$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft File: YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json) Hash identifier: EXTIn5FwEMJyCBMcMyN2iMCavMsZqkazy656cXEBbqc= Subject key identifier: 69:1E:45:8C:E3:71:9F:9A:6A:64:7C:17:33:B2:A5:00:CB:C6:46:C9 Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft Manifest number: 57 Signing time: Sat 05 Jul 2025 07:32:52 +0000 Manifest this update: Sat 05 Jul 2025 07:32:52 +0000 Manifest next update: Sat 12 Jul 2025 07:32:52 +0000 Files and hashes: 1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: FVilN1FxJVvgnWo4fWiBHEeeBkOynD3k5+2x2lBsUfY=) 2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: Z/MKQEZHBao6uUjy3KntQF19ACE4AX6KONtzOcMde7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Validity Not Before: Jul 5 07:32:52 2025 GMT Not After : Jul 12 07:32:52 2025 GMT Subject: CN=6868d524-a3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d7:5d:59:3a:64:c4:6a:ef:6f:7b:55:eb:26: 17:e8:e2:88:2a:4e:da:fb:cc:13:ca:a0:84:aa:e5: b1:40:58:a0:1f:58:05:ba:b4:fc:8d:97:b4:d6:e4: a4:08:bf:a7:68:83:f9:a4:2a:4c:0b:96:40:05:f3: 33:11:4f:73:48:49:32:c4:79:dc:db:04:06:9f:cb: 60:ea:40:51:e1:7c:c1:2b:39:c6:b2:a1:69:e4:5c: 42:42:40:46:5f:8a:3d:30:60:0b:41:cc:25:7d:02: 7d:f7:ff:fa:1b:e1:0e:9f:9c:55:7e:16:0e:6b:85: f4:92:a2:5f:ef:a0:68:24:ed:19:cc:6e:7c:8f:2b: ec:7b:79:61:92:15:d5:36:be:7e:4d:2b:73:4b:ac: e6:57:31:9d:58:a4:af:20:0c:e4:3f:91:69:88:1c: 89:2e:9b:11:ff:15:ba:37:c2:c6:34:06:3a:d5:bd: 37:f3:7d:c8:20:61:d3:44:6f:69:91:21:5a:0a:d5: 7d:97:0c:f7:0a:57:5a:75:74:06:1b:ba:60:f6:74: ed:7c:dd:c5:d0:8b:ab:45:55:ed:71:40:14:9a:9e: dd:56:09:ce:c2:f7:10:1b:16:48:15:d9:0a:c9:36: a8:bc:9b:fc:46:54:c4:12:e1:b9:6c:99:3e:6b:12: 02:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1E:45:8C:E3:71:9F:9A:6A:64:7C:17:33:B2:A5:00:CB:C6:46:C9 X509v3 Authority Key Identifier: keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f8:b3:fa:ec:51:f1:99:ee:6f:65:28:ea:a9:f5:9e:cf:2f: 87:b5:33:6e:d6:e0:16:d0:5a:28:2a:e6:a5:94:03:96:89:cf: d1:35:e6:61:ce:a1:29:b2:a8:25:1a:08:e8:81:48:9d:2d:c7: 4e:cb:12:7a:91:ee:78:b8:50:12:3f:ff:a3:9e:83:7a:ed:5a: a2:86:bd:7d:84:21:8c:c1:46:85:f8:97:94:8c:82:02:c3:e9: 39:d9:26:a8:0e:9f:c3:08:39:40:2b:0a:b3:1e:b1:f2:85:9c: fe:f8:f1:7a:b8:24:e3:c9:81:29:06:52:28:4b:61:8f:85:74: 1e:a0:6b:04:e2:70:ae:e0:64:81:e5:ca:e0:f0:9e:f5:dc:e4: 3a:83:9e:1a:6d:61:45:44:7a:98:d8:20:09:75:ce:c7:bc:67: 4f:ee:ff:35:b9:fa:c7:0d:8d:0b:15:9e:ad:04:84:af:f1:5a: 78:f3:93:e8:2d:a2:07:45:87:f0:a0:0d:23:9a:cd:e8:14:47: ba:80:f2:77:45:01:f3:18:df:a9:91:b2:df:a7:fd:ec:8c:19: b6:c1:8f:15:cb:5d:de:96:96:8d:3f:4b:f0:b1:54:f5:bc:60: 30:e5:11:73:e6:ec:47:76:a2:9a:71:e7:cf:32:b5:17:4a:15: 24:8f:f9:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkQ3QjExMC8GA1UEBRMoNjE0RDFFQzhCNjkzRTdCQjVGMzJDRkE1MjdCNTAyODMy NjlERkUyQjAeFw0yNTA3MDUwNzMyNTJaFw0yNTA3MTIwNzMyNTJaMBgxFjAUBgNV BAMTDTY4NjhkNTI0LWEzZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDo111ZOmTEau9ve1XrJhfo4ogqTtr7zBPKoISq5bFAWKAfWAW6tPyNl7TW5KQI v6dog/mkKkwLlkAF8zMRT3NISTLEedzbBAafy2DqQFHhfMErOcayoWnkXEJCQEZf ij0wYAtBzCV9An33//ob4Q6fnFV+Fg5rhfSSol/voGgk7RnMbnyPK+x7eWGSFdU2 vn5NK3NLrOZXMZ1YpK8gDOQ/kWmIHIkumxH/Fbo3wsY0BjrVvTfzfcggYdNEb2mR IVoK1X2XDPcKV1p1dAYbumD2dO183cXQi6tFVe1xQBSant1WCc7C9xAbFkgV2QrJ Nqi8m/xGVMQS4blsmT5rEgK5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaR5FjONx n5pqZHwXM7KlAMvGRskwHwYDVR0jBBgwFoAUYU0eyLaT57tfMs+lJ7UCgyad/isw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRDdCL0E3NEY1RURDRDg3 MjExRUZBMzFGODQxOUM0RjlBRTAyL1lVMGV5TGFUNTd0Zk1zLWxKN1VDZ3lhZF9p cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVUwZXlMYVQ1N3RmTXMtbEo3VUNneWFkX2lzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RDdCL0E3NEY1RURDRDg3MjExRUZBMzFGODQxOUM0RjlBRTAyL1lVMGV5TGFUNTd0 Zk1zLWxKN1VDZ3lhZF9pcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGj4s/rsUfGZ7m9lKOqp9Z7PL4e1M27W4BbQWigq5qWUA5aJz9E15mHO oSmyqCUaCOiBSJ0tx07LEnqR7ni4UBI//6Oeg3rtWqKGvX2EIYzBRoX4l5SMggLD 6TnZJqgOn8MIOUArCrMesfKFnP748Xq4JOPJgSkGUihLYY+FdB6gawTicK7gZIHl yuDwnvXc5DqDnhptYUVEepjYIAl1zse8Z0/u/zW5+scNjQsVnq0EhK/xWnjzk+gt ogdFh/CgDSOazegUR7qA8ndFAfMY36mRst+n/eyMGbbBjxXLXd6Wlo0/S/CxVPW8 YDDlEXPm7Ed2oppx588ytRdKFSSP+Xg= -----END CERTIFICATE-----Generated at Sun Jul 6 00:29:44 2025 by rpki-client