$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json) Hash identifier: IuH0kYJPKqqcmBY5uDC58tkQzFy8528daTE837psNx4= Subject key identifier: 08:3B:AC:A2:B8:9E:41:E5:A5:77:57:23:ED:FB:80:E5:C7:CD:33:53 Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft Manifest number: 0102 Signing time: Sat 23 Aug 2025 05:16:10 +0000 Manifest this update: Sat 23 Aug 2025 05:16:10 +0000 Manifest next update: Sat 30 Aug 2025 05:16:10 +0000 Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: jBH5nQUWQd0Y4B2Zdl/29smcePSv70iJUFcdK+aE7Sc=) 2: F220949E1C3411EFAF8F6A5BC4F9AE02.roa (hash: JIXgdhiXTjZ6ev4WQoNqMVmd92t9GAOhewZo29LoRAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Aug 23 05:16:10 2025 GMT Not After : Aug 30 05:16:10 2025 GMT Subject: CN=68a94e9a-c0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:36:4c:c6:95:8c:d3:1e:05:4e:3e:b7:52:26: 75:a4:c4:41:8e:a4:25:1f:b1:dc:3b:92:a0:bf:bb: 3a:2e:3a:c7:da:61:7a:e5:b8:b9:57:dc:67:8b:35: 7e:48:ab:f0:5e:2f:a0:4a:dc:b0:9c:21:6b:4c:4e: 50:bf:ac:4b:09:5c:a0:d2:2b:53:72:15:d7:a9:17: 68:98:65:89:87:85:be:5e:fe:bd:01:c3:f8:7b:00: 2b:dc:6a:3d:2c:98:71:30:f6:b0:31:6d:12:d2:18: cd:63:d5:11:69:e1:af:07:b1:64:92:ae:73:86:ab: 22:96:fa:87:67:da:5d:79:46:9c:67:8d:0f:cf:e5: d3:fb:c3:43:69:bb:68:d9:59:12:20:4e:45:d4:48: df:fd:be:f3:47:93:10:92:19:69:0d:08:25:21:f5: 15:fd:18:2e:69:90:6f:11:4a:b3:01:fa:f1:e8:5d: da:a9:52:f0:c3:f4:e9:64:9d:04:ab:67:f8:c4:36: 62:42:29:59:84:73:bf:43:cb:e9:fa:c2:ae:fc:5d: a3:d3:14:c6:6a:64:61:f0:b7:7c:d9:7f:f8:21:cd: c3:68:80:da:6a:da:26:a8:25:cd:4c:d4:8d:6a:61: e4:23:67:3c:1e:63:76:a0:0a:0d:00:45:72:27:ed: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3B:AC:A2:B8:9E:41:E5:A5:77:57:23:ED:FB:80:E5:C7:CD:33:53 X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:c5:59:0d:f4:05:2c:13:34:b8:cf:12:9d:4e:c2:fb:76:6e: dd:fc:f7:37:d6:33:68:9c:cc:80:76:d0:ea:d0:b9:56:8c:76: 67:c4:c3:bb:51:97:7e:e8:cb:8f:57:63:c6:11:e9:d9:65:46: cf:1c:bd:a7:fe:c8:f0:ca:15:bf:86:70:38:82:a8:0e:60:5c: b4:51:d4:1c:00:6d:62:72:61:11:44:87:c0:07:e4:60:7e:4f: a8:c2:b3:1b:e0:77:e0:6d:40:0b:0f:0a:1d:9e:96:a4:d2:9a: 19:79:20:a5:6c:a5:c5:47:7c:83:25:26:ec:31:7d:b0:36:61: e2:9c:54:de:57:d7:1c:dd:86:ea:44:db:76:97:27:a4:29:9c: 97:2f:90:dd:bd:48:22:d0:de:5f:40:0a:ab:cd:16:4e:d3:27: 29:b1:9c:ae:9b:1b:3a:06:43:44:1e:a5:b4:c0:22:31:d1:d0: cc:c1:99:a7:12:a8:c9:44:01:9f:90:bd:71:a8:9d:cb:a5:b4: 8b:55:ba:64:d8:cb:83:04:62:2e:fe:3b:df:2c:d1:33:11:ec: 45:8e:f2:83:2f:ce:5f:4a:ba:93:1a:aa:4c:0e:0c:6b:13:03: 4f:37:d8:f8:c9:8a:92:96:eb:31:a1:92:34:35:eb:c6:df:55: 4d:60:34:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjUwODIzMDUxNjEwWhcNMjUwODMwMDUxNjEwWjAYMRYwFAYD VQQDEw02OGE5NGU5YS1jMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTZMxpWM0x4FTj63UiZ1pMRBjqQlH7HcO5Kgv7s6LjrH2mF65bi5V9xnizV+ SKvwXi+gStywnCFrTE5Qv6xLCVyg0itTchXXqRdomGWJh4W+Xv69AcP4ewAr3Go9 LJhxMPawMW0S0hjNY9URaeGvB7Fkkq5zhqsilvqHZ9pdeUacZ40Pz+XT+8NDabto 2VkSIE5F1Ejf/b7zR5MQkhlpDQglIfUV/RguaZBvEUqzAfrx6F3aqVLww/TpZJ0E q2f4xDZiQilZhHO/Q8vp+sKu/F2j0xTGamRh8Ld82X/4Ic3DaIDaatomqCXNTNSN amHkI2c8HmN2oAoNAEVyJ+3jBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAg7rKK4 nkHlpXdXI+37gOXHzTNTMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC VWY0LS1lS2Ffb01TR3lUUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDxVkN9AUsEzS4zxKdTsL7dm7d/Pc31jNonMyAdtDq0LlWjHZnxMO7 UZd+6MuPV2PGEenZZUbPHL2n/sjwyhW/hnA4gqgOYFy0UdQcAG1icmERRIfAB+Rg fk+owrMb4HfgbUALDwodnpak0poZeSClbKXFR3yDJSbsMX2wNmHinFTeV9cc3Ybq RNt2lyekKZyXL5DdvUgi0N5fQAqrzRZO0ycpsZyumxs6BkNEHqW0wCIx0dDMwZmn EqjJRAGfkL1xqJ3LpbSLVbpk2MuDBGIu/jvfLNEzEexFjvKDL85fSrqTGqpMDgxr EwNPN9j4yYqSlusxoZI0NevG31VNYDQ6 -----END CERTIFICATE-----Generated at Sat Aug 23 21:45:32 2025 by rpki-client