$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: Vp90Vq3Mgn7YkerY7o2fTxI+1eMZ/lLdfzAqih4QSrE= Subject key identifier: 0D:CE:90:8A:42:2A:A9:57:F2:9A:0F:5F:17:4D:54:4A:61:14:A7:A4 Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 5C Signing time: Sat 19 Jul 2025 07:24:42 +0000 Manifest this update: Sat 19 Jul 2025 07:24:41 +0000 Manifest next update: Sat 26 Jul 2025 07:24:41 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: YuKVNk162wZ/vKyB73KW31Y4h0DZz6CH8yaCnD6xG20=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: Jul 19 07:24:41 2025 GMT Not After : Jul 26 07:24:41 2025 GMT Subject: CN=687b483a-30fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:8e:e2:a5:32:c0:8b:5c:39:5f:c1:b4:4e: 4c:c3:63:fa:67:97:3e:6a:82:0d:e6:de:44:4d:34: 49:c5:8c:04:ca:93:4d:db:2c:18:40:c6:8f:fd:2e: ef:d5:31:20:33:49:ea:39:75:16:0e:71:41:e5:aa: 4c:7d:9d:3d:d2:9d:52:47:2f:fe:c0:54:21:cb:ec: 0e:d1:14:c6:64:f1:41:f4:42:47:c0:7f:9d:9b:8f: 38:b6:45:56:69:95:02:96:e3:d8:2d:9f:ca:2a:b9: 93:2d:22:b9:ac:f8:f6:c4:3a:d8:01:19:f0:c6:bc: 4a:4a:55:80:96:50:36:fb:d8:05:e1:1a:9e:4e:e8: 30:c6:2e:08:77:7c:c0:8b:2a:da:68:98:96:4c:cf: 35:28:2a:06:0f:51:79:24:45:ed:9f:a2:48:d3:f7: 88:a4:2e:ec:77:ab:7c:7f:f2:08:ee:c3:bc:72:84: 54:69:7e:7e:5b:f2:e1:2b:c0:30:5c:b6:62:18:08: cc:54:16:ef:6e:8a:f3:c4:e0:f5:db:3b:79:39:ce: d2:0d:d0:1b:c9:c6:d4:82:82:da:6c:45:6f:b3:1f: e5:42:8c:5b:f1:80:f4:8c:3b:ec:23:88:64:42:3a: aa:8e:95:32:50:00:d9:ee:6d:15:8d:2f:86:40:d1: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CE:90:8A:42:2A:A9:57:F2:9A:0F:5F:17:4D:54:4A:61:14:A7:A4 X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:f5:2c:45:00:2a:98:10:f0:ad:8f:e6:0e:72:17:48:55:e8: 41:aa:f7:7c:1b:e7:8b:40:8f:f8:e5:aa:3c:f5:ea:74:6b:a8: cd:02:75:b3:ae:23:53:db:91:08:86:a0:d6:5a:a5:37:f7:01: cb:5f:42:18:2c:7c:55:f0:fb:54:20:03:63:9a:43:a8:a1:df: 77:da:1d:b7:b4:4f:bf:2c:da:54:50:b1:4f:a6:8e:65:ea:2a: 87:c2:dc:95:11:09:a0:65:92:86:a3:08:91:c4:d8:a9:9b:31: 36:1c:05:96:8d:65:db:a6:2e:db:c6:98:6f:78:d4:a0:dd:99: 45:17:cc:79:df:b2:45:e1:3e:32:fb:2c:9f:81:c1:84:bc:19: d1:67:a2:0e:26:b5:f9:91:35:d5:6e:fb:49:8b:b0:35:93:1c: 2b:17:27:c0:3b:42:20:51:9e:04:ec:d2:70:bf:f1:28:c0:4d: aa:1e:da:11:64:c3:cb:dd:b7:20:a9:42:71:fa:6a:13:f5:39: 37:b5:4a:1f:bf:ff:1a:ff:34:2c:6f:f5:25:1e:67:25:39:44: f6:08:3a:65:09:07:0e:38:64:30:a0:38:23:4e:d9:c9:59:da: c5:82:13:28:c8:a6:32:6c:1a:24:05:b2:e4:0e:9b:2b:2f:a6: f2:cb:f5:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODEwMzExMC8GA1UEBRMoNjAzMUQwNjAxRDVDMkQ4N0FENjYyMzYxRTYzQkZGRDkx RTA0MDczMzAeFw0yNTA3MTkwNzI0NDFaFw0yNTA3MjYwNzI0NDFaMBgxFjAUBgNV BAMTDTY4N2I0ODNhLTMwZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0sI7ipTLAi1w5X8G0TkzDY/pnlz5qgg3m3kRNNEnFjATKk03bLBhAxo/9Lu/V MSAzSeo5dRYOcUHlqkx9nT3SnVJHL/7AVCHL7A7RFMZk8UH0QkfAf52bjzi2RVZp lQKW49gtn8oquZMtIrms+PbEOtgBGfDGvEpKVYCWUDb72AXhGp5O6DDGLgh3fMCL KtpomJZMzzUoKgYPUXkkRe2fokjT94ikLux3q3x/8gjuw7xyhFRpfn5b8uErwDBc tmIYCMxUFu9uivPE4PXbO3k5ztIN0BvJxtSCgtpsRW+zH+VCjFvxgPSMO+wjiGRC OqqOlTJQANnubRWNL4ZA0aDZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDc6QikIq qVfymg9fF01USmEUp6QwHwYDVR0jBBgwFoAUYDHQYB1cLYetZiNh5jv/2R4EBzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MTAzLzkzREM3NTRFREUw MTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURIUVlCMWNMWWV0WmlOaDVqdl8yUjRFQnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MTAzLzkzREM3NTRFREUwMTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFll dFppTmg1anZfMlI0RUJ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM31LEUAKpgQ8K2P5g5yF0hV6EGq93wb54tAj/jlqjz16nRrqM0CdbOu I1PbkQiGoNZapTf3ActfQhgsfFXw+1QgA2OaQ6ih33faHbe0T78s2lRQsU+mjmXq KofC3JURCaBlkoajCJHE2KmbMTYcBZaNZdumLtvGmG941KDdmUUXzHnfskXhPjL7 LJ+BwYS8GdFnog4mtfmRNdVu+0mLsDWTHCsXJ8A7QiBRngTs0nC/8SjATaoe2hFk w8vdtyCpQnH6ahP1OTe1Sh+//xr/NCxv9SUeZyU5RPYIOmUJBw44ZDCgOCNO2clZ 2sWCEyjIpjJsGiQFsuQOmysvpvLL9Ys= -----END CERTIFICATE-----Generated at Sun Jul 20 19:02:52 2025 by rpki-client