$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft File: _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json) Hash identifier: t2HXEZKmDCk05952taXUwLsdhZeczgD0HtS2G0DeO5E= Subject key identifier: E8:40:C1:B4:2B:44:0B:BD:66:73:D8:A1:FE:0F:15:75:2C:79:34:B5 Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft Manifest number: A9 Signing time: Sat 23 Aug 2025 06:22:19 +0000 Manifest this update: Sat 23 Aug 2025 06:22:18 +0000 Manifest next update: Sat 30 Aug 2025 06:22:18 +0000 Files and hashes: 1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: 5SYoe1ZSylG4ps9+N1qJnxj2PaCreJ1dGC6spXO8N3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Validity Not Before: Aug 23 06:22:18 2025 GMT Not After : Aug 30 06:22:18 2025 GMT Subject: CN=68a95e1a-1659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:f2:49:86:41:39:16:3b:4c:eb:eb:46:73: b3:a8:6b:2b:9c:36:dd:48:6e:12:61:fd:48:f3:81: 99:0f:2b:a0:ab:e8:4c:af:63:99:f9:ac:38:9a:ef: 1d:30:b1:1b:6f:b6:40:1e:7a:60:80:a8:33:46:b3: 48:bb:6a:6a:41:59:17:76:c2:cc:82:cc:ea:c6:5e: 02:ab:24:99:ed:a1:ce:5e:73:2e:54:77:f6:74:88: 1d:d8:83:77:29:e2:18:41:31:a9:9e:79:af:03:2b: db:37:65:75:a3:18:17:6c:c8:52:c8:4f:8c:86:35: fc:b5:30:3c:dd:ef:db:7e:18:9d:6a:0f:55:a7:32: 2c:0e:99:b1:5c:f9:36:35:2c:d6:11:0f:c2:d8:55: 23:62:47:12:89:a6:84:a3:1d:ec:a4:60:dc:68:e7: a1:65:6b:09:f3:4f:73:54:14:35:e8:5b:dd:18:35: d9:ab:7e:d5:f8:e4:52:37:e3:a8:4d:f9:04:26:88: ff:93:f8:95:e4:6e:8c:d6:5f:06:58:aa:38:61:ae: 82:89:a4:f7:c7:82:dc:36:f4:db:20:d5:a5:75:47: 51:04:5b:b3:ba:bd:4d:74:cb:4e:b3:71:eb:2d:f1: 21:70:e4:b4:ad:61:b7:51:f8:a5:17:99:59:34:24: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:40:C1:B4:2B:44:0B:BD:66:73:D8:A1:FE:0F:15:75:2C:79:34:B5 X509v3 Authority Key Identifier: keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:de:6f:c7:70:55:4e:e5:ce:f3:03:9f:18:a0:aa:9e:2d:98: c1:1d:a0:7e:66:61:7a:2e:b7:01:00:3b:39:a3:ed:87:28:80: be:f3:40:f7:f1:7f:85:73:b3:0d:8e:37:89:21:6f:fa:99:13: 20:a9:1d:29:80:eb:0e:9e:31:8b:76:54:83:6b:9d:b2:9b:42: a9:4f:90:39:8e:ca:16:fd:bb:25:07:ea:6c:16:5a:8b:5f:23: e5:f1:be:c8:02:02:77:bc:40:ca:d4:2b:01:03:a2:fa:72:a8: 5b:67:95:e6:05:0f:a3:9c:d9:2b:ad:fc:75:77:ba:90:30:6e: 15:dc:a8:fb:58:b9:2f:5b:59:2d:cd:ff:e5:0c:17:be:99:69: ba:cd:94:a3:5b:c8:68:70:e5:09:b8:ab:a1:54:30:23:46:12: 5d:1a:2b:67:95:32:f5:ac:dc:7f:f6:2a:10:88:98:6d:0f:62: 1a:6d:f1:0c:fe:0e:75:a0:1e:bd:6d:e2:49:9a:10:20:6d:9b: 14:25:cb:2d:f6:57:70:35:5d:5f:c5:f7:73:50:66:f2:e9:37: f6:07:f0:15:f1:8d:ed:ef:37:f2:4e:d4:a8:76:7d:3e:a3:87: 12:9c:b8:91:b8:42:5f:aa:28:e4:0d:50:2d:16:cf:85:ea:a5: fb:21:25:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKEZEODAxMkJGRTk5MTI5RUY5QzhCQjdBNDYwMzIxNDQy RjZEMjY1NjIwHhcNMjUwODIzMDYyMjE4WhcNMjUwODMwMDYyMjE4WjAYMRYwFAYD VQQDEw02OGE5NWUxYS0xNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cPySYZBORY7TOvrRnOzqGsrnDbdSG4SYf1I84GZDyugq+hMr2OZ+aw4mu8d MLEbb7ZAHnpggKgzRrNIu2pqQVkXdsLMgszqxl4CqySZ7aHOXnMuVHf2dIgd2IN3 KeIYQTGpnnmvAyvbN2V1oxgXbMhSyE+MhjX8tTA83e/bfhidag9VpzIsDpmxXPk2 NSzWEQ/C2FUjYkcSiaaEox3spGDcaOehZWsJ809zVBQ16FvdGDXZq37V+ORSN+Oo TfkEJoj/k/iV5G6M1l8GWKo4Ya6CiaT3x4LcNvTbINWldUdRBFuzur1NdMtOs3Hr LfEhcOS0rWG3UfilF5lZNCR1RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhAwbQr RAu9ZnPYof4PFXUseTS1MB8GA1UdIwQYMBaAFP2AEr/pkSnvnIu3pGAyFEL20mVi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wMUQyMzlBNDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktlLWNpN2VrWURJVVF2YlNa V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wMUQyMzlBNDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktl LWNpN2VrWURJVVF2YlNaV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV3m/HcFVO5c7zA58YoKqeLZjBHaB+ZmF6LrcBADs5o+2HKIC+80D3 8X+Fc7MNjjeJIW/6mRMgqR0pgOsOnjGLdlSDa52ym0KpT5A5jsoW/bslB+psFlqL XyPl8b7IAgJ3vEDK1CsBA6L6cqhbZ5XmBQ+jnNkrrfx1d7qQMG4V3Kj7WLkvW1kt zf/lDBe+mWm6zZSjW8hocOUJuKuhVDAjRhJdGitnlTL1rNx/9ioQiJhtD2IabfEM /g51oB69beJJmhAgbZsUJcst9ldwNV1fxfdzUGby6Tf2B/AV8Y3t7zfyTtSodn0+ o4cSnLiRuEJfqijkDVAtFs+F6qX7ISUo -----END CERTIFICATE-----Generated at Sat Aug 23 15:49:15 2025 by rpki-client