$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: uZmfeQqrAyH2jt0lQeGkMpLlY3cmXldgZFEYk9XecEA= Subject key identifier: 7D:E0:03:97:1A:AC:74:13:72:F3:C7:84:1A:27:65:4F:1C:C2:20:BF Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: 0188 Signing time: Sat 05 Jul 2025 03:50:22 +0000 Manifest this update: Sat 05 Jul 2025 03:50:21 +0000 Manifest next update: Sat 12 Jul 2025 03:50:21 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: va6V1jW9/J/sTNorUztLbXfjHaSa3rznog50AnNSsTo=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: dYTddJDImyu3rpg7QICAEFzGZsVfww3CPHFdjrscptU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: Jul 5 03:50:21 2025 GMT Not After : Jul 12 03:50:21 2025 GMT Subject: CN=6868a0fe-ab0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:e8:48:a6:11:0d:e1:45:e6:e0:09:e6:c2: b1:80:12:86:17:3b:75:4a:a1:31:6b:d3:20:ca:8d: 96:c6:97:4e:fd:17:4d:71:44:ed:09:e8:1f:36:33: 38:7c:b9:fd:0b:4f:0e:3d:40:bd:fb:6d:31:46:e3: 28:79:ca:31:c0:78:0a:d6:c9:6c:30:c9:f4:d7:86: 02:f7:fd:3f:21:36:ac:7b:a0:e4:17:93:f8:df:84: 7b:79:2a:de:cb:1e:e7:45:19:06:ba:cd:1a:34:06: 0d:7f:99:b4:2c:41:0c:9a:4c:2e:78:f6:89:d9:ff: 01:5d:1a:c2:a6:bd:70:40:b7:62:63:6d:17:4f:b4: 77:ec:8d:9d:7d:9f:42:83:5f:62:3a:b2:1e:90:93: fe:bf:3f:75:5e:ff:bb:e7:72:e4:92:b0:27:a8:67: 3c:13:64:7b:fa:de:a5:1f:d5:45:95:b8:10:25:58: 0a:53:a9:eb:2c:1f:43:4b:73:b8:41:cc:97:b2:7f: 05:11:02:19:92:a6:ce:9d:b6:8c:a8:e9:24:e0:c3: 4a:28:f9:69:b0:cd:3b:64:32:e1:f1:83:87:ac:a9: c5:2c:8e:07:4b:ac:e2:01:18:0c:e2:17:9a:23:6a: 43:e3:98:e9:ae:df:b4:fa:9e:f9:39:be:5d:28:12: bd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E0:03:97:1A:AC:74:13:72:F3:C7:84:1A:27:65:4F:1C:C2:20:BF X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:2f:c1:65:fc:88:b1:6f:d5:35:42:8e:8c:54:b3:5a:db:bb: 45:37:9f:aa:e4:d3:83:86:cc:09:4c:04:de:64:c9:b3:91:ce: 3e:e8:65:46:64:45:a5:0d:73:59:39:05:fe:fc:40:75:d3:cf: 58:b9:33:f1:3a:96:9f:b3:15:bc:26:3b:c6:70:60:c4:7b:d9: 20:d4:fd:e6:5c:be:a3:92:ee:39:79:36:1f:b5:d1:18:99:29: 5c:cc:47:6b:79:0b:f8:dd:19:85:a2:8a:e4:9e:6d:e0:ee:b3: 7f:ca:7d:d1:dc:7e:d4:ae:71:24:d4:1b:d3:eb:55:ab:f0:64: d6:e2:d7:0a:88:6d:26:04:ff:f3:21:99:ba:96:70:1d:1e:8a: 84:27:48:1d:8b:60:2b:af:d2:ea:ec:f4:07:ec:a7:3d:31:c9: 43:7f:1c:69:fa:51:b9:22:aa:66:71:73:6b:7c:de:c0:63:c2: ca:a2:92:a6:93:da:6f:b8:9e:89:9c:a2:e1:af:27:b0:7f:ba: b7:38:b2:4e:72:4e:7d:97:a3:62:ad:ba:42:17:c2:33:0a:c2: 2f:ae:bb:3e:29:1e:b5:fc:c0:83:10:7f:8c:78:27:7e:d8:2a: 0b:1e:89:2c:ff:3b:62:a7:2d:69:c3:4d:f3:df:8d:4a:86:22: 85:03:99:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjUwNzA1MDM1MDIxWhcNMjUwNzEyMDM1MDIxWjAYMRYwFAYD VQQDEw02ODY4YTBmZS1hYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlHoSKYRDeFF5uAJ5sKxgBKGFzt1SqExa9Mgyo2WxpdO/RdNcUTtCegfNjM4 fLn9C08OPUC9+20xRuMoecoxwHgK1slsMMn014YC9/0/ITase6DkF5P434R7eSre yx7nRRkGus0aNAYNf5m0LEEMmkwuePaJ2f8BXRrCpr1wQLdiY20XT7R37I2dfZ9C g19iOrIekJP+vz91Xv+753LkkrAnqGc8E2R7+t6lH9VFlbgQJVgKU6nrLB9DS3O4 QcyXsn8FEQIZkqbOnbaMqOkk4MNKKPlpsM07ZDLh8YOHrKnFLI4HS6ziARgM4hea I2pD45jprt+0+p75Ob5dKBK9OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3gA5ca rHQTcvPHhBonZU8cwiC/MB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWL8Fl/Iixb9U1Qo6MVLNa27tFN5+q5NODhswJTATeZMmzkc4+6GVG ZEWlDXNZOQX+/EB1089YuTPxOpafsxW8JjvGcGDEe9kg1P3mXL6jku45eTYftdEY mSlczEdreQv43RmFoorknm3g7rN/yn3R3H7UrnEk1BvT61Wr8GTW4tcKiG0mBP/z IZm6lnAdHoqEJ0gdi2Arr9Lq7PQH7Kc9MclDfxxp+lG5IqpmcXNrfN7AY8LKopKm k9pvuJ6JnKLhryewf7q3OLJOck59l6NirbpCF8IzCsIvrrs+KR61/MCDEH+MeCd+ 2CoLHoks/ztipy1pw03z341KhiKFA5lw -----END CERTIFICATE-----Generated at Sat Jul 5 18:25:10 2025 by rpki-client