$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft File: YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json) Hash identifier: dNX5RtL1VmxvAJa1fp/X4GiTwqx6Pr3sWkVVr2luuS4= Subject key identifier: C9:E0:54:39:BD:43:25:FB:3A:C3:62:B1:E7:BE:13:A2:6A:96:C0:F0 Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00 Certificate issuer: /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft Manifest number: A3 Signing time: Sat 23 Aug 2025 06:27:12 +0000 Manifest this update: Sat 23 Aug 2025 06:27:12 +0000 Manifest next update: Sat 30 Aug 2025 06:27:12 +0000 Files and hashes: 1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: rl8jGJkQdIXWrPDL6Adt7M6qqjhc0mkZMY6Ws7m7Xz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=611E1C149528F17A0EC799C39D562619C9A15100 Validity Not Before: Aug 23 06:27:12 2025 GMT Not After : Aug 30 06:27:12 2025 GMT Subject: CN=68a95f40-b5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:84:36:42:69:c1:9a:e2:20:3c:51:c2:35: 20:42:6b:c6:d8:ae:eb:00:ef:45:dd:02:33:82:83: 33:0d:26:5c:71:f4:b6:7a:39:00:79:45:07:85:a6: 3a:5f:08:c3:e3:29:be:36:b5:51:42:59:21:aa:f2: e9:b6:86:6d:9e:fa:fa:2b:c6:90:bb:59:5f:20:43: c0:b3:d2:97:31:68:e4:d3:7e:ae:f5:db:0b:83:84: 16:77:97:47:49:ca:b5:e5:0d:fe:e7:bf:be:b7:50: 9e:8d:ce:0e:2f:79:0c:79:fd:b4:34:b4:c5:47:ca: 01:79:5f:95:b7:11:26:98:ba:8b:27:e7:88:6e:02: 4d:75:4a:0d:17:ef:42:11:6e:59:d9:81:cb:17:1f: 71:35:32:be:0a:b8:c5:68:93:d1:a9:0d:db:3f:b3: d7:bf:60:b0:79:95:3c:66:62:2c:ae:9b:97:f8:02: 7b:0e:2c:45:d7:71:3c:fc:b7:6d:a9:8c:60:47:c5: 0c:4d:c1:19:45:d5:8a:61:ec:cc:a2:2c:56:14:38: 20:cb:e5:9f:3d:35:95:9e:8c:6b:47:42:fa:e3:93: 16:72:9a:4f:97:c0:1f:86:c4:2c:30:79:4c:14:2b: 9a:41:d7:27:34:83:aa:50:ad:dd:d2:fb:70:dd:96: 89:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E0:54:39:BD:43:25:FB:3A:C3:62:B1:E7:BE:13:A2:6A:96:C0:F0 X509v3 Authority Key Identifier: keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:3d:67:da:02:1e:6f:3c:5a:7e:43:c8:f6:aa:7e:b1:95:cc: a5:0f:d5:8a:90:9e:a6:e4:55:78:ec:1f:f2:09:d3:4b:e8:98: 83:32:2b:44:8a:67:77:48:fb:6f:a7:f2:63:cf:0c:78:88:4e: 9b:5e:54:b7:6d:fe:0a:7a:d8:96:0f:aa:38:7a:89:bd:78:cb: 52:3a:7d:47:97:27:fc:d6:94:f4:b4:4b:9d:32:f8:c7:a5:12: 62:19:d0:29:14:82:58:d2:4b:8b:96:8b:b3:d1:61:66:a8:70: 07:07:80:1e:c2:82:8c:d3:32:6f:f7:8a:e5:25:51:96:13:67: df:75:3b:f6:f2:2a:a5:a2:00:fb:88:a8:db:ee:76:2a:ba:90: 8b:e9:c3:9d:e0:51:90:68:38:49:f0:c4:d9:08:ef:ac:b9:93: 75:bb:ae:e2:1a:26:38:1f:0a:46:ad:af:c2:e2:b6:c7:d5:ed: 07:f3:67:1b:db:c6:c5:fa:f5:d6:d0:ad:4d:89:f5:15:f1:28: b2:4e:bd:df:2e:ac:32:71:20:59:a0:8a:22:21:77:95:88:04: 64:d0:0b:f8:c9:21:b8:4b:b3:cf:54:18:4c:50:31:09:13:e3: 37:2c:14:9c:dc:88:eb:d5:fa:94:ea:32:23:b1:ea:dd:25:8a: 6e:63:f1:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDYxMUUxQzE0OTUyOEYxN0EwRUM3OTlDMzlENTYyNjE5 QzlBMTUxMDAwHhcNMjUwODIzMDYyNzEyWhcNMjUwODMwMDYyNzEyWjAYMRYwFAYD VQQDEw02OGE5NWY0MC1iNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKiENkJpwZriIDxRwjUgQmvG2K7rAO9F3QIzgoMzDSZccfS2ejkAeUUHhaY6 XwjD4ym+NrVRQlkhqvLptoZtnvr6K8aQu1lfIEPAs9KXMWjk036u9dsLg4QWd5dH Scq15Q3+57++t1Cejc4OL3kMef20NLTFR8oBeV+VtxEmmLqLJ+eIbgJNdUoNF+9C EW5Z2YHLFx9xNTK+CrjFaJPRqQ3bP7PXv2CweZU8ZmIsrpuX+AJ7DixF13E8/Ldt qYxgR8UMTcEZRdWKYezMoixWFDggy+WfPTWVnoxrR0L645MWcppPl8AfhsQsMHlM FCuaQdcnNIOqUK3d0vtw3ZaJxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMngVDm9 QyX7OsNisee+E6JqlsDwMB8GA1UdIwQYMBaAFGEeHBSVKPF6DseZw51WJhnJoVEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81RTA3MkFGRTg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhYb094NW5EblZZbUdjbWhV UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSNGNGSlVvOFhvT3g1bkRuVlltR2NtaFVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81RTA3MkFGRTg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhY b094NW5EblZZbUdjbWhVUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3PWfaAh5vPFp+Q8j2qn6xlcylD9WKkJ6m5FV47B/yCdNL6JiDMitE imd3SPtvp/Jjzwx4iE6bXlS3bf4KetiWD6o4eom9eMtSOn1Hlyf81pT0tEudMvjH pRJiGdApFIJY0kuLlouz0WFmqHAHB4AewoKM0zJv94rlJVGWE2ffdTv28iqlogD7 iKjb7nYqupCL6cOd4FGQaDhJ8MTZCO+suZN1u67iGiY4HwpGra/C4rbH1e0H82cb 28bF+vXW0K1NifUV8SiyTr3fLqwycSBZoIoiIXeViARk0Av4ySG4S7PPVBhMUDEJ E+M3LBSc3Ijr1fqU6jIjserdJYpuY/EG -----END CERTIFICATE-----Generated at Sat Aug 23 16:10:28 2025 by rpki-client