$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: ndPODw5ReQenKEH2oQnSArxaZMEAYtdE5yCs3AVqkP4= Subject key identifier: BB:B9:2B:74:DB:33:16:44:A6:27:71:1A:1B:60:4E:4F:12:97:F2:24 Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 014E Signing time: Mon 11 Aug 2025 04:21:51 +0000 Manifest this update: Mon 11 Aug 2025 04:21:51 +0000 Manifest next update: Mon 18 Aug 2025 04:21:51 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: JsPoz2jeKYWwBkkt72Um2+oR8ASTl8Sia+9HBB5cfr4=) 2: E8E76DFA77E111EEAD38F454C4F9AE02.roa (hash: fU/RkpVL4z6Cr0cyCUfNUkgmOGc3QWQsXd03NlJ0kdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Validity Not Before: Aug 11 04:21:51 2025 GMT Not After : Aug 18 04:21:51 2025 GMT Subject: CN=68996fdf-cd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:28:7e:50:a4:86:c2:1f:4e:68:c2:62:e5:42: 6f:a4:51:10:40:2e:f4:f7:b5:4f:18:a9:ce:44:f1: 26:41:71:7c:e3:ed:e5:14:79:3a:64:d1:2b:4f:a1: 09:ad:b4:c5:6d:3d:12:40:28:fc:d1:07:17:03:5e: 37:23:e5:a3:46:5c:c1:02:67:63:43:71:8d:be:61: 49:28:de:5d:07:0b:36:f2:2b:32:d2:74:9d:6f:64: a0:8e:bf:a9:a8:d8:4a:6e:0b:b5:47:7a:95:2a:61: f5:60:1e:39:23:d2:22:fc:c4:aa:18:1d:8b:25:c7: 98:45:99:a7:f6:a2:af:af:76:77:59:b5:a9:ed:87: 85:81:11:94:1e:9d:b0:f8:a5:0c:44:26:0f:98:00: 10:ec:cc:4f:c8:3c:03:b0:0b:63:be:87:da:5d:68: c3:09:87:05:f0:6e:ec:e0:cb:43:ae:a7:42:37:e6: b4:f1:0c:85:ca:74:74:63:04:36:f0:e9:3c:ba:41: d1:eb:a7:d0:e4:0b:2d:ae:1c:95:1c:1e:53:8e:82: 4e:ff:20:86:1f:6b:4b:7c:97:d1:f7:cc:37:30:17: 59:97:0d:d8:81:ae:51:52:69:0a:d7:ee:b7:3d:f4: d5:98:ff:91:bc:4b:b3:b1:a2:9f:a5:80:62:91:1a: 01:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:2B:74:DB:33:16:44:A6:27:71:1A:1B:60:4E:4F:12:97:F2:24 X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:61:71:0c:4c:46:33:66:d1:8e:07:14:48:a3:6b:82:75:c9: 03:ce:29:85:ca:1b:7e:d2:d7:18:39:19:91:58:88:ba:0a:fc: 24:73:e8:f5:48:b9:0f:1f:07:51:41:17:66:e7:fd:69:14:d1: 68:cf:ad:a9:79:5c:09:67:fa:8b:8b:4f:93:60:02:15:58:b8: 93:aa:02:0f:ea:51:ea:6e:07:f1:d9:a2:41:eb:b7:6e:3f:54: 0f:fd:c0:b6:e5:5a:4b:1a:2e:ac:97:84:0f:c5:e9:3b:a2:c7: 32:4e:08:a6:d4:0c:e9:fa:3a:a4:a5:c5:05:8f:eb:75:f1:2f: 70:d9:e2:43:dc:2b:0b:4d:f1:b4:e6:37:11:d9:65:33:9d:01: 94:1d:69:06:72:64:93:ee:35:04:4e:6e:66:67:85:58:b6:20: 15:16:d8:da:69:f6:98:99:b1:c0:94:7a:78:f6:62:a0:9d:a0: 33:de:d2:15:2f:6e:dc:7b:5a:bf:21:e4:21:a3:01:09:90:dd: e9:ca:03:77:03:af:df:04:f9:60:33:4b:cb:3f:f4:76:63:41: 40:a9:05:fb:09:ff:fa:00:f6:ec:d3:f0:1a:fe:32:0f:07:69: 9a:38:2f:0e:93:5c:24:51:da:a3:78:d3:75:f9:fb:bc:2f:ec: a0:37:ab:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG MkI1OTYyMDQwHhcNMjUwODExMDQyMTUxWhcNMjUwODE4MDQyMTUxWjAYMRYwFAYD VQQDEw02ODk5NmZkZi1jZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ih+UKSGwh9OaMJi5UJvpFEQQC7097VPGKnORPEmQXF84+3lFHk6ZNErT6EJ rbTFbT0SQCj80QcXA143I+WjRlzBAmdjQ3GNvmFJKN5dBws28isy0nSdb2Sgjr+p qNhKbgu1R3qVKmH1YB45I9Ii/MSqGB2LJceYRZmn9qKvr3Z3WbWp7YeFgRGUHp2w +KUMRCYPmAAQ7MxPyDwDsAtjvofaXWjDCYcF8G7s4MtDrqdCN+a08QyFynR0YwQ2 8Ok8ukHR66fQ5AstrhyVHB5TjoJO/yCGH2tLfJfR98w3MBdZlw3Yga5RUmkK1+63 PfTVmP+RvEuzsaKfpYBikRoBIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLu5K3Tb MxZEpidxGhtgTk8Sl/IkMB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3 RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4 ZGpscFFYUER6LVh5dFpZZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxYXEMTEYzZtGOBxRIo2uCdckDzimFyht+0tcYORmRWIi6Cvwkc+j1 SLkPHwdRQRdm5/1pFNFoz62peVwJZ/qLi0+TYAIVWLiTqgIP6lHqbgfx2aJB67du P1QP/cC25VpLGi6sl4QPxek7oscyTgim1Azp+jqkpcUFj+t18S9w2eJD3CsLTfG0 5jcR2WUznQGUHWkGcmST7jUETm5mZ4VYtiAVFtjaafaYmbHAlHp49mKgnaAz3tIV L27ce1q/IeQhowEJkN3pygN3A6/fBPlgM0vLP/R2Y0FAqQX7Cf/6APbs0/Aa/jIP B2maOC8Ok1wkUdqjeNN1+fu8L+ygN6uK -----END CERTIFICATE-----Generated at Mon Aug 11 07:50:02 2025 by rpki-client