$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft File: _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json) Hash identifier: iGKLP7Fp+HXwBrZwM7auyoCTZ6C3ozcVJuiqbpGMwBo= Subject key identifier: 83:1C:F9:89:5B:56:33:59:97:60:FB:87:B5:94:F6:36:C1:83:F1:FD Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft Manifest number: 8F Signing time: Thu 03 Jul 2025 06:39:29 +0000 Manifest this update: Thu 03 Jul 2025 06:39:28 +0000 Manifest next update: Thu 10 Jul 2025 06:39:28 +0000 Files and hashes: 1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: WsKxS8f8VdUqNeAZyzgatjgygHOqVtzQ7lFnBemamhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Validity Not Before: Jul 3 06:39:28 2025 GMT Not After : Jul 10 06:39:28 2025 GMT Subject: CN=686625a1-cd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d3:86:97:25:65:9b:56:55:dc:ff:06:69:7e: 52:1d:84:24:0b:38:bc:0b:21:c5:18:d5:a2:bf:f0: a7:82:85:1c:dd:7e:df:b9:54:08:64:05:ab:64:be: ec:de:77:0e:c3:76:d0:a9:38:cf:a7:f1:4a:71:5a: 39:a2:e7:81:96:20:ec:be:a2:07:43:70:b8:c1:8d: 18:45:0e:5f:0e:f7:a7:4f:10:78:3c:5c:93:6f:bc: b4:0e:67:8b:d3:d1:42:86:31:08:76:fd:aa:03:2f: 04:6d:cf:f3:fa:ac:7b:78:9d:49:f2:1d:45:15:50: af:29:a1:57:c9:1b:47:05:59:90:4f:b8:f2:b3:18: c2:9d:d4:37:82:27:1c:a1:c4:39:56:22:05:c3:95: 14:fd:17:39:83:d5:36:83:81:54:f6:d3:6f:69:ed: 4c:7b:5a:2b:09:b5:be:37:e3:55:07:d4:19:ef:ed: 6f:80:02:d3:1f:34:aa:c0:d3:a0:75:ba:c8:e9:c9: e5:b4:ca:77:4a:f2:90:a8:bc:15:97:a1:fc:a1:97: c5:18:df:1a:41:c6:86:de:00:94:55:0b:4c:8b:33: 17:d3:05:1f:bf:e1:84:02:6a:ff:db:64:48:ae:60: 4a:f0:8f:13:3a:f7:4d:12:de:64:a4:8f:68:aa:b8: 2f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1C:F9:89:5B:56:33:59:97:60:FB:87:B5:94:F6:36:C1:83:F1:FD X509v3 Authority Key Identifier: keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:34:e3:70:96:6f:af:1d:f9:44:e6:44:87:7c:b1:f7:87:15: 30:dd:fc:aa:8b:0e:ab:4d:b3:2e:81:99:75:8b:3d:a1:a4:b0: 07:a1:48:1d:c2:d7:bd:cb:86:ef:ce:43:25:0c:62:34:8a:65: 54:39:8e:68:4d:46:01:f7:18:90:d0:a3:e3:df:3e:5e:cf:f3: 9e:5c:f7:53:55:e1:03:31:50:c2:6d:f8:7a:16:cc:2c:dd:9f: d7:4b:e0:15:2f:e9:2f:c0:28:3e:43:fd:7f:61:4a:56:c7:a0: 44:f0:a5:64:57:c4:b2:96:68:60:ae:90:ce:30:c5:87:96:39: c2:04:8e:c5:01:11:cf:59:dd:98:82:ce:7b:79:ba:32:b9:91: 0d:51:a3:bb:02:24:c2:4d:ce:6f:52:02:8b:af:d5:10:fc:47: 0c:14:be:52:59:73:fe:49:7a:48:43:88:97:45:9d:89:c7:83: 46:23:bd:62:56:93:77:0d:2f:f1:24:72:17:06:34:54:3e:a2: e9:8e:34:a0:b7:fc:2a:9b:e6:9d:5b:8f:c4:af:73:2a:36:48: d7:07:07:e1:b4:0f:13:a9:f4:3a:e7:6f:ea:8f:e2:53:aa:e3: 52:d4:b6:d7:f8:17:8c:e2:f0:3f:89:3b:8f:a0:de:ea:96:73: 56:74:f3:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKEZEODAxMkJGRTk5MTI5RUY5QzhCQjdBNDYwMzIxNDQy RjZEMjY1NjIwHhcNMjUwNzAzMDYzOTI4WhcNMjUwNzEwMDYzOTI4WjAYMRYwFAYD VQQDEw02ODY2MjVhMS1jZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dOGlyVlm1ZV3P8GaX5SHYQkCzi8CyHFGNWiv/CngoUc3X7fuVQIZAWrZL7s 3ncOw3bQqTjPp/FKcVo5oueBliDsvqIHQ3C4wY0YRQ5fDvenTxB4PFyTb7y0DmeL 09FChjEIdv2qAy8Ebc/z+qx7eJ1J8h1FFVCvKaFXyRtHBVmQT7jysxjCndQ3gicc ocQ5ViIFw5UU/Rc5g9U2g4FU9tNvae1Me1orCbW+N+NVB9QZ7+1vgALTHzSqwNOg dbrI6cnltMp3SvKQqLwVl6H8oZfFGN8aQcaG3gCUVQtMizMX0wUfv+GEAmr/22RI rmBK8I8TOvdNEt5kpI9oqrgv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMc+Ylb VjNZl2D7h7WU9jbBg/H9MB8GA1UdIwQYMBaAFP2AEr/pkSnvnIu3pGAyFEL20mVi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wMUQyMzlBNDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktlLWNpN2VrWURJVVF2YlNa V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wMUQyMzlBNDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktl LWNpN2VrWURJVVF2YlNaV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoNONwlm+vHflE5kSHfLH3hxUw3fyqiw6rTbMugZl1iz2hpLAHoUgd wte9y4bvzkMlDGI0imVUOY5oTUYB9xiQ0KPj3z5ez/OeXPdTVeEDMVDCbfh6Fsws 3Z/XS+AVL+kvwCg+Q/1/YUpWx6BE8KVkV8SylmhgrpDOMMWHljnCBI7FARHPWd2Y gs57eboyuZENUaO7AiTCTc5vUgKLr9UQ/EcMFL5SWXP+SXpIQ4iXRZ2Jx4NGI71i VpN3DS/xJHIXBjRUPqLpjjSgt/wqm+adW4/Er3MqNkjXBwfhtA8TqfQ652/qj+JT quNS1LbX+BeM4vA/iTuPoN7qlnNWdPPX -----END CERTIFICATE-----Generated at Thu Jul 3 22:53:02 2025 by rpki-client