c:a9:9c:f5:d1:4c: f1:14:6d:31:f0:aa:ec:e0:72:8f:cf:cd:eb:28:8a: 0e:66:b0:62:e1:7e:26:bf:16:90:76:91:d5:98:a1: c2:95:89:65:d2:7e:b8:56:45:ff:86:42:3b:83:04: ec:00:db:8c:45:13:07:4b:85:a1:09:20:61:47:c8: 66:7e:15:e6:1c:30:1c:9a:98:73:59:67:05:7d:89: 63:47:10:41:3c:a9:29:2c:9e:82:b4:7e:9b:16:5b: 7c:88:d4:77:e5:8b:ac:5a:d4:b1:e8:a6:f6:1a:23: 16:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:95:E4:5D:34:C2:40:FD:9F:00:C8:CD:E7:FF:29:3D:12:7A:1A:76 X509v3 Authority Key Identifier: keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:21:ba:ce:da:fa:66:2e:f8:2b:05:7a:6c:31:e3:34:a3:e8: cf:41:6b:88:06:55:e0:bd:07:7d:8c:e8:c0:43:10:1f:15:f8: 60:50:d5:b4:51:5e:48:ff:5a:e3:0b:fd:33:c0:4c:51:ca:aa: bd:bb:8a:51:d3:94:9e:ae:63:4f:bb:9f:92:52:03:b4:e2:4f: b9:4e:6c:55:6a:38:60:08:c1:16:51:ca:c5:4e:48:29:cb:57: 3f:11:c0:62:f5:87:52:5d:c8:cc:b0:f1:b3:ae:f7:4f:b5:66: fa:65:1b:50:19:e4:95:38:6d:05:4f:dd:77:c4:48:61:84:44: 4b:e2:90:a0:eb:42:dd:62:c3:ec:d2:fe:54:4a:87:c0:d9:75: 96:50:80:9f:3e:87:45:08:57:01:ef:c5:b3:4d:96:da:57:45: d2:4d:a0:05:e0:b5:58:a3:30:69:46:fe:d1:a6:70:f1:eb:ab: fe:f5:4f:c1:15:ee:45:bf:fe:8b:3b:ee:0d:52:17:23:4a:a5: 71:f4:1f:27:ae:cf:d8:8c:9d:4f:0b:cf:b6:17:cd:25:05:f7: a8:1a:89:5f:24:30:f0:3e:37:01:86:d1:c0:a8:9f:03:da:be: b8:43:f8:b7:e9:ac:f6:63:2e:3c:c6:a3:48:bd:0b:fd:3b:ce: ae:b2:b8:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKEM5OTA1REU1MjQ4NkI5RUM0RUY4NzlBMDI2NDQ1Qzcw QjBGRDk1MDUwHhcNMjUwNzE4MTc0MjQ2WhcNMjUwNzI1MTc0MjQ2WjAYMRYwFAYD VQQDEw02ODdhODc5Ni05MjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8QAiqAKGA2VyXMd1Lz6KPojZyGXEg4/j7S+eaHirMKsjZubgv61v5wNwtCV f+jSE+XC05RBzg8N5PPUXu0vABYhoLZfwfm9+wMX8tOjIk47OHcdmA2hbGehX/TP wGC+1i0pNipbS9zfccDw0eOTKSxDrf7dgaF0+R8rsnRSQkDIkclh1eue/K7R3JKX Zz2cqZz10UzxFG0x8Krs4HKPz83rKIoOZrBi4X4mvxaQdpHVmKHClYll0n64VkX/ hkI7gwTsANuMRRMHS4WhCSBhR8hmfhXmHDAcmphzWWcFfYljRxBBPKkpLJ6CtH6b Flt8iNR35YusWtSx6Kb2GiMWtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKV5F00 wkD9nwDIzef/KT0Sehp2MB8GA1UdIwQYMBaAFMmQXeUkhrnsTvh5oCZEXHCw/ZUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3VleE8tSG1nSmtSY2NMRDls UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laQmQ1U1NHdWV4Ty1IbWdKa1JjY0xEOWxRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3Vl eE8tSG1nSmtSY2NMRDlsUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNIbrO2vpmLvgrBXpsMeM0o+jPQWuIBlXgvQd9jOjAQxAfFfhgUNW0 UV5I/1rjC/0zwExRyqq9u4pR05SermNPu5+SUgO04k+5TmxVajhgCMEWUcrFTkgp y1c/EcBi9YdSXcjMsPGzrvdPtWb6ZRtQGeSVOG0FT913xEhhhERL4pCg60LdYsPs 0v5USofA2XWWUICfPodFCFcB78WzTZbaV0XSTaAF4LVYozBpRv7RpnDx66v+9U/B Fe5Fv/6LO+4NUhcjSqVx9B8nrs/YjJ1PC8+2F80lBfeoGolfJDDwPjcBhtHAqJ8D 2r64Q/i36az2Yy48xqNIvQv9O86usrg8 -----END CERTIFICATE-----Generated at Sun Jul 20 15:14:12 2025 by rpki-client