$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft File: Yg05s6GDeXO9EyafKwasmyc4gg0.mft (raw, json) Hash identifier: Jcc0vaguXcD9wA7pe+mSc+BQ8o1JkwzVQkoJa0tpFk8= Subject key identifier: E3:E3:1B:6E:78:BD:A6:0B:E8:3C:04:CB:E5:F8:51:58:77:38:6F:C7 Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft Manifest number: 73 Signing time: Sat 23 Aug 2025 07:11:31 +0000 Manifest this update: Sat 23 Aug 2025 07:11:31 +0000 Manifest next update: Sat 30 Aug 2025 07:11:31 +0000 Files and hashes: 1: Yg05s6GDeXO9EyafKwasmyc4gg0.crl (hash: RvapWonySxGYbyirFGW9/Ktr2utqJAv1gTx0wmijbYs=) 2: F2CD19D6E96011EF8940367DC4F9AE02.roa (hash: qc4m83ow/HQw4squEH0ZGSEZLA7zoXhgkL6VJ3EiLOM=) 3: E454FEF2689311F09107C42BC4F9AE02.roa (hash: 3AkXtceE0UqV8/zNzn9ey5ikMm6oLMztcjBsMDD6ykQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Validity Not Before: Aug 23 07:11:31 2025 GMT Not After : Aug 30 07:11:31 2025 GMT Subject: CN=68a969a3-3a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:7e:81:53:ed:d1:bc:8c:2e:17:07:a2:ce: 54:54:20:88:a3:77:15:79:34:83:06:35:67:41:43: 47:d0:3f:8a:8f:c5:b3:9a:aa:2c:d9:c7:ee:7e:d5: 35:4a:7a:fb:71:56:bd:dd:bf:07:5a:65:d2:b3:bb: 8c:13:e0:d3:48:39:db:40:dc:36:db:62:fe:bd:ed: d5:50:ad:58:39:58:b4:24:00:b1:3d:5b:e6:41:e4: a5:66:a1:eb:d9:12:49:35:0a:77:8c:cb:0c:f7:dd: d4:e8:63:80:f8:e5:d4:49:db:59:4b:48:34:12:70: 2b:f6:a6:d0:63:86:d4:8e:ef:8c:bf:61:3a:79:0d: bb:f5:0e:76:52:5c:aa:43:86:72:ad:f4:eb:88:27: 49:b9:73:5c:ba:6e:ad:24:86:37:d8:e1:53:63:d4: cc:6e:65:8b:4f:41:0b:5e:f7:57:86:4c:45:3e:d0: 97:39:12:6c:49:8b:dd:13:dc:96:aa:4d:87:9b:99: a7:02:f1:87:1d:ee:d0:1c:84:9a:1e:30:83:95:7b: 4c:8a:30:2d:95:3c:ef:4a:c1:ba:41:7d:34:12:5d: 00:5c:21:6b:cb:9e:49:4a:b6:81:05:6e:83:04:7f: f0:bc:2b:d9:61:09:64:67:91:63:51:85:22:e3:5c: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E3:1B:6E:78:BD:A6:0B:E8:3C:04:CB:E5:F8:51:58:77:38:6F:C7 X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:e0:a3:41:5f:00:b7:f1:33:41:32:04:eb:ca:91:b5:3e:a7: 9c:4a:70:4a:6d:02:8f:66:dc:e4:b2:62:3f:77:c3:39:15:74: b8:e4:70:69:3f:7c:e2:0f:14:82:4a:90:7b:7b:fc:81:84:f2: 84:e6:4a:c6:df:53:4b:6a:c8:87:ef:6f:d4:87:03:a0:bc:1c: ed:2c:53:a1:e9:dd:e5:7c:23:1e:6c:bc:0c:f3:ef:51:6a:18: 41:4a:01:c7:19:15:c8:d0:13:c3:c4:4a:01:d8:91:d0:f5:38: b1:b1:c8:a3:39:81:9e:d8:ea:61:f5:18:19:40:0b:95:d0:1c: 44:8e:36:e9:5e:0f:86:15:55:1e:c6:0f:5a:0d:f7:0e:bc:3b: 57:f6:42:80:a8:a8:f1:c7:b5:da:c3:33:1a:84:a1:3a:fb:ba: 4a:23:3f:8c:89:c4:d5:29:49:2e:0f:e3:57:22:1e:e4:80:9f: 5b:39:c1:0d:1a:55:62:e8:88:46:7d:45:29:cd:a2:c2:cf:3d: 9e:b4:4a:6e:e9:4a:0d:89:37:6a:86:b7:67:7e:df:68:40:04: f6:9a:32:52:2c:b9:22:07:9f:26:8c:cf:43:ac:85:30:4c:ed: 4e:1d:f1:23:40:b1:1a:28:5d:a3:1f:92:40:ba:57:03:18:b5: 99:10:c1:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY2ODExMC8GA1UEBRMoNjIwRDM5QjNBMTgzNzk3M0JEMTMyNjlGMkIwNkFDOUIy NzM4ODIwRDAeFw0yNTA4MjMwNzExMzFaFw0yNTA4MzAwNzExMzFaMBgxFjAUBgNV BAMTDTY4YTk2OWEzLTNhMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1dX6BU+3RvIwuFweizlRUIIijdxV5NIMGNWdBQ0fQP4qPxbOaqizZx+5+1TVK evtxVr3dvwdaZdKzu4wT4NNIOdtA3DbbYv697dVQrVg5WLQkALE9W+ZB5KVmoevZ Ekk1CneMywz33dToY4D45dRJ21lLSDQScCv2ptBjhtSO74y/YTp5Dbv1DnZSXKpD hnKt9OuIJ0m5c1y6bq0khjfY4VNj1MxuZYtPQQte91eGTEU+0Jc5EmxJi90T3Jaq TYebmacC8Ycd7tAchJoeMIOVe0yKMC2VPO9KwbpBfTQSXQBcIWvLnklKtoEFboME f/C8K9lhCWRnkWNRhSLjXHlfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4+Mbbni9 pgvoPATL5fhRWHc4b8cwHwYDVR0jBBgwFoAUYg05s6GDeXO9EyafKwasmyc4gg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjY4LzkyRTI1OTYyREYy MTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWcwNXM2R0RlWE85RXlhZkt3YXNteWM0Z2cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjY4LzkyRTI1OTYyREYyMTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhP OUV5YWZLd2FzbXljNGdnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALXgo0FfALfxM0EyBOvKkbU+p5xKcEptAo9m3OSyYj93wzkVdLjkcGk/ fOIPFIJKkHt7/IGE8oTmSsbfU0tqyIfvb9SHA6C8HO0sU6Hp3eV8Ix5svAzz71Fq GEFKAccZFcjQE8PESgHYkdD1OLGxyKM5gZ7Y6mH1GBlAC5XQHESONuleD4YVVR7G D1oN9w68O1f2QoCoqPHHtdrDMxqEoTr7ukojP4yJxNUpSS4P41ciHuSAn1s5wQ0a VWLoiEZ9RSnNosLPPZ60Sm7pSg2JN2qGt2d+32hABPaaMlIsuSIHnyaMz0OshTBM 7U4d8SNAsRooXaMfkkC6VwMYtZkQweA= -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:19 2025 by rpki-client