$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft File: yhZXNMEc1wu3iaHSw6DpTtuULUo.mft (raw, json) Hash identifier: Ilwl8d/IekaJ/xgmoex788ZtSwjKqReoGPMbPksPuE4= Subject key identifier: F9:D9:27:23:7F:48:9A:05:1B:C0:E7:17:31:CB:8B:C3:7C:9B:1D:9E Authority key identifier: CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A Certificate issuer: /CN=A91FE179/serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Certificate serial: 0947 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft Manifest number: 0941 Signing time: Fri 18 Jul 2025 20:26:56 +0000 Manifest this update: Fri 18 Jul 2025 20:26:55 +0000 Manifest next update: Fri 25 Jul 2025 20:26:55 +0000 Files and hashes: 1: yhZXNMEc1wu3iaHSw6DpTtuULUo.crl (hash: p/peam09OjFqeb5yKoa63QgW+Fexxu8YxOeH2uuwzgE=) 2: 805149989FDE11EAB02CF366C4F9AE02.roa (hash: F/lUPKZHFm1sIOo7h73Lh8+bzw8LraoeACifeBa4ogU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE179, serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Validity Not Before: Jul 18 20:26:55 2025 GMT Not After : Jul 25 20:26:55 2025 GMT Subject: CN=687aae0f-9e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:29:6c:37:6b:fa:9f:ac:2c:78:d4:f4:e7:dc: da:ac:05:c4:dd:f1:43:d3:6b:1a:76:22:13:07:4f: cc:9a:e5:1a:2b:da:b2:74:02:3f:2b:be:62:f3:bf: 42:c6:02:2b:68:39:dc:92:76:19:18:1c:c1:f0:c0: b2:a3:33:ba:c7:41:6e:2a:3b:eb:9a:5b:cc:0e:e9: 43:67:1f:4b:3f:5b:f7:62:47:37:60:f0:59:33:d4: 6c:de:d2:ac:0c:aa:19:71:90:32:55:76:ee:08:91: ac:5a:3d:45:d7:81:57:4a:06:14:5e:6d:a4:77:24: e1:2b:66:93:d7:97:6c:11:5a:0e:14:3c:11:10:78: fa:d6:98:9e:91:6a:ed:c8:39:74:b8:47:3d:c3:87: 88:09:bd:00:e2:13:dc:3e:b4:b9:bc:0d:02:43:36: 54:a6:78:cb:34:cf:91:19:ae:f3:96:41:e9:53:f1: e9:9a:f3:5b:e1:34:3a:e4:0b:0e:1d:f6:3e:62:34: 89:65:25:e6:5c:fa:96:08:52:98:b0:ea:94:be:18: 45:66:86:0c:0b:d2:c0:ed:a0:36:12:28:2c:f2:fc: 56:65:19:36:f2:da:db:85:c3:db:bb:43:35:38:40: 58:bd:0f:db:ef:9f:b0:c7:a4:2f:b9:3a:6a:9e:fb: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D9:27:23:7F:48:9A:05:1B:C0:E7:17:31:CB:8B:C3:7C:9B:1D:9E X509v3 Authority Key Identifier: keyid:CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f7:52:3e:d3:19:90:86:31:b5:35:9f:60:53:f8:0a:95:2c: 94:f5:7f:fc:24:d6:57:13:12:31:f7:cb:37:02:fa:22:b1:bf: 2d:90:93:38:a7:7e:84:17:33:58:18:21:c1:d8:af:25:4f:b4: d1:4e:fd:7e:46:97:06:1d:fe:c4:06:8e:4a:25:ca:16:85:f6: bf:dc:55:e1:6c:3a:d8:01:43:58:8c:75:06:58:96:ed:d2:56: 0b:78:72:bd:f0:fa:2f:1e:a1:27:d5:79:66:6d:3e:f7:61:6a: 37:1d:36:4d:4e:04:b5:98:1e:6a:ab:6c:e0:c9:33:18:a2:86: b4:aa:30:e5:72:de:b9:26:02:c1:ff:ec:65:35:d3:db:9c:b2: 24:a1:29:16:1b:e3:fe:f0:86:3a:e0:d5:48:b7:cc:fd:be:4f: f0:b3:f1:19:49:47:7a:57:fd:cd:44:55:11:b5:bc:ad:e7:85: e1:c8:54:61:0b:c1:ef:68:a2:32:9e:2c:81:14:08:6d:1a:ed: 74:0c:8e:b8:26:48:8f:61:e8:33:c6:41:3c:fd:c0:57:9e:f4: 73:f0:60:e1:a3:c6:fd:8a:ae:fb:47:7e:cd:cf:f4:de:e9:40: 98:c4:87:9e:a1:30:c3:fe:f7:25:d0:6e:ae:9a:a4:54:70:5a: 78:74:21:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUxNzkxMTAvBgNVBAUTKENBMTY1NzM0QzExQ0Q3MEJCNzg5QTFEMkMzQTBFOTRF REI5NDJENEEwHhcNMjUwNzE4MjAyNjU1WhcNMjUwNzI1MjAyNjU1WjAYMRYwFAYD VQQDEw02ODdhYWUwZi05ZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ClsN2v6n6wseNT059zarAXE3fFD02sadiITB0/MmuUaK9qydAI/K75i879C xgIraDncknYZGBzB8MCyozO6x0FuKjvrmlvMDulDZx9LP1v3Ykc3YPBZM9Rs3tKs DKoZcZAyVXbuCJGsWj1F14FXSgYUXm2kdyThK2aT15dsEVoOFDwREHj61piekWrt yDl0uEc9w4eICb0A4hPcPrS5vA0CQzZUpnjLNM+RGa7zlkHpU/HpmvNb4TQ65AsO HfY+YjSJZSXmXPqWCFKYsOqUvhhFZoYMC9LA7aA2Eigs8vxWZRk28trbhcPbu0M1 OEBYvQ/b75+wx6QvuTpqnvsSiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnZJyN/ SJoFG8DnFzHLi8N8mx2eMB8GA1UdIwQYMBaAFMoWVzTBHNcLt4mh0sOg6U7blC1K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTE3OS81QzIwMDRFMDlG REIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3dTNpYUhTdzZEcFR0dVVM VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWlhOTUVjMXd1M2lhSFN3NkRwVHR1VUxVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTE3OS81QzIwMDRFMDlGREIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3 dTNpYUhTdzZEcFR0dVVMVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH91I+0xmQhjG1NZ9gU/gKlSyU9X/8JNZXExIx98s3Avoisb8tkJM4 p36EFzNYGCHB2K8lT7TRTv1+RpcGHf7EBo5KJcoWhfa/3FXhbDrYAUNYjHUGWJbt 0lYLeHK98PovHqEn1XlmbT73YWo3HTZNTgS1mB5qq2zgyTMYooa0qjDlct65JgLB /+xlNdPbnLIkoSkWG+P+8IY64NVIt8z9vk/ws/EZSUd6V/3NRFURtbyt54XhyFRh C8HvaKIyniyBFAhtGu10DI64JkiPYegzxkE8/cBXnvRz8GDho8b9iq77R37Nz/Te 6UCYxIeeoTDD/vcl0G6umqRUcFp4dCE1 -----END CERTIFICATE-----Generated at Sun Jul 20 06:18:37 2025 by rpki-client