$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft File: YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json) Hash identifier: FLPkvQ78tcHbIdtBIKC78a+JP4XbCG/D1MO9QuEzkV4= Subject key identifier: EB:0A:FC:1E:40:DC:31:70:06:64:D4:CA:EE:2B:73:E3:52:E0:00:2A Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC Certificate issuer: /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft Manifest number: 61 Signing time: Sat 19 Jul 2025 07:17:52 +0000 Manifest this update: Sat 19 Jul 2025 07:17:51 +0000 Manifest next update: Sat 26 Jul 2025 07:17:51 +0000 Files and hashes: 1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: Lge7ixiVRqsEeWQWNu1+8a9zl/JXPB2kZyEsLa/JEzg=) 2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: RZ0QTKiTTNx8zLcCMyWL6kS10XE+JurXOmLszG1L2Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC Validity Not Before: Jul 19 07:17:51 2025 GMT Not After : Jul 26 07:17:51 2025 GMT Subject: CN=687b469f-b2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:9c:b5:50:57:42:57:41:d1:f1:4a:87:20: 97:5b:6b:13:69:c1:23:32:39:fe:a9:63:76:56:36: db:93:22:80:56:41:e1:f1:29:36:27:af:d8:5a:67: e9:13:08:95:62:a9:19:01:ae:cf:22:c2:29:79:81: db:f7:75:79:df:80:2e:81:0c:b5:e2:3f:5f:97:a3: ea:eb:99:86:6d:c5:17:2c:19:30:f2:55:0a:df:69: b3:df:61:32:c2:b8:88:65:b6:38:da:8c:1d:a1:a4: 00:d6:3a:14:ea:cd:d9:f4:37:52:94:ad:ed:76:b1: f4:82:4d:76:88:d7:ee:ae:a2:9e:48:76:0a:d0:58: 31:7c:10:c5:b9:06:b5:5c:8b:61:85:28:ed:ca:bd: 52:a5:c1:d8:4b:82:7d:4f:bc:56:db:a3:90:90:38: ad:8c:58:5c:77:c8:25:d4:d9:02:ab:d7:ad:14:76: 54:a6:a6:07:0a:48:5e:c6:7a:ec:18:f1:ba:de:82: 6e:00:b9:33:de:9d:92:67:cd:9a:4a:cd:5a:74:54: 75:25:c2:a1:7c:1d:21:58:21:bf:e4:7f:49:2e:35: 04:b4:3d:72:b6:50:95:03:5a:e9:58:5c:29:df:7f: 16:fa:36:18:6d:b5:c7:0b:03:66:7c:62:27:2f:6a: 29:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0A:FC:1E:40:DC:31:70:06:64:D4:CA:EE:2B:73:E3:52:E0:00:2A X509v3 Authority Key Identifier: keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e3:64:04:77:d7:9a:2d:27:18:16:1d:62:da:59:f6:63:90: 43:a7:96:4f:9a:fe:af:28:79:09:b5:d8:3b:cf:5f:d4:e9:c3: e0:d6:e5:23:c7:9c:6e:51:a3:7d:a6:25:be:c0:c4:b4:ec:98: 44:ab:81:f1:c5:01:de:c6:cb:62:39:49:10:27:5f:f9:44:16: 9c:ad:5b:37:20:ec:1a:25:84:0c:91:be:20:92:e5:be:c0:06: 0c:52:7b:fe:fa:89:f2:77:7f:6f:2e:6d:58:4a:05:b4:db:7c: 97:99:fa:8e:54:aa:1f:88:88:cf:5a:3d:6d:7d:cf:9c:d6:92: 49:c2:80:fd:35:e6:f3:a4:00:e2:bd:00:e5:97:d9:3f:ff:f4: 0e:6c:a3:c0:69:48:55:61:fd:56:49:4e:15:44:5b:98:cd:a5: 25:53:48:ab:5f:70:5f:44:cd:5d:3e:17:fc:92:cf:e6:71:84: 0e:3e:7c:d3:5f:62:87:41:60:31:3b:eb:c1:9f:4f:9a:58:f1: 6f:73:67:eb:62:f7:7c:7d:87:87:36:9b:53:de:20:ba:8b:10: c9:f3:82:01:fd:67:5c:88:df:45:81:09:29:0e:de:28:f6:11: 57:39:e2:38:3d:d3:5d:98:af:9f:27:89:e3:c2:94:0c:c0:79: 6a:5a:e8:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoNjE0N0EyQTZGMTA2REM1NjAxM0RDM0JDRkJBMEI0Qjc1 M0VDRDFCQzAeFw0yNTA3MTkwNzE3NTFaFw0yNTA3MjYwNzE3NTFaMBgxFjAUBgNV BAMTDTY4N2I0NjlmLWIyYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3opy1UFdCV0HR8UqHIJdbaxNpwSMyOf6pY3ZWNtuTIoBWQeHxKTYnr9haZ+kT CJViqRkBrs8iwil5gdv3dXnfgC6BDLXiP1+Xo+rrmYZtxRcsGTDyVQrfabPfYTLC uIhltjjajB2hpADWOhTqzdn0N1KUre12sfSCTXaI1+6uop5IdgrQWDF8EMW5BrVc i2GFKO3KvVKlwdhLgn1PvFbbo5CQOK2MWFx3yCXU2QKr160UdlSmpgcKSF7GeuwY 8bregm4AuTPenZJnzZpKzVp0VHUlwqF8HSFYIb/kf0kuNQS0PXK2UJUDWulYXCnf fxb6NhhttccLA2Z8YicvaikjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6wr8HkDc MXAGZNTK7itz41LgACowHwYDVR0jBBgwFoAUYUeipvEG3FYBPcO8+6C0t1Ps0bww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzFFRDQ1MkFDRDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL1lVZWlwdkVHM0ZZQlBjTzgtNkMwdDFQczBi dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWVVlaXB2RUczRllCUGNPOC02QzB0MVBzMGJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzFFRDQ1MkFDRDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL1lVZWlwdkVHM0ZZ QlBjTzgtNkMwdDFQczBidy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH3jZAR315otJxgWHWLaWfZjkEOnlk+a/q8oeQm12DvPX9Tpw+DW5SPH nG5Ro32mJb7AxLTsmESrgfHFAd7Gy2I5SRAnX/lEFpytWzcg7BolhAyRviCS5b7A BgxSe/76ifJ3f28ubVhKBbTbfJeZ+o5Uqh+IiM9aPW19z5zWkknCgP015vOkAOK9 AOWX2T//9A5so8BpSFVh/VZJThVEW5jNpSVTSKtfcF9EzV0+F/ySz+ZxhA4+fNNf YodBYDE768GfT5pY8W9zZ+ti93x9h4c2m1PeILqLEMnzggH9Z1yI30WBCSkO3ij2 EVc54jg9012Yr58niePClAzAeWpa6Hs= -----END CERTIFICATE-----Generated at Sun Jul 20 06:19:43 2025 by rpki-client