$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json) Hash identifier: gibY7gquPem7gZewb2W9/KomChn79KnQlo5mt/UOrM4= Subject key identifier: 28:3C:6E:7D:06:70:41:A3:9B:19:6C:CF:C4:87:66:E7:CD:0A:FA:D3 Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Certificate serial: 0E7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft Manifest number: 0E64 Signing time: Fri 22 Aug 2025 17:52:55 +0000 Manifest this update: Fri 22 Aug 2025 17:52:55 +0000 Manifest next update: Fri 29 Aug 2025 17:52:55 +0000 Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: Xg77fy7xveC1jrl0gF1YULNATLIbp5qo3VEOy56f8dA=) 2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: ecUYAzKP1VHNDV8/DURQ3XmWYJTnzDR9mLUMMYKH7wE=) 3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: RU2Bp78eGDXSscZxxDiygRwZ64V3JmS10+rUng9roo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3706 (0xe7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Validity Not Before: Aug 22 17:52:55 2025 GMT Not After : Aug 29 17:52:55 2025 GMT Subject: CN=68a8ae77-7614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:af:c9:2c:7a:49:3b:87:d8:82:f2:6e:0f: 2f:7a:00:ba:c6:33:e7:bf:c3:8c:ab:a9:83:6a:5d: d2:b5:f1:38:86:8e:68:dc:56:ca:af:d4:d2:57:27: 7d:4c:a1:5d:52:d3:32:7b:ea:a9:8a:32:43:4a:e0: 19:ae:f7:98:ea:f4:19:3c:69:dd:34:56:69:b6:6c: e9:aa:f7:72:d1:29:1b:01:36:8c:fc:65:ba:3a:36: 83:3e:38:7d:e3:98:f2:44:df:5d:1f:20:8e:a8:bb: 56:2f:c7:1f:c9:f0:75:36:ed:99:09:74:1a:7d:98: a9:2d:93:86:e2:90:2c:d6:f7:bb:8d:8c:8c:42:2f: 3b:28:e0:ef:46:09:9e:b6:d8:30:29:cb:30:47:9a: 9d:47:38:fa:eb:5f:5a:82:3c:e5:05:69:ec:5e:ca: 5e:f5:e9:ed:f9:23:c4:83:1b:37:e9:22:00:86:84: 16:51:c0:41:25:a3:08:d0:6e:ea:f7:3f:dd:a6:b1: 57:14:02:38:64:41:52:33:9b:f5:a7:7b:10:ba:01: 83:9e:af:5e:c7:63:ff:b0:34:f7:93:24:a1:83:d7: ce:22:c0:b7:49:9c:92:a7:fd:ea:68:e6:69:87:90: e0:cd:af:5e:bd:67:f8:0d:aa:45:ab:2b:45:e5:90: 9d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3C:6E:7D:06:70:41:A3:9B:19:6C:CF:C4:87:66:E7:CD:0A:FA:D3 X509v3 Authority Key Identifier: keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:0a:23:98:88:1a:08:87:1b:a7:b4:69:c6:43:b0:eb:c4:be: bb:71:a7:7e:dc:5c:05:35:29:22:1c:9b:f4:b4:d1:a9:d4:62: e6:85:df:ac:f9:04:04:e0:46:55:61:40:86:8f:d0:23:8a:c2: 9f:4b:c3:54:d0:44:4b:2b:7b:31:91:4c:a8:8b:ea:4d:17:9f: ba:35:2a:7a:68:4c:04:b6:bf:75:e8:7c:8a:f0:06:bd:14:b6: 72:3e:61:00:e5:da:36:2a:38:a1:ec:3a:2e:0d:c3:34:b4:2d: 77:88:fa:5a:95:a1:74:87:0b:48:fb:58:d5:f6:ee:59:ab:5a: 00:10:94:6b:b1:b8:71:91:ed:a7:e6:d6:f6:27:80:a4:1e:4a: 02:26:4a:85:57:27:bc:f3:fa:78:df:f1:5f:5e:ac:ae:8e:7c: bf:f2:cf:a8:91:02:fe:8f:9c:37:f2:1b:f3:63:2f:f2:1f:9c: f2:24:6c:00:ff:fd:2b:4a:f1:84:ce:d1:84:90:69:d9:16:f7: 55:c5:cd:f7:b9:82:06:09:ef:29:6a:76:52:50:8e:e5:17:62: f4:8f:64:52:55:a2:5a:0e:f1:cb:b9:01:73:e6:d6:43:45:20: b2:94:b9:ed:93:60:15:62:89:4f:42:aa:da:8a:50:6e:eb:24: d9:8c:82:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKEM4NzNCQjYxMEI5MTNDM0VDREM3MDhBMjY1QTc0QjEx NDFBNzZGNTQwHhcNMjUwODIyMTc1MjU1WhcNMjUwODI5MTc1MjU1WjAYMRYwFAYD VQQDEw02OGE4YWU3Ny03NjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsyvySx6STuH2ILybg8vegC6xjPnv8OMq6mDal3StfE4ho5o3FbKr9TSVyd9 TKFdUtMye+qpijJDSuAZrveY6vQZPGndNFZptmzpqvdy0SkbATaM/GW6OjaDPjh9 45jyRN9dHyCOqLtWL8cfyfB1Nu2ZCXQafZipLZOG4pAs1ve7jYyMQi87KODvRgme ttgwKcswR5qdRzj6619agjzlBWnsXspe9ent+SPEgxs36SIAhoQWUcBBJaMI0G7q 9z/dprFXFAI4ZEFSM5v1p3sQugGDnq9ex2P/sDT3kyShg9fOIsC3SZySp/3qaOZp h5Dgza9evWf4DapFqytF5ZCdOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg8bn0G cEGjmxlsz8SHZufNCvrTMB8GA1UdIwQYMBaAFMhzu2ELkTw+zccIomWnSxFBp29U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi84MkU0QzJBMEE2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBEN054d2lpWmFkTEVVR25i MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lITzdZUXVSUEQ3Tnh3aWlaYWRMRVVHbmIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi84MkU0QzJBMEE2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBE N054d2lpWmFkTEVVR25iMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFCiOYiBoIhxuntGnGQ7DrxL67cad+3FwFNSkiHJv0tNGp1GLmhd+s +QQE4EZVYUCGj9AjisKfS8NU0ERLK3sxkUyoi+pNF5+6NSp6aEwEtr916HyK8Aa9 FLZyPmEA5do2Kjih7DouDcM0tC13iPpalaF0hwtI+1jV9u5Zq1oAEJRrsbhxke2n 5tb2J4CkHkoCJkqFVye88/p43/FfXqyujny/8s+okQL+j5w38hvzYy/yH5zyJGwA //0rSvGEztGEkGnZFvdVxc33uYIGCe8panZSUI7lF2L0j2RSVaJaDvHLuQFz5tZD RSCylLntk2AVYolPQqrailBu6yTZjIIA -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:05 2025 by rpki-client