$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json) Hash identifier: VsSaeLoS64pXSVrqAtwPA/HCwgRX5B2Em7WGhM5AEmU= Subject key identifier: F9:AE:10:7E:92:7B:33:F3:CC:3F:93:95:53:47:23:4A:B5:4E:80:4A Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft Manifest number: BB Signing time: Thu 03 Jul 2025 06:08:20 +0000 Manifest this update: Thu 03 Jul 2025 06:08:19 +0000 Manifest next update: Thu 10 Jul 2025 06:08:19 +0000 Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: Q+WMZEn0kenirIulxqDnR5pE4OAwm86Fg63nl64/E7I=) 2: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: zQOiTFbVqK43DmDzJVcnwdcHTRwrsKJXhumrQHobr8I=) 3: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: OV24Kj5y+880mPdkukE2fpkmI0sbTUDGEcrj2jYLxRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Validity Not Before: Jul 3 06:08:19 2025 GMT Not After : Jul 10 06:08:19 2025 GMT Subject: CN=68661e54-cf0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:dd:3c:cb:b2:97:68:a3:e9:b4:ad:8e:41: 6c:3d:05:d1:b7:c0:01:d6:7c:d0:bd:47:43:34:43: a5:ab:95:bc:29:e9:2f:de:0a:87:3d:ec:d6:a7:4b: 59:65:f4:49:6f:4b:a3:0f:fe:34:af:cc:ba:9f:66: 84:b1:18:1e:da:58:50:96:25:77:8e:53:e8:c8:f3: 72:da:29:c1:b8:9b:c7:0d:29:d6:26:6b:7b:3d:d1: 4b:50:8b:a8:32:5f:98:c2:2e:ea:42:27:4a:a8:a5: 8a:93:8f:ae:41:74:c4:57:07:9c:5a:8f:7e:48:89: 03:80:72:64:67:46:96:a7:08:40:3f:37:d9:87:3a: 90:62:9f:48:88:76:9f:20:f7:35:79:bd:45:00:ff: 00:b9:5d:84:af:bb:24:4c:fc:c3:f3:20:36:61:52: 01:37:0b:fb:ec:eb:a6:4f:eb:f9:bf:86:5d:29:12: a1:5e:2f:81:ee:b2:45:fe:89:8b:58:2d:30:e6:55: 3b:84:8f:b2:cf:29:2e:92:89:e7:63:57:23:cc:31: e8:35:e3:3e:50:ff:b0:87:2e:1f:9e:fd:2f:4a:74: fe:7b:30:d8:bb:eb:29:01:5b:4b:55:39:90:87:02: 61:f5:0d:08:77:91:4d:bf:96:a4:6c:a4:d2:7e:6f: 13:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AE:10:7E:92:7B:33:F3:CC:3F:93:95:53:47:23:4A:B5:4E:80:4A X509v3 Authority Key Identifier: keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a8:46:1c:20:70:75:92:ac:23:fe:d1:b2:47:4a:72:f1:5c: 03:a3:50:5e:36:8a:de:34:9b:38:18:b2:b8:2d:e2:7e:07:8e: 9a:72:f0:c6:9c:0d:7a:ed:95:0b:c2:b7:fe:ad:a6:e5:d3:6b: 34:75:be:5a:98:ba:cd:68:85:1a:48:cb:f0:26:5a:42:69:7b: 15:d8:54:96:63:4f:61:49:b8:43:33:39:5d:f8:44:e4:71:4a: 6a:b6:57:03:33:b4:c7:1a:92:1c:a9:fd:6d:23:61:7c:4c:d9: b3:da:fd:cc:41:25:10:d1:2a:b5:20:f3:48:1e:a1:9b:1f:2f: ed:64:57:d9:90:e5:63:52:88:0f:ed:51:b9:77:79:c3:a3:23: de:65:0a:48:36:9f:f7:20:fd:b8:14:74:59:c9:c2:58:8f:99: 02:04:71:6c:9c:ad:28:31:c2:47:fb:4f:5a:c5:24:12:ba:97: 89:c5:8c:3a:8c:d1:e4:60:0c:85:62:47:dc:c5:94:ce:da:15: 72:a3:59:03:04:3c:05:47:fd:76:83:ca:c7:b9:b1:cd:b1:b5: 95:9a:e1:4f:0f:ca:18:8f:e8:81:78:c3:4b:2f:48:03:de:2e: 05:5f:16:5b:f9:3e:72:38:92:11:03:a1:62:1b:f0:b5:8d:00: 43:ed:9f:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw RjAzQkY3QzYwHhcNMjUwNzAzMDYwODE5WhcNMjUwNzEwMDYwODE5WjAYMRYwFAYD VQQDEw02ODY2MWU1NC1jZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIjdPMuyl2ij6bStjkFsPQXRt8AB1nzQvUdDNEOlq5W8Kekv3gqHPezWp0tZ ZfRJb0ujD/40r8y6n2aEsRge2lhQliV3jlPoyPNy2inBuJvHDSnWJmt7PdFLUIuo Ml+Ywi7qQidKqKWKk4+uQXTEVwecWo9+SIkDgHJkZ0aWpwhAPzfZhzqQYp9IiHaf IPc1eb1FAP8AuV2Er7skTPzD8yA2YVIBNwv77OumT+v5v4ZdKRKhXi+B7rJF/omL WC0w5lU7hI+yzykukonnY1cjzDHoNeM+UP+why4fnv0vSnT+ezDYu+spAVtLVTmQ hwJh9Q0Id5FNv5akbKTSfm8TDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmuEH6S ezPzzD+TlVNHI0q1ToBKMB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5 OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi82RDIwNzVGNjQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NP MWJ1dTF4Y2swaUlQQTc5OFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuqEYcIHB1kqwj/tGyR0py8VwDo1BeNoreNJs4GLK4LeJ+B46acvDG nA167ZULwrf+rabl02s0db5amLrNaIUaSMvwJlpCaXsV2FSWY09hSbhDMzld+ETk cUpqtlcDM7THGpIcqf1tI2F8TNmz2v3MQSUQ0Sq1IPNIHqGbHy/tZFfZkOVjUogP 7VG5d3nDoyPeZQpINp/3IP24FHRZycJYj5kCBHFsnK0oMcJH+09axSQSupeJxYw6 jNHkYAyFYkfcxZTO2hVyo1kDBDwFR/12g8rHubHNsbWVmuFPD8oYj+iBeMNLL0gD 3i4FXxZb+T5yOJIRA6FiG/C1jQBD7Z8+ -----END CERTIFICATE-----Generated at Thu Jul 3 21:09:26 2025 by rpki-client