$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: TU8/X8VHTvS+FelZ8QR28l9clg8/1kyao3aGg6u8BL8= Subject key identifier: 5E:3E:7B:36:4B:B6:A6:A6:66:00:36:BC:9C:CB:94:10:2A:AD:93:AA Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: 01A1 Signing time: Tue 01 Jul 2025 03:44:52 +0000 Manifest this update: Tue 01 Jul 2025 03:44:51 +0000 Manifest next update: Tue 08 Jul 2025 03:44:51 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: sxoZHopuzF36Vg/QnbUgQKr++u2AnyPih9dbt+px/KA=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: F7qGiUSXmfTHkG4rLsiz9f3fhRuXMOAIShVR1Seg7DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Jul 1 03:44:51 2025 GMT Not After : Jul 8 03:44:51 2025 GMT Subject: CN=686359b4-9a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:56:1f:15:c1:92:06:ff:d4:52:2f:eb:a4: 74:6f:59:9a:10:6a:f3:ac:5c:ee:89:f6:f7:54:1f: 03:87:7b:12:e7:0f:63:b0:55:2e:a5:3f:9e:32:10: e4:f9:00:83:06:2f:b7:22:37:59:87:cc:bd:8d:33: 88:3b:1f:48:f8:11:a5:02:d6:6c:93:55:08:34:5a: d2:b6:2d:f7:02:1a:5b:cd:75:c8:de:c4:38:52:76: f9:d8:8b:45:f5:e1:0e:f5:76:04:91:f1:0f:60:63: c2:ad:98:59:ed:d0:80:2e:2a:f1:f5:26:54:11:ed: 32:89:4f:2e:cb:45:2c:bd:06:5c:a9:dd:5a:17:47: a3:7f:45:ea:ee:41:42:e6:8b:6d:ec:62:0c:bb:15: a6:65:90:93:7f:3e:86:19:c7:dd:73:e1:c4:7e:ad: 1f:be:a0:7c:cc:ad:b4:0c:eb:40:09:58:76:ff:50: ef:13:9b:6d:44:ac:e8:d4:3a:3e:1f:8d:b8:7a:c9: 86:43:76:a6:99:c7:b8:33:d7:85:65:b7:a5:25:bf: 59:74:79:0f:33:b7:aa:ff:00:ae:81:5a:98:36:6c: a1:d8:7e:de:e7:28:78:68:bf:fa:1c:80:79:6c:6c: ca:20:e3:cd:90:96:cb:1a:7e:32:c1:ad:bf:25:ff: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3E:7B:36:4B:B6:A6:A6:66:00:36:BC:9C:CB:94:10:2A:AD:93:AA X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:29:e5:e1:98:dd:82:75:d9:c9:9f:f1:70:4e:34:b8:a5:55: e2:b5:e9:d3:77:68:bf:79:97:1d:d5:95:50:2a:7c:e7:20:41: d4:7e:fe:2f:cc:03:63:85:b1:88:91:72:6f:f2:c9:81:18:9d: d7:6e:0c:38:32:76:4f:89:86:77:24:8c:69:a3:bb:e9:43:78: 1e:04:e8:dc:c1:63:c0:ac:10:0e:72:d2:f7:38:ad:de:c1:23: 77:3e:b7:5f:06:31:36:04:ff:8e:bf:57:72:5e:a5:80:eb:3d: 9c:02:21:c2:2c:31:fb:12:5a:d9:71:3d:6d:8b:d5:4f:07:5c: 8c:22:25:f0:39:f7:2c:6a:ef:47:a2:80:2e:6b:ad:f8:4f:49: 83:9f:7f:e2:64:3e:28:e1:0c:3f:c2:2f:cb:3a:31:1f:bd:72: af:a1:1f:51:fd:90:1f:1c:c3:21:e0:85:39:ff:f5:aa:94:d4: 50:27:f3:60:9c:ce:d1:9d:ae:1b:f2:86:6d:67:28:a1:c8:34: 53:09:dd:80:f7:e4:9b:9e:ee:e4:1f:d0:ad:83:01:de:f4:74: 1b:c2:54:e1:f3:c8:a3:88:2c:10:81:27:81:f4:be:8f:84:21: d3:83:20:4b:73:42:eb:1c:5d:cf:9e:a0:5a:3d:bc:6a:ff:6e: 4a:9f:63:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjUwNzAxMDM0NDUxWhcNMjUwNzA4MDM0NDUxWjAYMRYwFAYD VQQDEw02ODYzNTliNC05YTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KhWHxXBkgb/1FIv66R0b1maEGrzrFzuifb3VB8Dh3sS5w9jsFUupT+eMhDk +QCDBi+3IjdZh8y9jTOIOx9I+BGlAtZsk1UINFrSti33AhpbzXXI3sQ4Unb52ItF 9eEO9XYEkfEPYGPCrZhZ7dCALirx9SZUEe0yiU8uy0UsvQZcqd1aF0ejf0Xq7kFC 5ott7GIMuxWmZZCTfz6GGcfdc+HEfq0fvqB8zK20DOtACVh2/1DvE5ttRKzo1Do+ H424esmGQ3ammce4M9eFZbelJb9ZdHkPM7eq/wCugVqYNmyh2H7e5yh4aL/6HIB5 bGzKIOPNkJbLGn4ywa2/Jf+rUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4+ezZL tqamZgA2vJzLlBAqrZOqMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7KeXhmN2CddnJn/FwTjS4pVXitenTd2i/eZcd1ZVQKnznIEHUfv4v zANjhbGIkXJv8smBGJ3Xbgw4MnZPiYZ3JIxpo7vpQ3geBOjcwWPArBAOctL3OK3e wSN3PrdfBjE2BP+Ov1dyXqWA6z2cAiHCLDH7ElrZcT1ti9VPB1yMIiXwOfcsau9H ooAua634T0mDn3/iZD4o4Qw/wi/LOjEfvXKvoR9R/ZAfHMMh4IU5//WqlNRQJ/Ng nM7Rna4b8oZtZyihyDRTCd2A9+Sbnu7kH9CtgwHe9HQbwlTh88ijiCwQgSeB9L6P hCHTgyBLc0LrHF3PnqBaPbxq/25Kn2O2 -----END CERTIFICATE-----Generated at Tue Jul 1 09:56:10 2025 by rpki-client