$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft File: Y7ooHVb6T-blNbEl4W34AdEvgJk.mft (raw, json) Hash identifier: TZNZtS/ouXkb4KhTDHNWEgp2CovHerYnoJAvto3Dm64= Subject key identifier: A8:8E:49:0F:14:A8:00:A4:07:5E:94:D3:E1:E8:11:03:C5:73:FC:AB Authority key identifier: 63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 Certificate issuer: /CN=A91ECBD9/serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft Manifest number: A6 Signing time: Sat 19 Jul 2025 06:24:08 +0000 Manifest this update: Sat 19 Jul 2025 06:24:08 +0000 Manifest next update: Sat 26 Jul 2025 06:24:08 +0000 Files and hashes: 1: Y7ooHVb6T-blNbEl4W34AdEvgJk.crl (hash: qVCYbn6f21YMvjE/FV4hvbnOkAevuWNrHBAHznUa6WU=) 2: 4E67247C681911EFA2640B43C4F9AE02.roa (hash: ucm8jiY7/TEfoe7vYt6Xy9WiiLrmTGt3Yko/V2TTwzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECBD9, serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Validity Not Before: Jul 19 06:24:08 2025 GMT Not After : Jul 26 06:24:08 2025 GMT Subject: CN=687b3a08-5465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:93:2f:3d:50:5d:cf:fb:d5:ff:f9:14:de: 0e:e8:86:ab:3d:f3:ac:65:7c:fc:6b:63:9d:e0:07: ac:9b:6b:7e:cd:88:26:a4:2b:6c:53:9f:8b:12:a2: 38:49:f2:cf:c6:11:d3:5f:a6:8e:be:92:88:6a:7c: b6:3c:74:95:35:c8:e1:84:80:f3:9b:fa:af:12:5e: 24:2a:79:21:d0:c6:21:ab:98:4c:38:91:52:08:b7: b2:52:cf:85:b4:f6:3e:7a:eb:60:7e:7c:dc:d9:af: 72:67:57:94:56:76:d3:d3:a7:e7:b0:c2:ee:9a:7d: 0f:85:da:8f:6e:56:3d:47:c8:67:57:5b:f4:15:a8: ac:69:0e:bf:fb:c2:f0:1f:06:92:29:69:4e:4a:07: 7b:6c:3a:35:88:9e:6d:73:0a:a9:c6:a5:49:33:85: 97:ba:2c:d0:75:ba:90:7f:a9:b6:b7:64:5f:7d:e4: ea:0b:dc:54:04:2c:a1:01:35:86:c9:a5:0f:2a:c0: ea:41:d5:14:c9:5b:6b:b3:70:84:75:11:7e:dd:64: 40:32:05:d5:b8:e6:2c:81:72:2f:7a:d5:08:14:69: 7f:22:0f:cc:aa:af:ac:6d:7b:f8:5f:52:5e:1a:46: 55:e7:fa:6a:9a:fb:47:47:b6:93:f5:be:83:cb:68: f8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8E:49:0F:14:A8:00:A4:07:5E:94:D3:E1:E8:11:03:C5:73:FC:AB X509v3 Authority Key Identifier: keyid:63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:01:82:a4:dd:de:f8:ff:53:cd:24:f1:de:ad:ac:7f:72:89: 49:e3:14:18:6c:f8:d4:29:ee:2c:6e:3c:42:21:eb:64:43:a1: c1:1e:2f:ea:85:45:8c:fe:2a:70:f3:9e:d4:91:90:33:5a:0f: d3:d6:ba:4d:76:6d:c3:2b:17:d3:2c:53:b3:94:ec:59:34:c8: 9e:7c:37:1d:4f:af:30:f8:fe:7c:68:1c:c8:41:72:4f:f8:8b: 60:8e:96:3a:6b:04:26:88:ac:fa:60:c5:cc:61:15:07:17:a0: 37:ca:ac:31:78:35:2a:25:25:1c:c3:b3:31:a7:db:ae:83:ad: b0:b0:44:98:f8:00:3c:a5:e2:f7:3e:7c:c6:66:36:36:0d:02: b6:40:3c:41:af:71:f8:fc:7a:9d:bc:6f:d1:3c:37:e2:d0:c4: cf:53:2c:62:26:ce:9c:b7:64:a9:36:ef:cb:75:c1:c8:d1:01: 92:af:9e:c5:2a:15:40:81:cf:6f:d9:38:76:4d:4a:4c:93:92: 68:e4:cd:60:f2:0d:8a:8d:94:1c:15:87:93:83:b9:db:df:36: 4c:de:78:ab:5c:4a:10:23:bd:8d:38:05:4f:be:25:ae:dd:72: 8d:a6:4e:c6:f6:54:a0:c9:db:fb:7d:71:33:0e:61:3e:c8:12: 07:70:a1:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNCRDkxMTAvBgNVBAUTKDYzQkEyODFENTZGQTRGRTZFNTM1QjEyNUUxNkRGODAx RDEyRjgwOTkwHhcNMjUwNzE5MDYyNDA4WhcNMjUwNzI2MDYyNDA4WjAYMRYwFAYD VQQDEw02ODdiM2EwOC01NDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPqTLz1QXc/71f/5FN4O6IarPfOsZXz8a2Od4Aesm2t+zYgmpCtsU5+LEqI4 SfLPxhHTX6aOvpKIany2PHSVNcjhhIDzm/qvEl4kKnkh0MYhq5hMOJFSCLeyUs+F tPY+eutgfnzc2a9yZ1eUVnbT06fnsMLumn0PhdqPblY9R8hnV1v0FaisaQ6/+8Lw HwaSKWlOSgd7bDo1iJ5tcwqpxqVJM4WXuizQdbqQf6m2t2RffeTqC9xUBCyhATWG yaUPKsDqQdUUyVtrs3CEdRF+3WRAMgXVuOYsgXIvetUIFGl/Ig/Mqq+sbXv4X1Je GkZV5/pqmvtHR7aT9b6Dy2j4pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiOSQ8U qACkB16U0+HoEQPFc/yrMB8GA1UdIwQYMBaAFGO6KB1W+k/m5TWxJeFt+AHRL4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0JEOS9FMDQ2QjBCNjY4 MTgxMUVGOUE1M0U5MThDNEY5QUUwMi9ZN29vSFZiNlQtYmxOYkVsNFczNEFkRXZn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k3b29IVmI2VC1ibE5iRWw0VzM0QWRFdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0JEOS9FMDQ2QjBCNjY4MTgxMUVGOUE1M0U5MThDNEY5QUUwMi9ZN29vSFZiNlQt YmxOYkVsNFczNEFkRXZnSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAAYKk3d74/1PNJPHerax/colJ4xQYbPjUKe4sbjxCIetkQ6HBHi/q hUWM/ipw857UkZAzWg/T1rpNdm3DKxfTLFOzlOxZNMiefDcdT68w+P58aBzIQXJP +ItgjpY6awQmiKz6YMXMYRUHF6A3yqwxeDUqJSUcw7Mxp9uug62wsESY+AA8peL3 PnzGZjY2DQK2QDxBr3H4/HqdvG/RPDfi0MTPUyxiJs6ct2SpNu/LdcHI0QGSr57F KhVAgc9v2Th2TUpMk5Jo5M1g8g2KjZQcFYeTg7nb3zZM3nirXEoQI72NOAVPviWu 3XKNpk7G9lSgydv7fXEzDmE+yBIHcKHe -----END CERTIFICATE-----Generated at Sun Jul 20 07:47:21 2025 by rpki-client