$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: aDzsTsEhfTy/C4dFe67L4TObdson08mfNCqjbvem2kw= Subject key identifier: AD:40:54:16:06:A2:76:04:2A:D8:34:E8:8C:4B:33:EC:79:AB:3C:51 Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 34A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 34A1 Signing time: Sun 20 Jul 2025 15:05:35 +0000 Manifest this update: Sun 20 Jul 2025 15:05:35 +0000 Manifest next update: Sun 27 Jul 2025 15:05:35 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: dB2omCEyCOFqRplrao1VtINSGrC4yuo17VSSEBeqT70=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: lc/qlMf4LlkPKULr4QDdOr7yT3mSRd2CWo/AG45TiUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13477 (0x34a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: Jul 20 15:05:35 2025 GMT Not After : Jul 27 15:05:35 2025 GMT Subject: CN=687d05bf-ed77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:2e:68:c8:a5:74:b3:53:e7:69:2a:50:d4: 00:5e:ca:d2:7b:6e:0e:1c:1b:11:61:03:3c:f8:03: 03:cd:3b:70:cc:c1:fd:e4:1d:aa:aa:72:30:dd:14: 9e:8a:51:b1:8b:08:58:ce:16:77:f4:d5:80:32:3c: dd:08:73:f7:81:8a:1c:61:a5:56:ce:28:3d:65:dd: e7:fb:cc:db:0f:bf:76:a8:57:58:7c:0d:bf:69:d1: 82:5a:b4:8a:88:df:51:3b:8b:4b:1d:ae:69:5b:f2: f6:5a:4d:03:bb:71:a9:10:f7:21:d7:cb:f5:28:4a: 69:b5:1c:e9:3a:62:c6:9e:cf:6e:19:1a:ba:90:02: 09:4c:01:f4:ce:ae:5a:cd:65:16:be:2b:42:d4:5d: 5a:b1:4d:ed:5f:44:5c:4e:ab:22:5c:21:fb:50:1c: d7:29:1d:ee:19:05:57:dd:f9:8c:79:c7:7f:76:dd: d8:39:1b:78:a9:d2:b2:f7:ea:f7:d0:28:2b:9d:f7: 5b:8d:6c:96:a6:b4:6b:ae:24:73:a8:41:91:d6:31: dd:c1:b7:4f:ed:33:8f:99:98:3a:f7:39:25:1f:e5: 2d:85:55:f2:c4:4e:d9:0e:1d:b9:a2:f8:5c:0b:7d: 5f:bd:45:93:54:b7:2a:0b:af:c8:4d:6f:64:ee:f1: ba:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:40:54:16:06:A2:76:04:2A:D8:34:E8:8C:4B:33:EC:79:AB:3C:51 X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:6f:ac:49:67:02:5b:80:2a:eb:c3:f5:e7:39:78:34:a2:4a: 60:d8:13:d4:a4:78:83:d7:75:4c:b1:6d:ec:f3:83:93:cd:ef: a8:9c:85:d0:60:91:fd:9f:c4:b3:78:1b:4d:6b:9c:d7:65:be: 72:d1:ff:19:28:fc:67:1a:d2:9f:26:25:14:f6:b8:c9:eb:c5: b9:27:c3:b3:59:ba:63:50:d9:22:3c:b1:54:15:da:9b:8b:e9: bd:68:13:7b:38:ef:0a:88:e1:ee:84:60:28:50:9e:69:68:d3: af:93:32:9a:ba:77:4f:6a:ed:c8:c7:73:66:dc:1b:32:cb:98: 17:79:a8:1c:9c:bd:8c:88:d4:48:63:cc:09:38:24:b5:0b:b7: 81:ec:2a:ce:d7:c5:51:7f:6b:3a:ef:88:d1:13:35:b4:ac:ed: 46:74:e4:78:18:a2:13:bc:9a:60:1a:fa:8c:9f:47:c8:d6:9f: 30:f3:ff:7e:e5:ec:96:3c:ab:bc:3f:c5:aa:90:f2:85:c6:21: 24:5f:f3:90:88:ca:73:3b:02:48:dd:8c:c2:b6:ab:1b:42:54: 82:c4:9e:60:04:c0:ea:90:20:6d:67:31:ee:29:a1:46:ee:32: c3:d2:2d:70:66:a4:4b:77:c2:b2:51:5a:a6:17:7b:5b:22:71: 4e:54:00:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjUwNzIwMTUwNTM1WhcNMjUwNzI3MTUwNTM1WjAYMRYwFAYD VQQDEw02ODdkMDViZi1lZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9IuaMildLNT52kqUNQAXsrSe24OHBsRYQM8+AMDzTtwzMH95B2qqnIw3RSe ilGxiwhYzhZ39NWAMjzdCHP3gYocYaVWzig9Zd3n+8zbD792qFdYfA2/adGCWrSK iN9RO4tLHa5pW/L2Wk0Du3GpEPch18v1KEpptRzpOmLGns9uGRq6kAIJTAH0zq5a zWUWvitC1F1asU3tX0RcTqsiXCH7UBzXKR3uGQVX3fmMecd/dt3YORt4qdKy9+r3 0CgrnfdbjWyWprRrriRzqEGR1jHdwbdP7TOPmZg69zklH+UthVXyxE7ZDh25ovhc C31fvUWTVLcqC6/ITW9k7vG6BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1AVBYG onYEKtg06IxLM+x5qzxRMB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOb6xJZwJbgCrrw/XnOXg0okpg2BPUpHiD13VMsW3s84OTze+onIXQ YJH9n8SzeBtNa5zXZb5y0f8ZKPxnGtKfJiUU9rjJ68W5J8OzWbpjUNkiPLFUFdqb i+m9aBN7OO8KiOHuhGAoUJ5paNOvkzKaundPau3Ix3Nm3Bsyy5gXeagcnL2MiNRI Y8wJOCS1C7eB7CrO18VRf2s674jREzW0rO1GdOR4GKITvJpgGvqMn0fI1p8w8/9+ 5eyWPKu8P8WqkPKFxiEkX/OQiMpzOwJI3YzCtqsbQlSCxJ5gBMDqkCBtZzHuKaFG 7jLD0i1wZqRLd8KyUVqmF3tbInFOVACt -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:30 2025 by rpki-client