$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft File: Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json) Hash identifier: f5QvgXkMnrb8vAF41Oot5dpstg2mEW1X8cNtYJ7f/jU= Subject key identifier: F3:27:17:C4:04:EA:B9:AC:70:03:C8:67:CB:B1:36:51:33:10:0A:BD Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Certificate serial: 0755 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft Manifest number: 074F Signing time: Wed 06 Aug 2025 22:02:28 +0000 Manifest this update: Wed 06 Aug 2025 22:02:27 +0000 Manifest next update: Wed 13 Aug 2025 22:02:27 +0000 Files and hashes: 1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: fUQzgSBkb/1ZBSHlNzdu6tha+aCwZt8V17DlKFIzpNY=) 2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: M4Gqzd39PMwr7C0nKPOIDqHHsIaRLfcCY3hCq+E40tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1877 (0x755) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Validity Not Before: Aug 6 22:02:27 2025 GMT Not After : Aug 13 22:02:27 2025 GMT Subject: CN=6893d0f3-f89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:86:15:7b:fb:0d:e0:58:68:47:8b:af:2f: 31:47:33:56:aa:78:95:5c:42:39:fe:6b:b8:2c:59: 70:f4:61:ad:72:5b:62:23:a1:17:8a:68:b7:1f:ed: 02:eb:39:56:2b:87:fb:c2:02:95:f4:b9:5c:97:b8: a8:fd:34:fe:25:28:5f:11:7d:ed:be:fd:c7:d8:11: 31:e1:4a:9c:30:1f:5c:2e:5f:67:3f:11:38:a2:5c: d3:19:21:b3:26:8c:5b:1a:00:7b:11:ab:d6:c6:5f: 3f:22:f3:e8:91:10:c5:37:df:85:8b:fe:67:7c:43: 46:8b:31:d1:4b:f7:00:51:d6:46:6d:01:d8:77:1f: 45:3d:cf:fb:56:23:c9:63:4b:9b:7d:36:63:73:77: 8d:25:13:4a:01:96:47:59:ea:c7:55:0c:31:d4:c5: 9d:7e:0a:b0:ce:94:2a:67:91:09:1d:f9:03:17:94: 73:c1:32:24:e2:80:8b:24:30:ab:c6:c1:5f:87:74: 9a:bb:82:7f:c9:4e:cc:16:77:a1:5f:0e:db:cf:17: 3b:a4:7c:8e:bb:30:51:37:78:34:81:6a:6b:43:36: 7f:89:58:a8:cf:30:92:09:23:71:77:e4:55:72:db: 83:7d:d8:21:3e:a4:6b:61:19:d8:70:f3:52:ef:98: 2a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:27:17:C4:04:EA:B9:AC:70:03:C8:67:CB:B1:36:51:33:10:0A:BD X509v3 Authority Key Identifier: keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:68:bc:a3:a6:6f:81:17:d7:ae:ff:fd:32:18:64:7d:36:73: 04:c2:ca:d5:39:0c:a4:2a:9e:a4:d4:7c:01:1c:0a:9a:38:81: 99:36:4b:58:57:ee:ad:b7:0e:cf:12:9d:70:fd:69:08:66:ab: 58:75:d2:f3:45:f3:d0:45:ea:04:c6:89:56:3e:ed:41:6a:5c: cf:54:60:36:2e:e2:51:ca:6d:7f:e3:f9:15:b6:c9:7e:0e:7f: 24:39:1c:3c:79:3a:28:04:6b:25:24:d1:cf:dc:cb:71:50:c6: d9:15:10:2e:81:86:4c:6a:74:62:68:8d:36:03:06:93:c7:3f: 49:2d:bd:bc:72:e2:c0:08:a5:64:df:d2:e9:90:c8:9d:49:1f: b8:54:08:4f:3e:34:97:0b:36:b2:eb:eb:1f:4f:5e:29:7d:5a: 89:e9:1e:f4:12:01:d3:5a:bb:c0:01:4d:8b:a7:4c:cb:4e:47: 68:96:48:fa:11:56:52:95:a1:fd:06:c0:60:68:14:bf:04:2a: 41:4a:a4:ea:66:58:0b:4e:db:9b:d6:bb:83:68:ed:f8:02:87: f3:51:ff:7a:ef:8c:32:0c:ef:33:e4:42:74:8c:7b:f2:3f:90: 51:1d:d5:51:6d:33:5d:19:2b:4e:e6:20:f7:c8:33:df:66:8f: 3a:49:37:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3MDYxMTAvBgNVBAUTKDYzOTIzOTA2MzkxN0VFOTJDMDk5RTQ2QUQzNjk2QzJF Q0E3QzUxMEEwHhcNMjUwODA2MjIwMjI3WhcNMjUwODEzMjIwMjI3WjAYMRYwFAYD VQQDEw02ODkzZDBmMy1mODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOyGFXv7DeBYaEeLry8xRzNWqniVXEI5/mu4LFlw9GGtcltiI6EXimi3H+0C 6zlWK4f7wgKV9Llcl7io/TT+JShfEX3tvv3H2BEx4UqcMB9cLl9nPxE4olzTGSGz JoxbGgB7EavWxl8/IvPokRDFN9+Fi/5nfENGizHRS/cAUdZGbQHYdx9FPc/7ViPJ Y0ubfTZjc3eNJRNKAZZHWerHVQwx1MWdfgqwzpQqZ5EJHfkDF5RzwTIk4oCLJDCr xsFfh3Sau4J/yU7MFnehXw7bzxc7pHyOuzBRN3g0gWprQzZ/iViozzCSCSNxd+RV ctuDfdghPqRrYRnYcPNS75gqoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMnF8QE 6rmscAPIZ8uxNlEzEAq9MB8GA1UdIwQYMBaAFGOSOQY5F+6SwJnkatNpbC7KfFEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjcwNi8wNEQ0NTdDMjMz MDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdwTEFtZVJxMDJsc0xzcDhV UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k1STVCamtYN3BMQW1lUnEwMmxzTHNwOFVRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjcwNi8wNEQ0NTdDMjMzMDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdw TEFtZVJxMDJsc0xzcDhVUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRaLyjpm+BF9eu//0yGGR9NnMEwsrVOQykKp6k1HwBHAqaOIGZNktY V+6ttw7PEp1w/WkIZqtYddLzRfPQReoExolWPu1BalzPVGA2LuJRym1/4/kVtsl+ Dn8kORw8eTooBGslJNHP3MtxUMbZFRAugYZManRiaI02AwaTxz9JLb28cuLACKVk 39LpkMidSR+4VAhPPjSXCzay6+sfT14pfVqJ6R70EgHTWrvAAU2Lp0zLTkdolkj6 EVZSlaH9BsBgaBS/BCpBSqTqZlgLTtub1ruDaO34AofzUf9674wyDO8z5EJ0jHvy P5BRHdVRbTNdGStO5iD3yDPfZo86STe7 -----END CERTIFICATE-----Generated at Fri Aug 8 00:13:07 2025 by rpki-client