$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft File: YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json) Hash identifier: U+xl1hpSouNLEou2iyfsJJolbp35G5gZb4wuujt4WDM= Subject key identifier: 68:AC:4B:52:0A:02:CA:E3:5C:02:E3:77:86:66:B8:48:62:7F:51:97 Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft Manifest number: 010E Signing time: Sat 19 Jul 2025 05:12:27 +0000 Manifest this update: Sat 19 Jul 2025 05:12:26 +0000 Manifest next update: Sat 26 Jul 2025 05:12:26 +0000 Files and hashes: 1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: w74tAzdlKaTB/MrfV8IjXmyt95hDyrgh+FoKuu0eYZA=) 2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: QQ0CP8HHmI7PCShWjhNg26xSyERliRPL6u4e6U+9a/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Validity Not Before: Jul 19 05:12:26 2025 GMT Not After : Jul 26 05:12:26 2025 GMT Subject: CN=687b293a-c1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:ab:88:48:ca:4e:00:28:4e:d5:93:28:6d: 37:ae:18:9f:55:26:81:95:6d:6f:c2:e4:9d:60:28: b7:32:b2:f9:18:c2:05:bc:69:14:7d:96:91:30:dd: 58:ca:f4:7a:c0:69:d7:76:0a:6e:c9:7f:fb:a2:96: fe:8f:9e:5e:2a:c6:35:51:50:24:4d:ee:c2:aa:f4: dd:5f:1a:90:5f:36:1a:a9:29:e1:28:91:2d:ad:13: 02:a4:11:2f:0f:fc:04:40:82:e0:ec:0b:90:86:81: 91:ee:c0:79:e7:e3:e7:a9:37:9c:34:07:25:9e:c9: 2e:dd:8a:58:77:88:4e:c1:3c:bf:4a:92:12:b7:28: a1:08:12:b0:39:6c:59:cf:71:a6:7f:38:aa:4b:c5: 2e:36:2c:f4:c2:16:c4:ff:53:8a:45:e1:a6:f3:3d: 67:0c:a7:05:11:97:a8:2b:2b:28:25:85:fb:43:5f: 6b:c5:c2:ae:d6:1c:4d:ce:37:85:3f:58:1a:b3:a8: 76:7d:17:67:3f:17:7a:3b:3d:12:2b:3b:cb:04:c8: 23:fa:da:0f:f1:dc:9b:10:20:dd:d2:be:5d:cb:be: dc:2a:d8:1f:80:a5:dc:12:85:22:b4:e4:66:e6:c4: 76:53:77:a2:fb:c4:e4:3b:15:c6:3c:81:f1:48:f9: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AC:4B:52:0A:02:CA:E3:5C:02:E3:77:86:66:B8:48:62:7F:51:97 X509v3 Authority Key Identifier: keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6f:41:a3:b7:8a:f8:b3:62:2f:49:05:4e:11:5e:4f:46:91: 22:47:8a:29:48:5e:18:b8:d3:fa:2a:9c:a5:03:b8:24:ab:4f: e2:76:51:bc:3b:5e:7f:aa:9d:dc:63:90:ad:65:23:47:a9:96: 68:a9:64:0c:c5:80:49:cd:08:8d:f3:e5:de:b9:03:9a:87:ec: 05:7a:ee:37:8a:64:64:8a:a5:20:a9:f4:7c:07:7b:a8:a6:97: 80:58:df:17:be:09:c9:80:a1:1f:5a:e8:b0:c1:62:83:1e:14: a1:2d:e0:1d:3a:6a:e6:4d:46:96:44:1b:60:07:ca:60:ce:07: 92:60:5f:dd:2e:10:16:64:00:6d:bc:70:61:52:94:68:fe:c9: 77:1c:00:df:af:2e:39:ed:17:7f:86:4b:9d:38:52:42:fa:56: 07:66:f6:6e:83:d4:27:28:02:54:32:50:52:fa:a5:05:93:f9: 91:6e:09:14:85:11:ac:2d:d4:a5:86:a5:67:b2:05:d6:24:4b: e4:d1:b2:e1:0f:1f:34:99:2e:71:94:10:b8:82:94:28:3b:87: f1:2f:1b:f4:b8:b2:21:2f:4e:d9:b6:0b:f5:2f:73:68:e1:28: 50:00:24:3f:d2:5a:e7:47:9c:5d:1f:c8:9a:a0:05:87:86:e3: 18:eb:26:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCRUYxMTAvBgNVBAUTKDYxOTA0MEU4MzVCQUQzRENGNUMyMDEzOTZEODU3MTk5 NUE3QUNDNTAwHhcNMjUwNzE5MDUxMjI2WhcNMjUwNzI2MDUxMjI2WjAYMRYwFAYD VQQDEw02ODdiMjkzYS1jMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsimriEjKTgAoTtWTKG03rhifVSaBlW1vwuSdYCi3MrL5GMIFvGkUfZaRMN1Y yvR6wGnXdgpuyX/7opb+j55eKsY1UVAkTe7CqvTdXxqQXzYaqSnhKJEtrRMCpBEv D/wEQILg7AuQhoGR7sB55+PnqTecNAclnsku3YpYd4hOwTy/SpIStyihCBKwOWxZ z3GmfziqS8UuNiz0whbE/1OKReGm8z1nDKcFEZeoKysoJYX7Q19rxcKu1hxNzjeF P1gas6h2fRdnPxd6Oz0SKzvLBMgj+toP8dybECDd0r5dy77cKtgfgKXcEoUitORm 5sR2U3ei+8TkOxXGPIHxSPlNEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGisS1IK AsrjXALjd4ZmuEhif1GXMB8GA1UdIwQYMBaAFGGQQOg1utPc9cIBOW2FcZlaesxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DMDc2NDU3MkNC MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5ejF3Z0U1YllWeG1WcDZ6 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1laQkE2RFc2MDl6MXdnRTViWVZ4bVZwNnpGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUJFRi9DMDc2NDU3MkNCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5 ejF3Z0U1YllWeG1WcDZ6RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXb0Gjt4r4s2IvSQVOEV5PRpEiR4opSF4YuNP6KpylA7gkq0/idlG8 O15/qp3cY5CtZSNHqZZoqWQMxYBJzQiN8+XeuQOah+wFeu43imRkiqUgqfR8B3uo ppeAWN8XvgnJgKEfWuiwwWKDHhShLeAdOmrmTUaWRBtgB8pgzgeSYF/dLhAWZABt vHBhUpRo/sl3HADfry457Rd/hkudOFJC+lYHZvZug9QnKAJUMlBS+qUFk/mRbgkU hRGsLdSlhqVnsgXWJEvk0bLhDx80mS5xlBC4gpQoO4fxLxv0uLIhL07Ztgv1L3No 4ShQACQ/0lrnR5xdH8iaoAWHhuMY6yYG -----END CERTIFICATE-----Generated at Mon Jul 21 00:26:52 2025 by rpki-client