$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft File: ySmS1w7OQRpiVb9AueCkUhSUQA0.mft (raw, json) Hash identifier: ictWTZ3cXl7+1abu2vZ8kROEc0D8Go2vTZLcq3jb7YQ= Subject key identifier: A6:05:01:90:FE:E0:14:2E:E4:C2:3A:07:C8:DD:26:B0:3D:C2:71:15 Authority key identifier: C9:29:92:D7:0E:CE:41:1A:62:55:BF:40:B9:E0:A4:52:14:94:40:0D Certificate issuer: /CN=A91C4102/serialNumber=C92992D70ECE411A6255BF40B9E0A4521494400D Certificate serial: 0A81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft Manifest number: 1233 Signing time: Fri 22 Aug 2025 19:43:39 +0000 Manifest this update: Fri 22 Aug 2025 19:43:39 +0000 Manifest next update: Fri 29 Aug 2025 19:43:39 +0000 Files and hashes: 1: ySmS1w7OQRpiVb9AueCkUhSUQA0.crl (hash: 55xvVwWV/DeLL3gmfX2U9Do/g4Eg/WucS3oQp41+7T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2689 (0xa81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102, serialNumber=C92992D70ECE411A6255BF40B9E0A4521494400D Validity Not Before: Aug 22 19:43:39 2025 GMT Not After : Aug 29 19:43:39 2025 GMT Subject: CN=68a8c86b-04bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0e:a7:51:dc:3e:79:25:3e:95:32:92:7d:79: ef:53:d2:23:43:75:95:a1:c7:ef:ba:3a:83:08:39: 03:03:84:79:0c:72:35:5d:73:16:c6:48:1d:ae:05: ec:2d:db:15:a2:47:82:39:5e:17:ee:04:42:f9:6b: bd:16:cd:21:2d:49:2e:9c:63:f5:16:4f:12:b2:ee: 68:b5:af:b9:ea:79:a9:50:75:fc:20:76:1c:c6:51: ab:3e:87:0a:67:78:8a:ab:9c:99:ab:24:07:8f:fc: fe:46:dd:f3:50:7a:10:e3:3e:3e:5f:d2:9d:e4:ed: 42:b5:41:a9:f1:fa:4d:e6:7e:91:71:8e:6c:0e:47: 51:6f:74:3d:06:8d:b9:85:02:82:05:8d:fd:be:7e: 36:22:08:a7:50:92:4a:76:5a:6a:f9:e6:d2:46:e5: d6:85:7a:58:79:79:ed:1f:89:bf:4d:84:0a:92:32: cb:cb:76:46:d3:5b:19:f5:3c:63:a9:59:84:51:80: 30:45:ee:eb:36:c2:3a:39:71:dc:67:7d:be:fd:7b: 8c:75:b7:b1:57:c6:af:a8:fe:3f:ae:ae:77:78:2f: 81:09:fa:85:be:c6:cc:9f:f7:b0:fe:5f:08:bf:d8: 37:5a:ac:08:c6:41:d5:a7:ab:63:8d:b5:b4:cb:00: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:01:90:FE:E0:14:2E:E4:C2:3A:07:C8:DD:26:B0:3D:C2:71:15 X509v3 Authority Key Identifier: keyid:C9:29:92:D7:0E:CE:41:1A:62:55:BF:40:B9:E0:A4:52:14:94:40:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySmS1w7OQRpiVb9AueCkUhSUQA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/ySmS1w7OQRpiVb9AueCkUhSUQA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:dc:1c:69:d7:66:73:3d:d6:80:0c:66:d5:a1:62:e4:80:d6: 0f:ed:ba:29:54:2f:6a:9b:d3:0a:71:f3:cb:9e:e4:9a:9d:bf: 26:61:4a:5f:9b:1f:54:aa:46:0e:03:19:61:c4:f5:d6:39:7b: 21:b5:27:e2:d9:6a:22:72:14:cd:a2:12:7d:8a:20:55:fe:fb: 9b:5c:01:d0:c1:cb:3b:a4:ab:a7:5d:33:ae:be:d1:02:24:93: 4d:75:f7:8b:6d:6b:5a:66:f7:18:47:86:e7:2c:b2:b8:3f:5f: 54:bf:38:09:cf:1d:a1:b4:ee:2d:10:ab:9e:b3:dc:37:01:88: 31:33:13:63:03:f6:26:cf:e4:a7:70:9d:1a:08:26:4b:9a:9d: 5a:82:2a:83:bb:fb:a3:16:a2:2a:15:d3:4d:d8:fe:81:1f:8e: 91:34:41:62:f2:83:83:af:c2:b2:f0:a8:0c:5e:ff:c0:d4:8d: 1e:72:7b:11:71:ba:4a:ea:e5:5b:8e:62:6f:c8:47:fb:6c:5d: 0f:3e:16:b9:1a:4f:e1:55:11:db:0d:a1:0b:31:8d:71:bb:b1: 11:62:67:11:84:97:04:ec:e2:84:c4:07:33:4a:57:95:25:94: 71:86:c8:44:21:7d:f3:4a:72:5e:b7:bb:91:9a:0f:9b:75:94: e3:24:19:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEM5Mjk5MkQ3MEVDRTQxMUE2MjU1QkY0MEI5RTBBNDUy MTQ5NDQwMEQwHhcNMjUwODIyMTk0MzM5WhcNMjUwODI5MTk0MzM5WjAYMRYwFAYD VQQDEw02OGE4Yzg2Yi0wNGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAog6nUdw+eSU+lTKSfXnvU9IjQ3WVocfvujqDCDkDA4R5DHI1XXMWxkgdrgXs LdsVokeCOV4X7gRC+Wu9Fs0hLUkunGP1Fk8Ssu5ota+56nmpUHX8IHYcxlGrPocK Z3iKq5yZqyQHj/z+Rt3zUHoQ4z4+X9Kd5O1CtUGp8fpN5n6RcY5sDkdRb3Q9Bo25 hQKCBY39vn42IginUJJKdlpq+ebSRuXWhXpYeXntH4m/TYQKkjLLy3ZG01sZ9Txj qVmEUYAwRe7rNsI6OXHcZ32+/XuMdbexV8avqP4/rq53eC+BCfqFvsbMn/ew/l8I v9g3WqwIxkHVp6tjjbW0ywAe/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYFAZD+ 4BQu5MI6B8jdJrA9wnEVMB8GA1UdIwQYMBaAFMkpktcOzkEaYlW/QLngpFIUlEAN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi95U21TMXc3T1FScGlWYjlBdWVDa1VoU1VR QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lTbVMxdzdPUVJwaVZiOUF1ZUNrVWhTVVFBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi95U21TMXc3T1FS cGlWYjlBdWVDa1VoU1VRQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ3Bxp12ZzPdaADGbVoWLkgNYP7bopVC9qm9MKcfPLnuSanb8mYUpf mx9UqkYOAxlhxPXWOXshtSfi2WoichTNohJ9iiBV/vubXAHQwcs7pKunXTOuvtEC JJNNdfeLbWtaZvcYR4bnLLK4P19UvzgJzx2htO4tEKues9w3AYgxMxNjA/Ymz+Sn cJ0aCCZLmp1agiqDu/ujFqIqFdNN2P6BH46RNEFi8oODr8Ky8KgMXv/A1I0ecnsR cbpK6uVbjmJvyEf7bF0PPha5Gk/hVRHbDaELMY1xu7ERYmcRhJcE7OKExAczSleV JZRxhshEIX3zSnJet7uRmg+bdZTjJBn1 -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:39 2025 by rpki-client