$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json) Hash identifier: 0DK0hYspTSiXur83+2sD25/e3viZ22Pq6++EpxLYxJY= Subject key identifier: F4:4A:BB:52:B0:99:0D:F5:34:FE:26:4A:23:EF:AA:E7:1A:09:F2:C8 Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0E0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft Manifest number: 0E07 Signing time: Wed 02 Jul 2025 18:03:19 +0000 Manifest this update: Wed 02 Jul 2025 18:03:18 +0000 Manifest next update: Wed 09 Jul 2025 18:03:18 +0000 Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: NJ4/jUzOqqN9yzCOvJ35eLZHO89CE6LQzUZl67TtnSc=) 2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: VAz7Q8OmwNVtqjw21t41eYyn3+glN8lqbyiXL2P+yek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3599 (0xe0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: Jul 2 18:03:18 2025 GMT Not After : Jul 9 18:03:18 2025 GMT Subject: CN=68657466-f637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:45:c0:94:93:ca:30:21:cf:41:a6:78:5d: 6a:af:25:67:c7:9b:45:15:cb:67:96:62:69:30:63: 67:dc:35:ad:dc:2e:f8:f5:dd:9a:0d:da:27:ec:5b: b5:c2:ba:00:4d:7c:88:66:fd:eb:6f:6a:de:e6:6f: 42:7f:1b:b2:3a:6e:96:cb:d5:f6:d9:b7:08:64:50: 25:62:82:1d:db:6a:a1:78:da:28:b8:41:84:a3:cc: 84:e8:66:07:62:86:37:74:d0:c0:e7:93:b5:0f:32: 1e:e8:fe:32:f4:5e:3c:ac:07:12:f7:fd:aa:7a:63: c9:5b:0c:ea:a2:ae:ca:18:8b:21:43:15:1b:84:49: 6e:22:e3:34:a0:b4:53:c7:19:85:a8:a9:9a:38:3b: 0c:3c:0d:4f:c7:c2:b0:c3:44:fe:18:6a:1e:02:9c: 08:2d:2d:0c:59:8a:71:82:5c:3e:8b:6e:78:2f:2a: f0:0b:92:c3:37:ab:42:eb:90:5b:a2:02:57:0b:86: b5:07:8f:6f:02:ef:a2:15:2d:3e:5e:a0:16:c3:c6: 2a:1d:32:cf:4b:b5:88:95:15:e2:5e:ca:d6:96:58: 6b:6b:05:14:0b:5d:2d:4f:26:5b:64:4e:e5:bf:f2: 7c:f0:c4:e7:cd:72:6e:09:10:d8:e4:b2:69:46:a5: 89:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4A:BB:52:B0:99:0D:F5:34:FE:26:4A:23:EF:AA:E7:1A:09:F2:C8 X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:45:13:c6:b6:31:2d:5a:03:01:01:9c:e4:58:8f:76:86:55: ae:ba:a6:63:04:af:19:0d:85:01:6d:7c:d4:30:94:b3:48:ba: 20:07:c1:5d:12:17:aa:82:10:fe:52:a2:c1:b4:57:ae:60:0b: 11:4d:0c:21:9f:1a:5a:66:d4:7e:fb:97:2a:f4:53:15:f5:47: 36:bb:00:df:17:6e:47:86:f3:57:b9:e7:73:11:6e:39:56:8c: 3b:62:0c:3d:21:fb:c8:7f:a9:28:11:4d:c6:9c:ae:72:38:5d: e8:ef:3b:3b:da:b5:b2:44:78:95:13:5e:25:5a:2f:5c:51:18: 0f:01:27:78:f3:aa:77:22:91:01:ef:80:ec:07:24:93:f0:a2: d1:a3:8c:a8:35:07:9d:dc:4f:54:93:e2:6f:b9:22:81:0d:1e: 18:ca:54:08:f7:0d:1b:2c:d8:3f:fa:0f:49:e1:34:35:ee:d3: 6f:ae:e9:05:87:fb:e1:22:02:a5:30:f0:e8:fa:b0:89:32:99: 4a:eb:64:15:75:bc:63:97:52:26:dd:71:01:6b:e6:fe:c6:5d: cd:dc:ec:54:30:7f:30:4e:aa:ac:0a:e6:62:f8:3b:c6:e5:6b: bf:f5:51:b0:94:5e:24:98:c7:b6:01:8c:84:82:4f:d2:a9:53: 55:50:eb:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjUwNzAyMTgwMzE4WhcNMjUwNzA5MTgwMzE4WjAYMRYwFAYD VQQDEw02ODY1NzQ2Ni1mNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYVFwJSTyjAhz0GmeF1qryVnx5tFFctnlmJpMGNn3DWt3C749d2aDdon7Fu1 wroATXyIZv3rb2re5m9CfxuyOm6Wy9X22bcIZFAlYoId22qheNoouEGEo8yE6GYH YoY3dNDA55O1DzIe6P4y9F48rAcS9/2qemPJWwzqoq7KGIshQxUbhEluIuM0oLRT xxmFqKmaODsMPA1Px8Kww0T+GGoeApwILS0MWYpxglw+i254LyrwC5LDN6tC65Bb ogJXC4a1B49vAu+iFS0+XqAWw8YqHTLPS7WIlRXiXsrWllhrawUUC10tTyZbZE7l v/J88MTnzXJuCRDY5LJpRqWJxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRKu1Kw mQ31NP4mSiPvqucaCfLIMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3 NEJvY08zZFFJY2pqNGllSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTRRPGtjEtWgMBAZzkWI92hlWuuqZjBK8ZDYUBbXzUMJSzSLogB8Fd EheqghD+UqLBtFeuYAsRTQwhnxpaZtR++5cq9FMV9Uc2uwDfF25HhvNXuedzEW45 Vow7Ygw9IfvIf6koEU3GnK5yOF3o7zs72rWyRHiVE14lWi9cURgPASd486p3IpEB 74DsByST8KLRo4yoNQed3E9Uk+JvuSKBDR4YylQI9w0bLNg/+g9J4TQ17tNvrukF h/vhIgKlMPDo+rCJMplK62QVdbxjl1Im3XEBa+b+xl3N3OxUMH8wTqqsCuZi+DvG 5Wu/9VGwlF4kmMe2AYyEgk/SqVNVUOtO -----END CERTIFICATE-----Generated at Thu Jul 3 03:45:18 2025 by rpki-client