$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft File: Y7ooHVb6T-blNbEl4W34AdEvgJk.mft (raw, json) Hash identifier: oyoM7UUd0weSqfllBGa/JPZhcDJFI+q7uOAt4MJ3PJM= Subject key identifier: 16:9C:FF:17:BB:B4:2A:AC:29:EF:46:2D:98:A3:0F:1C:BF:0D:64:77 Authority key identifier: 63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 Certificate issuer: /CN=A91ECBD9/serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft Manifest number: B1 Signing time: Sat 09 Aug 2025 06:29:14 +0000 Manifest this update: Sat 09 Aug 2025 06:29:14 +0000 Manifest next update: Sat 16 Aug 2025 06:29:14 +0000 Files and hashes: 1: Y7ooHVb6T-blNbEl4W34AdEvgJk.crl (hash: KAKBr5s6QkST3fAF26TxESBINOB7oZaF7D7r6dTIJkg=) 2: 4E67247C681911EFA2640B43C4F9AE02.roa (hash: ucm8jiY7/TEfoe7vYt6Xy9WiiLrmTGt3Yko/V2TTwzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECBD9, serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Validity Not Before: Aug 9 06:29:14 2025 GMT Not After : Aug 16 06:29:14 2025 GMT Subject: CN=6896eaba-956d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:69:30:05:bd:f0:ff:eb:21:f5:a4:56:1e: cb:7b:bf:73:20:78:1c:47:7a:ba:10:83:ff:61:c9: 3a:9c:9e:60:d7:da:3c:8c:6e:4d:ac:18:df:bf:56: a2:35:0e:36:2a:bd:22:07:53:94:aa:b9:da:6f:ea: 59:6d:fc:92:99:9c:2b:92:c1:95:df:9c:ff:2a:87: dd:72:cb:c3:ff:e4:2a:fe:01:86:cf:71:fe:77:7a: 9c:df:f6:ff:36:bb:fe:a8:68:81:f0:cf:29:05:e9: 58:01:2d:69:ad:3c:67:04:ff:62:2c:8d:37:d4:89: 2f:17:51:31:75:57:64:d4:16:b6:fe:fd:98:f3:02: 6f:ff:6a:f5:5d:db:a0:b2:92:86:0c:5c:9b:64:48: 7e:5d:a5:50:52:fd:b4:24:9a:2b:db:59:72:18:b0: 87:a2:f9:0b:64:9e:fa:d6:41:0e:7c:92:46:88:67: a0:05:2d:b4:ea:10:5c:d1:34:3c:ed:8e:10:7f:92: b6:2e:86:de:ee:be:71:9e:b4:7d:c7:9a:9f:ff:9c: 0b:36:39:44:7a:f5:c8:6d:9d:84:e9:f6:6e:90:37: 78:60:a5:0c:79:49:08:2f:b5:c7:f1:5e:be:8c:eb: db:d5:11:3d:4d:66:cf:94:f9:a3:4d:52:cb:7a:a6: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:FF:17:BB:B4:2A:AC:29:EF:46:2D:98:A3:0F:1C:BF:0D:64:77 X509v3 Authority Key Identifier: keyid:63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fc:57:d8:15:44:af:f2:9b:ff:a7:af:3b:fa:9e:05:aa:2c: 74:ad:72:4f:0d:9a:67:41:00:b0:6d:94:ad:88:f0:3b:a5:16: 44:b4:3d:b7:f6:5d:56:81:66:f0:6d:e4:12:0c:89:60:28:71: c1:91:9c:12:34:0c:ce:af:2c:9b:d7:ab:12:9f:f5:0b:5b:70: e5:4c:2b:e1:66:96:9b:b0:bb:ec:d1:be:fb:35:bf:25:81:ee: 6b:d5:13:16:36:b0:fc:ac:08:08:31:e7:46:6f:91:30:57:6a: 2d:35:bd:cf:72:d7:e8:de:2c:30:67:28:ce:25:82:ae:32:20: 52:94:5b:57:52:34:a3:e8:24:b9:49:f0:81:f8:82:76:7f:69: e7:d8:ce:82:4b:16:10:87:aa:80:d7:38:61:07:2c:ac:39:ff: d0:01:64:c9:25:22:57:39:cc:41:76:ed:40:10:bd:a3:a7:93: 58:07:bd:59:8a:4f:b9:6f:8e:b6:28:09:b5:62:70:1b:98:69: ba:64:89:56:94:af:d1:b4:42:8b:07:af:cc:64:80:45:a0:aa: 81:7d:a0:1b:20:be:3c:4a:10:a4:4c:75:99:44:ba:54:0e:58: cf:27:c7:e3:b3:06:b8:0e:30:72:66:1b:8b:ba:a2:31:4d:15: 26:9d:d8:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNCRDkxMTAvBgNVBAUTKDYzQkEyODFENTZGQTRGRTZFNTM1QjEyNUUxNkRGODAx RDEyRjgwOTkwHhcNMjUwODA5MDYyOTE0WhcNMjUwODE2MDYyOTE0WjAYMRYwFAYD VQQDEw02ODk2ZWFiYS05NTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApchpMAW98P/rIfWkVh7Le79zIHgcR3q6EIP/Yck6nJ5g19o8jG5NrBjfv1ai NQ42Kr0iB1OUqrnab+pZbfySmZwrksGV35z/KofdcsvD/+Qq/gGGz3H+d3qc3/b/ Nrv+qGiB8M8pBelYAS1prTxnBP9iLI031IkvF1ExdVdk1Ba2/v2Y8wJv/2r1Xdug spKGDFybZEh+XaVQUv20JJor21lyGLCHovkLZJ761kEOfJJGiGegBS206hBc0TQ8 7Y4Qf5K2Lobe7r5xnrR9x5qf/5wLNjlEevXIbZ2E6fZukDd4YKUMeUkIL7XH8V6+ jOvb1RE9TWbPlPmjTVLLeqY7MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBac/xe7 tCqsKe9GLZijDxy/DWR3MB8GA1UdIwQYMBaAFGO6KB1W+k/m5TWxJeFt+AHRL4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0JEOS9FMDQ2QjBCNjY4 MTgxMUVGOUE1M0U5MThDNEY5QUUwMi9ZN29vSFZiNlQtYmxOYkVsNFczNEFkRXZn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k3b29IVmI2VC1ibE5iRWw0VzM0QWRFdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0JEOS9FMDQ2QjBCNjY4MTgxMUVGOUE1M0U5MThDNEY5QUUwMi9ZN29vSFZiNlQt YmxOYkVsNFczNEFkRXZnSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW/FfYFUSv8pv/p687+p4Fqix0rXJPDZpnQQCwbZStiPA7pRZEtD23 9l1WgWbwbeQSDIlgKHHBkZwSNAzOryyb16sSn/ULW3DlTCvhZpabsLvs0b77Nb8l ge5r1RMWNrD8rAgIMedGb5EwV2otNb3Pctfo3iwwZyjOJYKuMiBSlFtXUjSj6CS5 SfCB+IJ2f2nn2M6CSxYQh6qA1zhhByysOf/QAWTJJSJXOcxBdu1AEL2jp5NYB71Z ik+5b462KAm1YnAbmGm6ZIlWlK/RtEKLB6/MZIBFoKqBfaAbIL48ShCkTHWZRLpU DljPJ8fjswa4DjByZhuLuqIxTRUmndjh -----END CERTIFICATE-----Generated at Sun Aug 10 16:02:51 2025 by rpki-client