$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft File: 7yfjyfFbWDsVypzMPJBdIpzi8NA.mft (raw, json) Hash identifier: zUqfo6mG0XSQ8pjH8DLPTCTAlCI6mDz1MwOHC/5C+rk= Subject key identifier: 1B:81:7A:1E:8D:49:88:5D:72:4B:1E:BA:3C:D0:AC:67:C4:42:75:18 Authority key identifier: EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 Certificate issuer: /CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0 Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft Manifest number: 05E6 Signing time: Wed 02 Jul 2025 23:16:03 +0000 Manifest this update: Wed 02 Jul 2025 23:16:02 +0000 Manifest next update: Wed 09 Jul 2025 23:16:02 +0000 Files and hashes: 1: 7yfjyfFbWDsVypzMPJBdIpzi8NA.crl (hash: D6DMp7AGUU7gNg8T1+M2Wyzc0fWdB8GFXPs/CRuNVjM=) 2: 38378A3EBA3411EBB94A527CC4F9AE02.roa (hash: bXfsV+JRththOFdM9JTTJyhVvibLKGVpju+gIvVc/Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1814, serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0 Validity Not Before: Jul 2 23:16:02 2025 GMT Not After : Jul 9 23:16:02 2025 GMT Subject: CN=6865bdb3-334b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:c3:87:c3:6a:08:54:e3:55:31:f8:f2:a0: 58:d9:c1:8c:c0:f5:64:89:f3:58:8b:7b:05:2b:1a: bc:07:3f:95:75:94:46:eb:9f:ae:20:b1:63:12:70: a4:9c:e5:48:44:bd:f5:3a:8b:93:97:0b:4d:68:e5: 4a:69:07:19:b3:32:6f:85:cb:b0:b3:c2:a9:72:e0: 50:49:7d:57:30:bb:ec:d5:34:90:a2:b6:9c:ac:f1: 6d:ca:10:d5:6f:32:52:05:00:e6:75:86:89:0e:73: ec:00:3b:c8:80:62:81:3b:8b:3b:56:4a:d3:51:bb: 3f:ab:9b:5a:4d:c9:13:c0:c3:67:fa:a1:5d:c3:09: cd:f4:1e:cc:25:bf:28:f6:2d:d4:4b:22:ad:2e:f7: 5e:23:66:1c:07:8e:a9:0a:ae:07:ce:80:5c:2f:15: f7:ba:18:2f:45:a8:c9:f5:07:6a:40:7b:20:e0:c8: 45:9d:31:be:40:63:96:f8:82:c0:33:67:69:59:10: 6d:31:97:cb:71:83:d1:7e:ca:57:88:33:37:0a:a4: 88:6d:9c:ce:82:8f:db:2a:0d:8e:94:7d:7e:15:87: b9:4e:43:84:d7:12:fe:fc:ff:4e:c2:b9:f7:ed:f6: 60:0d:3f:e7:90:b0:dc:8a:e5:32:f7:6e:f8:fb:ce: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:81:7A:1E:8D:49:88:5D:72:4B:1E:BA:3C:D0:AC:67:C4:42:75:18 X509v3 Authority Key Identifier: keyid:EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:68:20:c1:ab:9c:17:6e:67:c3:9e:aa:ae:e3:a7:a6:4b:3e: 1e:fd:d6:c1:54:2b:c0:a5:89:f7:37:82:11:6c:88:98:c9:3d: a6:93:30:bb:36:bb:0d:f9:0b:c3:67:1f:c2:a8:fa:9d:60:e3: fe:00:26:b2:da:83:b6:60:66:6c:55:f9:10:ab:f8:68:39:28: 7a:45:3e:3e:67:c9:bc:c3:d6:56:4b:5d:47:f8:ce:28:f3:c0: bd:6e:f9:0a:ea:05:13:4e:e3:c4:d5:7c:14:82:d0:31:f7:d4: 4b:2f:55:54:3e:c2:7a:27:04:cb:a0:3d:54:9b:d6:c9:88:2c: d7:5d:20:e1:41:2c:f6:16:dc:3c:da:fe:1f:f7:d2:2d:80:d3: 55:b7:d5:0b:74:fb:f4:2f:d3:c3:fa:55:bf:cf:c2:5a:75:8e: f2:7f:05:67:fa:24:8d:e2:d3:97:ef:5b:6e:4b:d8:b7:19:f1: 5e:e3:82:60:94:ad:1a:68:71:59:2d:ef:b6:ce:32:be:21:73: 29:31:14:f7:85:5e:a9:61:f0:1e:1e:f8:10:1d:7a:83:22:76: f6:db:47:94:ed:d4:4a:76:a4:23:ea:50:d0:da:1e:d1:d7:cf: 9b:38:d2:69:65:f5:b1:59:ed:0d:16:db:b6:d2:bd:e5:17:ee: b0:88:c9:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE4MTQxMTAvBgNVBAUTKEVGMjdFM0M5RjE1QjU4M0IxNUNBOUNDQzNDOTA1RDIy OUNFMkYwRDAwHhcNMjUwNzAyMjMxNjAyWhcNMjUwNzA5MjMxNjAyWjAYMRYwFAYD VQQDEw02ODY1YmRiMy0zMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLfDh8NqCFTjVTH48qBY2cGMwPVkifNYi3sFKxq8Bz+VdZRG65+uILFjEnCk nOVIRL31OouTlwtNaOVKaQcZszJvhcuws8KpcuBQSX1XMLvs1TSQoracrPFtyhDV bzJSBQDmdYaJDnPsADvIgGKBO4s7VkrTUbs/q5taTckTwMNn+qFdwwnN9B7MJb8o 9i3USyKtLvdeI2YcB46pCq4HzoBcLxX3uhgvRajJ9QdqQHsg4MhFnTG+QGOW+ILA M2dpWRBtMZfLcYPRfspXiDM3CqSIbZzOgo/bKg2OlH1+FYe5TkOE1xL+/P9Owrn3 7fZgDT/nkLDciuUy9274+86N6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuBeh6N SYhdckseujzQrGfEQnUYMB8GA1UdIwQYMBaAFO8n48nxW1g7FcqczDyQXSKc4vDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTgxNC9GM0M4NTM5RUJB MzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldEc1Z5cHpNUEpCZElwemk4 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd5Zmp5ZkZiV0RzVnlwek1QSkJkSXB6aThOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTgxNC9GM0M4NTM5RUJBMzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldE c1Z5cHpNUEpCZElwemk4TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSaCDBq5wXbmfDnqqu46emSz4e/dbBVCvApYn3N4IRbIiYyT2mkzC7 NrsN+QvDZx/CqPqdYOP+ACay2oO2YGZsVfkQq/hoOSh6RT4+Z8m8w9ZWS11H+M4o 88C9bvkK6gUTTuPE1XwUgtAx99RLL1VUPsJ6JwTLoD1Um9bJiCzXXSDhQSz2Ftw8 2v4f99ItgNNVt9ULdPv0L9PD+lW/z8JadY7yfwVn+iSN4tOX71tuS9i3GfFe44Jg lK0aaHFZLe+2zjK+IXMpMRT3hV6pYfAeHvgQHXqDInb220eU7dRKdqQj6lDQ2h7R 18+bONJpZfWxWe0NFtu20r3lF+6wiMl4 -----END CERTIFICATE-----Generated at Thu Jul 3 07:07:20 2025 by rpki-client