$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: G4Tqa6rLYdXl8V3Tw5SEUhnHH65HT+wEh9vAdHIOx9o= Subject key identifier: B1:4E:47:F1:EE:EC:5D:8C:96:E2:3F:B2:2A:64:9B:56:40:94:C6:52 Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: 01BC Signing time: Sat 23 Aug 2025 03:10:34 +0000 Manifest this update: Sat 23 Aug 2025 03:10:33 +0000 Manifest next update: Sat 30 Aug 2025 03:10:33 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: Y5qPlVHKmNtIroBtLdj/wpa+1Rye+SYG0el91nnV+x8=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: F7qGiUSXmfTHkG4rLsiz9f3fhRuXMOAIShVR1Seg7DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Aug 23 03:10:33 2025 GMT Not After : Aug 30 03:10:33 2025 GMT Subject: CN=68a93129-a357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:fc:58:6f:ab:ad:da:67:93:17:4f:b4:a4: a2:b5:35:b3:f6:f1:88:f6:95:ed:e5:c8:08:3c:c4: 59:e6:76:e0:89:a5:32:5d:4a:0f:0c:13:f1:9b:27: a1:e0:07:e4:8f:46:f6:56:5e:1c:c2:ad:9f:08:a3: b3:22:d3:69:eb:79:11:0b:2a:72:52:79:d3:27:c0: 34:9e:96:1e:99:54:29:ea:0b:5d:57:c4:7a:25:b3: a2:cc:43:cf:44:9a:fd:58:56:e0:cf:50:2d:a6:19: 5f:3d:8b:61:29:ec:4d:30:c6:b6:b1:1b:05:96:27: 90:33:fc:09:40:83:84:f5:36:49:39:65:a3:a6:b0: c0:e5:f0:29:95:d2:98:8e:8b:7b:b8:66:93:3a:7b: 5d:f1:f3:72:fa:9f:56:6b:1f:8d:3f:0c:8e:0b:af: 60:48:20:70:28:f2:04:44:49:d9:de:96:6d:14:ae: 96:bf:b7:07:2e:f8:a3:3f:ff:0e:a7:ab:85:64:7d: 74:f4:78:8b:f9:9b:4c:2a:2e:55:13:f8:4a:59:50: 54:e8:51:5d:56:2b:c6:8d:e7:bb:04:93:83:4c:24: 80:9f:96:0b:f8:a4:c0:c6:74:f5:f1:7d:5d:52:11: 78:98:3d:7c:16:87:fb:3b:fc:f4:07:c0:d4:a3:32: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4E:47:F1:EE:EC:5D:8C:96:E2:3F:B2:2A:64:9B:56:40:94:C6:52 X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0d:dc:8b:06:a1:97:49:f9:02:8e:be:24:5c:63:eb:37:40: 69:0a:3c:4d:f4:c9:52:37:ed:2e:6b:97:86:48:eb:03:c6:47: e3:f6:d8:e0:28:03:1d:11:3a:8e:48:15:84:bf:16:14:e7:3d: 00:5e:47:cd:73:33:7e:13:85:72:a3:de:5a:5c:2c:b7:d7:85: 9c:12:3a:11:41:92:71:0e:47:cd:76:32:da:4a:4c:2d:10:c5: eb:8f:76:1d:d7:4b:36:c7:fa:fa:e8:27:77:3f:5d:25:03:66: 62:e2:88:1d:7b:86:fb:ca:15:82:36:56:43:c6:a3:d8:d6:a3: 83:04:bb:d7:4b:44:b1:5f:62:59:f7:25:b5:73:a1:58:1b:5f: 08:71:25:e1:e2:89:83:ce:a7:8b:c5:ae:33:f1:e7:45:3c:21: 53:22:8f:04:fd:be:fa:d1:a3:67:9b:ee:17:5c:65:7d:a8:68: 00:60:01:91:e6:b9:06:b2:ca:0f:b4:04:49:d7:d4:7b:74:d3: c4:ac:d4:30:33:0c:6e:5c:a6:e5:4c:07:d5:c3:e3:7b:c2:6b: 17:f0:77:10:ab:d1:97:b1:e0:f2:08:5d:40:cc:b1:b0:2e:68: 46:d7:0d:00:c2:b0:6a:a7:bc:d1:6b:67:3b:20:43:c3:88:33: 21:8c:0f:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjUwODIzMDMxMDMzWhcNMjUwODMwMDMxMDMzWjAYMRYwFAYD VQQDEw02OGE5MzEyOS1hMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLv8WG+rrdpnkxdPtKSitTWz9vGI9pXt5cgIPMRZ5nbgiaUyXUoPDBPxmyeh 4Afkj0b2Vl4cwq2fCKOzItNp63kRCypyUnnTJ8A0npYemVQp6gtdV8R6JbOizEPP RJr9WFbgz1AtphlfPYthKexNMMa2sRsFlieQM/wJQIOE9TZJOWWjprDA5fApldKY jot7uGaTOntd8fNy+p9Wax+NPwyOC69gSCBwKPIEREnZ3pZtFK6Wv7cHLvijP/8O p6uFZH109HiL+ZtMKi5VE/hKWVBU6FFdVivGjee7BJODTCSAn5YL+KTAxnT18X1d UhF4mD18Fof7O/z0B8DUozLNMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFOR/Hu 7F2MluI/sipkm1ZAlMZSMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+DdyLBqGXSfkCjr4kXGPrN0BpCjxN9MlSN+0ua5eGSOsDxkfj9tjg KAMdETqOSBWEvxYU5z0AXkfNczN+E4Vyo95aXCy314WcEjoRQZJxDkfNdjLaSkwt EMXrj3Yd10s2x/r66Cd3P10lA2Zi4ogde4b7yhWCNlZDxqPY1qODBLvXS0SxX2JZ 9yW1c6FYG18IcSXh4omDzqeLxa4z8edFPCFTIo8E/b760aNnm+4XXGV9qGgAYAGR 5rkGssoPtARJ19R7dNPErNQwMwxuXKblTAfVw+N7wmsX8HcQq9GXseDyCF1AzLGw LmhG1w0AwrBqp7zRa2c7IEPDiDMhjA+M -----END CERTIFICATE-----Generated at Sat Aug 23 18:50:20 2025 by rpki-client