$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json) Hash identifier: oO1bYnk0p+a9PvEuU+iqO2cGdD67J6TbfwfuaAHTdGs= Subject key identifier: 62:94:C8:60:F5:B6:44:0E:13:A5:07:94:14:9C:C7:C9:05:A6:AB:15 Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft Manifest number: BA Signing time: Wed 23 Jul 2025 06:14:00 +0000 Manifest this update: Wed 23 Jul 2025 06:13:59 +0000 Manifest next update: Wed 30 Jul 2025 06:13:59 +0000 Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: 3ahWMMxJCjyIZwmxZU1aUQ4OmiuNrV2XMfJ3quAb4Rg=) 2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: OVQ/CMJ4XqARrGXYEMgXeRxRPf3/PHnhFuc4e8fTgpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 06:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Validity Not Before: Jul 23 06:13:59 2025 GMT Not After : Jul 30 06:13:59 2025 GMT Subject: CN=68807da8-a3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:60:a9:3b:15:6f:da:b8:c9:e5:5a:2f:38: f1:f9:df:5b:c2:32:26:8c:5a:08:9d:3c:0b:0e:ac: a1:90:0a:5d:10:52:1b:2f:fc:26:28:5e:80:73:99: d7:cf:27:57:3b:9b:14:90:0d:c4:59:0e:db:54:5c: ab:d2:cd:76:d1:68:6e:41:2d:62:26:3e:ae:3a:86: b6:78:f3:b0:a7:7a:87:1c:16:9c:02:fc:2d:b6:95: b7:15:eb:83:cb:64:0e:e4:39:83:ec:84:8f:28:b4: eb:86:e3:c8:6c:ec:ad:22:2d:5b:b2:8b:e6:2a:99: bc:9c:51:93:27:28:36:7a:35:0a:24:3e:56:22:bc: 5c:3f:82:68:47:66:2b:2f:4c:e9:3f:ea:f2:50:8b: 16:04:83:a7:da:33:6a:3d:96:12:1c:00:09:8f:33: e5:53:84:c7:a2:35:e9:25:aa:0e:42:7a:3a:64:d4: e1:80:b8:92:5d:1e:48:32:46:e9:a5:9d:e6:d4:98: 4b:53:ec:a6:1f:1d:6b:99:21:36:c1:ff:a6:a1:eb: 8d:9a:c0:ed:14:51:21:de:03:30:6e:d9:06:5b:46: c0:1f:9c:cc:01:e4:ed:fd:66:a8:4f:e4:df:47:7d: 70:c1:c6:4e:6f:da:c6:ac:0f:89:de:ed:7d:aa:c3: 68:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:94:C8:60:F5:B6:44:0E:13:A5:07:94:14:9C:C7:C9:05:A6:AB:15 X509v3 Authority Key Identifier: keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:fb:c5:8a:f5:50:a3:11:d6:13:05:96:90:ac:77:d1:81:64: 40:00:3e:c3:e3:d5:23:72:90:69:1b:05:1d:41:a2:7b:cb:a7: 4d:cc:1e:34:86:31:99:01:cc:1c:6a:2a:40:19:30:f7:5e:ab: 39:23:c4:45:3d:2b:8a:18:c0:16:9a:46:95:44:dc:3d:2b:b8: c6:a0:5c:39:70:be:d4:97:32:08:fb:c3:9f:36:bd:76:17:6e: 68:78:b2:de:18:9c:10:64:15:0c:69:6c:65:27:12:90:7a:cb: f1:55:fa:01:e0:64:dd:74:3c:e2:bc:47:a4:97:62:b8:98:4a: 21:b3:10:71:23:1d:8e:94:26:4e:df:40:8d:92:c9:1e:f0:8c: 96:8f:db:bd:1e:e9:e6:b2:36:25:a4:10:3c:30:58:16:a5:d5: f2:fc:46:0b:1a:d8:ee:cb:11:aa:a0:d8:d5:92:d9:c7:04:88: 2a:54:2c:96:45:e3:4b:31:c5:e9:8f:e5:a1:0a:63:e9:e1:f9: 9b:84:03:3f:1b:e1:89:9d:51:3f:36:17:28:91:06:16:c2:4c: e6:0a:9d:30:54:c0:8e:1c:c0:03:ac:fd:ab:bd:6f:ce:38:62: d6:7d:22:f4:78:19:ed:e0:0f:c5:e3:f6:0a:68:ae:a1:c1:31: 6b:9f:05:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3 OUJFMDc5NkEwHhcNMjUwNzIzMDYxMzU5WhcNMjUwNzMwMDYxMzU5WjAYMRYwFAYD VQQDEw02ODgwN2RhOC1hM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLlgqTsVb9q4yeVaLzjx+d9bwjImjFoInTwLDqyhkApdEFIbL/wmKF6Ac5nX zydXO5sUkA3EWQ7bVFyr0s120WhuQS1iJj6uOoa2ePOwp3qHHBacAvwttpW3FeuD y2QO5DmD7ISPKLTrhuPIbOytIi1bsovmKpm8nFGTJyg2ejUKJD5WIrxcP4JoR2Yr L0zpP+ryUIsWBIOn2jNqPZYSHAAJjzPlU4THojXpJaoOQno6ZNThgLiSXR5IMkbp pZ3m1JhLU+ymHx1rmSE2wf+moeuNmsDtFFEh3gMwbtkGW0bAH5zMAeTt/WaoT+Tf R31wwcZOb9rGrA+J3u19qsNoBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKUyGD1 tkQOE6UHlBScx8kFpqsVMB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS81MzhDMTk2MDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclEx MGNwSk9wMWozS2Q1dmdlV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE+8WK9VCjEdYTBZaQrHfRgWRAAD7D49UjcpBpGwUdQaJ7y6dNzB40 hjGZAcwcaipAGTD3Xqs5I8RFPSuKGMAWmkaVRNw9K7jGoFw5cL7UlzII+8OfNr12 F25oeLLeGJwQZBUMaWxlJxKQesvxVfoB4GTddDzivEekl2K4mEohsxBxIx2OlCZO 30CNkske8IyWj9u9HunmsjYlpBA8MFgWpdXy/EYLGtjuyxGqoNjVktnHBIgqVCyW ReNLMcXpj+WhCmPp4fmbhAM/G+GJnVE/NhcokQYWwkzmCp0wVMCOHMADrP2rvW/O OGLWfSL0eBnt4A/F4/YKaK6hwTFrnwWd -----END CERTIFICATE-----Generated at Fri Jul 25 00:48:16 2025 by rpki-client