$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft File: _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json) Hash identifier: 9qfp463deAPyQQ820i9l9m/4BHQtL16Rk/PEd8fA4EM= Subject key identifier: 2F:A5:4C:BF:D4:A0:CD:0A:DB:8D:A4:CA:2E:00:21:38:34:39:D3:6D Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft Manifest number: 5E Signing time: Fri 25 Jul 2025 07:29:30 +0000 Manifest this update: Fri 25 Jul 2025 07:29:29 +0000 Manifest next update: Fri 01 Aug 2025 07:29:29 +0000 Files and hashes: 1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: esBvuGTEEa0bCu6SiGatW8qpckEvzDuRLAxNajASj48=) 2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: v5aAOYFTKYQs9mswlL+k53rGpICa845yISkOLh9tIAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 07:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Validity Not Before: Jul 25 07:29:29 2025 GMT Not After : Aug 1 07:29:29 2025 GMT Subject: CN=6883325a-02e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:a2:8e:c1:25:39:6e:ae:aa:bd:8a:70:6f: ab:8c:94:f0:81:f0:db:4e:fc:fa:94:43:77:d6:77: 4e:7f:57:2e:85:ab:4f:99:8e:35:63:5b:41:5d:6d: e7:b1:85:84:42:d0:80:8f:01:ec:92:a8:9a:e7:cc: 7a:c1:0f:b8:63:55:4a:f3:1a:75:5e:f8:d7:ce:e2: 53:c9:1e:c5:48:04:52:cb:a7:e2:21:e9:29:9d:07: 8d:20:be:65:51:ba:0c:7e:ec:98:26:00:54:d1:4b: 26:79:9c:7c:0b:71:d4:d8:ef:a6:f3:79:7b:5c:c2: a0:db:bb:58:e8:63:8a:d3:7c:58:f4:38:0f:7b:bd: d8:34:82:3d:72:44:5d:e7:18:a5:34:21:f0:f2:96: b0:fd:9c:55:cd:a9:60:57:02:f2:cf:19:02:91:8c: 7c:26:45:fc:12:fd:f4:65:47:26:1a:ec:23:0e:c8: 06:30:eb:17:14:52:ef:ea:70:b2:55:fd:61:f4:82: 3e:ea:01:92:92:c2:3d:f0:ed:af:5e:05:cf:fb:3f: 41:4e:b3:15:8d:4f:8f:f4:04:91:b5:ee:0e:f9:67: 50:4a:e3:14:20:4d:20:a8:e2:97:62:47:ef:c0:6c: 0b:f3:b5:35:bb:4c:79:1d:f6:df:8d:a7:0a:ae:6f: 6c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A5:4C:BF:D4:A0:CD:0A:DB:8D:A4:CA:2E:00:21:38:34:39:D3:6D X509v3 Authority Key Identifier: keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3d:25:77:9f:aa:d5:45:fd:73:99:08:ae:dc:79:85:d3:4f: a8:94:7e:1a:00:31:96:63:d6:7d:18:80:41:eb:a6:e1:3d:72: ec:9e:9a:3e:7f:94:c8:30:29:1e:72:1f:2b:72:c2:73:f9:87: 62:85:79:c6:06:0b:93:39:de:b2:b0:32:57:a9:9c:db:40:5a: 15:f7:28:c5:df:0a:ef:67:9a:ad:67:9f:69:0d:7a:ef:d7:2c: c1:00:a2:06:d8:13:1f:c3:1b:01:ac:d0:c7:94:3b:1e:e6:88: 5f:f0:f4:f1:a3:51:f1:6a:13:00:6c:ec:7e:45:61:22:c2:a5: 3f:06:28:83:05:b5:50:01:31:ed:9e:55:a9:a6:54:bb:8b:5f: 80:fb:cb:f0:3c:41:2a:11:30:de:9b:44:db:46:0f:bb:f6:c0: 10:17:9c:44:81:dc:f9:9e:7a:86:b8:b0:e4:9a:af:f6:89:7a: 60:14:f9:25:a2:5e:81:63:b0:10:a3:ee:8a:bd:cf:ff:ff:a1: 8e:ed:20:b0:c7:f6:8d:ca:40:e0:a1:15:f1:18:55:18:15:58: 8a:39:8b:09:16:36:a6:92:83:36:89:53:ba:ff:db:d1:7d:59: d0:96:e2:73:87:e6:3c:a4:93:15:34:5e:6b:ef:42:c5:a7:6e: 72:b7:f2:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzRGQjExMC8GA1UEBRMoRkYyMEJDMzc5RDg5QTBEQjNCRTZGQ0YyOTBGQTNERDUy RUI3RkEyMDAeFw0yNTA3MjUwNzI5MjlaFw0yNTA4MDEwNzI5MjlaMBgxFjAUBgNV BAMTDTY4ODMzMjVhLTAyZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF3KKOwSU5bq6qvYpwb6uMlPCB8NtO/PqUQ3fWd05/Vy6Fq0+ZjjVjW0Fdbeex hYRC0ICPAeySqJrnzHrBD7hjVUrzGnVe+NfO4lPJHsVIBFLLp+Ih6SmdB40gvmVR ugx+7JgmAFTRSyZ5nHwLcdTY76bzeXtcwqDbu1joY4rTfFj0OA97vdg0gj1yRF3n GKU0IfDylrD9nFXNqWBXAvLPGQKRjHwmRfwS/fRlRyYa7CMOyAYw6xcUUu/qcLJV /WH0gj7qAZKSwj3w7a9eBc/7P0FOsxWNT4/0BJG17g75Z1BK4xQgTSCo4pdiR+/A bAvztTW7THkd9t+Npwqub2wbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL6VMv9Sg zQrbjaTKLgAhODQ5020wHwYDVR0jBBgwFoAU/yC8N52JoNs75vzykPo91S63+iAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDNEZCLzA5OEZFMkU4RENE QzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05zNzV2enlrUG85MVM2My1p QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3lDOE41MkpvTnM3NXZ6eWtQbzkxUzYzLWlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD NEZCLzA5OEZFMkU4RENEQzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05z NzV2enlrUG85MVM2My1pQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGg9JXefqtVF/XOZCK7ceYXTT6iUfhoAMZZj1n0YgEHrpuE9cuyemj5/ lMgwKR5yHytywnP5h2KFecYGC5M53rKwMlepnNtAWhX3KMXfCu9nmq1nn2kNeu/X LMEAogbYEx/DGwGs0MeUOx7miF/w9PGjUfFqEwBs7H5FYSLCpT8GKIMFtVABMe2e VammVLuLX4D7y/A8QSoRMN6bRNtGD7v2wBAXnESB3Pmeeoa4sOSar/aJemAU+SWi XoFjsBCj7oq9z///oY7tILDH9o3KQOChFfEYVRgVWIo5iwkWNqaSgzaJU7r/29F9 WdCW4nOH5jykkxU0XmvvQsWnbnK38qE= -----END CERTIFICATE-----Generated at Sat Jul 26 06:49:16 2025 by rpki-client