$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json) Hash identifier: 0QFv9sZL5Y53Jj/oqP37r/E/pazvRfR5hwcZHhyLf7M= Subject key identifier: 2B:34:8F:8B:32:03:8E:45:B3:80:09:D7:5B:03:44:D4:1A:85:0B:81 Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Certificate serial: 0E5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft Manifest number: 0E48 Signing time: Wed 02 Jul 2025 18:00:08 +0000 Manifest this update: Wed 02 Jul 2025 18:00:07 +0000 Manifest next update: Wed 09 Jul 2025 18:00:07 +0000 Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: QHGQiqD+j4qvs5EKK3xGDIuf4FLtL8OXGg9MfdDK0wU=) 2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: ko6JuSH5KdHDRvbFAlQ/kuUaDfW5QK4Fi6pI4fCmc9Y=) 3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: IVs/EZ3aUjzucqrKlhAwA1VLfGJK+bUizU/goA1sqEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3676 (0xe5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Validity Not Before: Jul 2 18:00:07 2025 GMT Not After : Jul 9 18:00:07 2025 GMT Subject: CN=686573a8-add3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:84:5f:a3:9e:27:c8:a4:55:ce:6d:de:3a: d5:b0:1d:22:c9:4b:19:9f:0c:43:f4:9f:e4:cd:1c: cc:07:2b:24:e3:f0:28:a0:ff:d9:c8:38:79:f6:6f: e2:02:85:7d:2a:c2:90:63:4f:4d:b5:26:1a:e4:ac: 85:c2:26:c6:6e:5c:33:bc:06:5a:e3:f3:bc:15:a3: 9c:40:b3:d1:1d:96:79:b2:cc:82:5a:80:dc:44:96: ed:d5:75:57:c3:d4:90:70:27:ca:87:bf:41:cc:6d: d6:fd:53:ed:f7:6e:b1:24:35:73:b3:e9:f1:f3:c8: 71:10:68:00:e4:0a:5b:b3:ba:85:8e:20:d0:b6:ec: 16:77:68:bc:93:db:46:7a:7f:6f:db:45:10:b9:d2: c9:58:5c:26:fc:37:af:c6:6c:2f:d7:f3:be:48:73: 68:61:b4:1a:89:6a:a1:11:b7:c8:f8:71:4d:73:be: 6c:65:34:a6:fa:af:b2:5f:d1:57:2c:1f:b9:64:68: cf:ec:f7:8a:f6:84:56:55:63:ea:e7:e6:be:fa:8f: 74:18:cf:ad:d6:ce:08:a7:b9:b1:13:18:a1:15:0b: aa:ca:8e:df:b3:d9:2c:14:5a:b6:1c:0d:86:74:92: 95:cd:e5:44:06:a6:54:d9:bb:1f:ca:04:23:2f:76: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:34:8F:8B:32:03:8E:45:B3:80:09:D7:5B:03:44:D4:1A:85:0B:81 X509v3 Authority Key Identifier: keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:19:4d:a2:6f:47:b0:cb:96:d9:22:f8:15:a9:ec:7a:51:fa: e1:1a:83:63:43:01:6c:77:1d:ac:d8:fa:93:13:b6:ee:b3:36: c7:7e:51:3e:7b:1e:5f:22:26:f0:56:6e:00:55:2a:be:cb:9d: 72:9c:03:6a:31:d4:f8:f7:fb:9d:fe:c4:7f:7c:2f:34:95:16: f6:e9:6c:03:52:9e:6e:a8:7f:c4:09:64:ef:12:23:e4:6a:c1: 37:0b:5c:8c:aa:12:4e:d2:67:6d:3d:9d:36:19:10:0b:b5:ee: 5d:f2:98:55:17:ea:b0:d0:d3:e2:17:83:3c:e4:d2:87:e6:46: 23:68:4b:2c:2e:5b:be:0f:4f:2f:0a:85:49:5d:cf:2b:06:4c: d2:cc:bc:b3:be:40:1d:b7:59:4d:a5:4d:66:df:d9:57:3b:b3: 7f:7b:5a:92:4c:d8:31:27:54:dc:e9:10:89:a1:90:60:ed:dd: f1:a4:cc:b0:fc:ea:ae:64:56:29:24:69:97:1d:cc:da:94:ee: 20:99:e8:04:9b:e7:d2:b8:ff:64:a4:cb:44:b2:de:8c:d5:a4: ce:50:7c:2c:24:3c:51:4b:51:c1:e6:84:a0:6f:79:24:5f:3b: a6:78:8b:04:65:47:4f:33:33:77:b4:b9:b9:0d:a8:1a:42:29: fe:74:68:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKEM4NzNCQjYxMEI5MTNDM0VDREM3MDhBMjY1QTc0QjEx NDFBNzZGNTQwHhcNMjUwNzAyMTgwMDA3WhcNMjUwNzA5MTgwMDA3WjAYMRYwFAYD VQQDEw02ODY1NzNhOC1hZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhyEX6OeJ8ikVc5t3jrVsB0iyUsZnwxD9J/kzRzMBysk4/AooP/ZyDh59m/i AoV9KsKQY09NtSYa5KyFwibGblwzvAZa4/O8FaOcQLPRHZZ5ssyCWoDcRJbt1XVX w9SQcCfKh79BzG3W/VPt926xJDVzs+nx88hxEGgA5Apbs7qFjiDQtuwWd2i8k9tG en9v20UQudLJWFwm/Devxmwv1/O+SHNoYbQaiWqhEbfI+HFNc75sZTSm+q+yX9FX LB+5ZGjP7PeK9oRWVWPq5+a++o90GM+t1s4Ip7mxExihFQuqyo7fs9ksFFq2HA2G dJKVzeVEBqZU2bsfygQjL3bGOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCs0j4sy A45Fs4AJ11sDRNQahQuBMB8GA1UdIwQYMBaAFMhzu2ELkTw+zccIomWnSxFBp29U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi84MkU0QzJBMEE2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBEN054d2lpWmFkTEVVR25i MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lITzdZUXVSUEQ3Tnh3aWlaYWRMRVVHbmIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi84MkU0QzJBMEE2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBE N054d2lpWmFkTEVVR25iMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEGU2ib0ewy5bZIvgVqex6UfrhGoNjQwFsdx2s2PqTE7buszbHflE+ ex5fIibwVm4AVSq+y51ynANqMdT49/ud/sR/fC80lRb26WwDUp5uqH/ECWTvEiPk asE3C1yMqhJO0mdtPZ02GRALte5d8phVF+qw0NPiF4M85NKH5kYjaEssLlu+D08v CoVJXc8rBkzSzLyzvkAdt1lNpU1m39lXO7N/e1qSTNgxJ1Tc6RCJoZBg7d3xpMyw /OquZFYpJGmXHczalO4gmegEm+fSuP9kpMtEst6M1aTOUHwsJDxRS1HB5oSgb3kk XzumeIsEZUdPMzN3tLm5DagaQin+dGhs -----END CERTIFICATE-----Generated at Wed Jul 2 19:59:46 2025 by rpki-client