$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json) Hash identifier: x1Gb8xHIRFrrdHGZgmw62mcLgnIa7b1pqjTzEIJ3Ock= Subject key identifier: 8D:20:BF:D1:4E:03:5E:39:D8:C8:B3:57:63:98:51:D2:DC:69:2B:62 Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft Manifest number: 0783 Signing time: Fri 22 Aug 2025 21:38:21 +0000 Manifest this update: Fri 22 Aug 2025 21:38:21 +0000 Manifest next update: Fri 29 Aug 2025 21:38:21 +0000 Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: R/mqIcvUhKn4TJKAFEBcscBj4wJfbZs6zrD+yUGLQLk=) 2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: 6tZzkzjjo4oBxSeK/R1NOhuzbe0x0nCnZv7oHnkeXMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Validity Not Before: Aug 22 21:38:21 2025 GMT Not After : Aug 29 21:38:21 2025 GMT Subject: CN=68a8e34d-23b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:95:ef:fc:0d:e8:7c:bc:ee:24:fb:e8:71:1a: bd:e0:70:46:4f:5a:a0:69:d2:6b:ad:3e:0f:a8:d5: 5e:a3:aa:5b:71:7a:b7:3a:a6:23:5c:f8:5e:5a:76: f7:d8:d3:1b:e0:eb:36:b8:46:c7:b3:a5:28:7e:81: 6a:8f:bf:2d:9d:85:8e:fd:3b:67:ae:83:59:73:6b: 80:3e:f4:45:c0:1c:f1:6c:b9:83:dc:3e:63:b0:d7: 58:8e:d9:2c:0c:05:2e:4c:40:7b:3f:07:58:c3:5d: 76:ff:11:c8:3c:d3:97:5b:c0:5c:c3:96:dd:0f:31: ba:60:8f:0b:bd:28:ca:c0:38:83:f6:9e:44:30:93: e5:23:b6:a2:b6:ae:74:98:83:93:56:7d:a3:8e:28: 4b:c3:e6:9b:b2:8e:30:a1:04:43:64:7e:dd:3f:73: 40:d5:e1:e9:22:ce:7d:d9:84:b8:93:1f:a2:02:46: 99:37:2f:7b:84:d7:15:11:73:82:39:29:15:fd:7c: 11:94:e1:0d:4a:92:25:93:b0:8d:1d:cd:ba:85:1e: aa:13:69:b7:43:b5:44:f1:00:0c:1e:8f:ad:47:76: 1a:4e:62:1b:39:fa:d4:fb:3c:37:1f:7e:92:59:5d: 97:d3:96:e8:8b:29:4a:bf:64:e4:c3:89:01:31:04: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:20:BF:D1:4E:03:5E:39:D8:C8:B3:57:63:98:51:D2:DC:69:2B:62 X509v3 Authority Key Identifier: keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:80:14:75:16:e4:69:2b:16:84:ac:cb:5b:1f:b5:bb:1e:f2: fd:96:08:54:3c:20:3f:85:92:3d:7a:b2:f7:a5:0d:b1:da:14: 76:28:3e:b8:92:94:3e:5f:2b:87:de:5a:9a:a5:2c:c9:e1:42: c4:73:a7:d3:80:55:6f:b6:14:51:17:2e:72:52:27:83:93:a6: b7:57:fe:f0:8f:63:8f:5d:4c:f7:02:3a:20:0e:7e:9d:fc:91: 6b:cb:87:03:81:7e:8f:82:20:7c:1d:95:c0:c5:62:4f:2a:f1: 42:e3:4a:41:e2:0a:44:4e:fe:92:a5:bb:31:1e:dc:92:57:3a: b8:f4:14:a0:b3:f1:8e:93:92:49:e6:a5:09:5e:51:93:7c:a5: 3e:6f:55:37:f5:8a:2f:1b:b8:75:cd:89:a8:ee:50:13:0c:6f: f6:2d:15:f7:6f:3e:21:b2:e5:c1:b8:75:11:23:ac:7f:e5:cc: f7:b1:37:36:e6:ac:90:43:f1:93:87:0a:82:95:92:04:7a:e5: c2:3a:7f:fb:0b:a7:9a:48:57:ed:1a:5a:4b:d0:7b:fe:d9:5a: 1c:ff:58:3a:29:e7:3b:a8:21:46:8d:95:2c:02:d6:2c:0a:71: 64:09:84:0f:9c:1f:8a:41:28:09:d0:fa:14:bd:d3:a1:fd:0c: 59:0a:39:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMUExMTAvBgNVBAUTKEM5OTM1OTQzNjkxQUQxRTk1MzY2RTc0MUMxMzkzMDFG QjdGN0U2REIwHhcNMjUwODIyMjEzODIxWhcNMjUwODI5MjEzODIxWjAYMRYwFAYD VQQDEw02OGE4ZTM0ZC0yM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pXv/A3ofLzuJPvocRq94HBGT1qgadJrrT4PqNVeo6pbcXq3OqYjXPheWnb3 2NMb4Os2uEbHs6UofoFqj78tnYWO/TtnroNZc2uAPvRFwBzxbLmD3D5jsNdYjtks DAUuTEB7PwdYw112/xHIPNOXW8Bcw5bdDzG6YI8LvSjKwDiD9p5EMJPlI7aitq50 mIOTVn2jjihLw+abso4woQRDZH7dP3NA1eHpIs592YS4kx+iAkaZNy97hNcVEXOC OSkV/XwRlOENSpIlk7CNHc26hR6qE2m3Q7VE8QAMHo+tR3YaTmIbOfrU+zw3H36S WV2X05boiylKv2Tkw4kBMQRa6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0gv9FO A1452MizV2OYUdLcaStiMB8GA1UdIwQYMBaAFMmTWUNpGtHpU2bnQcE5MB+39+bb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMxQS8yQkRERkFDRTIx OTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBlbFRadWRCd1Rrd0g3ZjM1 dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laTlpRMmthMGVsVFp1ZEJ3VGt3SDdmMzV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMxQS8yQkRERkFDRTIxOTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBl bFRadWRCd1Rrd0g3ZjM1dHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKgBR1FuRpKxaErMtbH7W7HvL9lghUPCA/hZI9erL3pQ2x2hR2KD64 kpQ+XyuH3lqapSzJ4ULEc6fTgFVvthRRFy5yUieDk6a3V/7wj2OPXUz3AjogDn6d /JFry4cDgX6PgiB8HZXAxWJPKvFC40pB4gpETv6SpbsxHtySVzq49BSgs/GOk5JJ 5qUJXlGTfKU+b1U39YovG7h1zYmo7lATDG/2LRX3bz4hsuXBuHURI6x/5cz3sTc2 5qyQQ/GThwqClZIEeuXCOn/7C6eaSFftGlpL0Hv+2Voc/1g6Kec7qCFGjZUsAtYs CnFkCYQPnB+KQSgJ0PoUvdOh/QxZCjkh -----END CERTIFICATE-----Generated at Sat Aug 23 19:04:13 2025 by rpki-client