$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json) Hash identifier: zOtEINOmSCrH9/Tk/KysRRZ9yGt/X10e76OC0P53hRA= Subject key identifier: 41:DA:C9:1F:86:B1:6B:5D:BE:E2:C8:78:51:BA:40:E4:E1:6D:8B:35 Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft Manifest number: 07DA Signing time: Mon 04 Aug 2025 21:24:51 +0000 Manifest this update: Mon 04 Aug 2025 21:24:51 +0000 Manifest next update: Mon 11 Aug 2025 21:24:51 +0000 Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: SDMylwqINSQjHaCssUjHyHufpPcietmpM+4V4Iu5/JI=) 2: 7634D328351411EBBF864670C4F9AE02.roa (hash: gJ6rfZA4kdz2sP4zhVk5qWSiiFvdYYEjJ3d1LC4TVQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Validity Not Before: Aug 4 21:24:51 2025 GMT Not After : Aug 11 21:24:51 2025 GMT Subject: CN=68912523-9cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:a5:c2:7b:ea:27:ba:7a:ad:87:2b:97:0f: 2b:1f:03:0d:a0:c6:90:4b:9e:85:61:18:f3:4e:c8: 65:f1:9b:72:f9:c5:b1:f1:15:b1:82:93:2f:47:ad: ae:9f:0a:be:4d:8f:5a:d9:4f:14:87:fb:18:41:33: 6e:02:d6:fb:d7:e0:64:17:a3:21:75:4f:73:b5:11: d8:c2:eb:9f:cf:df:b4:34:d0:16:b0:bf:75:b2:78: cb:3d:9b:39:b3:e3:04:75:fc:9a:ca:2c:2a:22:d5: 3a:a6:a4:97:0e:73:58:e7:ee:63:1b:81:ac:b7:87: 9c:4c:bf:7e:ea:44:d6:0b:54:27:85:d4:40:5e:be: e9:b7:95:7e:31:07:5f:07:c6:a2:94:2e:01:a1:29: 8f:f2:ec:ed:2e:e4:6f:b0:88:bb:f1:36:00:79:54: 27:04:b8:06:e8:da:41:f6:72:bb:da:0d:ef:6e:b4: b3:3b:d9:ba:a4:93:b8:93:bb:b6:95:66:4a:27:ea: 6f:e1:1c:6b:42:e6:9a:aa:21:da:32:e0:83:de:70: 8e:23:b8:d2:43:4d:e4:04:42:42:49:aa:84:25:35: a5:d1:83:ae:33:90:b0:72:fb:29:d9:fc:f5:e8:da: 87:b6:05:f9:33:ce:7a:03:da:9e:c8:7e:fc:a5:70: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DA:C9:1F:86:B1:6B:5D:BE:E2:C8:78:51:BA:40:E4:E1:6D:8B:35 X509v3 Authority Key Identifier: keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8b:30:32:15:6f:9d:d2:cc:03:ff:14:8c:be:2a:a1:24:05: 3f:67:89:44:87:2f:52:c6:00:d9:5e:65:26:27:e9:7f:94:9b: 52:91:f5:2c:cf:a2:da:49:21:02:6e:43:fe:c2:43:b4:bd:34: b4:0c:a4:72:47:3f:2d:93:d7:7e:1f:ef:94:45:21:5d:6c:54: e7:c7:bc:81:7d:de:93:d7:9d:b7:92:26:b9:4f:59:8b:7a:be: 8b:aa:dc:da:c4:ec:c4:c4:06:fc:df:94:fe:42:e6:a1:05:f1: 56:3c:8e:2d:ac:d2:80:3e:7a:ab:0f:18:db:08:d5:d4:4f:bd: f7:55:04:d2:17:ce:9c:f5:61:b0:cd:00:ca:b5:b4:0c:d3:0b: 6a:86:d7:22:e7:26:93:fd:27:3e:e6:be:fb:45:6e:ad:e4:85: 64:ff:b5:6f:d8:7a:82:75:1d:31:0f:3f:3f:48:00:af:cc:47: a7:b1:5f:60:64:79:a4:38:ef:15:c6:94:4e:74:3f:48:53:79: 17:9c:1e:a9:91:ff:d8:12:16:8a:89:11:ea:d1:8c:60:e8:4d: 1c:d4:fc:a1:c0:65:05:d8:ca:69:55:87:93:c9:a6:81:54:59: 83:bb:fb:53:1c:5e:56:b6:0d:6c:6a:c4:a8:e8:f6:ea:cd:4a: 84:b2:09:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB RjYzMzNGMDAwHhcNMjUwODA0MjEyNDUxWhcNMjUwODExMjEyNDUxWjAYMRYwFAYD VQQDEw02ODkxMjUyMy05Y2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkqlwnvqJ7p6rYcrlw8rHwMNoMaQS56FYRjzTshl8Zty+cWx8RWxgpMvR62u nwq+TY9a2U8Uh/sYQTNuAtb71+BkF6MhdU9ztRHYwuufz9+0NNAWsL91snjLPZs5 s+MEdfyayiwqItU6pqSXDnNY5+5jG4Gst4ecTL9+6kTWC1QnhdRAXr7pt5V+MQdf B8ailC4BoSmP8uztLuRvsIi78TYAeVQnBLgG6NpB9nK72g3vbrSzO9m6pJO4k7u2 lWZKJ+pv4RxrQuaaqiHaMuCD3nCOI7jSQ03kBEJCSaqEJTWl0YOuM5Cwcvsp2fz1 6NqHtgX5M856A9qeyH78pXC95wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHayR+G sWtdvuLIeFG6QOThbYs1MB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw UDJCMk1OM18xTEd2WXpQd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArizAyFW+d0swD/xSMviqhJAU/Z4lEhy9SxgDZXmUmJ+l/lJtSkfUs z6LaSSECbkP+wkO0vTS0DKRyRz8tk9d+H++URSFdbFTnx7yBfd6T1523kia5T1mL er6LqtzaxOzExAb835T+QuahBfFWPI4trNKAPnqrDxjbCNXUT733VQTSF86c9WGw zQDKtbQM0wtqhtci5yaT/Sc+5r77RW6t5IVk/7Vv2HqCdR0xDz8/SACvzEensV9g ZHmkOO8VxpROdD9IU3kXnB6pkf/YEhaKiRHq0Yxg6E0c1PyhwGUF2MppVYeTyaaB VFmDu/tTHF5Wtg1sasSo6PbqzUqEsgkW -----END CERTIFICATE-----Generated at Tue Aug 5 23:04:39 2025 by rpki-client