$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json) Hash identifier: NxOqutCf/cNh64pRo3Z2ns/aQJzP/mIak/eqNKFOsKE= Subject key identifier: 72:10:28:2F:6B:DE:FC:77:DB:A1:60:71:BD:F5:89:F2:9C:A5:DB:14 Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft Manifest number: 5F Signing time: Sat 19 Jul 2025 07:22:59 +0000 Manifest this update: Sat 19 Jul 2025 07:22:58 +0000 Manifest next update: Sat 26 Jul 2025 07:22:58 +0000 Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: JFcMElbU5DilFYs3iJKVu9a4x+vH9R8WoewfxQBNw7k=) 2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: vXg2V9oSq+UecV6UR/hi4Z0CckYReJT3wpjl4H/MqsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Validity Not Before: Jul 19 07:22:58 2025 GMT Not After : Jul 26 07:22:58 2025 GMT Subject: CN=687b47d2-4935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:60:f0:fa:fc:11:ed:d1:8a:89:11:2d:90: 87:95:be:61:a0:cc:78:e2:e0:36:02:85:b5:98:f8: b0:2a:bc:56:6b:2e:f6:d5:be:e2:17:a8:10:51:ba: cd:d6:6b:66:64:55:38:2c:e6:f1:03:c1:6e:82:31: fe:a3:c1:62:4f:4b:82:a7:9f:62:fb:68:a3:cc:5e: ef:cf:18:54:3f:04:80:0d:fc:e9:49:2f:44:5d:a4: 3b:c0:f9:43:73:67:72:64:1c:50:99:11:2e:a0:da: a3:4d:b8:5b:2b:9b:a4:da:48:a8:3a:8a:c0:4a:12: 0e:0a:00:f6:28:d3:99:db:ce:a4:ce:ce:c5:60:fc: 75:35:c8:43:ad:7d:d0:1f:af:95:22:a2:10:4a:42: 80:a2:ae:e8:7b:11:cd:5c:8c:11:b5:ba:b2:4d:71: a5:9b:fc:a9:10:a1:e2:8e:0a:c6:2a:f3:48:b1:59: 5c:c8:6e:31:6c:64:5c:7c:84:4c:f3:72:91:39:c5: 57:9b:8e:2d:a0:b4:19:6a:6f:f6:51:5c:0b:54:a3: 7c:5e:c8:10:bc:1f:74:79:a4:f3:66:65:f5:f9:6d: a7:2b:84:d1:5d:3d:d0:8d:43:d7:01:61:df:40:71: 03:56:32:53:f7:1a:77:58:02:99:bc:71:3a:a8:78: eb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:10:28:2F:6B:DE:FC:77:DB:A1:60:71:BD:F5:89:F2:9C:A5:DB:14 X509v3 Authority Key Identifier: keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ab:af:60:27:54:c1:d8:81:b9:65:89:15:a3:23:b9:2b:f2: 1f:40:f9:88:fd:71:33:f2:e4:54:6e:82:22:88:b9:6f:e9:4b: c3:69:5d:06:3e:c2:ca:09:52:f2:3b:ee:38:11:fc:a0:56:a9: a1:62:fa:69:29:c8:a2:3e:f2:4d:24:9a:b3:26:a2:14:d3:6c: 88:cf:80:e3:b1:bf:37:5e:d1:e1:86:29:43:9c:fb:16:3c:2d: d5:b4:44:5a:8d:e7:35:46:a5:54:84:b0:d7:04:06:cd:6a:d3: 3c:97:0c:15:86:07:9e:f0:8c:d4:b7:b4:48:b6:ec:4f:f5:44: 3e:b6:48:bb:00:8e:71:45:59:43:24:ec:5b:95:a8:f9:22:28: 75:bd:9e:40:80:90:46:fe:74:6a:68:99:f0:35:60:c3:5c:a5: e5:9b:62:46:83:8d:0b:8c:96:b1:60:61:c4:42:07:d5:79:64: ba:63:4f:50:39:a8:2c:08:b0:75:90:72:32:0b:8b:3b:fd:d9: 11:58:20:16:7c:a6:90:54:b3:cc:c9:e3:b5:84:af:3a:a3:57: e4:d9:62:66:56:06:5f:4f:53:eb:ed:8a:84:4c:23:e4:70:fb: cf:68:6f:0f:8b:12:b1:6c:5d:0d:d0:46:e4:09:ae:59:85:e1: f5:13:a9:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoQ0EyOTc3NDc0MzBBMUJFQjM0MEJDQTM5RDYyMjJGRDI2 NDE5QjdEQjAeFw0yNTA3MTkwNzIyNThaFw0yNTA3MjYwNzIyNThaMBgxFjAUBgNV BAMTDTY4N2I0N2QyLTQ5MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl32Dw+vwR7dGKiREtkIeVvmGgzHji4DYChbWY+LAqvFZrLvbVvuIXqBBRus3W a2ZkVTgs5vEDwW6CMf6jwWJPS4Knn2L7aKPMXu/PGFQ/BIAN/OlJL0RdpDvA+UNz Z3JkHFCZES6g2qNNuFsrm6TaSKg6isBKEg4KAPYo05nbzqTOzsVg/HU1yEOtfdAf r5UiohBKQoCiruh7Ec1cjBG1urJNcaWb/KkQoeKOCsYq80ixWVzIbjFsZFx8hEzz cpE5xVebji2gtBlqb/ZRXAtUo3xeyBC8H3R5pPNmZfX5bacrhNFdPdCNQ9cBYd9A cQNWMlP3GndYApm8cTqoeOvvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUchAoL2ve /HfboWBxvfWJ8pyl2xQwHwYDVR0jBBgwFoAUyil3R0MKG+s0C8o51iIv0mQZt9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0UxQUM4MjEwRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL3lpbDNSME1LRy1zMEM4bzUxaUl2MG1RWnQ5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveWlsM1IwTUtHLXMwQzhvNTFpSXYwbVFadDlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0UxQUM4MjEwRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL3lpbDNSME1LRy1z MEM4bzUxaUl2MG1RWnQ5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHOrr2AnVMHYgblliRWjI7kr8h9A+Yj9cTPy5FRugiKIuW/pS8NpXQY+ wsoJUvI77jgR/KBWqaFi+mkpyKI+8k0kmrMmohTTbIjPgOOxvzde0eGGKUOc+xY8 LdW0RFqN5zVGpVSEsNcEBs1q0zyXDBWGB57wjNS3tEi27E/1RD62SLsAjnFFWUMk 7FuVqPkiKHW9nkCAkEb+dGpomfA1YMNcpeWbYkaDjQuMlrFgYcRCB9V5ZLpjT1A5 qCwIsHWQcjILizv92RFYIBZ8ppBUs8zJ47WErzqjV+TZYmZWBl9PU+vtioRMI+Rw +89obw+LErFsXQ3QRuQJrlmF4fUTqdM= -----END CERTIFICATE-----Generated at Mon Jul 21 08:10:07 2025 by rpki-client