$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json) Hash identifier: V1CIhTsBLJLHQgHBfhVwFUVX99jAESVIrl0Xfai8Npg= Subject key identifier: 97:A0:22:6D:A7:2F:4E:B0:0A:6A:32:41:A4:68:D5:F8:2D:8F:B4:B9 Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft Manifest number: 0630 Signing time: Wed 02 Jul 2025 23:03:54 +0000 Manifest this update: Wed 02 Jul 2025 23:03:54 +0000 Manifest next update: Wed 09 Jul 2025 23:03:54 +0000 Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: uPNN1Yf2+CHgBHRSrS8uLcL4J6B6Nz3H6bPCbrAqJKs=) 2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=) 3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: WNqUPBF8HNjFohXgQh/4EEtiPRYZ8HZnCTlz6HaVU7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Validity Not Before: Jul 2 23:03:54 2025 GMT Not After : Jul 9 23:03:54 2025 GMT Subject: CN=6865bada-36e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:b9:bb:91:ee:14:e5:6b:ae:68:b6:32:57: 26:67:ac:df:c0:f0:ef:df:44:97:23:7c:93:7c:a3: b8:59:51:f5:90:73:f6:7d:2b:23:70:db:89:06:fc: f7:7a:ee:62:59:eb:da:47:ba:c0:ea:03:bb:80:83: 1b:58:05:c5:7f:b9:67:68:08:a4:ab:66:26:23:5e: 2d:62:d3:cd:b2:c2:46:d5:4a:75:ea:6a:8b:52:32: 89:65:52:fb:de:e3:a3:08:00:33:18:aa:4d:eb:a7: 03:a7:12:66:d8:f1:7a:5b:96:de:f8:1a:0b:44:df: 51:8e:ee:7d:28:52:59:be:0b:eb:7f:93:d7:ef:2d: 4a:ed:22:24:c0:fd:74:a2:13:a7:c5:e4:6f:ca:74: 53:b2:07:ad:dc:fa:46:60:d0:36:35:e8:1e:d3:7e: a7:fb:35:ac:c5:9f:1f:6b:74:fd:eb:7e:1a:82:5a: c6:66:3b:d0:63:60:a0:b4:5e:05:cf:23:d0:f8:70: cd:0d:c9:64:c3:a5:ec:b3:9c:76:c9:2e:92:aa:aa: 08:38:aa:01:0c:c6:05:71:7c:70:54:2c:d1:73:fa: e8:9d:f8:44:5e:67:a3:f3:64:27:23:81:32:a2:43: 7d:a8:7b:25:53:f1:26:b2:71:7f:4b:6d:4a:53:a8: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A0:22:6D:A7:2F:4E:B0:0A:6A:32:41:A4:68:D5:F8:2D:8F:B4:B9 X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:cd:29:6d:2e:29:01:96:bf:c6:cd:d2:fd:69:c5:f8:14:6c: 59:87:3a:9f:e7:d2:30:da:b5:85:23:f7:50:c3:f1:1a:07:b3: 55:46:c0:32:fc:61:4e:38:73:90:c4:22:e7:bb:bc:c8:0c:d2: e5:81:3a:91:46:f6:21:d5:8a:12:d7:97:47:bb:0e:a1:09:5a: 41:da:1a:81:f9:64:67:ee:24:50:75:6c:92:9e:31:f1:26:28: f0:84:9d:13:83:63:81:f4:18:dc:2e:99:c8:6e:e1:94:cd:31: e3:c3:25:5a:b5:a9:c1:9e:e6:8b:f9:60:5e:5f:2d:aa:bf:24: 9a:7d:37:9a:5a:ca:e5:cb:52:6a:e5:29:f2:c0:1d:f6:8b:46: 15:8c:50:cd:84:33:85:5c:65:b4:4f:92:ee:a5:a4:c4:40:8a: a5:38:e0:0c:d6:a7:df:b4:48:0b:17:56:20:89:92:ba:00:61: 02:ed:6e:d7:a7:a4:30:9a:2c:dc:67:34:70:80:11:7f:5e:a3: 56:04:8b:88:6c:e5:a4:9a:a6:87:ba:ee:c7:57:b9:76:d6:9b: 00:50:8c:3d:d2:90:ba:66:af:00:33:a1:76:5a:a6:31:b8:34: 10:92:2c:31:67:cb:19:be:c9:36:9d:a3:1a:27:c3:61:b2:26: 1c:c7:e7:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjUwNzAyMjMwMzU0WhcNMjUwNzA5MjMwMzU0WjAYMRYwFAYD VQQDEw02ODY1YmFkYS0zNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszC5u5HuFOVrrmi2MlcmZ6zfwPDv30SXI3yTfKO4WVH1kHP2fSsjcNuJBvz3 eu5iWevaR7rA6gO7gIMbWAXFf7lnaAikq2YmI14tYtPNssJG1Up16mqLUjKJZVL7 3uOjCAAzGKpN66cDpxJm2PF6W5be+BoLRN9Rju59KFJZvgvrf5PX7y1K7SIkwP10 ohOnxeRvynRTsget3PpGYNA2Nege036n+zWsxZ8fa3T9634aglrGZjvQY2CgtF4F zyPQ+HDNDclkw6Xss5x2yS6SqqoIOKoBDMYFcXxwVCzRc/ronfhEXmej82QnI4Ey okN9qHslU/EmsnF/S21KU6jfkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJegIm2n L06wCmoyQaRo1fgtj7S5MB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTk5OC8yQzU5MkUyODlGMUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JR Z09fWnFtejZXbEhFcDUzU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhzSltLikBlr/GzdL9acX4FGxZhzqf59Iw2rWFI/dQw/EaB7NVRsAy /GFOOHOQxCLnu7zIDNLlgTqRRvYh1YoS15dHuw6hCVpB2hqB+WRn7iRQdWySnjHx JijwhJ0Tg2OB9BjcLpnIbuGUzTHjwyVatanBnuaL+WBeXy2qvySafTeaWsrly1Jq 5SnywB32i0YVjFDNhDOFXGW0T5LupaTEQIqlOOAM1qfftEgLF1YgiZK6AGEC7W7X p6QwmizcZzRwgBF/XqNWBIuIbOWkmqaHuu7HV7l21psAUIw90pC6Zq8AM6F2WqYx uDQQkiwxZ8sZvsk2naMaJ8NhsiYcx+eX -----END CERTIFICATE-----Generated at Thu Jul 3 11:12:42 2025 by rpki-client