$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: 8fBs3XvMsoo7zUo8OW2bUoFqkX32AiOzA1zdEohL19E= Subject key identifier: 09:0B:A0:6B:78:8D:10:23:99:A2:D2:DD:FC:B9:EA:61:C5:02:8F:5A Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: 0109 Signing time: Sat 19 Jul 2025 05:18:34 +0000 Manifest this update: Sat 19 Jul 2025 05:18:33 +0000 Manifest next update: Sat 26 Jul 2025 05:18:33 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: iOSrXkHiJqG/AInJ8/nSiXR98SBX4q8F8iVcdFrcCnE=) 2: 0992C84EAC9111EF81B7B058C4F9AE02.roa (hash: 0r1+bjf/CBoFjNEUVu+pdLpoE7fYxxmBMNd9J5fRyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: Jul 19 05:18:33 2025 GMT Not After : Jul 26 05:18:33 2025 GMT Subject: CN=687b2aa9-602b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:a8:a0:c2:ad:c7:a7:85:9f:64:1d:f9:f0: 4d:4c:e6:7b:db:5f:e1:e2:db:1a:9a:51:bf:0a:f3: 8b:ec:18:40:4b:c4:06:b5:5b:83:b6:4a:ea:3d:ad: fc:40:bb:a3:e4:24:fd:a4:e4:57:4d:a9:34:98:36: 16:f5:fa:8b:47:cf:9a:56:3a:47:55:97:f8:59:5e: fb:82:8c:aa:91:78:a0:e7:48:de:ec:e8:7e:c4:e8: 4c:a5:53:0b:0f:2a:86:4c:42:f4:d9:87:5c:a6:31: fd:bd:87:f0:6c:8e:c4:0e:b0:08:2b:1b:55:37:96: df:94:ef:dc:94:38:86:2a:cf:01:22:cd:3d:fd:c2: 86:c6:e1:1a:88:8c:04:c4:ee:53:19:d5:19:f1:9f: cb:81:bb:54:a7:61:b3:39:bf:c5:11:df:92:c8:88: 5f:f2:e2:bd:1b:b4:14:55:93:0d:54:e8:a1:ca:dd: 3d:93:c1:b0:29:d9:69:53:79:f5:fb:f9:58:99:37: d7:3b:94:93:1f:30:6d:1a:2d:58:70:62:4c:79:7b: 80:57:89:08:69:5d:6a:b7:4a:e3:aa:7d:a9:24:73: 6d:bb:8c:af:88:a4:cc:5c:56:04:ae:37:17:a0:1c: 22:21:f3:06:f2:60:8b:66:8d:90:66:fe:79:b6:9c: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0B:A0:6B:78:8D:10:23:99:A2:D2:DD:FC:B9:EA:61:C5:02:8F:5A X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:12:9a:82:6d:a0:d2:80:1f:a2:66:8e:ea:ab:da:52:7d:ba: e5:50:6e:8e:d7:01:2e:9f:56:96:31:0c:d3:41:9a:ed:16:fe: c9:89:e9:a7:6a:8a:65:fb:d9:8a:c6:76:cb:e7:41:95:69:37: 17:29:7a:35:7c:c5:f4:aa:57:77:0b:4e:2b:43:93:de:7a:bf: 32:14:d7:cf:cd:93:97:38:d4:ab:f7:c6:15:86:e5:29:45:e0: 3a:89:c6:42:4c:3a:25:ce:23:cf:00:97:cb:d1:c5:b4:01:c6: 37:71:e5:6d:27:f9:2a:f6:c6:03:47:22:56:72:91:03:d7:7f: f1:e5:e8:52:a3:9c:da:ca:46:19:71:b0:f5:9e:af:c6:0e:94: b5:5e:51:be:d9:c2:c3:4b:6b:f1:4c:87:c2:00:d9:13:89:5d: 9e:9d:f8:da:97:96:e0:85:33:ae:fe:5e:59:ad:55:31:2b:c3: 57:a5:16:d4:b6:01:06:82:ea:3b:9c:9d:9a:56:29:c4:11:84: 9f:4d:a3:9f:e7:13:7c:09:06:c9:e4:1e:e2:cd:66:6d:a0:12: a1:c7:ed:bc:83:93:64:03:ea:b2:56:5a:91:ce:41:b9:09:3e: a9:68:db:8c:25:87:3e:6a:be:e4:e3:e9:16:68:bb:23:01:4f: 14:54:13:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKDYxNjNBOTU1NEMzMzA2NzlGN0VBMTY2NzhCMTA4RDk2 NEVDMUM4MDIwHhcNMjUwNzE5MDUxODMzWhcNMjUwNzI2MDUxODMzWjAYMRYwFAYD VQQDEw02ODdiMmFhOS02MDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMyooMKtx6eFn2Qd+fBNTOZ721/h4tsamlG/CvOL7BhAS8QGtVuDtkrqPa38 QLuj5CT9pORXTak0mDYW9fqLR8+aVjpHVZf4WV77goyqkXig50je7Oh+xOhMpVML DyqGTEL02YdcpjH9vYfwbI7EDrAIKxtVN5bflO/clDiGKs8BIs09/cKGxuEaiIwE xO5TGdUZ8Z/LgbtUp2GzOb/FEd+SyIhf8uK9G7QUVZMNVOihyt09k8GwKdlpU3n1 +/lYmTfXO5STHzBtGi1YcGJMeXuAV4kIaV1qt0rjqn2pJHNtu4yviKTMXFYErjcX oBwiIfMG8mCLZo2QZv55tpxfiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkLoGt4 jRAjmaLS3fy56mHFAo9aMB8GA1UdIwQYMBaAFGFjqVVMMwZ59+oWZ4sQjZZOwcgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS81QjVCOTNFQ0Q5 RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJubjM2aFpuaXhDTmxrN0J5 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS81QjVCOTNFQ0Q5RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJu bjM2aFpuaXhDTmxrN0J5QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCEpqCbaDSgB+iZo7qq9pSfbrlUG6O1wEun1aWMQzTQZrtFv7Jiemn aopl+9mKxnbL50GVaTcXKXo1fMX0qld3C04rQ5Peer8yFNfPzZOXONSr98YVhuUp ReA6icZCTDolziPPAJfL0cW0AcY3ceVtJ/kq9sYDRyJWcpED13/x5ehSo5zaykYZ cbD1nq/GDpS1XlG+2cLDS2vxTIfCANkTiV2enfjal5bghTOu/l5ZrVUxK8NXpRbU tgEGguo7nJ2aVinEEYSfTaOf5xN8CQbJ5B7izWZtoBKhx+28g5NkA+qyVlqRzkG5 CT6paNuMJYc+ar7k4+kWaLsjAU8UVBNL -----END CERTIFICATE-----Generated at Sun Jul 20 18:38:49 2025 by rpki-client