$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json) Hash identifier: S+a69mEyBTVp2+6/RGjfpILn7Q9VxjoeaEFWP8+x2n4= Subject key identifier: 2F:09:00:EC:AB:33:02:4B:56:49:24:8A:11:9D:4E:9E:00:F2:F0:9B Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Certificate serial: 07B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft Manifest number: 07B3 Signing time: Fri 22 Aug 2025 21:23:47 +0000 Manifest this update: Fri 22 Aug 2025 21:23:46 +0000 Manifest next update: Fri 29 Aug 2025 21:23:46 +0000 Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: uadRbfea0lJJ0JchsXcSoXd2ac0lepuNmr8/GIxA9Ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Validity Not Before: Aug 22 21:23:46 2025 GMT Not After : Aug 29 21:23:46 2025 GMT Subject: CN=68a8dfe2-2b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:c6:1e:77:fd:50:f9:f4:80:1b:42:a0:c8: 83:97:b6:e7:eb:70:d6:65:a5:bf:9d:76:ad:24:42: 2c:e1:62:f5:62:46:2d:4d:e2:52:4b:4e:f3:78:68: 3d:da:93:03:8a:fe:eb:1e:5a:4f:fc:93:03:8a:cb: 1c:5b:ad:cb:88:58:ab:c6:4a:6c:15:a2:4d:c4:12: 72:19:15:8d:03:85:40:dd:b0:ab:9f:55:30:7e:e7: 95:c9:d6:18:b7:75:c5:8f:f5:33:a5:68:b1:7d:15: d4:09:89:e3:cf:cd:4f:16:35:0f:b7:73:16:fa:11: 7d:18:c2:44:9c:75:62:77:94:d7:3f:ea:8e:f9:96: 45:e3:d2:38:5d:d8:25:9c:d7:e4:61:63:fa:16:77: 16:25:70:8d:d8:7c:e2:5b:d2:8d:a4:29:87:7e:bd: 2f:21:91:35:0f:74:7e:0a:40:20:b1:7a:58:0b:6b: 56:62:7f:00:a4:4c:2e:05:e0:6a:d5:99:64:6d:2b: 5d:ea:8d:5d:12:27:b0:6b:c3:8c:05:70:ef:79:64: 17:f1:af:84:d4:d7:c6:ce:cd:d8:ac:a8:e7:e0:fb: fb:78:76:1b:6b:4f:00:67:33:cc:74:ad:7d:37:4e: 68:e4:01:58:1b:8a:b7:b1:0d:77:97:93:a0:b2:bb: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:09:00:EC:AB:33:02:4B:56:49:24:8A:11:9D:4E:9E:00:F2:F0:9B X509v3 Authority Key Identifier: keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:1b:5c:34:ad:c8:48:4c:59:0d:a6:d4:23:36:02:df:a0:02: a7:c5:92:c7:e4:61:b1:82:31:43:f1:6a:fd:18:c3:35:ed:2c: 4a:0c:2a:4a:f0:e6:a4:ed:72:ec:78:e5:20:94:3e:5a:ee:9c: 04:0c:08:78:a3:62:dc:0d:68:03:56:4b:94:6d:da:a6:bb:54: 96:79:2c:20:48:38:58:33:33:e9:9c:95:6e:2f:3f:22:00:53: 48:54:d7:36:17:a8:84:56:9d:d0:f8:4b:64:47:6c:33:2c:5d: 1c:55:18:93:72:c2:5c:f6:18:18:88:d0:b7:49:27:e3:c0:75: 7c:19:16:9d:2c:34:36:9d:6a:fd:c4:3b:48:64:ae:4b:b2:9d: e9:1c:8b:f9:ba:ec:18:93:82:02:a0:be:c5:02:d5:25:d4:6b: e8:95:85:13:91:9a:bb:60:c2:e4:8a:1e:c1:cc:15:78:4b:7a: e8:54:42:dc:fb:a4:3d:27:fb:f7:58:2f:85:c4:bc:e9:72:f3: 69:4d:a5:11:47:3b:66:d9:46:fa:cb:2d:65:f0:56:53:22:d8: ee:c5:c6:e8:bc:15:00:1a:79:3b:ba:1c:ff:c5:22:97:ff:dd: 67:34:1a:e4:0d:60:90:0f:df:8c:31:29:e7:70:93:b2:87:82: e2:e4:dd:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF OUYzODFGMTIwHhcNMjUwODIyMjEyMzQ2WhcNMjUwODI5MjEyMzQ2WjAYMRYwFAYD VQQDEw02OGE4ZGZlMi0yYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2HGHnf9UPn0gBtCoMiDl7bn63DWZaW/nXatJEIs4WL1YkYtTeJSS07zeGg9 2pMDiv7rHlpP/JMDisscW63LiFirxkpsFaJNxBJyGRWNA4VA3bCrn1UwfueVydYY t3XFj/UzpWixfRXUCYnjz81PFjUPt3MW+hF9GMJEnHVid5TXP+qO+ZZF49I4Xdgl nNfkYWP6FncWJXCN2HziW9KNpCmHfr0vIZE1D3R+CkAgsXpYC2tWYn8ApEwuBeBq 1ZlkbStd6o1dEiewa8OMBXDveWQX8a+E1NfGzs3YrKjn4Pv7eHYba08AZzPMdK19 N05o5AFYG4q3sQ13l5OgsrsXtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8JAOyr MwJLVkkkihGdTp4A8vCbMB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt NmU1SHEyLXViZkRwODRIeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiG1w0rchITFkNptQjNgLfoAKnxZLH5GGxgjFD8Wr9GMM17SxKDCpK 8Oak7XLseOUglD5a7pwEDAh4o2LcDWgDVkuUbdqmu1SWeSwgSDhYMzPpnJVuLz8i AFNIVNc2F6iEVp3Q+EtkR2wzLF0cVRiTcsJc9hgYiNC3SSfjwHV8GRadLDQ2nWr9 xDtIZK5Lsp3pHIv5uuwYk4ICoL7FAtUl1GvolYUTkZq7YMLkih7BzBV4S3roVELc +6Q9J/v3WC+FxLzpcvNpTaURRztm2Ub6yy1l8FZTItjuxcbovBUAGnk7uhz/xSKX /91nNBrkDWCQD9+MMSnncJOyh4Li5N02 -----END CERTIFICATE-----Generated at Sun Aug 24 03:09:12 2025 by rpki-client