$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json) Hash identifier: x4IdKLz5aEMnlo5kzKTeAfUFaWHBXAVtNp0eRiJIVqs= Subject key identifier: D4:CC:20:9E:D6:DE:3B:8B:F6:40:98:08:CB:BB:5C:3B:F5:53:CF:9F Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0E18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft Manifest number: 0E10 Signing time: Sun 20 Jul 2025 17:51:43 +0000 Manifest this update: Sun 20 Jul 2025 17:51:43 +0000 Manifest next update: Sun 27 Jul 2025 17:51:43 +0000 Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: Jcp1lNoFpHMgAW4iJH9yRUbdFZM+2w3zEcJYYyn4zOo=) 2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: VAz7Q8OmwNVtqjw21t41eYyn3+glN8lqbyiXL2P+yek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3608 (0xe18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: Jul 20 17:51:43 2025 GMT Not After : Jul 27 17:51:43 2025 GMT Subject: CN=687d2caf-5725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:df:fe:ca:7f:c4:8e:f9:b7:f3:a9:8c:66: e6:76:16:1e:fb:7f:76:5b:63:5b:4c:fc:8f:ad:b3: b8:ab:b9:96:ea:d0:66:cd:5f:bb:a7:a0:3a:2a:08: 8c:05:ae:91:20:70:b5:00:63:ad:c5:1f:42:50:89: c2:79:9c:88:3b:96:a3:f0:24:35:7f:f0:dd:3b:51: df:a6:35:bd:7f:2b:31:6a:67:30:d7:db:4c:49:3d: c8:06:0f:0b:63:82:b9:14:85:9e:ad:65:bb:3e:ec: 1b:2c:97:15:31:10:5e:f3:71:df:28:45:74:ad:bb: 21:d6:3c:31:16:b8:a4:43:bb:94:98:9c:b8:d9:65: 2c:a4:5f:e9:71:6a:58:2e:cc:98:1c:d1:00:1d:fd: 6e:da:21:81:f1:ed:fd:0b:51:51:c5:c7:71:45:a6: 83:85:8b:08:07:4c:15:1c:fa:c7:b2:30:25:b3:1f: 74:0d:7b:d0:76:71:17:2a:4e:36:2b:9f:97:b9:64: f4:3a:2a:a1:d8:74:3a:dd:84:3b:90:e7:9c:e7:87: dc:15:c5:e8:ef:a4:4a:55:14:93:fa:8c:4f:7d:aa: f5:86:22:51:96:b4:95:97:67:57:21:54:ed:56:15: a8:28:90:ff:80:74:28:ba:1d:13:51:80:ec:f0:65: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CC:20:9E:D6:DE:3B:8B:F6:40:98:08:CB:BB:5C:3B:F5:53:CF:9F X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c7:27:27:92:06:76:e2:14:ec:2e:51:81:d9:92:54:d9:d2: ef:65:1d:02:1b:80:c3:d6:2f:9f:7d:41:88:7a:0a:03:19:a7: a8:87:47:00:9d:47:6f:de:55:b7:4f:14:d8:3e:a5:84:49:bf: c5:f6:43:11:2f:9f:0e:16:3b:19:9e:01:2e:4d:b1:be:77:fd: 5c:df:c9:08:b5:e5:c5:78:1c:62:23:fc:a7:78:78:1a:c6:2b: c2:3c:de:5b:0d:9e:a6:fc:54:11:07:a0:96:1a:96:4e:3c:36: 58:9c:37:a7:51:df:08:bf:e0:b4:27:2b:17:9d:06:7d:f3:4b: 56:f1:66:a5:19:30:41:81:55:f3:f3:c1:01:34:73:11:5f:2f: 00:9c:2a:37:c8:8b:a1:ce:ab:8d:db:39:4a:de:b9:95:b6:d3: fd:37:3e:1f:c5:5c:8e:7b:39:68:c3:4b:f1:2a:de:87:d1:ba: 3a:33:99:f1:ab:c1:d5:8e:34:a8:00:dd:97:c0:c2:e5:b5:09: 18:91:fe:7b:c8:60:53:df:ae:53:87:9d:8e:d8:fa:61:01:31: e0:f1:66:4f:ef:63:d9:14:6d:c3:83:a1:5f:bd:27:a8:0a:33: 36:5d:2f:2d:7b:aa:56:e3:55:49:05:4e:2c:3c:95:92:5f:e5: 7a:b7:5d:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjUwNzIwMTc1MTQzWhcNMjUwNzI3MTc1MTQzWjAYMRYwFAYD VQQDEw02ODdkMmNhZi01NzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApu3f/sp/xI75t/OpjGbmdhYe+392W2NbTPyPrbO4q7mW6tBmzV+7p6A6KgiM Ba6RIHC1AGOtxR9CUInCeZyIO5aj8CQ1f/DdO1HfpjW9fysxamcw19tMST3IBg8L Y4K5FIWerWW7PuwbLJcVMRBe83HfKEV0rbsh1jwxFrikQ7uUmJy42WUspF/pcWpY LsyYHNEAHf1u2iGB8e39C1FRxcdxRaaDhYsIB0wVHPrHsjAlsx90DXvQdnEXKk42 K5+XuWT0Oiqh2HQ63YQ7kOec54fcFcXo76RKVRST+oxPfar1hiJRlrSVl2dXIVTt VhWoKJD/gHQouh0TUYDs8GV2iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTMIJ7W 3juL9kCYCMu7XDv1U8+fMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3 NEJvY08zZFFJY2pqNGllSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOxycnkgZ24hTsLlGB2ZJU2dLvZR0CG4DD1i+ffUGIegoDGaeoh0cA nUdv3lW3TxTYPqWESb/F9kMRL58OFjsZngEuTbG+d/1c38kIteXFeBxiI/yneHga xivCPN5bDZ6m/FQRB6CWGpZOPDZYnDenUd8Iv+C0JysXnQZ980tW8WalGTBBgVXz 88EBNHMRXy8AnCo3yIuhzquN2zlK3rmVttP9Nz4fxVyOezlow0vxKt6H0bo6M5nx q8HVjjSoAN2XwMLltQkYkf57yGBT365Th52O2PphATHg8WZP72PZFG3Dg6FfvSeo CjM2XS8te6pW41VJBU4sPJWSX+V6t12J -----END CERTIFICATE-----Generated at Sun Jul 20 20:29:14 2025 by rpki-client