$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft File: yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft (raw, json) Hash identifier: 4bwmpMw443xX5ZzbG3XmWE6JLlfxdWw1rxwAazq5cj0= Subject key identifier: 41:3E:CE:B8:4E:82:A6:08:78:AB:D3:95:A2:4E:13:25:48:98:7B:48 Authority key identifier: CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A Certificate issuer: /CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Certificate serial: 067E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft Manifest number: 0678 Signing time: Wed 02 Jul 2025 22:40:00 +0000 Manifest this update: Wed 02 Jul 2025 22:40:00 +0000 Manifest next update: Wed 09 Jul 2025 22:40:00 +0000 Files and hashes: 1: yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl (hash: cwlVE2bbsRiNtqWhDdv2GLYP07LVmeYnU8t0yirBmYU=) 2: 89283C80809211EB938F4016C4F9AE02.roa (hash: macE2NFUWcDcrdQSGzCQPdT+j1HMD3PGg+S93KaJKT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Validity Not Before: Jul 2 22:40:00 2025 GMT Not After : Jul 9 22:40:00 2025 GMT Subject: CN=6865b540-d33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:e1:fa:26:9a:ff:73:5f:df:d8:c1:b9:87:7a: 33:7d:7c:b0:33:93:aa:2f:65:c8:40:8a:0d:e8:82: 1a:b5:a0:89:9f:4c:b4:63:cd:f3:7a:1c:8a:d2:02: 73:05:54:66:e7:e0:fc:6c:ac:ee:34:1c:a9:52:67: 88:18:9a:8b:ab:ca:ac:ea:2e:32:96:cf:ba:24:49: 3a:9e:d6:a4:aa:dd:3b:2b:65:fa:25:09:fe:e1:5a: bc:56:94:d1:5c:26:3f:e4:c4:60:1c:4e:c1:94:09: 61:d9:ea:f2:62:60:83:50:8b:4e:0d:32:ec:af:82: e8:33:c3:40:d1:66:ce:af:5c:ef:7f:85:94:9f:5c: 25:fc:67:9b:be:79:b2:54:6d:c7:73:00:dc:8a:60: 67:e3:c3:d5:e6:fc:2d:09:43:25:ae:84:a8:7f:b2: a0:39:84:14:ed:20:7e:d9:df:28:fc:e0:7a:3a:38: d2:ab:e7:1a:07:26:e2:19:07:20:cf:e4:76:a0:f9: d9:3e:c9:e5:05:22:7e:47:fa:f7:b9:c7:08:09:88: 27:67:ff:c7:83:8b:2c:87:06:59:d9:50:0c:f8:db: 15:ac:77:f3:82:83:37:f9:c6:fd:95:ec:c8:57:54: 09:a8:33:9c:c5:d4:0b:ec:02:05:15:9e:10:5d:0e: 39:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3E:CE:B8:4E:82:A6:08:78:AB:D3:95:A2:4E:13:25:48:98:7B:48 X509v3 Authority Key Identifier: keyid:CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:aa:0a:1f:e3:03:35:5f:72:4e:2c:15:9b:51:8a:fb:84:ae: 3d:ca:88:3e:19:da:de:07:cd:28:a0:34:59:cb:96:2d:10:9e: 0c:61:c1:2d:19:86:e0:ad:49:4c:32:5d:64:a3:3e:36:4a:d1: 95:4e:ef:56:13:11:85:48:16:df:4d:33:ec:93:78:d5:eb:98: 47:fd:a7:ce:ab:e2:75:f5:a6:85:9c:a4:6e:4c:a0:51:76:14: 74:81:a3:c7:03:b6:95:ea:f9:3a:78:21:13:5f:f5:19:47:ca: 65:4e:72:28:26:ad:78:7c:d7:51:26:43:e6:fb:0f:7c:19:71: 75:72:92:d7:f8:a9:fb:35:4f:ec:08:05:14:43:cb:15:bd:0c: e9:15:8c:98:d6:c5:86:c9:fe:52:07:15:61:82:d3:c1:2b:c1: 41:47:86:30:9b:3f:8e:11:9c:e7:34:ee:dd:42:ce:00:26:c1: bd:77:b6:2a:18:02:dd:9a:bf:8c:49:6c:28:4d:8b:71:89:cc: 70:eb:ff:cb:fd:9b:a9:d9:49:3d:3f:1d:67:18:93:af:3c:d5: 3c:76:e5:4d:8b:bc:53:db:32:ab:e1:f4:ae:47:ea:e8:28:71: 87:78:ef:fc:10:f5:4f:1d:8f:fe:ba:dd:60:00:a1:00:23:fd: 22:1f:c9:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKENBMzJENTExNDYyQUI0MjYxOEE4OERCQTA1ODY5QUZF QkVBMEU1MUEwHhcNMjUwNzAyMjI0MDAwWhcNMjUwNzA5MjI0MDAwWjAYMRYwFAYD VQQDEw02ODY1YjU0MC1kMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA++H6Jpr/c1/f2MG5h3ozfXywM5OqL2XIQIoN6IIataCJn0y0Y83zehyK0gJz BVRm5+D8bKzuNBypUmeIGJqLq8qs6i4yls+6JEk6ntakqt07K2X6JQn+4Vq8VpTR XCY/5MRgHE7BlAlh2eryYmCDUItODTLsr4LoM8NA0WbOr1zvf4WUn1wl/Gebvnmy VG3HcwDcimBn48PV5vwtCUMlroSof7KgOYQU7SB+2d8o/OB6OjjSq+caBybiGQcg z+R2oPnZPsnlBSJ+R/r3uccICYgnZ//Hg4sshwZZ2VAM+NsVrHfzgoM3+cb9lezI V1QJqDOcxdQL7AIFFZ4QXQ458QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEE+zrhO gqYIeKvTlaJOEyVImHtIMB8GA1UdIwQYMBaAFMoy1RFGKrQmGKiNugWGmv6+oOUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8xM0VENjgwMjgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRDWVlxSTI2QllhYV9yNmc1 Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lqTFZFVVlxdENZWXFJMjZCWWFhX3I2ZzVSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8xM0VENjgwMjgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRD WVlxSTI2QllhYV9yNmc1Um8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkqgof4wM1X3JOLBWbUYr7hK49yog+GdreB80ooDRZy5YtEJ4MYcEt GYbgrUlMMl1koz42StGVTu9WExGFSBbfTTPsk3jV65hH/afOq+J19aaFnKRuTKBR dhR0gaPHA7aV6vk6eCETX/UZR8plTnIoJq14fNdRJkPm+w98GXF1cpLX+Kn7NU/s CAUUQ8sVvQzpFYyY1sWGyf5SBxVhgtPBK8FBR4Ywmz+OEZznNO7dQs4AJsG9d7Yq GALdmr+MSWwoTYtxicxw6//L/Zup2Uk9Px1nGJOvPNU8duVNi7xT2zKr4fSuR+ro KHGHeO/8EPVPHY/+ut1gAKEAI/0iH8nw -----END CERTIFICATE-----Generated at Thu Jul 3 14:15:00 2025 by rpki-client