$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft File: YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json) Hash identifier: yna/9aqywlb+Xo9lQUFU0BXjQqBtDcUuXvNHElQDbnk= Subject key identifier: 22:33:45:2B:1E:CD:69:D2:FD:AD:B2:EB:E1:2B:4E:4A:95:FB:32:E8 Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 Certificate issuer: /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft Manifest number: 0294 Signing time: Sat 23 Aug 2025 01:52:25 +0000 Manifest this update: Sat 23 Aug 2025 01:52:24 +0000 Manifest next update: Sat 30 Aug 2025 01:52:24 +0000 Files and hashes: 1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: 4tdg5tsG1cHdGe5aDMYVMEXWkqRDRKqq/vaS+2wf+IM=) 2: 008C0876148311ED856EF438C4F9AE02.roa (hash: P+roK1MWVCeuqJ3VqTzxEcvXNnpNsDkqcE1YQV3b+P8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9293, serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Validity Not Before: Aug 23 01:52:24 2025 GMT Not After : Aug 30 01:52:24 2025 GMT Subject: CN=68a91ed9-edeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:4b:07:ae:37:7f:72:3e:80:57:90:89:12: 93:1f:ad:f2:87:69:ff:c1:da:77:bb:e1:6b:bc:c4: c2:0b:70:52:fb:7a:06:60:8f:19:8d:6c:66:f4:fa: 77:ba:69:28:f8:c8:c5:1a:e8:0d:3b:44:04:1f:31: 3e:de:34:89:24:c6:4f:f8:c0:f2:8b:78:ac:a9:22: 08:40:08:3b:bb:88:0b:19:37:e2:d2:4e:51:42:a7: 7b:70:8a:2c:79:bc:3d:fd:51:03:53:62:4c:be:ab: 9f:67:0e:8a:2a:3f:f8:7d:e7:28:d4:2c:0f:da:96: ea:42:a1:6f:66:a6:b2:f6:f5:20:93:aa:2b:9c:13: ad:09:a6:02:3d:13:a2:86:01:04:bd:9a:33:a3:0e: 38:55:c2:f9:49:82:2e:10:63:0f:2e:6b:74:63:1a: 95:ce:97:da:4e:b4:8d:68:bd:15:57:d6:15:63:a0: 55:c8:bb:4f:c5:00:05:26:58:59:c3:f4:a3:06:e0: 66:d5:07:a8:ff:f7:2f:0c:db:a4:35:a1:29:0a:cc: d2:6b:12:e6:0b:70:b4:8d:69:47:54:bb:5e:d1:e9: f1:5f:55:da:7d:47:a2:96:1e:3a:a5:8d:73:a6:7e: 9f:3f:ec:cc:c7:4b:92:79:50:4b:00:2d:20:03:df: de:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:45:2B:1E:CD:69:D2:FD:AD:B2:EB:E1:2B:4E:4A:95:FB:32:E8 X509v3 Authority Key Identifier: keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:94:44:3a:b1:90:62:a3:aa:b4:72:90:d8:1b:3d:fe:d1:66: 93:0e:a1:57:e7:7e:64:73:a3:7b:fe:38:62:34:b6:cf:c5:d6: 85:fd:c0:e8:10:a7:73:72:3d:c3:62:3c:a8:d9:fb:25:ff:a4: fb:f2:a2:66:22:94:19:34:06:cc:33:42:fa:64:a5:38:4a:35: 46:d5:0a:f8:4c:1e:28:d1:67:98:b2:c5:4f:68:5d:93:7f:fe: 6f:a7:e7:3e:61:0d:52:01:9f:40:da:3b:77:e3:ba:b6:67:b2: f3:38:60:d5:2e:4c:c7:cf:36:9a:9f:cb:80:8f:b4:f1:85:25: 6f:80:ff:c8:8a:69:e3:0f:7e:b1:0d:e4:96:73:b2:f8:7f:86: e8:23:c9:b7:3e:af:06:38:66:cc:29:06:9e:48:3c:fd:ff:0d: ff:9a:5f:b3:2d:1d:63:43:0d:c8:27:c6:52:59:a1:65:d4:a4: 7b:03:8f:60:26:be:da:d3:54:8d:8f:f5:a3:1c:5b:83:0a:3d: 2c:97:7a:6e:20:a3:f6:88:72:cd:12:df:d2:37:e0:55:db:8f: ea:fc:4a:55:2c:1e:9d:10:95:52:cb:72:16:60:4f:fc:8f:02: 8b:44:ee:d5:8a:17:21:ac:15:36:b6:10:db:ea:40:9c:c8:e3: bc:2a:b4:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOTMxMTAvBgNVBAUTKDYwMkZGNEZBODBBMDAwQUM2MUU2RDRBQjJGNzJGQkQ5 NkE2MUY4ODIwHhcNMjUwODIzMDE1MjI0WhcNMjUwODMwMDE1MjI0WjAYMRYwFAYD VQQDEw02OGE5MWVkOS1lZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOdLB643f3I+gFeQiRKTH63yh2n/wdp3u+FrvMTCC3BS+3oGYI8ZjWxm9Pp3 umko+MjFGugNO0QEHzE+3jSJJMZP+MDyi3isqSIIQAg7u4gLGTfi0k5RQqd7cIos ebw9/VEDU2JMvqufZw6KKj/4feco1CwP2pbqQqFvZqay9vUgk6ornBOtCaYCPROi hgEEvZozow44VcL5SYIuEGMPLmt0YxqVzpfaTrSNaL0VV9YVY6BVyLtPxQAFJlhZ w/SjBuBm1Qeo//cvDNukNaEpCszSaxLmC3C0jWlHVLte0enxX1XafUeilh46pY1z pn6fP+zMx0uSeVBLAC0gA9/eAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIzRSse zWnS/a2y6+ErTkqV+zLoMB8GA1UdIwQYMBaAFGAv9PqAoACsYebUqy9y+9lqYfiC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5My9BOUEzOEJCRTE0 N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FLeGg1dFNyTDNMNzJXcGgt SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDXzAtb0NnQUt4aDV0U3JMM0w3MldwaC1JSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5My9BOUEzOEJCRTE0N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FL eGg1dFNyTDNMNzJXcGgtSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAulEQ6sZBio6q0cpDYGz3+0WaTDqFX535kc6N7/jhiNLbPxdaF/cDo EKdzcj3DYjyo2fsl/6T78qJmIpQZNAbMM0L6ZKU4SjVG1Qr4TB4o0WeYssVPaF2T f/5vp+c+YQ1SAZ9A2jt347q2Z7LzOGDVLkzHzzaan8uAj7TxhSVvgP/IimnjD36x DeSWc7L4f4boI8m3Pq8GOGbMKQaeSDz9/w3/ml+zLR1jQw3IJ8ZSWaFl1KR7A49g Jr7a01SNj/WjHFuDCj0sl3puIKP2iHLNEt/SN+BV24/q/EpVLB6dEJVSy3IWYE/8 jwKLRO7VihchrBU2thDb6kCcyOO8KrRS -----END CERTIFICATE-----Generated at Sun Aug 24 03:01:13 2025 by rpki-client