$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json) Hash identifier: 0gZv6KtTREHW7BT61WLeHO1eiUK2153wJdvA5KYlR1U= Subject key identifier: 90:5F:71:CE:FD:7A:0F:5F:04:FC:CF:28:E5:E7:35:34:3A:6F:E0:99 Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft Manifest number: 019B Signing time: Sat 23 Aug 2025 03:52:12 +0000 Manifest this update: Sat 23 Aug 2025 03:52:11 +0000 Manifest next update: Sat 30 Aug 2025 03:52:11 +0000 Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: 0V9GkAs9n2e7MLNhFXpFWMmPKykg7OWRkrGDYHhWrgM=) 2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: uvZ2Q94gPhmYQwiI4YLVYozC9g+L2KL5OS58nY+uLv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: Aug 23 03:52:11 2025 GMT Not After : Aug 30 03:52:11 2025 GMT Subject: CN=68a93aec-d888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:86:03:81:35:6e:89:fb:81:8e:58:86:0f: 20:25:50:1b:0a:15:be:6a:7a:90:bf:64:f7:b3:9a: 93:f1:4e:cc:f0:06:58:f2:53:69:b1:ec:ed:63:8c: bd:4b:d8:c9:40:91:67:85:bd:56:2c:fb:27:03:47: b1:d7:dc:56:65:31:39:44:69:b3:f3:90:f0:aa:f7: 35:69:e4:a3:d9:0c:50:56:19:07:21:02:94:98:7e: c2:53:ed:a8:4f:8a:b8:0a:e8:d3:39:92:c9:84:55: 79:54:e5:e8:21:17:ed:ba:08:29:6a:00:8f:45:d0: d9:2f:3a:76:0f:1e:96:41:ad:51:d4:0b:43:13:20: d2:c1:df:0d:2d:21:99:1c:44:fd:4a:5a:54:9e:68: 64:e1:f4:af:c1:ea:a0:de:1c:d6:80:cb:29:64:fd: 03:4d:4d:d0:2e:36:32:07:53:67:87:62:7e:11:0d: f8:aa:26:e1:30:4d:47:fe:1f:f2:a3:4f:26:85:a8: fb:30:02:6c:e2:53:6c:bb:24:07:78:0e:91:54:36: 97:3a:c3:1a:9c:80:79:66:4e:b7:8d:21:05:0b:9e: bf:1f:97:34:b1:5f:d6:f1:99:68:69:b2:92:73:ce: d1:80:11:b1:b8:ae:ce:c8:57:7e:07:62:89:c5:c2: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5F:71:CE:FD:7A:0F:5F:04:FC:CF:28:E5:E7:35:34:3A:6F:E0:99 X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e7:70:46:28:99:99:fe:ac:ac:a3:fd:6b:c1:84:9f:1c:ac: 90:c4:a7:f2:f8:e2:7f:ad:4f:23:4e:3b:1b:87:cb:4c:92:c6: df:25:3d:32:c9:0e:d2:f4:3f:bd:33:2f:3d:11:48:ec:d1:a4: fc:f8:52:31:6e:83:73:71:8b:83:25:31:e5:4d:ef:05:b7:5c: 74:cc:a3:24:65:02:f8:6d:3b:6a:eb:db:ca:39:4a:a6:46:5e: 40:b4:35:78:e0:18:b2:97:06:88:43:56:b5:2a:32:65:09:00: e1:cb:ec:c6:8d:29:fe:b6:f5:f8:e9:14:ed:d9:c8:1b:19:5b: 05:f7:79:bc:5c:2d:b9:0d:3f:a7:19:f5:bd:da:bd:f7:66:5e: f0:ae:67:a7:1b:9c:03:e0:18:78:90:45:da:f7:62:6c:ea:4d: f5:f5:27:4a:13:91:00:45:14:12:65:06:8b:62:9f:d4:61:35: 10:2b:80:0c:bf:18:6c:7a:d2:3e:a9:50:f0:16:db:ed:f1:cb: 81:d6:ce:f5:dd:dd:97:60:81:ca:5b:da:39:53:e1:9b:55:e0: 53:36:6e:95:2b:6c:14:43:90:ea:58:11:e9:21:98:4b:64:fd: 64:63:47:52:88:12:f4:df:5a:61:6a:38:f7:6a:a7:00:51:37: 69:5e:2f:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjUwODIzMDM1MjExWhcNMjUwODMwMDM1MjExWjAYMRYwFAYD VQQDEw02OGE5M2FlYy1kODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP2GA4E1bon7gY5Yhg8gJVAbChW+anqQv2T3s5qT8U7M8AZY8lNpseztY4y9 S9jJQJFnhb1WLPsnA0ex19xWZTE5RGmz85Dwqvc1aeSj2QxQVhkHIQKUmH7CU+2o T4q4CujTOZLJhFV5VOXoIRftuggpagCPRdDZLzp2Dx6WQa1R1AtDEyDSwd8NLSGZ HET9SlpUnmhk4fSvweqg3hzWgMspZP0DTU3QLjYyB1Nnh2J+EQ34qibhME1H/h/y o08mhaj7MAJs4lNsuyQHeA6RVDaXOsManIB5Zk63jSEFC56/H5c0sV/W8ZloabKS c87RgBGxuK7OyFd+B2KJxcLB3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBfcc79 eg9fBPzPKOXnNTQ6b+CZMB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO ZWdyVVRDY1gyMV9nZ055dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd53BGKJmZ/qyso/1rwYSfHKyQxKfy+OJ/rU8jTjsbh8tMksbfJT0y yQ7S9D+9My89EUjs0aT8+FIxboNzcYuDJTHlTe8Ft1x0zKMkZQL4bTtq69vKOUqm Rl5AtDV44BiylwaIQ1a1KjJlCQDhy+zGjSn+tvX46RTt2cgbGVsF93m8XC25DT+n GfW92r33Zl7wrmenG5wD4Bh4kEXa92Js6k319SdKE5EARRQSZQaLYp/UYTUQK4AM vxhsetI+qVDwFtvt8cuB1s713d2XYIHKW9o5U+GbVeBTNm6VK2wUQ5DqWBHpIZhL ZP1kY0dSiBL031phajj3aqcAUTdpXi9o -----END CERTIFICATE-----Generated at Sat Aug 23 19:00:20 2025 by rpki-client