$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: SlOkZL+4ZMtSG4gaLhK8fSpe4g0R/qFwGwnTCTby1o8= Subject key identifier: BB:2D:45:5A:27:54:7F:E1:C0:5D:42:A5:EA:0E:A2:EC:63:FF:D5:75 Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 0490 Signing time: Sat 23 Aug 2025 00:13:47 +0000 Manifest this update: Sat 23 Aug 2025 00:13:47 +0000 Manifest next update: Sat 30 Aug 2025 00:13:47 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: Z00CjTlDT1BaYVV4MHclNk0x6nk/xAn3eNGOXrMvAFg=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: aRUayRfr0vMR7tS5Y4z3m5ZDFVHmg6WwIEoeJRznQ08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: Aug 23 00:13:47 2025 GMT Not After : Aug 30 00:13:47 2025 GMT Subject: CN=68a907bb-b455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:58:4b:33:b4:e4:6c:c6:1e:67:b9:4d:f2: dd:b1:0c:aa:3b:1b:e2:77:5f:38:90:e0:7c:ed:b2: 53:69:c3:40:ce:08:d5:20:1d:31:51:41:61:3d:93: 61:2d:58:7c:d2:35:4e:88:bf:90:87:ee:00:de:51: 32:11:43:72:a2:e5:c9:14:54:ab:fc:6b:d7:5f:ed: 20:a8:c4:73:53:f5:70:6f:99:ee:ee:a0:ff:e9:bf: 7d:f5:76:22:d9:d1:b3:35:2c:aa:1e:ea:c4:ba:23: 86:42:a1:ff:59:9b:cf:3f:31:bb:ba:6f:2d:29:3e: 80:e2:ba:a8:4e:10:4e:bb:ea:8c:5e:cb:62:09:26: ea:ec:11:09:17:3c:35:4a:db:09:6f:31:bf:33:a2: d0:1c:b3:e6:c6:4c:03:1f:c4:3a:59:a5:e3:28:3a: e9:2a:ab:42:31:5d:10:44:42:8d:72:72:4e:95:ab: ee:0d:42:c4:6d:2c:c1:a9:5c:d2:82:28:38:d2:c1: 51:5e:81:e6:3b:0c:c1:aa:ab:05:57:3c:0b:67:fa: 25:d2:83:0e:2f:d9:fe:66:e8:82:d6:61:2f:43:56: 58:7d:de:93:7e:05:aa:5e:3c:a4:58:c2:98:70:10: a8:00:15:6a:4f:d5:91:6e:ed:c9:44:3f:2d:f2:4f: 40:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2D:45:5A:27:54:7F:E1:C0:5D:42:A5:EA:0E:A2:EC:63:FF:D5:75 X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:27:66:a9:ff:62:87:b5:19:73:df:91:b9:a1:b9:06:a3:38: 34:28:b3:8d:52:44:36:a7:78:de:bc:e1:91:bb:12:ec:9d:eb: 58:f2:ab:52:70:c6:0a:67:86:f5:46:4a:f6:e1:c4:26:e8:29: 81:03:d1:2e:20:cb:1f:12:64:20:f9:18:ed:01:ed:9e:ff:4d: d5:cc:8c:08:9e:37:f7:58:cd:e2:b5:27:88:81:2c:dc:2f:cf: 5c:5d:7e:b0:b7:70:bf:ce:db:b3:88:54:0f:3f:de:c1:f4:d2: 87:8d:10:29:dd:f3:a9:c5:6f:94:c9:8a:00:0a:c3:75:1e:4c: 05:38:bb:13:fe:22:c5:ca:6f:88:0f:d6:24:ce:82:1b:97:89: 69:ba:06:87:ff:a7:23:64:65:53:24:f4:46:a6:cf:15:0b:7a: df:d0:10:da:f5:95:9c:88:c0:8f:6a:35:a3:31:d3:90:26:71: bf:db:71:be:81:1e:a8:f1:42:39:ea:f7:3a:20:c8:f3:ac:2d: 61:ed:07:1f:b5:50:0d:38:69:fb:aa:5b:d3:4f:e7:55:3e:31: ea:99:90:1e:de:e2:df:d5:82:8d:28:00:d0:53:b1:5c:85:5b: 96:2a:2e:ea:5d:35:5a:da:b5:0c:41:3d:f7:9d:09:b4:dd:2f: 53:91:89:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjUwODIzMDAxMzQ3WhcNMjUwODMwMDAxMzQ3WjAYMRYwFAYD VQQDEw02OGE5MDdiYi1iNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubVYSzO05GzGHme5TfLdsQyqOxvid184kOB87bJTacNAzgjVIB0xUUFhPZNh LVh80jVOiL+Qh+4A3lEyEUNyouXJFFSr/GvXX+0gqMRzU/Vwb5nu7qD/6b999XYi 2dGzNSyqHurEuiOGQqH/WZvPPzG7um8tKT6A4rqoThBOu+qMXstiCSbq7BEJFzw1 StsJbzG/M6LQHLPmxkwDH8Q6WaXjKDrpKqtCMV0QREKNcnJOlavuDULEbSzBqVzS gig40sFRXoHmOwzBqqsFVzwLZ/ol0oMOL9n+ZuiC1mEvQ1ZYfd6TfgWqXjykWMKY cBCoABVqT9WRbu3JRD8t8k9AewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLstRVon VH/hwF1CpeoOouxj/9V1MB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRJ2ap/2KHtRlz35G5obkGozg0KLONUkQ2p3jevOGRuxLsnetY8qtS cMYKZ4b1Rkr24cQm6CmBA9EuIMsfEmQg+RjtAe2e/03VzIwInjf3WM3itSeIgSzc L89cXX6wt3C/ztuziFQPP97B9NKHjRAp3fOpxW+UyYoACsN1HkwFOLsT/iLFym+I D9YkzoIbl4lpugaH/6cjZGVTJPRGps8VC3rf0BDa9ZWciMCPajWjMdOQJnG/23G+ gR6o8UI56vc6IMjzrC1h7QcftVANOGn7qlvTT+dVPjHqmZAe3uLf1YKNKADQU7Fc hVuWKi7qXTVa2rUMQT33nQm03S9TkYlc -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:23 2025 by rpki-client