$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft File: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json) Hash identifier: KNX5WGVyQ7kGg1HGfAGGL6iQNzLdiA20nlK55qSVzUc= Subject key identifier: 83:F4:93:3D:1C:DE:D1:40:25:0B:D2:BC:EA:CC:7A:08:99:9D:60:2E Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 Certificate issuer: /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Certificate serial: 06C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft Manifest number: 06B7 Signing time: Fri 22 Aug 2025 22:18:15 +0000 Manifest this update: Fri 22 Aug 2025 22:18:15 +0000 Manifest next update: Fri 29 Aug 2025 22:18:15 +0000 Files and hashes: 1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: 1a2egKIY6ZmwkQKHbAwYYf3Y9qGSg4Z9LTQNQlrakOo=) 2: 56A937F2360411EF8AA77687C4F9AE02.roa (hash: jBtUWO90hOewkZT/IOz6vgpi/ww1P3BMTXwB63qoFnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0277, serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Validity Not Before: Aug 22 22:18:15 2025 GMT Not After : Aug 29 22:18:15 2025 GMT Subject: CN=68a8eca7-a8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:96:43:50:de:3a:e6:e9:09:9f:f3:b5:4e:29: 5e:11:a1:a9:1e:c8:80:d7:76:1e:58:95:38:d2:aa: 96:9d:08:47:3f:e8:91:95:64:cc:61:3c:35:bf:4c: a1:a1:ba:c6:dd:9b:ba:3c:2f:aa:4e:86:d2:b1:4e: bc:2c:51:bf:4f:2a:cf:ef:dd:26:fe:52:83:72:a9: 99:38:79:a1:d1:81:57:aa:74:c2:5e:5f:45:5b:83: 43:82:59:b0:38:2d:77:05:ef:8c:e3:3c:4e:83:34: e7:ee:35:21:28:5a:c7:65:a3:0d:b4:f0:98:d3:5a: 04:bc:0a:1a:75:0c:1a:3a:3e:9d:0e:fb:6a:83:2c: 40:7a:41:58:cf:df:49:c9:5a:85:0b:38:d5:38:20: d3:02:7c:d6:ba:6f:ae:63:42:88:2a:c5:c6:c5:63: be:1c:48:64:1b:ba:49:b1:67:c5:88:9a:75:5a:94: 9c:08:fe:6b:23:f0:d1:f7:a7:45:53:41:a7:5b:2c: 80:37:9d:b4:fd:2a:22:5c:e3:87:45:39:35:0a:ff: 87:49:f2:04:4f:d5:0b:4c:a0:59:f6:f4:3d:de:c3: 1a:15:78:b5:a1:a4:ec:c9:5b:1e:c4:b1:42:ed:ab: 34:ad:1d:04:08:88:45:05:6b:8c:ca:2d:dd:d6:3f: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F4:93:3D:1C:DE:D1:40:25:0B:D2:BC:EA:CC:7A:08:99:9D:60:2E X509v3 Authority Key Identifier: keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ea:12:ab:ea:7a:a9:a2:44:f9:93:23:d6:cd:a0:17:3b:e0: 41:2c:f1:06:79:c0:0a:fd:ab:1d:a6:0b:87:6c:11:2a:9f:98: d5:f6:4e:72:d9:43:c5:97:a0:f7:e5:1b:03:2e:1e:50:70:3b: 6c:0f:2d:d4:3d:86:c0:55:eb:c9:71:5a:21:b3:3a:3d:fa:ee: 3f:9b:80:e4:a3:8f:24:1a:28:ac:25:e6:54:5b:d7:01:88:1b: 28:1f:98:f8:82:31:98:6a:bd:a6:3a:1e:a0:04:d1:aa:33:64: dd:38:66:b2:5f:72:74:2a:3f:ca:3f:42:ab:4e:73:78:e5:1b: 7f:10:0a:1a:5e:85:ba:26:68:01:a7:70:06:4a:59:f1:80:64: c6:14:f6:b1:28:85:8d:89:a4:52:28:69:d8:bd:9f:f1:68:af: 81:14:cb:86:43:29:b4:b0:c5:14:aa:69:5f:57:e3:bf:61:c3: 75:1f:b3:fa:9a:18:bd:c4:86:9e:bf:53:53:ac:7a:74:27:b2: 06:94:c1:d4:fc:83:67:8c:92:4f:b8:d7:92:db:b6:7a:67:c5: ba:9e:b7:8d:7e:a0:d3:9b:54:2c:e9:b5:70:b5:22:ac:a6:0d: 93:ad:a8:75:14:a5:6b:22:13:42:9a:ff:0d:a5:39:ff:90:e8: 66:07:bb:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyNzcxMTAvBgNVBAUTKDYxRDkwOTQ5NEFBQzA5OUU1REM2N0JEOURFQ0NGRUJF NDRCNzc3NzkwHhcNMjUwODIyMjIxODE1WhcNMjUwODI5MjIxODE1WjAYMRYwFAYD VQQDEw02OGE4ZWNhNy1hOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZZDUN465ukJn/O1TileEaGpHsiA13YeWJU40qqWnQhHP+iRlWTMYTw1v0yh obrG3Zu6PC+qTobSsU68LFG/TyrP790m/lKDcqmZOHmh0YFXqnTCXl9FW4NDglmw OC13Be+M4zxOgzTn7jUhKFrHZaMNtPCY01oEvAoadQwaOj6dDvtqgyxAekFYz99J yVqFCzjVOCDTAnzWum+uY0KIKsXGxWO+HEhkG7pJsWfFiJp1WpScCP5rI/DR96dF U0GnWyyAN520/SoiXOOHRTk1Cv+HSfIET9ULTKBZ9vQ93sMaFXi1oaTsyVsexLFC 7as0rR0ECIhFBWuMyi3d1j/1vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIP0kz0c 3tFAJQvSvOrMegiZnWAuMB8GA1UdIwQYMBaAFGHZCUlKrAmeXcZ72d7M/r5Et3d5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDI3Ny9ENDE5RDgxMDc1 Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0NaNWR4bnZaM3N6LXZrUzNk M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lka0pTVXFzQ1o1ZHhudlozc3otdmtTM2Qzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDI3Ny9ENDE5RDgxMDc1Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0Na NWR4bnZaM3N6LXZrUzNkM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ6hKr6nqpokT5kyPWzaAXO+BBLPEGecAK/asdpguHbBEqn5jV9k5y 2UPFl6D35RsDLh5QcDtsDy3UPYbAVevJcVohszo9+u4/m4Dko48kGiisJeZUW9cB iBsoH5j4gjGYar2mOh6gBNGqM2TdOGayX3J0Kj/KP0KrTnN45Rt/EAoaXoW6JmgB p3AGSlnxgGTGFPaxKIWNiaRSKGnYvZ/xaK+BFMuGQym0sMUUqmlfV+O/YcN1H7P6 mhi9xIaev1NTrHp0J7IGlMHU/INnjJJPuNeS27Z6Z8W6nreNfqDTm1Qs6bVwtSKs pg2Trah1FKVrIhNCmv8NpTn/kOhmB7sk -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:35 2025 by rpki-client