$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: E2h9cZJls/abXlZp82ZRtXCt5OgQ2d4HM3br1mG28UE= Subject key identifier: 27:6C:B0:10:CD:3B:A7:6F:15:E8:C5:5F:C4:CB:6C:BF:10:43:58:02 Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 013A Signing time: Thu 03 Jul 2025 04:32:58 +0000 Manifest this update: Thu 03 Jul 2025 04:32:57 +0000 Manifest next update: Thu 10 Jul 2025 04:32:57 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: 3gH19de67KgLURV0LGK6r7JA5FSblxE2Ko4TFEl/8uI=) 2: E8E76DFA77E111EEAD38F454C4F9AE02.roa (hash: fU/RkpVL4z6Cr0cyCUfNUkgmOGc3QWQsXd03NlJ0kdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Validity Not Before: Jul 3 04:32:57 2025 GMT Not After : Jul 10 04:32:57 2025 GMT Subject: CN=686607fa-2684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e6:88:22:cd:7b:5e:b9:df:09:f2:83:7c:ea: 9b:79:6a:94:ea:fa:69:b6:43:c1:54:df:53:97:6c: 97:83:67:97:0a:41:f1:3a:b0:dc:c0:94:f8:7e:be: 8c:7e:4c:7f:98:23:13:b8:48:42:fd:8a:d1:48:f3: 3d:45:32:e9:70:38:13:24:14:4f:95:f6:2f:9e:ab: 61:87:1d:da:8a:0b:c2:5c:46:f3:82:d1:57:f0:9c: 10:57:d4:09:fe:17:23:f5:e7:81:70:71:14:1b:2b: a7:bd:2f:11:4a:52:65:d2:a0:3a:30:41:93:c6:36: 70:02:11:d6:f6:47:da:d4:d8:67:19:fa:8d:8c:88: 08:51:91:1f:ed:33:ac:2d:cb:e0:ec:55:85:b2:44: f4:71:95:5a:1f:9a:b4:94:28:38:97:7d:e6:c1:e9: 16:17:b7:a0:2e:26:67:e7:aa:40:64:23:4d:de:e0: a6:77:4d:f9:63:64:63:68:0d:86:a4:28:bb:a0:02: 88:ac:0b:7c:2c:6c:36:df:fc:de:bf:5b:f4:e2:ad: 0b:be:76:0c:89:53:aa:ec:9c:1f:f7:56:40:21:9d: 4c:41:b5:0d:71:52:96:dc:56:10:1b:0c:e6:4b:2c: 3c:90:09:a5:da:b3:e7:3f:ec:8b:16:41:e4:7f:c5: 8f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6C:B0:10:CD:3B:A7:6F:15:E8:C5:5F:C4:CB:6C:BF:10:43:58:02 X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:5a:3f:4e:1d:e2:3f:06:a7:a2:e8:66:73:3c:7b:28:c5:51: b1:8f:e1:7d:3a:f6:05:77:85:38:dd:a3:d1:2b:22:3d:f4:f3: 1d:b8:9b:73:1b:2a:70:31:6b:66:7c:f4:96:c3:75:58:32:e8: f0:91:0c:e5:d2:16:aa:92:64:a3:87:55:23:15:59:63:ed:fd: d4:d1:30:6a:5f:b1:dc:c5:63:79:8d:fb:72:19:f0:69:3c:4e: 3c:a5:b4:f2:7a:cb:5d:85:e8:d1:7e:95:30:bf:ce:8a:52:71: 3f:3a:7a:7b:3f:18:84:31:c0:c3:b0:5a:51:f8:7c:c9:2a:3b: 8d:aa:d9:d1:47:4f:0c:ce:1f:78:43:2c:4d:aa:b6:75:34:93: 9e:f5:da:1a:ff:d2:46:f3:19:7d:92:84:79:8a:34:71:fc:dc: c2:9d:2e:6f:f2:97:cf:bf:15:fd:af:ca:b5:56:04:6b:ac:3e: fd:a7:f6:e1:31:74:f3:ed:7e:fa:6d:21:d3:2f:74:82:7e:7c: 38:10:78:c8:b3:3f:92:98:cd:b7:6a:81:8a:83:54:60:39:d8: 9c:b5:79:0f:86:15:85:33:b1:70:c5:1b:d9:a6:ad:17:cb:dc: 1b:d6:aa:11:12:02:fc:9a:57:ac:47:24:d3:25:63:4a:87:4c: 61:bc:d3:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG MkI1OTYyMDQwHhcNMjUwNzAzMDQzMjU3WhcNMjUwNzEwMDQzMjU3WjAYMRYwFAYD VQQDEw02ODY2MDdmYS0yNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9OaIIs17XrnfCfKDfOqbeWqU6vpptkPBVN9Tl2yXg2eXCkHxOrDcwJT4fr6M fkx/mCMTuEhC/YrRSPM9RTLpcDgTJBRPlfYvnqthhx3aigvCXEbzgtFX8JwQV9QJ /hcj9eeBcHEUGyunvS8RSlJl0qA6MEGTxjZwAhHW9kfa1NhnGfqNjIgIUZEf7TOs Lcvg7FWFskT0cZVaH5q0lCg4l33mwekWF7egLiZn56pAZCNN3uCmd035Y2RjaA2G pCi7oAKIrAt8LGw23/zev1v04q0LvnYMiVOq7Jwf91ZAIZ1MQbUNcVKW3FYQGwzm Syw8kAml2rPnP+yLFkHkf8WPRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdssBDN O6dvFejFX8TLbL8QQ1gCMB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3 RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4 ZGpscFFYUER6LVh5dFpZZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVWj9OHeI/Bqei6GZzPHsoxVGxj+F9OvYFd4U43aPRKyI99PMduJtz GypwMWtmfPSWw3VYMujwkQzl0haqkmSjh1UjFVlj7f3U0TBqX7HcxWN5jftyGfBp PE48pbTyestdhejRfpUwv86KUnE/Onp7PxiEMcDDsFpR+HzJKjuNqtnRR08Mzh94 QyxNqrZ1NJOe9doa/9JG8xl9koR5ijRx/NzCnS5v8pfPvxX9r8q1VgRrrD79p/bh MXTz7X76bSHTL3SCfnw4EHjIsz+SmM23aoGKg1RgOdictXkPhhWFM7FwxRvZpq0X y9wb1qoREgL8mlesRyTTJWNKh0xhvNOB -----END CERTIFICATE-----Generated at Thu Jul 3 14:41:38 2025 by rpki-client