$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json) Hash identifier: +xPeeAd67Wt88UfsG2T/UBDZfgoQ5//COSyTYvsBHwg= Subject key identifier: 8D:89:6F:00:52:97:19:CB:EF:16:F4:BE:2F:D0:FB:A1:83:81:4D:34 Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft Manifest number: 53 Signing time: Sat 19 Jul 2025 07:30:50 +0000 Manifest this update: Sat 19 Jul 2025 07:30:49 +0000 Manifest next update: Sat 26 Jul 2025 07:30:49 +0000 Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: XVdTdW4LrtmVDw2bRoEJdwhqx2yxj15YO5cMj+Zt0CQ=) 2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: Jul 19 07:30:49 2025 GMT Not After : Jul 26 07:30:49 2025 GMT Subject: CN=687b49a9-4f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5c:5f:89:54:23:a9:a5:48:9a:3f:36:33:67: 8f:ff:f4:23:b5:76:19:c1:5d:4a:49:7c:63:46:3b: cd:82:be:be:e5:0d:57:ae:9b:d2:1d:04:91:1f:84: e3:61:ad:80:31:3b:b4:a9:86:cb:ea:41:5c:dc:e9: 7d:b3:10:21:e6:7b:b6:5b:3a:e4:42:be:1c:b2:68: 06:fd:b5:ee:7c:f7:d8:86:9f:96:e8:b4:c4:d4:d3: 9c:75:aa:4c:0c:4f:26:2d:80:2d:c5:ee:96:ae:10: 78:c4:c1:1c:63:dc:02:7b:bb:19:a4:52:e4:29:53: a2:dd:48:62:4f:e5:68:63:7a:ee:11:85:a8:0c:6a: 30:6f:db:12:1b:22:49:80:35:a9:c4:61:f3:4a:26: 77:b9:3e:b3:ed:3a:be:31:c0:02:da:14:3e:d6:76: c4:a6:32:d8:3f:bc:75:a1:e2:b9:99:13:ab:1e:ce: b4:c7:b7:f0:f7:16:5b:4e:20:49:ad:6d:6b:33:46: a2:23:1d:1f:42:10:cb:50:f3:6f:86:14:a0:40:64: bf:1e:59:62:56:b9:46:ab:1e:12:c5:a2:b4:44:22: f3:17:79:4c:e1:b8:de:8c:2c:72:7c:55:05:28:50: f8:f8:1e:83:7b:9d:13:07:a2:7f:5a:ae:73:71:ce: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:89:6F:00:52:97:19:CB:EF:16:F4:BE:2F:D0:FB:A1:83:81:4D:34 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bd:c9:4a:9a:6f:70:c9:91:95:a4:5b:61:5c:61:a7:8f:a3: dc:91:6c:b5:4e:f5:7e:86:7f:d7:f8:bf:41:26:9c:15:82:c4: a6:ef:eb:0f:4e:3d:4f:bf:8d:56:25:06:f0:f9:ec:f2:ae:f4: 04:a6:fe:b1:7b:f5:ec:1d:b9:84:18:88:88:ed:61:f1:e9:1d: 3c:3d:ed:44:f3:fb:1c:b6:1a:8d:aa:ea:fd:78:58:37:02:54: 5a:34:17:2a:2b:59:30:3f:e8:83:e4:6e:9a:dc:20:95:5e:92: f2:ea:f6:0c:3b:8a:90:8e:b8:3c:0a:01:ce:1f:77:e8:e0:29: 36:7f:3f:01:9c:0a:4c:b8:48:10:de:55:c9:4d:0c:20:5a:52: 60:67:0d:53:48:8c:79:dd:c3:6e:a4:c0:b3:06:1e:b3:6e:75: 15:7e:bc:80:15:f6:17:cc:c4:da:0b:3d:7b:83:d9:1c:91:65: 06:45:0d:2e:41:cb:0b:22:f8:22:03:b0:bb:22:ae:24:c3:d1: 6a:96:65:d8:c5:98:13:bb:4a:28:9f:a5:bb:ce:93:84:a7:c2: de:77:fa:c9:af:cb:cf:7a:4c:39:a0:21:71:ec:c3:b9:1a:cf: 21:e7:db:65:b6:45:4a:09:9b:05:6b:cf:96:c9:fa:e6:cd:f4: 3f:20:b9:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTc2NjExMC8GA1UEBRMoQzkyNDYwMTQyNTdFRUZGRkZFODBDRDNFQUJGRUQ2N0E4 OThENkY1NzAeFw0yNTA3MTkwNzMwNDlaFw0yNTA3MjYwNzMwNDlaMBgxFjAUBgNV BAMTDTY4N2I0OWE5LTRmNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCXF+JVCOppUiaPzYzZ4//9CO1dhnBXUpJfGNGO82Cvr7lDVeum9IdBJEfhONh rYAxO7SphsvqQVzc6X2zECHme7ZbOuRCvhyyaAb9te5899iGn5botMTU05x1qkwM TyYtgC3F7pauEHjEwRxj3AJ7uxmkUuQpU6LdSGJP5Whjeu4RhagMajBv2xIbIkmA NanEYfNKJne5PrPtOr4xwALaFD7WdsSmMtg/vHWh4rmZE6sezrTHt/D3FltOIEmt bWszRqIjHR9CEMtQ82+GFKBAZL8eWWJWuUarHhLForREIvMXeUzhuN6MLHJ8VQUo UPj4HoN7nRMHon9arnNxzt2jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjYlvAFKX GcvvFvS+L9D7oYOBTTQwHwYDVR0jBBgwFoAUySRgFCV+7//+gM0+q/7WeomNb1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5NzY2LzgwRjU5RTk0RUE1 NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVNSZ0ZDVi03X18tZ00wLXFfN1dlb21OYjFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 NzY2LzgwRjU5RTk0RUE1NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19f LWdNMC1xXzdXZW9tTmIxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFu9yUqab3DJkZWkW2FcYaePo9yRbLVO9X6Gf9f4v0EmnBWCxKbv6w9O PU+/jVYlBvD57PKu9ASm/rF79ewduYQYiIjtYfHpHTw97UTz+xy2Go2q6v14WDcC VFo0FyorWTA/6IPkbprcIJVekvLq9gw7ipCOuDwKAc4fd+jgKTZ/PwGcCky4SBDe VclNDCBaUmBnDVNIjHndw26kwLMGHrNudRV+vIAV9hfMxNoLPXuD2RyRZQZFDS5B ywsi+CIDsLsiriTD0WqWZdjFmBO7SiifpbvOk4Snwt53+smvy896TDmgIXHsw7ka zyHn22W2RUoJmwVrz5bJ+ubN9D8guag= -----END CERTIFICATE-----Generated at Sun Jul 20 04:10:11 2025 by rpki-client