$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json) Hash identifier: HwMp0EQSSwxASFx++msy+SulRSiIYRvyDKXzIzFQ6lo= Subject key identifier: D3:69:38:C8:33:F0:33:51:AB:F6:D7:2A:97:8F:B5:39:14:43:C3:00 Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft Manifest number: 0698 Signing time: Sun 20 Jul 2025 22:19:44 +0000 Manifest this update: Sun 20 Jul 2025 22:19:44 +0000 Manifest next update: Sun 27 Jul 2025 22:19:44 +0000 Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: rR0hpvdU/N06sK7Fqi5MjbMhQqo13zXuglU2GeRUt1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Validity Not Before: Jul 20 22:19:44 2025 GMT Not After : Jul 27 22:19:44 2025 GMT Subject: CN=687d6b80-c3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b3:21:d9:05:a9:2c:a1:10:57:71:33:99:65: 14:97:f7:f2:a5:8f:3a:3a:95:2b:05:9d:6b:74:2b: 88:06:83:27:5c:60:13:d7:19:3d:ff:22:57:6a:34: e6:9c:cc:ad:1c:28:60:75:fc:ee:91:44:2b:af:de: 29:76:c0:39:d7:4f:2b:df:1d:14:63:15:9c:62:48: 3b:2b:b3:aa:90:c7:d5:a4:46:11:2f:35:cb:32:21: 87:4a:a1:ed:72:02:d1:38:48:8e:4c:97:4b:3d:60: f6:b5:26:d1:1c:63:cf:8c:10:37:71:8d:fe:7c:58: f2:ec:01:8b:22:f5:c1:63:8d:d8:da:2b:51:13:04: d9:18:58:01:2d:0e:24:5e:46:27:22:5e:01:2a:a2: c7:18:44:68:e9:ca:cd:52:b7:ec:64:f8:63:42:85: 55:f5:18:da:60:55:be:36:74:9d:9d:c3:66:d5:4a: 00:35:65:df:ac:ba:31:b7:ee:97:f7:40:2c:f7:3c: 4d:05:26:26:c4:41:76:57:62:b4:90:04:d8:30:c0: e1:ad:cb:b4:ce:0c:b5:61:b9:8a:87:24:95:65:f2: 86:96:5c:8b:b5:5b:4d:40:8c:94:65:58:8c:5a:8a: 77:66:84:be:14:3c:08:c4:24:fa:5b:40:5a:7a:46: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:69:38:C8:33:F0:33:51:AB:F6:D7:2A:97:8F:B5:39:14:43:C3:00 X509v3 Authority Key Identifier: keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:5a:5f:c7:85:a0:6d:ed:97:39:45:aa:52:b5:13:4a:bf:6d: 5e:08:c2:74:17:c5:97:f8:69:5c:dd:8f:b5:f0:94:9b:ae:5c: 6f:07:08:8b:63:94:b4:12:b8:19:23:7b:fe:c2:b0:e2:e6:2a: db:8f:a2:33:67:6a:4c:b4:31:ea:6a:62:da:bf:6b:c7:36:27: 00:c2:d0:0d:cb:7e:8a:42:42:30:8b:69:9e:92:f7:eb:66:50: 23:06:35:03:1d:02:f5:19:46:6c:f2:ee:96:53:cd:af:9c:87: 65:08:9d:96:ec:02:f6:f2:58:d0:eb:96:45:83:72:7e:c8:f4: ca:ed:92:bf:36:64:98:99:c7:f9:e1:da:38:64:3a:89:53:74: db:b9:ab:6e:d7:c0:56:fc:29:6e:04:96:e2:9d:3d:ef:82:14: 32:29:08:35:64:d5:09:26:68:6f:45:81:c0:73:f8:30:0b:13: 58:20:0f:50:3d:1f:1a:b5:31:6a:c5:95:2c:38:00:d8:40:c6: ae:37:ea:27:9a:40:93:77:25:c3:6b:ea:32:63:5e:2a:40:2a: f3:0d:ee:0b:f9:87:62:df:0f:26:1a:47:41:a4:24:bb:be:00: a3:6b:20:1a:94:56:24:5b:dc:60:ce:f2:67:fb:17:4e:b0:52: ed:72:64:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2QUE0MTFEMkUx OTk3NzkwMTcwHhcNMjUwNzIwMjIxOTQ0WhcNMjUwNzI3MjIxOTQ0WjAYMRYwFAYD VQQDEw02ODdkNmI4MC1jM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bMh2QWpLKEQV3EzmWUUl/fypY86OpUrBZ1rdCuIBoMnXGAT1xk9/yJXajTm nMytHChgdfzukUQrr94pdsA5108r3x0UYxWcYkg7K7OqkMfVpEYRLzXLMiGHSqHt cgLROEiOTJdLPWD2tSbRHGPPjBA3cY3+fFjy7AGLIvXBY43Y2itREwTZGFgBLQ4k XkYnIl4BKqLHGERo6crNUrfsZPhjQoVV9RjaYFW+NnSdncNm1UoANWXfrLoxt+6X 90As9zxNBSYmxEF2V2K0kATYMMDhrcu0zgy1YbmKhySVZfKGllyLtVtNQIyUZViM Wop3ZoS+FDwIxCT6W0BaekYJ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNpOMgz 8DNRq/bXKpePtTkUQ8MAMB8GA1UdIwQYMBaAFMiNVbe/1UOIthAgaqQR0uGZd5AX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC8xQjg4RDJBMDc0 RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0aTJFQ0JxcEJIUzRabDNr QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJMVZ0N19WUTRpMkVDQnFwQkhTNFpsM2tCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0 aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Wl/HhaBt7Zc5RapStRNKv21eCMJ0F8WX+Glc3Y+18JSbrlxvBwiL Y5S0ErgZI3v+wrDi5irbj6IzZ2pMtDHqamLav2vHNicAwtANy36KQkIwi2mekvfr ZlAjBjUDHQL1GUZs8u6WU82vnIdlCJ2W7AL28ljQ65ZFg3J+yPTK7ZK/NmSYmcf5 4do4ZDqJU3Tbuatu18BW/CluBJbinT3vghQyKQg1ZNUJJmhvRYHAc/gwCxNYIA9Q PR8atTFqxZUsOADYQMauN+onmkCTdyXDa+oyY14qQCrzDe4L+Ydi3w8mGkdBpCS7 vgCjayAalFYkW9xgzvJn+xdOsFLtcmQ3 -----END CERTIFICATE-----Generated at Mon Jul 21 05:54:23 2025 by rpki-client