$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: 5JSG2CfEXaHv2lRMJR4SS2DupZFNV1kJ7nokrylpprU= Subject key identifier: A5:BB:DD:2A:05:97:6D:01:23:81:D9:E5:52:CC:11:11:68:17:26:2D Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 54 Signing time: Thu 03 Jul 2025 07:30:17 +0000 Manifest this update: Thu 03 Jul 2025 07:30:16 +0000 Manifest next update: Thu 10 Jul 2025 07:30:16 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: wZbuFqqL6OKE1notnermhE31qYX7u003TI9OHesokM0=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: Jul 3 07:30:16 2025 GMT Not After : Jul 10 07:30:16 2025 GMT Subject: CN=68663188-cb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:9e:d7:d7:c4:02:7a:6d:e5:cc:9f:35:c8: ea:9c:7e:71:e9:1f:0d:3b:af:01:c8:d0:16:c3:28: 69:21:35:c9:32:4f:9a:3f:63:54:65:78:49:53:d5: f6:a2:84:09:aa:34:e3:99:7a:dc:0f:88:75:80:ea: ee:bb:06:fe:59:89:89:34:6c:d7:07:3c:3b:55:11: 71:d5:db:85:5c:29:bc:6b:13:ad:9c:4c:12:dc:3c: 50:d7:63:02:5f:e3:96:48:b5:2e:f3:75:18:5b:d3: fb:9b:a4:d3:d3:43:f5:8e:44:a4:90:48:31:74:06: 69:52:56:fc:7e:3c:05:59:76:f7:61:86:1e:c9:c7: b7:ec:d2:a4:e1:50:72:ee:60:9a:dc:41:7c:32:69: fa:0a:bc:58:41:02:44:3b:b8:82:f3:6c:49:97:43: 7a:f5:88:10:3c:ce:6e:5d:49:ce:70:89:5b:9a:4d: e6:ed:99:bf:2a:f7:a7:e5:fd:d8:38:4f:a8:ca:95: 37:96:3b:28:39:8d:da:00:75:12:a4:49:eb:15:ca: 0a:a5:12:64:51:8c:89:1c:5a:1a:20:36:66:2e:e8: 47:6c:b9:8e:b5:a5:07:ec:5c:40:81:84:12:cd:92: bf:c1:6b:b1:a7:57:fc:d2:cd:f8:ac:81:5a:2f:30: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BB:DD:2A:05:97:6D:01:23:81:D9:E5:52:CC:11:11:68:17:26:2D X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:e4:99:27:dd:d5:f9:cd:a5:5f:f6:29:20:72:bc:51:7a:bb: 97:4e:ce:9f:d7:de:4c:f7:72:1f:a1:a2:9a:36:c5:0d:3e:56: 71:ba:9f:7b:94:39:7e:49:0a:2d:10:6e:9d:f5:c3:af:d6:37: 3f:a0:8c:af:11:ba:e5:bb:cb:f6:ec:a1:96:46:e6:26:89:3a: 96:14:4c:6b:64:87:f5:a7:ed:15:68:ba:e4:c1:b4:a2:07:f0: 0c:06:4d:57:fb:48:69:e6:96:49:eb:2a:76:80:2a:57:fb:44: 03:98:7d:68:3e:de:93:42:13:67:68:1f:0d:04:93:e6:25:7a: d1:96:04:ea:8d:51:ca:6c:1c:76:e2:0d:14:1d:cb:8f:8a:f5: 07:d7:fa:8f:02:83:dd:f1:c5:67:1b:8a:33:33:fb:2a:56:82: cd:32:97:4a:34:0d:19:bf:86:c8:dc:1d:40:40:88:42:7d:4b: 61:25:7d:18:25:76:68:2d:61:9a:0f:11:77:06:a9:7d:1a:9d: a1:cb:27:a0:5f:5e:de:67:9e:62:fa:f4:cd:89:ab:b4:92:42: 33:08:64:66:99:1f:23:a9:bd:51:8a:90:7c:01:e7:50:23:00: 58:1d:f0:d5:45:f4:0a:71:42:18:5a:06:35:a6:16:04:b0:37: 1b:aa:76:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODEwMzExMC8GA1UEBRMoNjAzMUQwNjAxRDVDMkQ4N0FENjYyMzYxRTYzQkZGRDkx RTA0MDczMzAeFw0yNTA3MDMwNzMwMTZaFw0yNTA3MTAwNzMwMTZaMBgxFjAUBgNV BAMTDTY4NjYzMTg4LWNiMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY+Z7X18QCem3lzJ81yOqcfnHpHw07rwHI0BbDKGkhNckyT5o/Y1RleElT1fai hAmqNOOZetwPiHWA6u67Bv5ZiYk0bNcHPDtVEXHV24VcKbxrE62cTBLcPFDXYwJf 45ZItS7zdRhb0/ubpNPTQ/WORKSQSDF0BmlSVvx+PAVZdvdhhh7Jx7fs0qThUHLu YJrcQXwyafoKvFhBAkQ7uILzbEmXQ3r1iBA8zm5dSc5wiVuaTebtmb8q96fl/dg4 T6jKlTeWOyg5jdoAdRKkSesVygqlEmRRjIkcWhogNmYu6EdsuY61pQfsXECBhBLN kr/Ba7GnV/zSzfisgVovMKKnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpbvdKgWX bQEjgdnlUswREWgXJi0wHwYDVR0jBBgwFoAUYDHQYB1cLYetZiNh5jv/2R4EBzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MTAzLzkzREM3NTRFREUw MTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURIUVlCMWNMWWV0WmlOaDVqdl8yUjRFQnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MTAzLzkzREM3NTRFREUwMTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFll dFppTmg1anZfMlI0RUJ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALTkmSfd1fnNpV/2KSByvFF6u5dOzp/X3kz3ch+hopo2xQ0+VnG6n3uU OX5JCi0Qbp31w6/WNz+gjK8RuuW7y/bsoZZG5iaJOpYUTGtkh/Wn7RVouuTBtKIH 8AwGTVf7SGnmlknrKnaAKlf7RAOYfWg+3pNCE2doHw0Ek+YletGWBOqNUcpsHHbi DRQdy4+K9QfX+o8Cg93xxWcbijMz+ypWgs0yl0o0DRm/hsjcHUBAiEJ9S2ElfRgl dmgtYZoPEXcGqX0anaHLJ6BfXt5nnmL69M2Jq7SSQjMIZGaZHyOpvVGKkHwB51Aj AFgd8NVF9ApxQhhaBjWmFgSwNxuqdko= -----END CERTIFICATE-----Generated at Fri Jul 4 08:27:11 2025 by rpki-client