$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft File: yKkupf322jjqQIWq7lWnJIzTTzo.mft (raw, json) Hash identifier: 9WcvEytLjVuXTF8bmGwIZ2y35vKu5VeeuS89gc0wpjI= Subject key identifier: 59:45:B8:C8:D9:45:3F:D5:11:4C:6D:8B:C1:29:E0:A0:01:95:F2:14 Authority key identifier: C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A Certificate issuer: /CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Certificate serial: 02FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft Manifest number: 02FA Signing time: Sat 05 Jul 2025 01:49:07 +0000 Manifest this update: Sat 05 Jul 2025 01:49:07 +0000 Manifest next update: Sat 12 Jul 2025 01:49:07 +0000 Files and hashes: 1: yKkupf322jjqQIWq7lWnJIzTTzo.crl (hash: /cmutLAtaOBBZD9peudYpwGqKbJnjvF2pDOCpta0moE=) 2: 3166C07AE16C11ECB2629D1AC4F9AE02.roa (hash: ipLQrTfxlsH1xbpA5Xtx6FI7FTiCB5Vq0xVbQe7ALKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 766 (0x2fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3E17, serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Validity Not Before: Jul 5 01:49:07 2025 GMT Not After : Jul 12 01:49:07 2025 GMT Subject: CN=68688493-5d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:02:3f:cd:64:12:a4:99:2f:86:7c:4f:d0: e8:a0:83:69:d9:68:d2:f6:21:21:33:d2:80:27:b3: da:8c:f5:e3:a7:79:bd:c4:e2:f2:df:03:14:cf:85: ef:ca:42:87:f6:f5:8a:6e:64:ea:14:40:34:f0:88: fa:aa:bc:f9:7f:da:b8:37:71:a5:8b:b8:3e:da:09: 41:64:99:ee:60:d6:81:73:2c:27:9e:c3:c5:8f:43: 21:50:83:f0:f7:ba:65:8b:de:31:51:be:26:99:af: 1c:af:62:b8:c1:6b:e1:3e:57:29:cc:2e:95:58:a2: 1e:22:1f:09:0a:a8:9f:a9:30:8e:62:c2:13:c8:fe: 8b:92:ba:e2:33:21:01:5a:b0:39:9f:15:03:3d:84: ce:68:4d:6b:54:f2:7f:e7:56:4a:79:89:17:a1:9a: a5:a2:08:ef:9f:b6:84:23:ad:c4:a0:bc:f3:14:73: fd:de:00:b2:1e:61:bf:93:5c:0f:75:f6:73:13:fc: 27:d7:5f:73:33:24:20:16:78:48:75:cf:ec:88:4a: 4f:15:42:bd:0f:17:ed:71:4b:85:61:2e:0a:86:92: f9:47:87:76:34:c1:8f:8e:bd:ca:d3:4c:42:77:18: d2:40:fe:ac:72:46:34:77:07:55:7a:7b:79:92:81: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:45:B8:C8:D9:45:3F:D5:11:4C:6D:8B:C1:29:E0:A0:01:95:F2:14 X509v3 Authority Key Identifier: keyid:C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b8:06:ea:2b:91:3d:a0:a7:30:17:66:de:33:96:fa:dc:37: e8:ba:b7:4a:fd:46:15:5b:78:00:9a:9a:2c:2f:a0:50:2b:90: 4e:15:05:35:04:47:4a:99:ac:47:a5:31:f2:c0:73:2d:fc:64: 2b:7d:5f:01:2f:b7:2d:9f:47:86:7f:04:09:6d:6e:b8:a0:aa: 7d:f9:76:7c:57:1c:c4:3d:eb:54:3c:be:93:87:9b:80:d1:fa: 37:68:87:b3:a3:b7:68:84:37:7e:44:1b:92:6e:7e:58:0a:02: a7:5f:ef:b7:bf:7c:1d:59:6b:9d:4f:de:84:3b:95:23:3e:5e: 09:13:8d:a9:68:68:c1:e9:91:10:60:e3:ec:62:64:fe:72:57: 9b:96:b4:bc:08:01:32:b1:95:3d:a4:fd:5b:92:6e:cf:8e:9d: b6:4a:42:98:d7:c7:ba:f9:13:9a:5a:42:e3:e4:29:fb:92:04: cd:4d:eb:82:b5:47:83:94:91:ac:3e:d1:91:3c:9e:89:90:35: 7b:8c:67:c8:83:c1:ea:6e:ae:a2:20:91:85:87:bd:c8:8e:3d: c9:80:06:53:7f:1c:20:bb:b4:78:67:d3:ab:04:a9:34:b2:7b: 74:f0:24:58:ca:c2:0d:39:70:cf:ca:ca:65:e6:58:42:9c:5b: b4:1b:d0:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNFMTcxMTAvBgNVBAUTKEM4QTkyRUE1RkRGNkRBMzhFQTQwODVBQUVFNTVBNzI0 OENEMzRGM0EwHhcNMjUwNzA1MDE0OTA3WhcNMjUwNzEyMDE0OTA3WjAYMRYwFAYD VQQDEw02ODY4ODQ5My01ZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKYCP81kEqSZL4Z8T9DooINp2WjS9iEhM9KAJ7PajPXjp3m9xOLy3wMUz4Xv ykKH9vWKbmTqFEA08Ij6qrz5f9q4N3Gli7g+2glBZJnuYNaBcywnnsPFj0MhUIPw 97pli94xUb4mma8cr2K4wWvhPlcpzC6VWKIeIh8JCqifqTCOYsITyP6LkrriMyEB WrA5nxUDPYTOaE1rVPJ/51ZKeYkXoZqlogjvn7aEI63EoLzzFHP93gCyHmG/k1wP dfZzE/wn119zMyQgFnhIdc/siEpPFUK9DxftcUuFYS4KhpL5R4d2NMGPjr3K00xC dxjSQP6sckY0dwdVent5koGKBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlFuMjZ RT/VEUxti8Ep4KABlfIUMB8GA1UdIwQYMBaAFMipLqX99to46kCFqu5VpySM0086 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0UxNy85MjBDNUVDQUUx NjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJqanFRSVdxN2xXbkpJelRU em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lLa3VwZjMyMmpqcVFJV3E3bFduSkl6VFR6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0UxNy85MjBDNUVDQUUxNjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJq anFRSVdxN2xXbkpJelRUem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOuAbqK5E9oKcwF2beM5b63DfourdK/UYVW3gAmposL6BQK5BOFQU1 BEdKmaxHpTHywHMt/GQrfV8BL7ctn0eGfwQJbW64oKp9+XZ8VxzEPetUPL6Th5uA 0fo3aIezo7dohDd+RBuSbn5YCgKnX++3v3wdWWudT96EO5UjPl4JE42paGjB6ZEQ YOPsYmT+cleblrS8CAEysZU9pP1bkm7Pjp22SkKY18e6+ROaWkLj5Cn7kgTNTeuC tUeDlJGsPtGRPJ6JkDV7jGfIg8Hqbq6iIJGFh73Ijj3JgAZTfxwgu7R4Z9OrBKk0 snt08CRYysINOXDPyspl5lhCnFu0G9Dr -----END CERTIFICATE-----Generated at Sat Jul 5 05:11:42 2025 by rpki-client