$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json) Hash identifier: xjzq7rUYhdc3vUlNDqpkmD6HDt9R7uYAOx61EcDWwyc= Subject key identifier: CA:08:8B:18:B3:89:9F:0C:FD:2B:24:82:3C:76:4D:7F:DE:66:65:DE Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft Manifest number: 8E Signing time: Sat 23 Aug 2025 07:04:54 +0000 Manifest this update: Sat 23 Aug 2025 07:04:53 +0000 Manifest next update: Sat 30 Aug 2025 07:04:53 +0000 Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: F1SgSU7YJ7DnW6aOOri3DbcgVDqLVvzq0b+cmpQ/vkg=) 2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: fYzwGdwCqYZskymy95U02CPM2CRp+XXOXIkMFaQRIIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Validity Not Before: Aug 23 07:04:53 2025 GMT Not After : Aug 30 07:04:53 2025 GMT Subject: CN=68a96816-fe8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:5b:00:a6:9f:0f:52:72:9c:7b:e6:cb:c5: fe:f9:70:8c:ea:68:da:86:c7:19:4c:fb:33:be:d4: 25:c5:4b:bc:b7:a2:f0:a1:28:41:bc:ec:4d:f0:d5: c9:66:5a:17:f7:c0:d1:cb:7f:7b:72:cc:a6:5c:5d: e1:26:26:ab:e7:07:eb:de:ab:39:70:6a:9a:49:02: 4e:25:b1:b4:ec:a4:ef:ef:5f:0f:5d:cc:46:63:81: 9a:fa:47:71:b6:8b:80:98:8b:4d:f0:83:39:87:d4: 30:59:78:99:54:a2:ee:c3:c0:51:40:45:b3:1f:4c: 4e:4f:36:59:cd:67:4a:26:bf:6d:2e:ae:b2:fc:b7: c2:97:86:ae:46:20:e4:d6:92:dd:56:d3:80:11:28: 13:5b:3f:99:ea:c2:45:b2:86:e5:cf:8f:b2:42:05: a5:4a:62:37:fc:c7:4e:b7:bb:88:a7:81:01:f3:61: b7:d1:c6:53:91:6b:2e:12:ba:82:98:4a:22:64:05: d7:dc:47:00:64:df:98:77:36:01:b1:cc:11:8b:fb: 3b:5d:c4:2e:ae:e1:65:21:a4:5f:1e:29:60:4f:14: 2a:46:eb:1b:42:9c:3c:91:a3:eb:f5:8d:e3:07:03: 57:bf:39:33:ab:5a:b9:cd:7f:d8:50:2c:36:d8:2c: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:8B:18:B3:89:9F:0C:FD:2B:24:82:3C:76:4D:7F:DE:66:65:DE X509v3 Authority Key Identifier: keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b5:2a:5c:78:81:9b:54:91:77:89:a7:5a:5c:d2:ed:48:17: 76:5a:ae:75:b4:b0:a9:08:f8:99:34:d8:3e:04:35:d6:d8:06: 0a:fb:5c:e1:48:b5:02:30:8e:d5:c1:03:ce:e0:3a:35:37:e9: c7:fb:14:86:37:b8:6e:28:77:cf:a9:c4:38:13:af:f1:2c:b4: 59:89:fb:c8:4b:54:d4:dd:c9:d4:f6:d3:b7:eb:79:34:93:46: d0:15:78:2f:b3:cb:9b:49:55:b5:0e:af:45:eb:ba:cc:fd:00: cf:c2:55:4d:2f:49:d3:c6:3a:18:57:6b:2f:52:cf:17:8f:f4: 5f:0f:bd:a3:c9:ef:24:c6:73:40:39:18:5c:9f:a0:d8:9c:e7: 33:4e:b2:cc:db:49:49:03:ab:d9:7d:5f:59:59:43:59:87:a7: f9:de:3e:8d:aa:c9:25:9c:06:6f:ec:ed:b0:5f:c4:9e:20:fb: 77:37:fa:a7:26:f0:18:04:27:39:5f:85:1d:6c:6d:57:d0:79: e7:50:70:9f:98:cf:d6:c9:8b:7a:b5:90:21:28:4c:64:05:ad: 30:5c:3e:2a:79:bf:af:94:7a:d4:ab:90:b6:f9:da:9c:f7:4c: 70:ec:0c:26:27:6d:ac:31:ce:9a:e3:39:26:01:82:b5:72:62: ae:5b:17:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKDYyNEI5NkUxRDY2NUVENzhFNzhERkFGNkMyMjAxOTEw NzNEQjY2Q0MwHhcNMjUwODIzMDcwNDUzWhcNMjUwODMwMDcwNDUzWjAYMRYwFAYD VQQDEw02OGE5NjgxNi1mZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXpbAKafD1JynHvmy8X++XCM6mjahscZTPszvtQlxUu8t6LwoShBvOxN8NXJ ZloX98DRy397csymXF3hJiar5wfr3qs5cGqaSQJOJbG07KTv718PXcxGY4Ga+kdx touAmItN8IM5h9QwWXiZVKLuw8BRQEWzH0xOTzZZzWdKJr9tLq6y/LfCl4auRiDk 1pLdVtOAESgTWz+Z6sJFsoblz4+yQgWlSmI3/MdOt7uIp4EB82G30cZTkWsuErqC mEoiZAXX3EcAZN+YdzYBscwRi/s7XcQuruFlIaRfHilgTxQqRusbQpw8kaPr9Y3j BwNXvzkzq1q5zX/YUCw22CyibwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoIixiz iZ8M/Sskgjx2TX/eZmXeMB8GA1UdIwQYMBaAFGJLluHWZe1454369sIgGRBz22bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DMTEyRjU1Q0Qx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdYam5qZnIyd2lBWkVIUGJa c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DMTEyRjU1Q0QxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdY am5qZnIyd2lBWkVIUGJac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPtSpceIGbVJF3iadaXNLtSBd2Wq51tLCpCPiZNNg+BDXW2AYK+1zh SLUCMI7VwQPO4Do1N+nH+xSGN7huKHfPqcQ4E6/xLLRZifvIS1TU3cnU9tO363k0 k0bQFXgvs8ubSVW1Dq9F67rM/QDPwlVNL0nTxjoYV2svUs8Xj/RfD72jye8kxnNA ORhcn6DYnOczTrLM20lJA6vZfV9ZWUNZh6f53j6NqsklnAZv7O2wX8SeIPt3N/qn JvAYBCc5X4UdbG1X0HnnUHCfmM/WyYt6tZAhKExkBa0wXD4qeb+vlHrUq5C2+dqc 90xw7AwmJ22sMc6a4zkmAYK1cmKuWxey -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:01 2025 by rpki-client