$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json) Hash identifier: mHViIVYaQQecOzjWtRoHd0QLBkbBondE0jvC3sW5Ykw= Subject key identifier: C1:D6:B1:DE:A4:3D:87:79:5D:81:DE:34:55:6B:43:69:E3:CA:FB:12 Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Certificate serial: 109D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft Manifest number: 1088 Signing time: Fri 22 Aug 2025 17:29:23 +0000 Manifest this update: Fri 22 Aug 2025 17:29:22 +0000 Manifest next update: Fri 29 Aug 2025 17:29:22 +0000 Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: chhBtZVcR7oyo44kIv4V5scU1WYAbYjmnp1ZSnPV2Ys=) 2: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: fEVsLbsqwk43zT4i9cB0QOn6Yu/KoGDrIvPTQDfkam8=) 3: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: y8nzjZGMQib7WT4yCqeNAgHbrhJTL2UqXsshegz4sgE=) 4: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: D2fBQ+WzSpKBrrM3Q6Z8cohOSpLekw4Ya8dTg5S7nEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4253 (0x109d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Validity Not Before: Aug 22 17:29:22 2025 GMT Not After : Aug 29 17:29:22 2025 GMT Subject: CN=68a8a8f3-4dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e6:2e:56:0b:4b:4f:d3:24:a7:be:76:04:3b: 94:28:44:35:b5:95:1b:16:40:34:3c:c9:71:6d:f3: a2:9b:70:29:5e:09:f7:39:d1:40:b6:62:5a:c8:63: 75:c8:cf:f3:a0:df:9d:71:b1:b5:ee:7d:0f:4c:3e: f8:55:1a:08:fe:d4:5b:09:57:67:1a:90:3a:35:65: 4b:b8:40:21:e8:9d:37:29:fc:da:d6:12:1e:d1:68: 93:2a:a1:7a:e7:05:dc:2b:f1:ce:23:52:1a:99:cd: 0b:bc:25:18:a1:3a:89:60:10:8a:5c:c0:49:ca:48: 95:28:00:74:f0:7d:78:12:b7:94:c9:36:63:98:c3: 77:e5:14:85:ba:4b:75:30:7f:08:e7:ba:74:6b:88: a2:3c:67:f3:57:7f:9d:38:f7:fc:cb:0e:89:82:bb: 31:5a:81:f5:4d:1b:cd:37:69:e8:14:cd:0d:4c:27: 86:85:07:a3:f1:b0:1a:c1:86:ae:97:b3:9b:31:c9: f1:02:dc:64:9b:cc:a9:cd:1c:b5:1e:9a:67:ea:51: b6:43:34:34:68:4d:46:4b:8b:ec:a8:38:1a:bb:d6: 35:f2:85:3f:56:94:29:24:6c:43:19:ef:11:a9:92: 6c:51:96:82:3c:14:04:cd:b9:3b:ff:5f:04:9d:20: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D6:B1:DE:A4:3D:87:79:5D:81:DE:34:55:6B:43:69:E3:CA:FB:12 X509v3 Authority Key Identifier: keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a8:f4:e0:26:eb:cb:6f:fc:ce:6e:80:72:8b:54:27:cb:0d: 2b:0e:d5:80:3f:c4:97:f1:a0:87:5f:76:d2:22:78:6b:0d:c3: e6:19:3e:fa:f0:92:84:8b:21:63:5c:a3:a6:fa:71:58:ff:2f: 80:34:58:e1:2a:36:63:aa:b7:ad:31:30:ba:51:24:d8:06:b5: 5f:14:dc:67:07:88:52:ab:3e:08:58:59:9d:ef:bf:9a:7f:45: 6a:77:7d:58:bf:92:75:66:c0:76:a7:02:2f:f1:a6:4f:d3:4d: ef:1c:8d:34:8d:9d:36:93:b5:a4:43:d5:07:37:d3:f9:e1:25: 7c:56:8e:0b:cb:4a:4e:0b:56:c0:36:d2:78:b8:00:51:5d:bf: 7d:08:b1:de:5b:e4:67:1a:3d:ea:89:5f:e6:08:e4:c7:42:86: 57:80:91:c2:cb:a7:c3:9e:e5:4d:bd:3f:8d:95:e8:6f:5f:0f: d0:c7:5e:6a:76:d2:95:b3:b2:fb:b7:7d:85:88:da:06:36:96: 0f:25:91:b4:fa:59:34:24:0c:a4:58:15:0d:48:83:49:e3:3a: 57:d3:39:b9:c2:27:8c:a1:4f:a4:79:76:80:73:26:57:36:c6: c4:fc:9f:4b:bd:e1:22:fd:1d:9f:6c:14:ab:52:8a:37:41:62: 1a:2e:c6:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx RkI5QTVGMkEwHhcNMjUwODIyMTcyOTIyWhcNMjUwODI5MTcyOTIyWjAYMRYwFAYD VQQDEw02OGE4YThmMy00ZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5OYuVgtLT9Mkp752BDuUKEQ1tZUbFkA0PMlxbfOim3ApXgn3OdFAtmJayGN1 yM/zoN+dcbG17n0PTD74VRoI/tRbCVdnGpA6NWVLuEAh6J03Kfza1hIe0WiTKqF6 5wXcK/HOI1Iamc0LvCUYoTqJYBCKXMBJykiVKAB08H14EreUyTZjmMN35RSFukt1 MH8I57p0a4iiPGfzV3+dOPf8yw6JgrsxWoH1TRvNN2noFM0NTCeGhQej8bAawYau l7ObMcnxAtxkm8ypzRy1Hppn6lG2QzQ0aE1GS4vsqDgau9Y18oU/VpQpJGxDGe8R qZJsUZaCPBQEzbk7/18EnSADNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHWsd6k PYd5XYHeNFVrQ2njyvsSMB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5 MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzU1OC8wRjIxMjE0RTM5MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0 V0Y0eENzMk5feXNmdWFYeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUqPTgJuvLb/zOboByi1Qnyw0rDtWAP8SX8aCHX3bSInhrDcPmGT76 8JKEiyFjXKOm+nFY/y+ANFjhKjZjqretMTC6USTYBrVfFNxnB4hSqz4IWFmd77+a f0Vqd31Yv5J1ZsB2pwIv8aZP003vHI00jZ02k7WkQ9UHN9P54SV8Vo4Ly0pOC1bA NtJ4uABRXb99CLHeW+RnGj3qiV/mCOTHQoZXgJHCy6fDnuVNvT+NlehvXw/Qx15q dtKVs7L7t32FiNoGNpYPJZG0+lk0JAykWBUNSINJ4zpX0zm5wieMoU+keXaAcyZX NsbE/J9LveEi/R2fbBSrUoo3QWIaLsZ4 -----END CERTIFICATE-----Generated at Sat Aug 23 10:32:59 2025 by rpki-client