$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: 8j+7Faa5iKAop5YcVsji9iM8v0F0sKWqBJ4T6sQOy08= Subject key identifier: 06:A6:74:DD:D8:67:07:43:47:8E:54:A5:E1:41:DE:87:84:98:81:40 Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: 86 Signing time: Sat 19 Jul 2025 06:51:55 +0000 Manifest this update: Sat 19 Jul 2025 06:51:54 +0000 Manifest next update: Sat 26 Jul 2025 06:51:54 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: n8ge+oFhVIX0lUFTDbITTVfXahOHrnuXdWVjMfvVMtk=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Jul 19 06:51:54 2025 GMT Not After : Jul 26 06:51:54 2025 GMT Subject: CN=687b408a-94f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:5e:c6:82:0e:38:d8:ee:12:a5:aa:df:88: 02:26:77:89:93:8c:29:8b:c8:da:10:59:84:6f:28: 0e:64:2a:02:d7:e0:cc:ff:c0:8d:85:19:fd:04:a1: 76:5a:d6:e1:f5:f9:f3:f6:ee:ce:7b:09:9c:be:5a: 76:e9:ca:25:03:cf:8d:db:c5:d2:9a:5f:80:ec:bb: 0b:9c:88:16:d1:d3:bb:97:3c:45:d0:7f:12:8d:48: 51:b9:fb:c2:a7:3a:01:4b:40:a3:fd:bd:03:15:8d: f0:ae:8c:be:8a:40:80:0a:af:88:29:87:ae:ce:cc: d9:53:41:d8:aa:66:62:b7:86:a5:b7:6f:3f:8e:a4: b0:61:3f:e8:f4:f8:1b:c3:f9:da:37:f5:83:c0:f5: 7d:4f:ee:04:eb:a9:ec:1e:a1:90:c1:39:d5:83:bf: 27:c3:e0:32:b9:91:60:7c:68:9c:59:41:aa:63:ba: 37:4c:ab:04:cc:8a:26:1f:fb:02:4b:a1:6b:8b:8b: db:07:84:c8:dd:4c:0a:06:9a:81:ee:c9:20:18:05: a5:2d:0e:50:0a:ff:b2:aa:b7:a5:0a:f1:5f:00:83: 76:ef:b9:01:0f:17:65:f5:36:53:1c:ee:37:c9:3e: e2:cf:83:8c:bc:03:d6:6b:fa:43:1c:0c:4a:9d:50: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A6:74:DD:D8:67:07:43:47:8E:54:A5:E1:41:DE:87:84:98:81:40 X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:83:e0:aa:57:fc:e9:5e:fe:5f:c9:94:8f:2f:32:b8:1b:3c: 34:2b:0f:e6:8f:22:05:15:5a:3a:39:db:c2:af:ac:54:18:8c: f8:9d:35:dd:24:27:f2:84:23:d4:cf:c1:83:63:d9:e3:5e:d4: 91:82:cf:a9:2b:00:e6:8a:98:dc:14:5a:29:bf:a2:14:f3:ea: 68:2d:e6:ed:ed:7c:55:55:b1:3b:fb:71:29:7c:9d:30:35:73: 90:a2:ee:21:4f:b3:7f:b7:3c:0f:b2:2f:3f:a6:f7:64:4e:08: 65:2b:87:ca:92:55:58:94:19:df:ec:ee:9c:57:0e:c4:61:b8: 31:f3:65:b0:12:5a:3b:46:1b:87:04:db:70:c2:3a:8e:d6:ab: 7f:f4:91:de:d8:ec:94:c8:c3:46:08:9d:c2:c7:f7:d4:cc:e1: d5:8d:7f:0d:5e:84:9b:b6:16:52:7e:2a:2a:78:f7:a5:70:65: af:4f:62:8e:a2:a0:f7:2d:da:76:48:c9:56:79:a8:6c:e2:12: 1b:cd:4e:6e:c8:2d:93:4b:c1:e3:70:7c:a0:35:8b:78:10:ec: 81:18:53:95:e9:55:36:02:b2:d7:a9:f4:ff:ca:54:ac:6e:3e: 6d:14:a0:0e:46:fb:71:93:7d:e8:55:b8:52:1f:29:f6:40:41: 42:20:35:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy NENERjVFNkIwHhcNMjUwNzE5MDY1MTU0WhcNMjUwNzI2MDY1MTU0WjAYMRYwFAYD VQQDEw02ODdiNDA4YS05NGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWZexoIOONjuEqWq34gCJneJk4wpi8jaEFmEbygOZCoC1+DM/8CNhRn9BKF2 Wtbh9fnz9u7Oewmcvlp26colA8+N28XSml+A7LsLnIgW0dO7lzxF0H8SjUhRufvC pzoBS0Cj/b0DFY3wroy+ikCACq+IKYeuzszZU0HYqmZit4alt28/jqSwYT/o9Pgb w/naN/WDwPV9T+4E66nsHqGQwTnVg78nw+AyuZFgfGicWUGqY7o3TKsEzIomH/sC S6Fri4vbB4TI3UwKBpqB7skgGAWlLQ5QCv+yqrelCvFfAIN277kBDxdl9TZTHO43 yT7iz4OMvAPWa/pDHAxKnVB3SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAamdN3Y ZwdDR45UpeFB3oeEmIFAMB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5 QlJzb2FYS2JSbUVremZYbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8g+CqV/zpXv5fyZSPLzK4Gzw0Kw/mjyIFFVo6OdvCr6xUGIz4nTXd JCfyhCPUz8GDY9njXtSRgs+pKwDmipjcFFopv6IU8+poLebt7XxVVbE7+3EpfJ0w NXOQou4hT7N/tzwPsi8/pvdkTghlK4fKklVYlBnf7O6cVw7EYbgx82WwElo7RhuH BNtwwjqO1qt/9JHe2OyUyMNGCJ3Cx/fUzOHVjX8NXoSbthZSfioqePelcGWvT2KO oqD3Ldp2SMlWeahs4hIbzU5uyC2TS8HjcHygNYt4EOyBGFOV6VU2ArLXqfT/ylSs bj5tFKAORvtxk33oVbhSHyn2QEFCIDUZ -----END CERTIFICATE-----Generated at Sun Jul 20 20:43:10 2025 by rpki-client