$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json) Hash identifier: dpqgbE+ocmWUAZ7BRX5iD428Mym7/iSJpK42zr2Y0pw= Subject key identifier: 02:81:07:48:BA:48:B6:DA:EC:19:D3:AE:5A:BC:6B:FE:A1:EA:58:1D Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Certificate serial: 07AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft Manifest number: 07AC Signing time: Fri 08 Aug 2025 21:39:27 +0000 Manifest this update: Fri 08 Aug 2025 21:39:27 +0000 Manifest next update: Fri 15 Aug 2025 21:39:27 +0000 Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: ZNoeCMWpRchkrL5xIVzjqoNfMGyoOQCycL6Kmat1fGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1964 (0x7ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Validity Not Before: Aug 8 21:39:27 2025 GMT Not After : Aug 15 21:39:27 2025 GMT Subject: CN=68966e8f-a55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:10:05:fa:14:f4:3d:e0:d8:73:e6:06:6f: 31:48:72:25:6c:5e:9a:1f:ad:fb:03:03:90:0b:a3: ac:7a:33:20:55:69:c6:f4:53:9a:b3:aa:d4:0a:24: e8:0d:98:2b:5c:ef:48:18:52:9c:2f:b3:f2:92:72: 57:c2:97:da:97:3e:ec:33:46:f3:9c:de:58:19:23: 60:37:f0:c8:3e:d4:a2:7a:89:28:26:db:7b:b8:49: 06:5f:a5:97:ad:c5:6f:30:9d:aa:ce:4a:7d:92:81: c0:dc:8b:43:4e:ad:57:e6:e5:67:ba:ca:43:b9:27: e4:10:09:2a:1c:78:23:95:f4:40:d9:bb:b3:31:4e: 5d:13:4e:f4:5c:ad:a3:c7:76:17:02:a3:53:9a:4c: fc:0f:d3:f7:ea:95:cf:64:11:58:c7:bd:78:b6:b7: b5:f3:f1:66:83:80:5e:4a:d0:82:ff:dc:55:a0:85: 69:34:d3:39:eb:73:c3:1f:71:b3:b0:51:fc:a1:45: b6:92:9f:86:a5:d0:30:68:54:ed:c3:5b:38:4a:b5: fa:bb:ba:2b:22:d1:94:46:b9:33:7f:2f:d4:e7:fc: 68:41:96:df:e6:e0:46:f9:8c:c6:35:d5:e7:66:83: f6:51:06:8f:e0:3d:22:e3:b7:69:d4:7d:bf:c8:a9: 90:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:81:07:48:BA:48:B6:DA:EC:19:D3:AE:5A:BC:6B:FE:A1:EA:58:1D X509v3 Authority Key Identifier: keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c7:4e:52:bc:f9:e6:3a:aa:25:23:3d:77:ab:6e:ad:95:a3: 89:79:b7:ae:6e:c4:35:5c:d3:d5:51:c6:73:a4:49:ce:5e:a8: c4:0a:9c:b8:75:dc:bf:1d:8b:9b:39:52:38:92:c9:23:39:c3: 23:e2:02:07:b1:3f:2d:36:3f:27:8b:eb:d7:36:5d:0d:1d:c8: fd:21:b9:05:9f:79:a6:7e:c9:ec:39:da:de:8d:3b:31:dc:b2: 05:d2:87:86:4d:d3:a4:17:62:c5:ea:7c:5e:49:23:bd:51:54: 86:43:82:27:fb:f9:86:00:aa:97:d2:5c:c8:17:9e:77:a6:e0: 74:c1:40:57:68:d9:4d:65:6e:3b:a2:28:dd:9f:38:45:e8:3c: 6c:bb:4f:47:3f:2c:be:c3:49:fa:fc:39:22:c6:35:b3:a5:13: 28:83:ea:68:38:c9:b9:36:e3:9e:cc:a3:90:1b:e9:e5:33:08: 6d:cc:01:46:23:70:e6:f9:bd:4c:f5:cb:bb:4c:4f:89:19:1c: 34:99:fa:71:eb:2c:35:71:e5:53:bf:7f:8a:d8:ab:eb:ac:0c: 85:8f:91:c4:49:38:97:01:7f:69:00:9f:92:17:ce:ca:84:07: 55:c6:ec:ea:b9:c0:52:45:35:43:45:53:d5:c4:36:82:8b:cd: 64:fb:1c:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF OUYzODFGMTIwHhcNMjUwODA4MjEzOTI3WhcNMjUwODE1MjEzOTI3WjAYMRYwFAYD VQQDEw02ODk2NmU4Zi1hNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypsQBfoU9D3g2HPmBm8xSHIlbF6aH637AwOQC6OsejMgVWnG9FOas6rUCiTo DZgrXO9IGFKcL7PyknJXwpfalz7sM0bznN5YGSNgN/DIPtSieokoJtt7uEkGX6WX rcVvMJ2qzkp9koHA3ItDTq1X5uVnuspDuSfkEAkqHHgjlfRA2buzMU5dE070XK2j x3YXAqNTmkz8D9P36pXPZBFYx714tre18/Fmg4BeStCC/9xVoIVpNNM563PDH3Gz sFH8oUW2kp+GpdAwaFTtw1s4SrX6u7orItGURrkzfy/U5/xoQZbf5uBG+YzGNdXn ZoP2UQaP4D0i47dp1H2/yKmQeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKBB0i6 SLba7BnTrlq8a/6h6lgdMB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt NmU1SHEyLXViZkRwODRIeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAx05SvPnmOqolIz13q26tlaOJebeubsQ1XNPVUcZzpEnOXqjECpy4 ddy/HYubOVI4kskjOcMj4gIHsT8tNj8ni+vXNl0NHcj9IbkFn3mmfsnsOdrejTsx 3LIF0oeGTdOkF2LF6nxeSSO9UVSGQ4In+/mGAKqX0lzIF553puB0wUBXaNlNZW47 oijdnzhF6Dxsu09HPyy+w0n6/DkixjWzpRMog+poOMm5NuOezKOQG+nlMwhtzAFG I3Dm+b1M9cu7TE+JGRw0mfpx6yw1ceVTv3+K2KvrrAyFj5HESTiXAX9pAJ+SF87K hAdVxuzqucBSRTVDRVPVxDaCi81k+xw7 -----END CERTIFICATE-----Generated at Sat Aug 9 14:28:23 2025 by rpki-client