$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: L3KrXmoItCgUg58e3blxoIXNgQkaAhpgdyGEKMdXUbc= Subject key identifier: 87:C1:88:FA:EC:7D:FE:4C:2C:A0:7E:2C:37:01:9A:78:ED:2E:EB:F6 Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: 01B4 Signing time: Thu 07 Aug 2025 03:35:49 +0000 Manifest this update: Thu 07 Aug 2025 03:35:49 +0000 Manifest next update: Thu 14 Aug 2025 03:35:49 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: 7wZWmE7X+ibbpeun1tZnKBA3URVhFUl646IW13KN1Cg=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: F7qGiUSXmfTHkG4rLsiz9f3fhRuXMOAIShVR1Seg7DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Aug 7 03:35:49 2025 GMT Not After : Aug 14 03:35:49 2025 GMT Subject: CN=68941f15-ef68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:00:aa:46:60:7e:78:88:77:b6:19:9a:4d:e6: b8:04:d2:84:65:31:a6:03:a8:95:7b:eb:3c:75:a6: 83:a4:71:95:e9:4d:32:bb:fc:84:69:b5:08:00:8a: e1:d7:d6:72:4c:e4:0d:68:44:c6:b0:d0:9a:32:c3: 6a:65:71:c0:49:1e:7a:87:5c:72:94:1c:86:36:fd: e6:4b:44:95:ad:4c:16:c2:0d:83:ff:f4:81:e2:16: 9c:c0:77:45:72:ef:70:3c:2a:59:c5:9b:45:42:cd: d3:e2:50:5e:67:b1:b0:21:9f:3d:6c:13:24:4c:01: f4:45:ae:ef:a9:4c:da:a2:df:61:c1:eb:ca:5f:82: 15:46:b8:71:d8:4f:fa:fd:29:09:cc:7b:19:d6:d2: 3b:ef:60:34:1a:9f:60:d8:f5:b4:e0:5e:a0:52:9b: dd:58:ae:63:08:22:23:99:bc:d4:ab:c5:62:a2:c9: 29:d3:f8:d7:4f:d1:6f:9e:47:cc:f6:c5:ca:97:4b: bc:34:e6:f0:25:90:62:d9:26:83:f4:e5:4b:1b:b1: fd:11:e0:58:a5:06:f6:2b:61:91:b3:50:7d:77:66: 55:2a:e4:58:18:98:46:da:94:57:fa:9f:1a:4c:69: e9:9f:f8:b6:b9:47:d0:58:42:63:4b:44:f7:f4:90: 2e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C1:88:FA:EC:7D:FE:4C:2C:A0:7E:2C:37:01:9A:78:ED:2E:EB:F6 X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0d:01:e9:d2:9d:ef:99:a2:8c:56:da:c9:00:95:8a:10:ec: ab:18:71:24:5c:03:7c:17:a5:b6:6e:89:bb:b7:51:a0:a7:e5: 78:b5:82:19:51:d5:78:00:c1:b8:f1:e6:95:fb:d3:c9:22:dc: 59:41:d0:f3:4e:f7:49:db:ed:91:68:4b:70:25:36:eb:bf:79: f6:f9:ee:92:b1:48:15:32:3d:41:69:1b:8f:3e:de:b5:12:05: 66:7b:58:e0:fa:2c:7c:1c:d5:0a:16:20:80:fd:2a:6a:a9:71: 87:82:ab:22:62:c9:57:34:e6:33:ce:c9:57:3d:c2:ec:b6:7b: 47:cb:e4:34:3d:8b:b5:29:74:aa:0c:81:6e:3a:83:79:d0:fc: 07:5f:81:ab:08:c2:c4:27:b5:4f:f4:63:10:19:2e:b8:7d:94: b7:59:a8:7e:48:2b:a7:93:63:0d:fa:51:df:3e:bf:24:1c:ce: e4:e7:39:91:48:c9:06:57:4a:33:f9:5e:2b:ce:77:46:de:70: a8:e7:f4:f4:53:6b:69:aa:86:31:be:90:0b:02:28:d5:8a:83: 4c:dd:11:ed:34:83:2e:a2:9c:88:8b:9a:21:f4:47:09:25:03: 40:7f:c0:2e:cc:51:5a:03:9f:bd:4e:4d:6b:7d:d7:62:59:cf: bb:1e:07:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjUwODA3MDMzNTQ5WhcNMjUwODE0MDMzNTQ5WjAYMRYwFAYD VQQDEw02ODk0MWYxNS1lZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ACqRmB+eIh3thmaTea4BNKEZTGmA6iVe+s8daaDpHGV6U0yu/yEabUIAIrh 19ZyTOQNaETGsNCaMsNqZXHASR56h1xylByGNv3mS0SVrUwWwg2D//SB4hacwHdF cu9wPCpZxZtFQs3T4lBeZ7GwIZ89bBMkTAH0Ra7vqUzaot9hwevKX4IVRrhx2E/6 /SkJzHsZ1tI772A0Gp9g2PW04F6gUpvdWK5jCCIjmbzUq8Vioskp0/jXT9FvnkfM 9sXKl0u8NObwJZBi2SaD9OVLG7H9EeBYpQb2K2GRs1B9d2ZVKuRYGJhG2pRX+p8a TGnpn/i2uUfQWEJjS0T39JAuVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfBiPrs ff5MLKB+LDcBmnjtLuv2MB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3DQHp0p3vmaKMVtrJAJWKEOyrGHEkXAN8F6W2bom7t1Ggp+V4tYIZ UdV4AMG48eaV+9PJItxZQdDzTvdJ2+2RaEtwJTbrv3n2+e6SsUgVMj1BaRuPPt61 EgVme1jg+ix8HNUKFiCA/SpqqXGHgqsiYslXNOYzzslXPcLstntHy+Q0PYu1KXSq DIFuOoN50PwHX4GrCMLEJ7VP9GMQGS64fZS3Wah+SCunk2MN+lHfPr8kHM7k5zmR SMkGV0oz+V4rzndG3nCo5/T0U2tpqoYxvpALAijVioNM3RHtNIMuopyIi5oh9EcJ JQNAf8AuzFFaA5+9Tk1rfddiWc+7HgeQ -----END CERTIFICATE-----Generated at Thu Aug 7 17:38:58 2025 by rpki-client