$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: YiZ/6TMcDdpFmXNmDJtnQQ7dWSHDF42pR2jsTrdmiaM= Subject key identifier: EE:93:A1:67:20:50:AE:C6:E0:CE:E2:10:DC:7D:96:CC:3B:BA:60:63 Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 0154 Signing time: Sat 23 Aug 2025 04:17:27 +0000 Manifest this update: Sat 23 Aug 2025 04:17:27 +0000 Manifest next update: Sat 30 Aug 2025 04:17:27 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: yZRNHwtnR5JBKqnrx7bGsEQP5NjQ1ZZgs+H5z9Wfsew=) 2: E8E76DFA77E111EEAD38F454C4F9AE02.roa (hash: fU/RkpVL4z6Cr0cyCUfNUkgmOGc3QWQsXd03NlJ0kdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Validity Not Before: Aug 23 04:17:27 2025 GMT Not After : Aug 30 04:17:27 2025 GMT Subject: CN=68a940d7-4b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:a4:8f:9f:12:d7:e9:59:81:f4:c8:7b:2f: 19:92:6e:72:b9:65:1e:ec:79:65:38:b3:e7:98:85: 88:58:c9:c9:6a:78:b5:6f:bf:8b:d8:3a:af:ae:5e: c5:88:8d:b4:7f:24:42:25:61:6d:3d:42:6c:b0:2b: 89:58:88:b4:2a:da:74:f1:b3:f3:79:e8:1c:be:20: 4b:6e:99:ba:77:be:b2:ba:b0:1b:ee:05:47:0f:37: ce:37:13:c5:2e:bc:6e:c7:6d:42:d0:8a:a0:d4:32: 48:f7:de:bb:34:62:5b:98:60:42:9d:9f:83:5c:97: 48:f2:5e:9e:81:55:b9:5e:55:38:ab:dd:7f:26:0e: 7d:12:98:fb:e8:d8:69:54:88:c0:a8:57:02:ce:f2: 37:af:e1:f8:5b:dd:93:6f:76:26:e4:79:94:9b:70: 74:07:6f:6e:98:0d:e9:a5:cd:6b:08:a5:f8:da:7a: 90:18:df:1e:45:61:c2:e7:86:db:89:de:7f:d7:f2: f3:40:bc:8a:9e:99:30:94:6b:b8:29:63:e6:e8:7c: a5:be:f5:8e:0e:8f:dd:32:3f:b7:db:26:3c:77:e6: 9f:67:35:65:4a:76:5f:e8:32:05:76:23:82:f6:df: 8f:f4:bc:03:9b:e0:d2:d6:df:6d:b0:e3:c5:f6:a6: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:93:A1:67:20:50:AE:C6:E0:CE:E2:10:DC:7D:96:CC:3B:BA:60:63 X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6a:54:6c:c6:3c:64:e1:24:f1:72:00:5e:60:a1:92:05:0f: 69:de:38:20:39:ae:59:c7:a9:63:db:9e:d6:9a:c8:5d:05:77: 9c:cf:be:86:b8:d5:d6:8d:4b:10:e1:ad:67:f5:63:e9:4a:82: a2:d1:5b:77:38:15:84:6d:61:61:cb:32:44:95:b7:e4:4f:a1: b6:09:ec:44:a3:43:73:ea:eb:de:72:9b:50:a6:7b:77:77:ff: 35:ca:2d:55:34:93:bf:c1:0a:e9:15:a0:9a:23:ba:97:70:a3: d9:c4:73:95:6d:a5:16:ca:dd:32:77:8d:b5:4d:a6:99:ff:c5: e7:98:19:bd:2e:cb:0f:c9:b5:a4:65:a4:6e:38:b5:ab:d6:78: ef:80:ef:ea:8a:7b:fe:b9:04:29:30:01:6e:f1:34:e2:e7:aa: 1f:79:10:5c:8c:18:17:54:42:1f:01:60:b5:8c:bd:72:31:da: c9:2d:e5:6f:22:93:33:2b:bb:bf:65:5b:84:97:c5:e0:ce:76: a6:67:dd:4a:4b:b2:8d:0c:21:a1:4e:78:16:96:6b:1c:ef:5b: 52:cb:8a:73:73:4f:4b:8d:ab:1e:cc:d8:01:6c:94:7a:20:4f: d5:9e:06:b8:68:59:5c:f0:c6:46:39:31:51:55:b0:11:72:40: 17:4c:9d:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG MkI1OTYyMDQwHhcNMjUwODIzMDQxNzI3WhcNMjUwODMwMDQxNzI3WjAYMRYwFAYD VQQDEw02OGE5NDBkNy00YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgCkj58S1+lZgfTIey8Zkm5yuWUe7HllOLPnmIWIWMnJani1b7+L2Dqvrl7F iI20fyRCJWFtPUJssCuJWIi0Ktp08bPzeegcviBLbpm6d76yurAb7gVHDzfONxPF Lrxux21C0Iqg1DJI9967NGJbmGBCnZ+DXJdI8l6egVW5XlU4q91/Jg59Epj76Nhp VIjAqFcCzvI3r+H4W92Tb3Ym5HmUm3B0B29umA3ppc1rCKX42nqQGN8eRWHC54bb id5/1/LzQLyKnpkwlGu4KWPm6HylvvWODo/dMj+32yY8d+afZzVlSnZf6DIFdiOC 9t+P9LwDm+DS1t9tsOPF9qafUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6ToWcg UK7G4M7iENx9lsw7umBjMB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3 RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4 ZGpscFFYUER6LVh5dFpZZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6alRsxjxk4STxcgBeYKGSBQ9p3jggOa5Zx6lj257WmshdBXecz76G uNXWjUsQ4a1n9WPpSoKi0Vt3OBWEbWFhyzJElbfkT6G2CexEo0Nz6uvecptQpnt3 d/81yi1VNJO/wQrpFaCaI7qXcKPZxHOVbaUWyt0yd421TaaZ/8XnmBm9LssPybWk ZaRuOLWr1njvgO/qinv+uQQpMAFu8TTi56ofeRBcjBgXVEIfAWC1jL1yMdrJLeVv IpMzK7u/ZVuEl8XgznamZ91KS7KNDCGhTngWlmsc71tSy4pzc09LjasezNgBbJR6 IE/Vnga4aFlc8MZGOTFRVbARckAXTJ2g -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:52 2025 by rpki-client