$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft File: y4244fF7x3I0bdn_uyByz6j9plI.mft (raw, json) Hash identifier: poz/6fR9wJyA2Y9RgOtIFeMIrdl+mq/A1y6lvwymkdQ= Subject key identifier: BA:E0:DD:65:8D:50:20:5E:DD:9D:03:BE:0D:8A:E2:C5:20:67:F2:CB Authority key identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 Certificate issuer: /CN=A91DB7E9/serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft Manifest number: 014B Signing time: Sat 19 Jul 2025 04:28:25 +0000 Manifest this update: Sat 19 Jul 2025 04:28:25 +0000 Manifest next update: Sat 26 Jul 2025 04:28:25 +0000 Files and hashes: 1: y4244fF7x3I0bdn_uyByz6j9plI.crl (hash: 5hF76DYd9EWwIfbOddTrh34luDMkWMQMUeM1jENVlq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9, serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652 Validity Not Before: Jul 19 04:28:25 2025 GMT Not After : Jul 26 04:28:25 2025 GMT Subject: CN=687b1ee9-8172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:e8:13:c9:25:c0:16:6c:ff:b7:5b:af:b5: 56:3d:93:ca:52:31:65:95:2b:5c:28:d1:9c:4d:d0: d6:bb:97:1a:c0:82:fa:5b:14:cb:d6:a4:26:8f:e4: 3c:a0:18:ea:66:91:66:12:53:9c:76:c7:fc:99:df: c6:7f:c3:08:0b:ac:e3:82:1f:82:53:0d:23:0e:f0: b6:04:0f:88:b8:f2:c5:c9:f6:ae:fa:ba:f2:da:d8: 10:2b:a6:f1:e3:8c:90:b6:4d:3f:36:21:59:49:63: b8:0c:61:0c:86:5a:ef:17:cd:03:c9:3b:1b:ce:1f: f1:a8:82:ed:22:bf:74:ec:87:e3:99:e7:62:b4:18: 17:4d:d0:02:a2:33:cd:df:bd:69:7d:79:e0:fa:1f: e3:f1:87:e3:77:92:e4:b2:c7:79:91:8c:21:a4:f3: 71:b9:9e:ce:14:18:ca:67:1b:1a:90:63:3f:45:be: 38:7b:c7:2e:4f:0f:d2:3e:a5:85:fb:4c:1c:5f:6c: 1d:9b:9b:67:b6:d6:ba:52:19:ce:8c:16:a0:ee:94: 0e:37:42:d8:c2:56:37:4c:8b:9f:26:46:bc:67:85: ec:fd:38:af:28:6d:16:d9:65:46:49:df:99:52:f8: 7e:0f:b6:a9:98:de:9b:5a:76:f5:64:02:dc:f9:e7: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E0:DD:65:8D:50:20:5E:DD:9D:03:BE:0D:8A:E2:C5:20:67:F2:CB X509v3 Authority Key Identifier: keyid:CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:cb:87:b6:ae:69:88:72:6d:ae:ec:42:e8:5e:b5:03:df:ea: 4f:6f:a9:ab:ca:97:55:f2:a3:dc:46:8c:8e:f8:78:ce:d0:d3: b4:42:90:59:f2:d0:2e:13:e8:52:66:1f:37:fd:dd:e4:76:c4: af:b2:11:d3:14:d7:9f:90:e6:ca:d5:d5:bc:2d:67:56:d0:6c: 55:32:73:67:41:61:ee:e4:4c:9c:27:d7:54:08:33:a2:5d:70: c6:ed:78:1d:55:b3:25:d6:a5:d2:ca:f1:fc:bc:ba:99:b5:31: 3f:78:e4:07:09:0c:bf:88:9b:32:50:1d:08:73:ca:f7:ab:3e: 9f:bd:f7:28:42:a2:39:71:7f:fc:f6:95:96:e8:e8:21:2f:0d: b6:29:d9:67:4b:e4:f3:71:7a:b8:7f:9e:b0:5f:d9:dc:93:db: c0:81:6d:d2:4f:0e:b7:cf:04:9c:3b:64:48:ad:36:5c:52:8a: cb:b8:c8:64:32:30:23:28:22:42:2b:95:ac:ab:fc:e5:b2:51: 4d:fa:fb:c2:e2:43:83:4e:1e:1b:9f:0c:48:ca:c6:32:17:af: 88:e0:e1:0a:0e:68:36:32:8a:0c:91:32:ce:73:9e:08:df:56: 8f:3a:61:b4:54:11:b1:51:03:30:88:50:e9:4e:da:8d:2c:4f: 07:bc:ed:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3RTkxMTAvBgNVBAUTKENCOERCOEUxRjE3QkM3NzIzNDZERDlGRkJCMjA3MkNG QThGREE2NTIwHhcNMjUwNzE5MDQyODI1WhcNMjUwNzI2MDQyODI1WjAYMRYwFAYD VQQDEw02ODdiMWVlOS04MTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9roE8klwBZs/7dbr7VWPZPKUjFllStcKNGcTdDWu5cawIL6WxTL1qQmj+Q8 oBjqZpFmElOcdsf8md/Gf8MIC6zjgh+CUw0jDvC2BA+IuPLFyfau+rry2tgQK6bx 44yQtk0/NiFZSWO4DGEMhlrvF80DyTsbzh/xqILtIr907IfjmeditBgXTdACojPN 371pfXng+h/j8Yfjd5Lkssd5kYwhpPNxuZ7OFBjKZxsakGM/Rb44e8cuTw/SPqWF +0wcX2wdm5tntta6UhnOjBag7pQON0LYwlY3TIufJka8Z4Xs/TivKG0W2WVGSd+Z Uvh+D7apmN6bWnb1ZALc+efl4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrg3WWN UCBe3Z0Dvg2K4sUgZ/LLMB8GA1UdIwQYMBaAFMuNuOHxe8dyNG3Z/7sgcs+o/aZS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FMEM0NjEzMDZF MkUxMUVFODVEOTJEMzJDNEY5QUUwMi95NDI0NGZGN3gzSTBiZG5fdXlCeXo2ajlw bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3k0MjQ0ZkY3eDNJMGJkbl91eUJ5ejZqOXBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdFOS9FMEM0NjEzMDZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi95NDI0NGZGN3gz STBiZG5fdXlCeXo2ajlwbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUy4e2rmmIcm2u7ELoXrUD3+pPb6mrypdV8qPcRoyO+HjO0NO0QpBZ 8tAuE+hSZh83/d3kdsSvshHTFNefkObK1dW8LWdW0GxVMnNnQWHu5EycJ9dUCDOi XXDG7XgdVbMl1qXSyvH8vLqZtTE/eOQHCQy/iJsyUB0Ic8r3qz6fvfcoQqI5cX/8 9pWW6OghLw22KdlnS+TzcXq4f56wX9nck9vAgW3STw63zwScO2RIrTZcUorLuMhk MjAjKCJCK5Wsq/zlslFN+vvC4kODTh4bnwxIysYyF6+I4OEKDmg2MooMkTLOc54I 31aPOmG0VBGxUQMwiFDpTtqNLE8HvO2o -----END CERTIFICATE-----Generated at Sun Jul 20 20:42:42 2025 by rpki-client