$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft File: y1McHsaSJfDcrkTOyl41mAzpwPI.mft (raw, json) Hash identifier: gHn9gpwZ+iz9rZMRzeqC3hdaEilEckK5AAbLPDnPQp0= Subject key identifier: 70:79:4A:CA:E3:9C:C9:45:BC:3E:B3:A5:D7:04:2C:A1:C5:61:83:22 Authority key identifier: CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 Certificate issuer: /CN=A91CFFCB/serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft Manifest number: 21 Signing time: Sun 03 Aug 2025 08:16:45 +0000 Manifest this update: Sun 03 Aug 2025 08:16:44 +0000 Manifest next update: Sun 10 Aug 2025 08:16:44 +0000 Files and hashes: 1: y1McHsaSJfDcrkTOyl41mAzpwPI.crl (hash: nTHkt/Ikx1SQZeUqda42+UDrrisYexNvX6bRvdcgXyg=) 2: BB8F3118497B11F096DCA14EC4F9AE02.roa (hash: n0pGyYXueEy9F7Jw89IAbICySxf38MqDCZugETeFEBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Validity Not Before: Aug 3 08:16:44 2025 GMT Not After : Aug 10 08:16:44 2025 GMT Subject: CN=688f1aed-513f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:95:e2:9a:c8:19:35:bf:e7:65:37:d3:b3: b2:fa:40:54:a5:2f:1f:83:f9:82:cc:c0:f7:3b:8d: 0f:9e:68:ea:94:cf:30:09:ab:34:86:10:dc:5d:b3: a9:f7:ec:b5:c6:4d:68:21:d6:21:b6:ee:2d:38:4b: 0a:95:7c:eb:9d:10:c8:99:5a:0e:60:50:19:3a:0a: 78:1a:7f:fb:d9:28:2a:5b:b0:cb:a3:c6:bb:42:2d: c2:27:b7:e8:7d:ec:76:bf:f9:c6:a2:98:58:65:d2: 45:0e:e9:d1:75:e0:e2:c2:57:a2:79:4b:e8:cf:26: 73:ab:13:76:0f:38:d5:b6:1a:da:0b:7c:8b:86:a3: b8:f3:ea:32:21:0d:d8:2f:c2:dd:a8:ec:5c:55:97: e5:4c:8d:a9:19:b9:d5:ce:65:0d:ba:a4:d6:28:86: b3:a9:6b:66:b0:fd:da:6c:38:61:c7:93:24:18:95: ed:46:2a:2e:8e:00:33:df:3c:c5:39:bd:44:d0:04: d5:4a:9f:ef:14:dc:aa:ec:aa:f6:aa:89:c7:af:db: 21:92:c5:ea:6b:0d:10:9d:5c:ee:a0:49:76:2d:95: 36:5b:c5:b5:6c:25:a5:93:27:53:1e:d0:ae:8e:da: ef:af:1f:29:3a:f9:a5:0d:f3:bd:7c:a1:4d:65:03: d7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:79:4A:CA:E3:9C:C9:45:BC:3E:B3:A5:D7:04:2C:A1:C5:61:83:22 X509v3 Authority Key Identifier: keyid:CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:11:a1:b6:36:d6:aa:19:26:7a:8c:71:02:2f:65:06:30:f4: 95:a3:47:07:66:ce:da:c1:19:79:c2:01:91:20:d5:e1:07:4e: b1:e9:c7:f2:21:03:63:57:f3:bb:54:98:35:83:b6:63:f9:9b: 63:cc:92:01:60:f5:4b:fe:06:fa:dd:0c:c0:84:ec:6c:13:3b: cd:05:54:8e:16:f1:63:8c:27:4d:61:79:33:98:41:4b:0d:51: 99:db:da:9a:54:c3:95:b4:d1:fd:96:10:14:f4:72:a3:d2:3c: 19:13:ad:c6:f1:27:ff:60:6e:ac:d0:18:15:4e:66:30:77:1a: 2e:1e:28:d4:1e:c3:32:b7:78:6b:24:99:88:3b:11:54:44:17: 1f:86:14:16:c5:31:d0:64:d1:e0:1e:85:56:e7:1e:48:64:b0: 4e:66:38:3e:82:8e:67:b2:62:9c:3c:6d:f5:59:ef:40:d4:91: ad:43:b2:4b:8d:af:4a:5a:7a:76:61:d4:74:ab:8a:c4:5a:df: ee:7e:64:b3:79:44:49:48:f7:6f:58:8f:5f:5a:ef:27:6a:b7: a3:be:d6:8d:31:cb:d2:12:4f:06:6d:5f:3c:68:90:fd:38:37: 13:91:73:1a:33:d4:cb:01:25:cd:ef:69:e5:32:0c:e9:9b:5c: d4:2b:70:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkZDQjExMC8GA1UEBRMoQ0I1MzFDMUVDNjkyMjVGMERDQUU0NENFQ0E1RTM1OTgw Q0U5QzBGMjAeFw0yNTA4MDMwODE2NDRaFw0yNTA4MTAwODE2NDRaMBgxFjAUBgNV BAMTDTY4OGYxYWVkLTUxM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw6JXimsgZNb/nZTfTs7L6QFSlLx+D+YLMwPc7jQ+eaOqUzzAJqzSGENxds6n3 7LXGTWgh1iG27i04SwqVfOudEMiZWg5gUBk6Cngaf/vZKCpbsMujxrtCLcInt+h9 7Ha/+caimFhl0kUO6dF14OLCV6J5S+jPJnOrE3YPONW2GtoLfIuGo7jz6jIhDdgv wt2o7FxVl+VMjakZudXOZQ26pNYohrOpa2aw/dpsOGHHkyQYle1GKi6OADPfPMU5 vUTQBNVKn+8U3Krsqvaqicev2yGSxeprDRCdXO6gSXYtlTZbxbVsJaWTJ1Me0K6O 2u+vHyk6+aUN8718oU1lA9e/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcHlKyuOc yUW8PrOl1wQsocVhgyIwHwYDVR0jBBgwFoAUy1McHsaSJfDcrkTOyl41mAzpwPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRkNCL0Y1REI3QTE2NDIw NTExRjBCRjdBODcxMUM0RjlBRTAyL3kxTWNIc2FTSmZEY3JrVE95bDQxbUF6cHdQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTFNY0hzYVNKZkRjcmtUT3lsNDFtQXpwd1BJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RkNCL0Y1REI3QTE2NDIwNTExRjBCRjdBODcxMUM0RjlBRTAyL3kxTWNIc2FTSmZE Y3JrVE95bDQxbUF6cHdQSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHYRobY21qoZJnqMcQIvZQYw9JWjRwdmztrBGXnCAZEg1eEHTrHpx/Ih A2NX87tUmDWDtmP5m2PMkgFg9Uv+BvrdDMCE7GwTO80FVI4W8WOMJ01heTOYQUsN UZnb2ppUw5W00f2WEBT0cqPSPBkTrcbxJ/9gbqzQGBVOZjB3Gi4eKNQewzK3eGsk mYg7EVREFx+GFBbFMdBk0eAehVbnHkhksE5mOD6CjmeyYpw8bfVZ70DUka1DskuN r0paenZh1HSrisRa3+5+ZLN5RElI929Yj19a7ydqt6O+1o0xy9ISTwZtXzxokP04 NxORcxoz1MsBJc3vaeUyDOmbXNQrcKU= -----END CERTIFICATE-----Generated at Mon Aug 4 11:25:02 2025 by rpki-client