$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft File: y0yV-DniHR3g9FhVPZpM4o5BTYg.mft (raw, json) Hash identifier: HK0Dj+4QTsTkLr4czgEp3P+8mlhZqys9ifuIDsMSICE= Subject key identifier: 99:AA:6C:52:95:1D:57:06:86:40:CB:E4:AE:9D:FF:44:37:28:12:73 Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Certificate serial: 090B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft Manifest number: 08E4 Signing time: Fri 04 Jul 2025 20:48:20 +0000 Manifest this update: Fri 04 Jul 2025 20:48:20 +0000 Manifest next update: Fri 11 Jul 2025 20:48:20 +0000 Files and hashes: 1: y0yV-DniHR3g9FhVPZpM4o5BTYg.crl (hash: IQIUyY7drXb6ofoztJJHYR313QHEHedc9FLYNVbapMw=) 2: 2BC34BC6404A11F0B481CC7CC4F9AE02.roa (hash: 5kE1p13DLUf3CMV1uPaDHHW1FGlxES6xsk7p+yKiahI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2315 (0x90b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4502, serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Validity Not Before: Jul 4 20:48:20 2025 GMT Not After : Jul 11 20:48:20 2025 GMT Subject: CN=68683e14-1274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:53:fb:d3:64:fa:43:da:44:6f:b0:64:be: 69:d9:c7:79:6b:6a:fd:b7:c5:3c:44:c4:35:fc:09: 77:72:8f:02:51:e5:71:01:70:6e:22:34:8d:36:a4: 32:df:53:31:e4:e5:34:e8:24:b2:77:40:b7:10:d2: 05:bc:17:a6:e5:36:54:54:7b:ec:d6:eb:2d:f5:ca: a7:9d:e9:b8:8f:37:af:2e:94:aa:78:bc:15:b6:0b: 9b:bd:6b:4f:bc:51:c3:db:08:9a:b3:6f:ff:20:cd: 0e:60:3c:c2:3c:69:96:c3:15:0c:a3:c8:cc:9a:42: 5e:ca:50:c4:ff:7c:80:50:e5:d3:cc:a0:e5:e4:6b: 37:b9:f1:6b:33:8b:50:08:79:4d:a3:d6:cc:d6:e5: 63:e5:e2:27:fd:a8:7a:c9:ae:d7:6f:0e:c7:af:1d: 39:c8:57:ac:ab:41:62:9f:76:b7:6a:b9:56:c4:01: f3:1e:ba:34:6f:b2:13:36:08:32:18:65:52:76:8d: 55:a9:3a:16:0d:9d:cb:b4:27:b0:c3:6f:db:54:98: fd:d2:97:72:4f:7f:1c:88:9d:b0:24:0f:e2:99:60: 35:aa:e1:8e:8e:ae:0e:f4:c1:00:13:93:8c:9b:39: 99:46:5b:86:ba:61:65:43:46:94:ec:10:1a:4b:70: 01:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AA:6C:52:95:1D:57:06:86:40:CB:E4:AE:9D:FF:44:37:28:12:73 X509v3 Authority Key Identifier: keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:dd:d4:83:92:87:fd:ac:7b:57:1a:3f:1b:c5:63:af:1d:db: 01:f5:53:06:32:96:38:ea:84:09:2e:9f:d7:27:d2:37:7f:09: 8c:f0:ab:6f:26:14:3a:cf:14:0c:34:62:88:2d:c1:49:0c:be: d4:a6:c8:75:2c:e7:ad:94:16:1d:f2:3d:61:fc:8f:84:6e:f9: 31:56:df:44:f4:02:eb:7b:53:40:b2:f0:75:b1:6e:f3:28:d8: 78:10:2c:05:5b:f1:4b:90:c1:28:98:67:37:96:c6:51:14:34: c0:e7:0b:30:10:95:3b:3d:a9:24:e6:36:dd:4c:12:ec:6f:8d: 04:a1:6d:b6:bc:05:57:a9:a3:c6:51:31:af:82:dc:88:1a:01: 2a:8a:78:79:aa:fd:e2:37:ac:0e:96:fc:15:5b:46:4f:d6:c2: dc:df:72:12:65:0d:78:0c:c5:4f:b2:b2:d1:a8:14:31:16:a5: 1e:41:0e:2e:6b:07:0a:68:06:58:ff:a8:8c:bd:1e:95:b5:53: 9e:82:e2:1d:54:9a:b4:cb:9b:43:68:6c:dd:ff:2c:d8:e1:bd: 6e:e6:80:bd:d3:34:90:a5:ab:7d:de:95:b1:e6:38:63:9e:c3: c9:ae:92:ec:37:c5:7a:ff:fe:6d:0c:10:67:78:b4:6f:fb:d6: 47:bf:45:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1MDIxMTAvBgNVBAUTKENCNEM5NUY4MzlFMjFEMURFMEY0NTg1NTNEOUE0Q0Uy OEU0MTREODgwHhcNMjUwNzA0MjA0ODIwWhcNMjUwNzExMjA0ODIwWjAYMRYwFAYD VQQDEw02ODY4M2UxNC0xMjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3BT+9Nk+kPaRG+wZL5p2cd5a2r9t8U8RMQ1/Al3co8CUeVxAXBuIjSNNqQy 31Mx5OU06CSyd0C3ENIFvBem5TZUVHvs1ust9cqnnem4jzevLpSqeLwVtgubvWtP vFHD2wias2//IM0OYDzCPGmWwxUMo8jMmkJeylDE/3yAUOXTzKDl5Gs3ufFrM4tQ CHlNo9bM1uVj5eIn/ah6ya7Xbw7Hrx05yFesq0Fin3a3arlWxAHzHro0b7ITNggy GGVSdo1VqToWDZ3LtCeww2/bVJj90pdyT38ciJ2wJA/imWA1quGOjq4O9MEAE5OM mzmZRluGumFlQ0aU7BAaS3ABswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmqbFKV HVcGhkDL5K6d/0Q3KBJzMB8GA1UdIwQYMBaAFMtMlfg54h0d4PRYVT2aTOKOQU2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDUwMi80MEUyREZDQ0I1 MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhSM2c5RmhWUFpwTTRvNUJU WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kweVYtRG5pSFIzZzlGaFZQWnBNNG81QlRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDUwMi80MEUyREZDQ0I1MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhS M2c5RmhWUFpwTTRvNUJUWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR3dSDkof9rHtXGj8bxWOvHdsB9VMGMpY46oQJLp/XJ9I3fwmM8Ktv JhQ6zxQMNGKILcFJDL7Upsh1LOetlBYd8j1h/I+EbvkxVt9E9ALre1NAsvB1sW7z KNh4ECwFW/FLkMEomGc3lsZRFDTA5wswEJU7Pakk5jbdTBLsb40EoW22vAVXqaPG UTGvgtyIGgEqinh5qv3iN6wOlvwVW0ZP1sLc33ISZQ14DMVPsrLRqBQxFqUeQQ4u awcKaAZY/6iMvR6VtVOeguIdVJq0y5tDaGzd/yzY4b1u5oC90zSQpat93pWx5jhj nsPJrpLsN8V6//5tDBBneLRv+9ZHv0XB -----END CERTIFICATE-----Generated at Sun Jul 6 00:16:13 2025 by rpki-client