$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft File: yut3vPCf9pfximF6qGCJbkMm2dM.mft (raw, json) Hash identifier: YmOdsADYIfN5xefWfMK7js0Pt6gv9gv6TW2AsTvRo/8= Subject key identifier: D1:4B:14:5B:EC:29:56:4A:51:16:00:EF:1B:18:63:FC:A1:B4:3E:C0 Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3 Certificate issuer: /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft Manifest number: 77 Signing time: Wed 23 Jul 2025 07:11:42 +0000 Manifest this update: Wed 23 Jul 2025 07:11:42 +0000 Manifest next update: Wed 30 Jul 2025 07:11:42 +0000 Files and hashes: 1: yut3vPCf9pfximF6qGCJbkMm2dM.crl (hash: 7B3tyNcPdtax9HVuutJfQIHVJIGLzG0Zlr0Nj/fs5Vo=) 2: DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (hash: qIk9+gZ8TbHX8Gukxf70VAnbnxYhLjL95QlSz/2ptXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3 Validity Not Before: Jul 23 07:11:42 2025 GMT Not After : Jul 30 07:11:42 2025 GMT Subject: CN=68808b2e-6fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:33:e3:a6:0f:82:34:a1:26:8a:d1:47:77: c1:87:02:f1:62:b8:b4:bb:6b:80:4e:a4:42:04:4b: 50:8b:de:3d:03:b2:7c:1e:0e:ab:7a:38:36:56:2f: 02:75:32:c4:24:70:fc:02:50:10:d5:d6:78:80:ca: 8f:be:2f:12:5f:de:eb:2e:0b:c3:01:52:34:0b:ed: a6:28:59:e8:9c:be:c3:67:75:37:f9:62:f7:a3:11: c0:58:87:2f:93:ed:60:47:62:93:4d:af:01:86:7a: 9e:3b:d4:69:8d:66:60:db:f5:58:7c:bb:b8:f4:41: 50:dd:9f:7e:26:e4:8e:e3:00:3b:6f:6c:9b:52:a6: c6:cd:c1:01:ea:2f:9d:e6:2e:b8:72:a7:85:97:3c: c8:44:30:9a:ee:d1:64:8b:ae:44:90:29:12:b8:82: d2:cd:65:4d:22:40:3d:9a:dc:3e:76:3a:40:d5:57: 6b:9b:4f:58:b1:2c:7f:e5:7f:d8:cc:2f:33:c8:83: 99:17:25:c3:2b:da:0c:d9:b3:28:5c:93:c0:90:76: 33:37:5e:8b:c5:7f:c0:01:44:c2:68:4d:f3:b3:22: bd:f0:f9:15:c0:b1:c7:88:87:49:b1:3f:27:af:94: 5a:97:a0:51:15:0a:3f:cd:d8:22:69:7b:34:ea:d3: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4B:14:5B:EC:29:56:4A:51:16:00:EF:1B:18:63:FC:A1:B4:3E:C0 X509v3 Authority Key Identifier: keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e3:ed:59:37:8b:26:ac:96:88:01:4c:d3:d7:9d:b6:0a:a4: 49:46:1f:56:7c:3d:07:d9:90:fa:82:c0:54:be:13:a6:ff:03: 89:73:63:10:98:67:b5:f3:8d:35:af:83:e8:36:e0:82:4f:38: 63:76:c5:e5:fc:99:4e:9e:27:2b:2d:df:71:24:87:8d:b7:cc: 69:74:22:98:25:65:5d:7f:25:1c:1f:7f:82:8f:d6:28:32:e0: fa:d0:f1:cf:0d:e0:48:1e:1d:38:88:ec:23:0c:6d:7a:55:50: 93:17:84:3f:d3:94:b6:d4:ce:e1:0e:41:4c:81:99:cb:7b:61: 66:1a:27:58:c7:0c:3a:d6:36:66:92:9a:79:0d:09:93:ea:ad: 1a:dd:f0:c5:eb:47:61:49:11:42:d7:e0:66:c3:d2:06:57:0f: 9e:8a:76:59:22:fd:f6:d7:ef:22:75:77:e0:f8:ba:90:58:c9: 72:39:6b:56:54:74:65:79:ba:a9:64:da:85:20:84:1b:52:de: c1:25:e3:d6:4c:7d:e4:1c:1f:b4:84:ea:02:63:42:03:33:96: 52:b2:06:ad:a7:e9:1a:5d:28:ce:96:fc:59:55:f4:66:10:e3: 16:14:36:7b:f8:da:78:ff:bd:61:44:d2:7b:79:c0:0b:a2:1d: 76:2e:b7:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkYyQjExMC8GA1UEBRMoQ0FFQjc3QkNGMDlGRjY5N0YxOEE2MTdBQTg2MDg5NkU0 MzI2RDlEMzAeFw0yNTA3MjMwNzExNDJaFw0yNTA3MzAwNzExNDJaMBgxFjAUBgNV BAMTDTY4ODA4YjJlLTZmYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2xzPjpg+CNKEmitFHd8GHAvFiuLS7a4BOpEIES1CL3j0DsnweDqt6ODZWLwJ1 MsQkcPwCUBDV1niAyo++LxJf3usuC8MBUjQL7aYoWeicvsNndTf5YvejEcBYhy+T 7WBHYpNNrwGGep471GmNZmDb9Vh8u7j0QVDdn34m5I7jADtvbJtSpsbNwQHqL53m Lrhyp4WXPMhEMJru0WSLrkSQKRK4gtLNZU0iQD2a3D52OkDVV2ubT1ixLH/lf9jM LzPIg5kXJcMr2gzZsyhck8CQdjM3XovFf8ABRMJoTfOzIr3w+RXAsceIh0mxPyev lFqXoFEVCj/N2CJpezTq0x27AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0UsUW+wp VkpRFgDvGxhj/KG0PsAwHwYDVR0jBBgwFoAUyut3vPCf9pfximF6qGCJbkMm2dMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCRjJCLzVFMTVERDU0QjYz MDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBmeGltRjZxR0NKYmtNbTJk TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXV0M3ZQQ2Y5cGZ4aW1GNnFHQ0pia01tMmRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC RjJCLzVFMTVERDU0QjYzMDExRUY5MDYxQ0E2MEM0RjlBRTAyL3l1dDN2UENmOXBm eGltRjZxR0NKYmtNbTJkTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGjj7Vk3iyaslogBTNPXnbYKpElGH1Z8PQfZkPqCwFS+E6b/A4lzYxCY Z7XzjTWvg+g24IJPOGN2xeX8mU6eJyst33Ekh423zGl0IpglZV1/JRwff4KP1igy 4PrQ8c8N4EgeHTiI7CMMbXpVUJMXhD/TlLbUzuEOQUyBmct7YWYaJ1jHDDrWNmaS mnkNCZPqrRrd8MXrR2FJEULX4GbD0gZXD56Kdlki/fbX7yJ1d+D4upBYyXI5a1ZU dGV5uqlk2oUghBtS3sEl49ZMfeQcH7SE6gJjQgMzllKyBq2n6RpdKM6W/FlV9GYQ 4xYUNnv42nj/vWFE0nt5wAuiHXYut3U= -----END CERTIFICATE-----Generated at Thu Jul 24 04:54:02 2025 by rpki-client