$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: egmpkg3BfLCKSj1M9vWcBO2QQwsW24ORsI1s0K+k6CI= Subject key identifier: 48:30:09:22:8B:C1:D8:B8:47:44:AA:87:F1:2B:AA:65:1A:61:0C:95 Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 01A1 Signing time: Sat 23 Aug 2025 03:30:31 +0000 Manifest this update: Sat 23 Aug 2025 03:30:30 +0000 Manifest next update: Sat 30 Aug 2025 03:30:30 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: 5CBsXYjxAEUHe607IlW72G+YQZ+owKxFYljr8z271iM=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: LAaO1vZcTPGfjnPzmYmWNC40SxBUckX2iI6WDTxLjTo=) 3: CBECEF26736C11F0AB1C0331C4F9AE02.roa (hash: ORzkYkvhLpkSlBO34+VKnzigJFjKdcpNL7PaFDva6xA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Aug 23 03:30:30 2025 GMT Not After : Aug 30 03:30:30 2025 GMT Subject: CN=68a935d6-2154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:fb:c5:19:06:b7:de:81:fd:da:bd:56:b2:0e: bd:69:30:b1:7f:41:23:40:22:d3:ae:fa:d8:2c:c5: 58:cf:ca:cf:68:02:0a:84:51:15:55:d8:e8:5a:96: 4f:8a:2f:10:ab:c3:79:d8:ef:de:4f:48:3a:fc:f6: 9a:45:33:16:6c:a2:94:03:2a:bb:53:56:4e:18:29: e0:f7:2b:41:da:43:f5:f9:c1:3c:d6:1d:6d:6d:78: 2a:c9:52:d8:6f:f3:c0:e6:75:6b:46:c4:17:1b:73: 05:f6:43:60:87:6f:a8:d4:4d:ef:ca:5e:46:d2:75: 66:c1:bc:af:16:b4:c1:83:e8:ad:4f:6f:e7:28:29: f7:57:a8:a9:c5:60:49:26:57:65:70:33:36:68:a5: 02:98:b3:0c:ea:d8:9f:52:f9:4f:e9:ee:06:6d:f2: 8b:1c:df:b3:a9:40:41:e5:22:44:10:27:4e:1c:98: aa:93:1a:52:af:d7:d2:60:08:24:b2:cd:24:d4:15: 39:26:96:9a:fa:47:fb:38:85:6b:b0:df:36:d4:ab: 2b:55:13:ce:f0:2c:1e:b8:77:f0:7a:f0:10:1b:9b: f4:3c:c7:09:42:ee:94:67:d0:95:38:e0:8f:86:f3: 15:37:8f:9c:ac:72:1c:50:e6:9b:28:24:b3:63:b2: 93:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:30:09:22:8B:C1:D8:B8:47:44:AA:87:F1:2B:AA:65:1A:61:0C:95 X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:76:ce:ca:d0:80:2c:a3:f4:b1:88:94:10:c6:cc:8b:16:bf: 8e:63:d7:14:1a:56:53:8d:9e:cf:2a:dd:3c:1a:68:24:12:79: 18:a9:b8:3b:90:0b:cd:f7:8f:1a:bb:84:12:5f:d2:c5:d7:c6: 94:f3:7c:27:1e:86:1a:5b:54:9d:a8:cc:5b:a0:17:e8:e2:bb: 74:d9:bf:d6:6b:f1:e0:76:0b:69:a4:d9:17:f4:67:a3:be:c7: 1e:19:9a:5e:fe:be:37:f9:fd:7f:b9:29:ac:14:0e:41:82:92: 36:10:98:30:75:f9:18:96:b1:e5:26:8b:3a:f5:d5:b1:76:5f: 68:2a:5b:11:38:d0:51:9a:cb:85:a1:e9:05:18:f0:10:01:05: 44:a9:44:d6:e1:86:da:fe:94:36:9c:ba:20:d2:77:00:db:49: 6c:af:45:af:70:2a:4b:92:93:5f:3f:24:d1:3d:92:ae:3f:0e: ce:3d:93:05:2d:4b:5d:be:58:f6:c6:b1:91:7c:ae:e2:5c:6f: 2b:11:c1:64:9a:23:5a:bc:e9:1c:81:e8:d0:2e:77:81:65:7c: 89:1c:3f:79:77:b4:d0:22:45:1e:76:17:d7:1c:7f:11:4d:e9: b7:17:66:25:bd:eb:19:a1:e0:b2:5d:b3:b0:af:0f:39:76:11: 1a:63:45:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjUwODIzMDMzMDMwWhcNMjUwODMwMDMzMDMwWjAYMRYwFAYD VQQDEw02OGE5MzVkNi0yMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+vvFGQa33oH92r1Wsg69aTCxf0EjQCLTrvrYLMVYz8rPaAIKhFEVVdjoWpZP ii8Qq8N52O/eT0g6/PaaRTMWbKKUAyq7U1ZOGCng9ytB2kP1+cE81h1tbXgqyVLY b/PA5nVrRsQXG3MF9kNgh2+o1E3vyl5G0nVmwbyvFrTBg+itT2/nKCn3V6ipxWBJ JldlcDM2aKUCmLMM6tifUvlP6e4GbfKLHN+zqUBB5SJEECdOHJiqkxpSr9fSYAgk ss0k1BU5Jpaa+kf7OIVrsN821KsrVRPO8CweuHfwevAQG5v0PMcJQu6UZ9CVOOCP hvMVN4+crHIcUOabKCSzY7KT1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgwCSKL wdi4R0Sqh/ErqmUaYQyVMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHds7K0IAso/SxiJQQxsyLFr+OY9cUGlZTjZ7PKt08GmgkEnkYqbg7 kAvN948au4QSX9LF18aU83wnHoYaW1SdqMxboBfo4rt02b/Wa/HgdgtppNkX9Gej vsceGZpe/r43+f1/uSmsFA5BgpI2EJgwdfkYlrHlJos69dWxdl9oKlsRONBRmsuF oekFGPAQAQVEqUTW4Yba/pQ2nLog0ncA20lsr0WvcCpLkpNfPyTRPZKuPw7OPZMF LUtdvlj2xrGRfK7iXG8rEcFkmiNavOkcgejQLneBZXyJHD95d7TQIkUedhfXHH8R Tem3F2YlvesZoeCyXbOwrw85dhEaY0Vo -----END CERTIFICATE-----Generated at Sat Aug 23 20:42:06 2025 by rpki-client