$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json) Hash identifier: fZPzUgR1VFhKuInIxugF3SBWjM3aS38yetQesChQEqA= Subject key identifier: E0:09:82:F9:30:35:49:67:D4:35:FF:68:60:53:76:C6:3B:20:42:46 Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft Manifest number: 01C7 Signing time: Tue 05 Aug 2025 03:21:14 +0000 Manifest this update: Tue 05 Aug 2025 03:21:13 +0000 Manifest next update: Tue 12 Aug 2025 03:21:13 +0000 Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: qACUbgLVdgZiQ8lCeltTtJQK923sVfYTowqIlUTDptw=) 2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: aPCaqml7t2F2+k6pOKIapyXqL1F8xbtnk+/zEbIo0oM=) 3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: gMPv9NciLB3BAjtT8uTP/7SkhRaSaS/Bj12QLWTIGsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Validity Not Before: Aug 5 03:21:13 2025 GMT Not After : Aug 12 03:21:13 2025 GMT Subject: CN=689178a9-3c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:0b:91:67:fa:64:64:63:29:15:9e:66:a6: 74:32:bd:eb:8a:25:63:5a:10:bf:45:84:fa:f7:a0: 07:d4:df:5f:56:0e:2e:9f:44:68:4f:1d:3c:10:cf: 83:5b:1a:13:5d:50:c3:bc:9a:dc:db:d6:f6:ac:5c: 18:b1:cc:e0:02:69:3a:92:43:f8:19:aa:2c:35:ee: e2:a9:f1:5f:f4:d1:44:54:8f:da:7c:db:01:97:e7: 33:ca:65:0b:a5:e1:b7:60:41:1e:4d:00:ba:ad:58: 53:fe:e0:46:bd:8a:d6:d2:3b:e1:69:52:36:bd:3d: a4:b6:4b:71:88:f5:52:ef:1d:37:72:4c:5f:86:a1: 90:db:90:d6:c4:d9:c1:7d:fe:dd:01:d3:f0:f0:fb: 23:bc:07:13:af:9c:eb:69:13:71:5d:d0:33:3d:1d: 6b:5c:fc:05:bd:bb:7a:33:da:31:b6:7b:05:85:6b: b9:4b:cb:c2:c1:70:21:71:0b:e1:bc:99:7f:ea:18: 9e:8d:06:95:f6:45:4c:cf:ed:10:40:8b:b1:7e:19: 12:33:b6:c2:de:6d:0a:39:0a:fd:92:93:da:69:62: 02:c5:be:ff:95:aa:78:38:2f:03:6c:7a:d3:37:ff: e8:13:d1:e0:78:f3:fe:4a:98:05:4a:44:4c:f4:e0: 6a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:09:82:F9:30:35:49:67:D4:35:FF:68:60:53:76:C6:3B:20:42:46 X509v3 Authority Key Identifier: keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:6d:43:1b:09:9b:1b:53:50:2b:60:6c:f5:86:e3:8e:b1:5c: e6:e1:e1:b3:15:8d:8f:27:df:32:38:5c:57:da:c8:a5:9d:03: 8e:2a:6b:71:f2:c6:82:c9:ba:b0:7f:4d:69:0b:af:05:f5:ce: d9:e6:2f:bf:99:0f:ac:fb:c2:33:04:52:47:09:94:d1:99:bf: ba:db:46:17:19:5a:17:ce:b2:50:4c:6e:86:a1:4d:9a:11:70: 91:10:ba:52:2e:52:cd:42:64:1f:35:e5:b9:3a:51:10:c0:d5: 77:3c:be:2c:bc:9f:88:67:a6:e5:dc:ce:e3:55:49:eb:e6:27: 0e:28:4c:36:1b:e3:f9:ff:b8:db:30:57:60:f5:1e:cf:59:93: ea:f5:5a:c1:45:04:31:d0:89:75:de:bc:ef:af:4a:e7:ba:ae: c0:0b:d1:8f:38:0d:53:c1:b7:6d:9f:d4:16:c7:73:6f:11:86: 68:e2:c1:cf:5c:c2:e1:ee:1a:e9:ba:8b:8f:12:cf:cb:ef:90: 05:ed:e9:09:26:70:81:8f:05:c7:72:e8:61:f2:61:ca:14:16: fb:6d:ce:18:8b:82:4e:2a:4e:20:c0:b1:a7:2d:11:81:ae:cb: da:79:6c:9e:34:55:03:af:cc:2a:3b:81:45:6b:68:9f:7e:71: 5e:1c:f3:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA3RjAxMTAvBgNVBAUTKDYyQkVGQTFDMjM4REY4REU5NzJFQTVGRTE4MDk3QjEx MkVGMDQ3N0IwHhcNMjUwODA1MDMyMTEzWhcNMjUwODEyMDMyMTEzWjAYMRYwFAYD VQQDEw02ODkxNzhhOS0zYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyewLkWf6ZGRjKRWeZqZ0Mr3riiVjWhC/RYT696AH1N9fVg4un0RoTx08EM+D WxoTXVDDvJrc29b2rFwYsczgAmk6kkP4GaosNe7iqfFf9NFEVI/afNsBl+czymUL peG3YEEeTQC6rVhT/uBGvYrW0jvhaVI2vT2ktktxiPVS7x03ckxfhqGQ25DWxNnB ff7dAdPw8PsjvAcTr5zraRNxXdAzPR1rXPwFvbt6M9oxtnsFhWu5S8vCwXAhcQvh vJl/6hiejQaV9kVMz+0QQIuxfhkSM7bC3m0KOQr9kpPaaWICxb7/lap4OC8DbHrT N//oE9HgePP+SpgFSkRM9OBq7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAJgvkw NUln1DX/aGBTdsY7IEJGMB8GA1UdIwQYMBaAFGK++hwjjfjely6l/hgJexEu8Ed7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDdGMC82MEQwQzlGQUI4 QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1ONlhMcVgtR0FsN0VTN3dS M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lyNzZIQ09OLU42WExxWC1HQWw3RVM3d1Izcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDdGMC82MEQwQzlGQUI4QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1O NlhMcVgtR0FsN0VTN3dSM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARbUMbCZsbU1ArYGz1huOOsVzm4eGzFY2PJ98yOFxX2silnQOOKmtx 8saCybqwf01pC68F9c7Z5i+/mQ+s+8IzBFJHCZTRmb+620YXGVoXzrJQTG6GoU2a EXCRELpSLlLNQmQfNeW5OlEQwNV3PL4svJ+IZ6bl3M7jVUnr5icOKEw2G+P5/7jb MFdg9R7PWZPq9VrBRQQx0Il13rzvr0rnuq7AC9GPOA1Twbdtn9QWx3NvEYZo4sHP XMLh7hrpuouPEs/L75AF7ekJJnCBjwXHcuhh8mHKFBb7bc4Yi4JOKk4gwLGnLRGB rsvaeWyeNFUDr8wqO4FFa2iffnFeHPMi -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:09 2025 by rpki-client