$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: uLx22teP0l5Vii0ercgMYEhesm/3SGJb/JGXf0oDtPo= Subject key identifier: 07:24:D2:2A:78:DE:A7:31:32:10:B6:25:69:93:5E:6D:8B:40:8C:30 Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 0FBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 0FB4 Signing time: Sun 20 Jul 2025 17:32:42 +0000 Manifest this update: Sun 20 Jul 2025 17:32:42 +0000 Manifest next update: Sun 27 Jul 2025 17:32:42 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: Zdab46eg+juDMme/4kmLolBWOipdcTujWuPE+qAIHGE=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: cCIRQV7ckuHtyIWMyZbPGhi3IsjwZT86WZjPdbGRO6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4027 (0xfbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B, serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Validity Not Before: Jul 20 17:32:42 2025 GMT Not After : Jul 27 17:32:42 2025 GMT Subject: CN=687d283a-0b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:70:87:73:5f:c0:12:4f:bb:ea:b8:ad:8a:45: 0f:dd:5e:88:c8:2a:61:20:5e:7c:a2:fe:24:e9:1f: ed:cc:c7:1e:53:88:36:21:6c:00:1e:a5:f1:a6:aa: 07:6d:dc:62:bf:c6:4a:a6:1b:1e:45:34:02:84:55: e8:e6:e2:ad:83:02:2a:34:46:98:01:0a:19:2e:09: 2d:b4:1c:2c:f4:1c:e1:3a:1c:0d:df:f2:32:ba:27: 9e:6f:00:f7:62:77:9e:cc:bf:6e:01:c7:41:94:d5: 5d:d8:7c:01:40:87:36:4b:25:da:75:e8:5d:af:4b: d3:89:bc:d1:fd:3f:cf:77:77:40:f5:29:e0:26:56: 28:52:92:9d:9d:39:2b:ad:1c:d4:23:39:d0:b3:bc: f8:20:67:e7:a2:3e:1b:06:01:82:a4:1a:14:10:93: 1b:f0:e8:3c:d0:ba:db:08:df:2c:62:df:46:7a:2a: 73:4c:ff:da:fc:15:5a:d6:49:b7:68:8c:bf:88:c0: 5c:1a:79:95:12:70:ae:dd:37:7c:d6:f3:bd:81:00: 5a:7a:77:d4:92:e1:20:ca:b7:d6:46:71:26:c2:63: 5e:60:51:33:c7:42:32:98:c5:d8:8c:f1:ac:f0:70: f9:f7:00:bb:97:c8:e1:3a:ce:39:18:6a:f2:ad:7d: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:24:D2:2A:78:DE:A7:31:32:10:B6:25:69:93:5E:6D:8B:40:8C:30 X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e7:43:84:19:e5:c3:39:04:b0:45:52:eb:c8:1c:72:fd:c9: a1:84:51:9c:07:69:dd:c0:23:e4:3d:c8:49:39:dc:fd:94:5f: 9f:ab:6c:fa:9a:fd:17:1d:9c:e5:14:77:55:61:b3:0c:0a:83: 3e:bd:97:0e:92:57:a7:cb:4c:ae:bf:d2:ec:32:f4:16:aa:b4: 31:75:15:a5:08:cf:a5:6e:c4:3a:e7:af:28:4f:27:8c:70:5f: be:70:52:81:3d:66:5f:48:a2:08:93:34:e5:2c:42:05:e3:7c: 44:ad:77:94:d0:48:8f:f5:58:68:16:c4:5f:08:93:42:11:43: 5c:8f:bd:78:cb:71:e4:69:db:2c:71:26:fe:0c:6b:95:ac:00: 0d:0f:9d:0c:ed:a6:62:70:50:cf:94:a5:1c:9b:9b:ef:e7:8b: 20:a9:ef:78:1f:fc:ae:17:e1:d5:55:f2:20:dd:b1:93:b0:8b: 93:1e:6c:3a:10:15:9c:85:2c:d6:cd:57:18:3b:fc:17:68:85: 63:43:33:09:e2:5f:39:18:1d:14:05:52:05:a5:bc:7d:14:2d: 6b:b6:a2:1d:f5:f2:d4:c1:5b:f0:98:63:ba:0f:b7:2c:40:d2: a0:e4:37:3c:2c:fa:a8:6b:c5:98:8b:a2:05:ed:0f:ce:21:ec: f7:80:b1:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjUwNzIwMTczMjQyWhcNMjUwNzI3MTczMjQyWjAYMRYwFAYD VQQDEw02ODdkMjgzYS0wYjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nCHc1/AEk+76ritikUP3V6IyCphIF58ov4k6R/tzMceU4g2IWwAHqXxpqoH bdxiv8ZKphseRTQChFXo5uKtgwIqNEaYAQoZLgkttBws9BzhOhwN3/IyuieebwD3 YneezL9uAcdBlNVd2HwBQIc2SyXadehdr0vTibzR/T/Pd3dA9SngJlYoUpKdnTkr rRzUIznQs7z4IGfnoj4bBgGCpBoUEJMb8Og80LrbCN8sYt9GeipzTP/a/BVa1km3 aIy/iMBcGnmVEnCu3Td81vO9gQBaenfUkuEgyrfWRnEmwmNeYFEzx0IymMXYjPGs 8HD59wC7l8jhOs45GGryrX3rbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAck0ip4 3qcxMhC2JWmTXm2LQIwwMB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf50OEGeXDOQSwRVLryBxy/cmhhFGcB2ndwCPkPchJOdz9lF+fq2z6 mv0XHZzlFHdVYbMMCoM+vZcOkleny0yuv9LsMvQWqrQxdRWlCM+lbsQ6568oTyeM cF++cFKBPWZfSKIIkzTlLEIF43xErXeU0EiP9VhoFsRfCJNCEUNcj714y3Hkadss cSb+DGuVrAAND50M7aZicFDPlKUcm5vv54sgqe94H/yuF+HVVfIg3bGTsIuTHmw6 EBWchSzWzVcYO/wXaIVjQzMJ4l85GB0UBVIFpbx9FC1rtqId9fLUwVvwmGO6D7cs QNKg5Dc8LPqoa8WYi6IF7Q/OIez3gLHE -----END CERTIFICATE-----Generated at Mon Jul 21 07:21:40 2025 by rpki-client