$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json) Hash identifier: 55loMMqm9jM43WbZxiMb0UFEu/MjAgKI9hUF0j+irpo= Subject key identifier: D6:85:0C:4C:F3:EA:90:06:3D:D2:0F:4F:BA:30:4A:A7:41:04:F3:9E Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft Manifest number: C3 Signing time: Sat 19 Jul 2025 06:03:49 +0000 Manifest this update: Sat 19 Jul 2025 06:03:48 +0000 Manifest next update: Sat 26 Jul 2025 06:03:48 +0000 Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: gESyRdP8V0almOb/HLX0Kb68BAbJ2kuSRae992HjIV4=) 2: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: zQOiTFbVqK43DmDzJVcnwdcHTRwrsKJXhumrQHobr8I=) 3: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: OV24Kj5y+880mPdkukE2fpkmI0sbTUDGEcrj2jYLxRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Validity Not Before: Jul 19 06:03:48 2025 GMT Not After : Jul 26 06:03:48 2025 GMT Subject: CN=687b3544-a5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:66:50:28:12:be:4f:e3:10:47:3a:1f:5d: 2a:fd:01:61:f3:11:fe:65:d4:2d:f0:af:f0:7a:b5: e5:8f:f6:7f:6b:42:ae:f3:ff:a3:c6:c3:41:7b:95: b5:81:b8:86:c9:9e:cd:19:3e:7e:32:35:34:b9:aa: bd:a0:7c:ac:c6:b4:7b:d0:5f:98:ff:51:7a:02:98: ee:73:19:b2:93:25:46:d8:f0:30:87:06:b0:95:a1: c2:65:db:4f:b3:89:63:b7:bb:d9:2c:40:13:13:70: c4:3c:25:27:96:b0:d6:81:c6:1a:d4:33:72:f5:60: 67:91:ec:46:17:8c:8d:c7:f6:12:65:ac:1f:d0:98: 30:5b:ec:b6:b1:0b:d1:be:8b:30:18:a8:d0:4d:8e: 8e:64:b9:46:c2:76:02:4b:78:59:59:e7:c5:b2:91: 34:13:f2:9f:35:49:1b:70:54:86:10:4a:57:4f:41: 26:d8:ff:d9:ee:ec:e1:c7:19:0f:f0:df:b9:46:c6: 2a:60:27:82:4d:a0:c1:4d:8c:f3:f0:b2:f7:7c:4b: 3b:71:b7:a4:7a:b0:f5:8a:54:21:21:1b:85:ac:18: 31:9a:5f:3b:1a:39:92:2b:88:2e:26:59:ec:20:6f: a9:57:e9:3c:2e:8f:f9:ff:59:49:1b:09:5c:e6:95: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:85:0C:4C:F3:EA:90:06:3D:D2:0F:4F:BA:30:4A:A7:41:04:F3:9E X509v3 Authority Key Identifier: keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:2f:54:d0:86:ea:de:5d:73:ab:82:67:30:51:27:af:82:6d: c6:1c:ba:0d:7a:27:34:b1:3a:d8:83:bf:cb:ba:f7:7b:28:b5: 2d:96:54:4d:b0:2e:f3:b3:c7:b8:ea:ce:a7:f3:e3:ee:4a:5e: 16:9e:80:da:fc:1f:65:4f:78:ad:3a:46:89:38:1a:a6:17:2e: 74:48:2c:fe:93:64:7d:21:62:3e:18:cc:19:7c:c3:93:f8:bf: 70:50:cc:bc:f2:25:d5:bd:a1:2f:de:04:36:5b:48:90:9f:31: 34:dc:b4:2d:29:26:80:40:6b:aa:94:7c:e3:8e:83:94:24:28: 4a:35:f5:b4:33:dc:70:00:d4:c5:ef:5f:00:a3:4e:7c:48:e2: 32:2d:09:fa:d5:c0:6f:00:ee:86:f5:39:13:cc:27:20:85:96: 03:50:54:54:12:22:8a:5a:19:8e:84:f8:70:e5:7f:6f:01:ab: e2:44:43:56:63:2d:b4:48:b2:5a:66:1f:89:0c:69:76:54:e3: 56:30:ed:eb:ab:d3:59:91:87:fc:cc:db:57:ab:f6:dd:c1:62: 80:82:a3:2e:5c:e6:36:75:09:a7:b2:5e:0d:d0:43:8b:68:ec: a7:ef:b5:63:61:c9:9a:e3:15:5a:f0:db:d3:17:02:de:77:d0: e5:dc:01:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw RjAzQkY3QzYwHhcNMjUwNzE5MDYwMzQ4WhcNMjUwNzI2MDYwMzQ4WjAYMRYwFAYD VQQDEw02ODdiMzU0NC1hNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIxmUCgSvk/jEEc6H10q/QFh8xH+ZdQt8K/werXlj/Z/a0Ku8/+jxsNBe5W1 gbiGyZ7NGT5+MjU0uaq9oHysxrR70F+Y/1F6ApjucxmykyVG2PAwhwawlaHCZdtP s4ljt7vZLEATE3DEPCUnlrDWgcYa1DNy9WBnkexGF4yNx/YSZawf0JgwW+y2sQvR voswGKjQTY6OZLlGwnYCS3hZWefFspE0E/KfNUkbcFSGEEpXT0Em2P/Z7uzhxxkP 8N+5RsYqYCeCTaDBTYzz8LL3fEs7cbekerD1ilQhIRuFrBgxml87GjmSK4guJlns IG+pV+k8Lo/5/1lJGwlc5pWBSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaFDEzz 6pAGPdIPT7owSqdBBPOeMB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5 OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi82RDIwNzVGNjQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NP MWJ1dTF4Y2swaUlQQTc5OFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGL1TQhureXXOrgmcwUSevgm3GHLoNeic0sTrYg7/Luvd7KLUtllRN sC7zs8e46s6n8+PuSl4WnoDa/B9lT3itOkaJOBqmFy50SCz+k2R9IWI+GMwZfMOT +L9wUMy88iXVvaEv3gQ2W0iQnzE03LQtKSaAQGuqlHzjjoOUJChKNfW0M9xwANTF 718Ao058SOIyLQn61cBvAO6G9TkTzCcghZYDUFRUEiKKWhmOhPhw5X9vAaviRENW Yy20SLJaZh+JDGl2VONWMO3rq9NZkYf8zNtXq/bdwWKAgqMuXOY2dQmnsl4N0EOL aOyn77VjYcma4xVa8NvTFwLed9Dl3AFb -----END CERTIFICATE-----Generated at Sun Jul 20 15:12:48 2025 by rpki-client