$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: bLMJpzNIplVMIKTOt/Ju/bpyxkatKmYTQvBpUaWOvjg= Subject key identifier: AF:D5:2D:B7:75:57:E0:39:AF:F3:4F:FF:32:DB:53:8C:B6:48:85:43 Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 02A4 Signing time: Sat 23 Aug 2025 01:54:45 +0000 Manifest this update: Sat 23 Aug 2025 01:54:45 +0000 Manifest next update: Sat 30 Aug 2025 01:54:45 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: 92jKW/PrweoE8M1Piv4sQk7fPgBd2gUwRkvj/dWDG4c=) 2: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: LeMbdehFC4fTf/TGuaoRSnOw0VY+BgZy7lQOEpG5vyc=) 3: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: 0dIG8fQMRzlILpkTDJVo/XSoC64SAKbRto45S4Eicvs=) 4: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ZQQKFp5iiDEIGLxVFz3G6lECRRriefFnadRp8yKcQoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Aug 23 01:54:45 2025 GMT Not After : Aug 30 01:54:45 2025 GMT Subject: CN=68a91f65-84eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:e9:44:00:b3:4c:49:44:24:e2:77:aa:b3: c9:7e:bc:c5:1b:62:9a:7f:53:68:34:ce:f7:bd:1a: e5:e7:bb:fd:c6:b6:9f:90:f4:d0:26:98:b2:49:ba: 16:84:51:72:37:95:0b:46:55:8d:d5:86:c9:71:4b: 52:ed:04:fb:22:1c:d1:a4:8c:cc:4d:08:c5:4e:17: 64:3a:72:fa:71:6a:32:69:d0:28:3c:45:30:6e:50: aa:2f:7b:a1:db:8f:e0:11:49:94:62:ec:e9:c1:8c: 4f:82:0b:73:da:c2:2a:0f:67:c9:e7:f2:dd:3d:6f: d6:01:e6:33:5e:f7:ae:c1:14:52:d7:a1:1a:63:e8: 79:90:76:d5:4c:b7:47:4a:12:7d:44:79:93:8b:7f: e5:bb:a7:fb:bd:d5:47:2e:9c:b1:e1:e4:06:37:5a: 06:bd:d1:f1:20:fc:44:f3:13:25:a7:36:a8:10:27: 66:58:61:1e:b3:d4:3e:d3:f5:6a:84:27:cd:c1:f9: 3d:a9:00:e4:16:be:ef:5a:45:54:f3:35:15:98:6c: 8d:37:bf:aa:e0:74:05:29:06:09:76:aa:5c:79:a9: 3a:52:ad:ec:ed:42:55:8f:19:e8:7b:f7:af:98:95: 30:88:69:54:5b:7a:42:3e:ae:d4:ab:0c:19:e2:38: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D5:2D:B7:75:57:E0:39:AF:F3:4F:FF:32:DB:53:8C:B6:48:85:43 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ff:71:36:ea:cf:26:43:86:6f:ff:0c:00:1c:59:07:6e:8e: 26:f8:ca:01:99:47:a4:54:89:80:17:e7:ae:5d:98:16:8f:b8: a1:41:98:10:0c:74:ab:06:94:2a:99:ad:42:31:12:eb:28:34: 47:d0:59:2a:68:df:20:a4:4f:81:aa:fe:4d:7a:41:94:e7:dc: 88:74:a7:59:9b:5d:13:54:03:89:ee:28:97:25:40:ca:51:f6: 07:c0:61:d0:c5:25:87:67:ff:da:0f:dd:83:03:7c:69:18:4b: e9:20:79:57:dc:7c:f6:52:a7:d7:52:6e:9d:57:d1:49:88:0a: 25:1d:f4:47:d3:87:07:dd:cf:33:d9:b2:11:1d:09:0e:a9:0a: 61:0a:de:e7:ef:f5:1a:f2:48:ba:7f:73:ba:5c:74:ef:dc:65: b5:d5:74:ea:f4:f8:c5:15:72:97:78:cc:d3:af:04:42:f8:bd: f4:9c:8b:ff:14:d5:59:87:f1:37:e2:04:d5:a4:ec:d7:62:9e: 9e:e0:1a:f2:9d:00:61:79:0f:3b:b7:83:be:97:7a:ac:8d:24: 67:6e:f3:58:a9:ef:19:dc:1d:a1:0f:96:13:65:ee:f4:98:f2: 89:4d:d7:8f:33:7c:4c:d9:34:6b:e8:a6:2e:08:7a:23:2e:24: df:ef:e0:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjUwODIzMDE1NDQ1WhcNMjUwODMwMDE1NDQ1WjAYMRYwFAYD VQQDEw02OGE5MWY2NS04NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsarpRACzTElEJOJ3qrPJfrzFG2Kaf1NoNM73vRrl57v9xrafkPTQJpiySboW hFFyN5ULRlWN1YbJcUtS7QT7IhzRpIzMTQjFThdkOnL6cWoyadAoPEUwblCqL3uh 24/gEUmUYuzpwYxPggtz2sIqD2fJ5/LdPW/WAeYzXveuwRRS16EaY+h5kHbVTLdH ShJ9RHmTi3/lu6f7vdVHLpyx4eQGN1oGvdHxIPxE8xMlpzaoECdmWGEes9Q+0/Vq hCfNwfk9qQDkFr7vWkVU8zUVmGyNN7+q4HQFKQYJdqpceak6Uq3s7UJVjxnoe/ev mJUwiGlUW3pCPq7UqwwZ4jhXlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/VLbd1 V+A5r/NP/zLbU4y2SIVDMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0/3E26s8mQ4Zv/wwAHFkHbo4m+MoBmUekVImAF+euXZgWj7ihQZgQ DHSrBpQqma1CMRLrKDRH0FkqaN8gpE+Bqv5NekGU59yIdKdZm10TVAOJ7iiXJUDK UfYHwGHQxSWHZ//aD92DA3xpGEvpIHlX3Hz2UqfXUm6dV9FJiAolHfRH04cH3c8z 2bIRHQkOqQphCt7n7/Ua8ki6f3O6XHTv3GW11XTq9PjFFXKXeMzTrwRC+L30nIv/ FNVZh/E34gTVpOzXYp6e4BrynQBheQ87t4O+l3qsjSRnbvNYqe8Z3B2hD5YTZe70 mPKJTdePM3xM2TRr6KYuCHojLiTf7+Ag -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:31 2025 by rpki-client