$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json) Hash identifier: 1XGNE8m/Q+J1yGnyldc5F+59dVJzN3HnU8pjYobaTfY= Subject key identifier: A2:4B:51:93:7B:40:90:AA:DB:8B:13:C2:B2:52:C0:00:79:8E:A2:07 Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 2631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft Manifest number: 261A Signing time: Sat 02 Aug 2025 15:47:43 +0000 Manifest this update: Sat 02 Aug 2025 15:47:43 +0000 Manifest next update: Sat 09 Aug 2025 15:47:43 +0000 Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: PAPLEmK8414/JyvO27M0b6x10ION/NI/+3Lg4+lZ2EM=) 2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: bf73yAvc50YmZ9DwhowT9EQ5/Cgl8VLGPJbD30MABw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9777 (0x2631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Aug 2 15:47:43 2025 GMT Not After : Aug 9 15:47:43 2025 GMT Subject: CN=688e331f-4961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:ed:e7:c4:34:c8:2f:79:7b:58:8f:39:46: e1:e9:d9:9a:bb:85:50:c2:5c:15:c5:d2:f3:91:85: 9d:82:ed:07:19:6f:b0:3a:d6:5c:e0:ba:ab:b1:b3: 0e:70:c2:75:9d:39:ab:f6:11:72:77:ea:56:db:f7: 3e:5c:7b:3b:84:cd:06:70:49:b0:79:c8:85:06:2f: b1:1c:67:7b:9b:84:14:73:5d:c6:5f:3a:cc:6d:10: d6:30:1b:9a:76:23:94:83:39:49:c0:1c:ef:61:92: 20:ff:97:5e:ff:b9:2e:30:48:a3:94:33:65:55:8c: 9e:d1:df:4c:73:27:49:4a:ef:bb:92:0b:6f:fd:7c: d1:b9:3a:11:04:71:16:5e:b0:1a:fa:a5:02:ad:57: d9:90:33:30:d8:24:63:d1:ea:8d:c5:09:9a:de:d3: bf:ad:bc:c9:d7:ee:03:2d:88:c0:85:c2:59:71:37: e4:b1:f0:fd:4b:d8:09:25:0f:33:0a:80:51:a4:5c: f3:b7:35:87:b4:5a:4e:d6:e0:66:cf:5e:4f:d1:00: 75:4a:6a:55:0c:7c:a2:60:5c:8b:12:e4:24:f4:83: 75:a7:33:e4:f7:60:9e:de:92:e2:12:b8:87:0a:c2: 6c:5f:7a:c7:da:40:ab:b1:14:73:03:36:82:63:27: b9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4B:51:93:7B:40:90:AA:DB:8B:13:C2:B2:52:C0:00:79:8E:A2:07 X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:66:6f:36:fe:eb:6a:c4:55:9e:54:0f:c3:15:50:66:31:71: 8b:67:08:6c:48:b7:d3:97:ee:19:1e:a1:53:3d:d5:a6:60:e2: 26:49:d6:6a:2c:ee:f9:2f:9c:a8:5a:32:f1:72:42:87:11:74: 29:38:46:09:b6:e5:48:62:cc:51:8c:c4:07:89:bf:58:8e:95: 2a:59:83:a5:9b:e1:6c:2f:2a:ec:9f:66:c8:6f:cd:7e:35:98: 7a:09:a5:62:c5:11:21:a3:e9:5e:fd:4b:58:e1:b1:e2:ec:e4: ca:07:e4:60:84:b4:7c:94:64:f7:e9:b9:b8:d9:aa:20:85:55: 0a:df:e7:2d:a4:db:3b:57:05:4c:9f:e6:c3:40:4a:a4:c0:dd: 36:9a:4d:f3:ff:03:ef:86:bc:a5:09:9a:9c:74:99:68:a6:6b: 6e:7c:60:5d:63:10:eb:36:5c:f3:59:59:fb:79:94:f2:75:e6: 2b:15:a1:f4:7f:8b:80:53:da:ed:c1:ef:74:27:e2:38:af:6e: 1d:12:64:98:21:5e:61:b6:cf:1d:43:46:8c:4a:51:01:aa:35: fa:46:fd:bc:1a:fe:32:1a:26:3b:d4:5d:32:dd:e0:af:0b:f5: 83:5f:3f:78:50:e6:49:09:68:c4:af:6d:b4:f9:7a:79:4d:84: c6:01:9c:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjUwODAyMTU0NzQzWhcNMjUwODA5MTU0NzQzWjAYMRYwFAYD VQQDEw02ODhlMzMxZi00OTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2Pt58Q0yC95e1iPOUbh6dmau4VQwlwVxdLzkYWdgu0HGW+wOtZc4LqrsbMO cMJ1nTmr9hFyd+pW2/c+XHs7hM0GcEmweciFBi+xHGd7m4QUc13GXzrMbRDWMBua diOUgzlJwBzvYZIg/5de/7kuMEijlDNlVYye0d9McydJSu+7kgtv/XzRuToRBHEW XrAa+qUCrVfZkDMw2CRj0eqNxQma3tO/rbzJ1+4DLYjAhcJZcTfksfD9S9gJJQ8z CoBRpFzztzWHtFpO1uBmz15P0QB1SmpVDHyiYFyLEuQk9IN1pzPk92Ce3pLiEriH CsJsX3rH2kCrsRRzAzaCYye5oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJLUZN7 QJCq24sTwrJSwAB5jqIHMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI R29jRHVfdVVLakZTa1ZRMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUZm82/utqxFWeVA/DFVBmMXGLZwhsSLfTl+4ZHqFTPdWmYOImSdZq LO75L5yoWjLxckKHEXQpOEYJtuVIYsxRjMQHib9YjpUqWYOlm+FsLyrsn2bIb81+ NZh6CaVixREho+le/UtY4bHi7OTKB+RghLR8lGT36bm42aoghVUK3+ctpNs7VwVM n+bDQEqkwN02mk3z/wPvhrylCZqcdJlopmtufGBdYxDrNlzzWVn7eZTydeYrFaH0 f4uAU9rtwe90J+I4r24dEmSYIV5hts8dQ0aMSlEBqjX6Rv28Gv4yGiY71F0y3eCv C/WDXz94UOZJCWjEr220+Xp5TYTGAZzC -----END CERTIFICATE-----Generated at Mon Aug 4 11:20:07 2025 by rpki-client