$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: 8M5pNDMhNFrs4ojJC4UNt1oTZ/kn/zAUhxQB364OcfQ= Subject key identifier: 78:8B:AA:0B:A1:6F:E4:4D:5D:12:BB:05:AA:1A:E0:05:F7:64:8A:BF Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 0170 Signing time: Mon 21 Jul 2025 03:58:14 +0000 Manifest this update: Mon 21 Jul 2025 03:58:14 +0000 Manifest next update: Mon 28 Jul 2025 03:58:14 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: l+gJNoDzmIZDFsZWAt9jCcDpFF7nEfPIbdSrXz6cBVE=) 2: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: g09v6jk8fn3awL6foCEfKGlvvvO5I0PHpOGz6LziEuA=) 3: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: rhIhi3I6SpyrkjjQ3cL8Mw2vXOogWSjfaZP+3P/2bFk=) 4: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: qvUP6d81IdrzZbKdEjVG1snn+Y2Byr8jMGRCFKnK8TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Validity Not Before: Jul 21 03:58:14 2025 GMT Not After : Jul 28 03:58:14 2025 GMT Subject: CN=687dbad6-11c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0a:c7:62:9b:02:04:9d:21:47:ce:12:10:1f: 25:8b:d0:f8:02:83:7f:26:f6:ee:90:80:ec:76:db: 13:b7:70:9e:2e:be:20:dc:68:47:08:d5:a8:6d:f7: 89:74:53:f4:9a:3c:d8:d8:8b:f9:f4:e9:0b:83:a5: 52:c7:82:0c:be:87:01:7e:4e:c7:a1:00:e5:89:42: 7b:72:d2:33:53:36:57:44:ee:83:2c:ba:e3:b4:f0: e1:17:ac:60:e2:86:79:4b:4e:72:25:7f:7e:5f:f3: ba:d5:b4:e5:57:79:c2:4a:d8:bf:c0:4f:2c:d1:50: 95:f8:1a:b5:62:b1:fc:f4:c8:e2:8a:6c:7e:4f:89: f8:9c:bc:ae:7a:42:2f:28:58:22:e0:aa:a2:10:e6: 9a:37:36:8d:9a:bf:6b:de:76:4e:37:0c:22:33:69: 17:e4:8b:bb:1b:2f:de:86:f8:ba:7a:95:2e:24:75: 2f:08:8f:70:38:ae:00:41:98:87:37:dd:2b:be:7b: d4:8f:36:b7:ec:d5:eb:b0:9e:e4:07:00:1c:c6:48: 6e:e4:eb:7f:c6:09:0d:3b:53:49:b2:94:4a:60:94: 8c:6c:d4:70:b4:a8:7c:9a:0f:73:a3:9a:16:ee:ec: ea:b1:01:63:51:0c:59:a9:bc:fd:05:ae:f7:e4:53: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8B:AA:0B:A1:6F:E4:4D:5D:12:BB:05:AA:1A:E0:05:F7:64:8A:BF X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7c:e3:b9:da:ee:bc:ed:50:ba:6f:51:39:74:a7:fb:c7:92: 7f:1b:0f:3c:24:de:79:e2:d1:6f:88:ba:0d:b1:ee:7a:00:67: e4:40:9f:a1:32:e1:d1:6b:25:2e:ad:6c:9c:12:f9:d5:b6:64: e0:a1:f6:9d:7d:48:82:3e:fc:7d:7c:52:7e:70:b4:e8:9e:5b: a5:77:37:04:c6:22:28:07:6e:e7:63:5e:b5:3e:4f:1e:18:cd: d4:f7:13:18:a0:76:44:b6:a0:f8:63:ca:14:bd:b4:16:d1:51: ed:d8:ea:0a:cc:c7:78:f9:0b:7c:a1:4b:2b:0f:b3:d0:ae:c1: 68:49:53:ae:5f:44:ed:b3:6b:65:d2:9e:9f:17:fc:80:07:44: 8e:55:c7:fd:f4:e8:e3:48:af:8d:e1:d0:20:3a:e1:30:6b:de: e4:c5:5d:e9:3b:39:fa:43:75:76:8b:8e:f1:52:0f:d5:e7:1c: a3:ca:67:d0:0c:90:3e:2e:13:d0:43:ce:85:ec:9e:b2:c5:5e: c1:6d:02:ab:ee:cd:bf:8a:1c:1b:d4:7d:82:fa:b4:69:97:81: be:67:60:71:3f:ad:8c:92:ee:4e:56:a2:59:46:b3:b1:b5:72: bd:7c:58:ac:ff:7d:ac:4a:2d:be:81:b2:f9:e0:09:8d:19:2f: af:af:32:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjUwNzIxMDM1ODE0WhcNMjUwNzI4MDM1ODE0WjAYMRYwFAYD VQQDEw02ODdkYmFkNi0xMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wrHYpsCBJ0hR84SEB8li9D4AoN/JvbukIDsdtsTt3CeLr4g3GhHCNWobfeJ dFP0mjzY2Iv59OkLg6VSx4IMvocBfk7HoQDliUJ7ctIzUzZXRO6DLLrjtPDhF6xg 4oZ5S05yJX9+X/O61bTlV3nCSti/wE8s0VCV+Bq1YrH89Mjiimx+T4n4nLyuekIv KFgi4KqiEOaaNzaNmr9r3nZONwwiM2kX5Iu7Gy/ehvi6epUuJHUvCI9wOK4AQZiH N90rvnvUjza37NXrsJ7kBwAcxkhu5Ot/xgkNO1NJspRKYJSMbNRwtKh8mg9zo5oW 7uzqsQFjUQxZqbz9Ba735FPjiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiLqguh b+RNXRK7Baoa4AX3ZIq/MB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNfOO52u687VC6b1E5dKf7x5J/Gw88JN554tFviLoNse56AGfkQJ+h MuHRayUurWycEvnVtmTgofadfUiCPvx9fFJ+cLTonluldzcExiIoB27nY161Pk8e GM3U9xMYoHZEtqD4Y8oUvbQW0VHt2OoKzMd4+Qt8oUsrD7PQrsFoSVOuX0Tts2tl 0p6fF/yAB0SOVcf99OjjSK+N4dAgOuEwa97kxV3pOzn6Q3V2i47xUg/V5xyjymfQ DJA+LhPQQ86F7J6yxV7BbQKr7s2/ihwb1H2C+rRpl4G+Z2BxP62Mku5OVqJZRrOx tXK9fFis/32sSi2+gbL54AmNGS+vrzJH -----END CERTIFICATE-----Generated at Mon Jul 21 13:09:17 2025 by rpki-client