$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json) Hash identifier: fqjQDNo/yUk17rh3PHJnt7UmEI+nyw3hh0kBaWH7dSw= Subject key identifier: 1C:71:35:1E:9F:53:47:C7:E8:C9:4C:92:2C:11:6B:E1:0D:A7:17:24 Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft Manifest number: B8 Signing time: Sat 19 Jul 2025 06:08:52 +0000 Manifest this update: Sat 19 Jul 2025 06:08:52 +0000 Manifest next update: Sat 26 Jul 2025 06:08:52 +0000 Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: HTINv3BWj6zZZG+k8R16YHxJKo9MZ15SffKw5H8/5cw=) 2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: OVQ/CMJ4XqARrGXYEMgXeRxRPf3/PHnhFuc4e8fTgpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Validity Not Before: Jul 19 06:08:52 2025 GMT Not After : Jul 26 06:08:52 2025 GMT Subject: CN=687b3674-f440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:db:e7:15:a2:a6:81:d0:85:60:e1:43:67: 18:fb:4b:dd:3e:df:85:f5:48:e8:73:d9:79:0c:e7: d6:3c:0e:0b:63:f9:63:e1:a8:df:65:a3:44:2e:59: 09:a6:33:5e:ac:37:55:78:a7:ab:ea:f6:60:bf:5d: 71:9b:30:97:6d:35:c5:0c:df:ca:75:5a:75:17:7d: 76:19:a8:ca:85:cb:cd:f8:2b:34:2e:06:eb:18:f1: 60:a6:49:23:ac:97:8a:09:63:83:9f:9f:66:82:bc: e1:80:f7:f5:d2:6d:5b:ca:36:ca:18:0e:75:2c:b2: 0b:be:b0:ed:9a:7f:bb:ab:a8:fa:e5:a8:e6:0a:75: 99:ea:e1:ec:8c:5a:44:c3:b2:6c:ea:f3:ef:86:34: b7:fb:9e:08:8d:73:eb:dc:87:64:db:56:d3:07:6e: 5f:cd:07:e4:89:f4:f8:c9:07:b8:e2:55:4a:61:0e: bf:22:c8:90:b7:48:3a:6f:68:b6:46:bc:10:6b:ee: 5c:61:c1:22:f8:64:3c:b6:6b:e9:ef:5c:cc:e9:b3: ca:5a:b0:4b:0c:ce:77:ff:6f:33:4f:01:74:8c:54: 78:97:6e:1b:b8:e9:e1:12:36:50:2e:7f:ee:68:b1: 3a:1c:d5:32:36:ea:77:54:09:c7:ec:bc:91:ed:5b: 9c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:71:35:1E:9F:53:47:C7:E8:C9:4C:92:2C:11:6B:E1:0D:A7:17:24 X509v3 Authority Key Identifier: keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ee:56:92:96:ee:99:7c:6c:98:96:17:5c:a6:d1:0b:03:62: 9a:fd:c9:c3:e8:83:b5:33:46:e3:0b:86:22:c9:ba:f2:65:80: ad:b9:19:ac:ee:ad:e3:9a:10:6f:6a:63:64:ba:66:55:0a:3b: 2e:e1:04:ec:ea:d2:91:df:39:0a:3e:5b:61:81:0f:47:91:ad: cd:69:69:44:1c:dc:a1:bc:b7:53:db:8e:cf:a1:52:9c:d3:50: 85:fa:5d:96:28:4c:42:3b:75:4c:25:9c:82:f7:d6:75:f9:f2: 1f:26:3f:80:b8:49:76:1a:fe:29:03:2a:32:ff:03:6d:40:fd: d0:94:e8:ce:04:88:1f:ef:56:7a:98:86:e8:83:ed:96:f5:36: 35:3b:a0:b4:1e:0c:04:96:72:3b:7a:91:d7:b8:32:d0:e0:47: 54:9e:c1:9e:55:3e:20:bb:09:65:c1:57:0b:b8:8d:e3:0a:e6: 47:01:8b:ff:49:6c:8a:19:f2:4b:51:f2:03:70:d3:f3:76:32: 40:eb:c4:dc:b8:e5:a3:6b:8c:8d:99:27:3b:c4:24:2b:7e:f8: 6b:60:d8:44:bc:6c:6f:d5:ad:df:7a:98:57:56:e1:60:3b:b6: b4:29:0e:7c:fa:3b:27:20:f0:45:8e:82:65:18:97:69:75:92: 3f:7e:d1:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3 OUJFMDc5NkEwHhcNMjUwNzE5MDYwODUyWhcNMjUwNzI2MDYwODUyWjAYMRYwFAYD VQQDEw02ODdiMzY3NC1mNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytPb5xWipoHQhWDhQ2cY+0vdPt+F9Ujoc9l5DOfWPA4LY/lj4ajfZaNELlkJ pjNerDdVeKer6vZgv11xmzCXbTXFDN/KdVp1F312GajKhcvN+Cs0LgbrGPFgpkkj rJeKCWODn59mgrzhgPf10m1byjbKGA51LLILvrDtmn+7q6j65ajmCnWZ6uHsjFpE w7Js6vPvhjS3+54IjXPr3Idk21bTB25fzQfkifT4yQe44lVKYQ6/IsiQt0g6b2i2 RrwQa+5cYcEi+GQ8tmvp71zM6bPKWrBLDM53/28zTwF0jFR4l24buOnhEjZQLn/u aLE6HNUyNup3VAnH7LyR7VucRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxxNR6f U0fH6MlMkiwRa+ENpxckMB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS81MzhDMTk2MDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclEx MGNwSk9wMWozS2Q1dmdlV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+7laSlu6ZfGyYlhdcptELA2Ka/cnD6IO1M0bjC4YiybryZYCtuRms 7q3jmhBvamNkumZVCjsu4QTs6tKR3zkKPlthgQ9Hka3NaWlEHNyhvLdT247PoVKc 01CF+l2WKExCO3VMJZyC99Z1+fIfJj+AuEl2Gv4pAyoy/wNtQP3QlOjOBIgf71Z6 mIbog+2W9TY1O6C0HgwElnI7epHXuDLQ4EdUnsGeVT4guwllwVcLuI3jCuZHAYv/ SWyKGfJLUfIDcNPzdjJA68TcuOWja4yNmSc7xCQrfvhrYNhEvGxv1a3fephXVuFg O7a0KQ58+jsnIPBFjoJlGJdpdZI/ftGh -----END CERTIFICATE-----Generated at Sat Jul 19 15:07:13 2025 by rpki-client