$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json) Hash identifier: kmvo3QSsMviT7wNCHFwydCIOE5QVnEfA3sfdSxGBU7o= Subject key identifier: F8:F6:D0:0D:BA:D0:9C:B0:F4:E0:BC:F5:CE:01:F0:27:A0:F1:98:B1 Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft Manifest number: 07E3 Signing time: Fri 22 Aug 2025 21:12:12 +0000 Manifest this update: Fri 22 Aug 2025 21:12:11 +0000 Manifest next update: Fri 29 Aug 2025 21:12:11 +0000 Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: +UV3N5aPu6e1oCVqVNHZZxFme5NnwgkcvSSvQEiKoPM=) 2: 7634D328351411EBBF864670C4F9AE02.roa (hash: gJ6rfZA4kdz2sP4zhVk5qWSiiFvdYYEjJ3d1LC4TVQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Validity Not Before: Aug 22 21:12:11 2025 GMT Not After : Aug 29 21:12:11 2025 GMT Subject: CN=68a8dd2c-8eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:34:30:6d:31:0c:26:6f:58:10:29:7d:d6: 79:23:ee:50:60:22:a7:fd:8e:b8:e8:8c:22:b7:77: d5:43:d6:1d:bc:85:8f:fe:80:ae:0a:1a:26:3f:bd: d6:b5:55:a8:85:54:83:b9:c1:9b:c3:25:c9:b2:a2: 65:00:85:bb:75:72:b0:b4:cf:d2:65:5b:d6:f2:dd: b3:c7:a8:4f:cb:91:aa:fa:9a:98:95:73:d1:5f:63: 6c:49:f0:15:bd:15:8d:3a:b1:8b:63:06:64:b5:33: 39:f9:e2:30:ac:a5:4a:fc:52:31:bc:22:81:b1:4f: c3:ea:d7:1f:b4:8b:ee:ea:50:30:a5:13:05:6e:cb: 15:82:31:e0:23:55:1a:f8:ff:82:f4:ba:d0:3c:ef: 11:a9:49:69:ce:18:b3:2e:48:f2:6e:02:eb:47:18: b6:ec:37:6b:ec:a8:ac:aa:73:1e:01:3e:25:f0:0a: 88:c1:2b:87:29:43:70:60:5c:91:d9:bb:79:79:3a: 65:2a:5d:c3:5a:88:76:97:60:94:a4:f4:72:03:20: 79:06:c4:38:b0:ac:ae:94:b7:2a:d8:52:8a:95:3d: 28:8c:d6:32:0e:ec:94:93:19:f8:e9:70:9e:95:d9: 70:84:63:71:b2:b0:68:b2:3a:66:ca:2f:f0:e0:fb: 68:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F6:D0:0D:BA:D0:9C:B0:F4:E0:BC:F5:CE:01:F0:27:A0:F1:98:B1 X509v3 Authority Key Identifier: keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:2b:ae:f5:52:07:80:c1:2b:7f:15:66:3c:e7:79:bf:f9:49: 67:0a:2b:0c:c5:df:e6:25:78:52:48:99:94:27:2a:f5:81:7d: 28:05:44:52:27:29:a0:14:12:c2:c8:02:66:aa:7a:4c:46:72: d7:fe:95:39:34:ec:0f:0c:38:39:b0:ed:91:53:79:9f:54:c8: 4f:89:47:a3:7c:7f:6f:bd:7b:96:0f:39:c3:c0:dc:30:c7:c4: 6b:b5:bb:83:f9:48:29:68:99:ae:f5:2a:c1:11:9d:18:e1:6a: c4:85:2b:c2:7d:b3:e7:75:2b:9e:77:c3:1a:63:0f:4f:bb:82: e2:8d:fc:5f:c2:36:b8:1b:2f:8c:af:f6:bc:06:c0:29:b6:1c: e9:cf:a9:81:b6:d4:ce:c3:0e:37:e9:96:e5:6f:32:6c:65:45: 20:80:54:35:cb:c5:e7:97:38:bf:19:27:d4:20:ac:17:d5:9a: 34:c2:f0:a9:8d:dc:2d:22:c1:07:d8:ed:37:4a:f3:bc:d8:85: d8:78:e0:3e:b0:98:7f:a7:0a:e5:d3:8c:e8:05:2b:7e:e4:fb: e0:40:68:11:e0:02:a2:44:ac:1f:56:31:8b:22:ad:d2:c2:cf: 84:85:c9:78:1f:9c:e0:72:14:55:64:2a:01:71:c0:c3:bf:4a: aa:20:d1:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB RjYzMzNGMDAwHhcNMjUwODIyMjExMjExWhcNMjUwODI5MjExMjExWjAYMRYwFAYD VQQDEw02OGE4ZGQyYy04ZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbw0MG0xDCZvWBApfdZ5I+5QYCKn/Y646Iwit3fVQ9YdvIWP/oCuChomP73W tVWohVSDucGbwyXJsqJlAIW7dXKwtM/SZVvW8t2zx6hPy5Gq+pqYlXPRX2NsSfAV vRWNOrGLYwZktTM5+eIwrKVK/FIxvCKBsU/D6tcftIvu6lAwpRMFbssVgjHgI1Ua +P+C9LrQPO8RqUlpzhizLkjybgLrRxi27Ddr7KisqnMeAT4l8AqIwSuHKUNwYFyR 2bt5eTplKl3DWoh2l2CUpPRyAyB5BsQ4sKyulLcq2FKKlT0ojNYyDuyUkxn46XCe ldlwhGNxsrBosjpmyi/w4PtobQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPj20A26 0Jyw9OC89c4B8Ceg8ZixMB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw UDJCMk1OM18xTEd2WXpQd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4K671UgeAwSt/FWY853m/+UlnCisMxd/mJXhSSJmUJyr1gX0oBURS JymgFBLCyAJmqnpMRnLX/pU5NOwPDDg5sO2RU3mfVMhPiUejfH9vvXuWDznDwNww x8RrtbuD+UgpaJmu9SrBEZ0Y4WrEhSvCfbPndSued8MaYw9Pu4Lijfxfwja4Gy+M r/a8BsApthzpz6mBttTOww436ZblbzJsZUUggFQ1y8Xnlzi/GSfUIKwX1Zo0wvCp jdwtIsEH2O03SvO82IXYeOA+sJh/pwrl04zoBSt+5PvgQGgR4AKiRKwfVjGLIq3S ws+Ehcl4H5zgchRVZCoBccDDv0qqINGH -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:15 2025 by rpki-client