$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: JhttBGceTSMGIW5fd3vqOt2uRnjwtWabFY3aGOk63Wk= Subject key identifier: 45:87:39:19:B7:EC:31:86:AC:D6:22:13:23:C0:B7:FF:A6:08:DF:8D Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 11A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 117C Signing time: Fri 22 Aug 2025 17:21:46 +0000 Manifest this update: Fri 22 Aug 2025 17:21:45 +0000 Manifest next update: Fri 29 Aug 2025 17:21:45 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: ntqIIGbazAnr1GipMJQVhEatad67Hr+x8JUpL9Fl9Xw=) 2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=) 3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=) 4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=) 5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=) 6: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4514 (0x11a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Aug 22 17:21:45 2025 GMT Not After : Aug 29 17:21:45 2025 GMT Subject: CN=68a8a72a-4fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0d:ca:7f:30:21:52:58:65:35:f7:71:80:3c: f1:26:b1:d2:f0:2f:d1:c3:71:59:36:8e:96:8f:b8: 2e:48:28:a3:c1:cb:a7:56:5b:d8:29:f1:51:92:41: 15:f9:4a:6b:21:98:d6:c5:00:07:69:6c:65:74:72: fd:c6:2c:0c:06:20:31:df:6d:54:ab:95:61:13:41: 02:bc:05:9d:ff:55:1d:ab:f1:17:cf:50:36:88:81: d9:9e:c3:47:4c:c9:0d:db:6e:0a:3c:11:95:fe:89: 05:02:6d:13:02:c8:31:03:3e:42:e3:99:21:ab:1a: 40:41:59:d0:fa:92:2d:88:7c:9c:64:4d:6c:ec:ac: 4c:8e:9a:40:3f:44:df:41:2e:00:e4:4e:c5:b0:22: 97:b5:c7:dd:5b:b0:51:34:c9:b2:19:17:df:1e:e6: 9f:33:9a:16:cb:0b:f0:14:af:e9:f7:0e:d9:c1:93: c1:e7:05:f6:83:bb:04:f0:73:e9:f4:a9:1b:98:36: 6b:73:e2:b0:97:c7:59:be:ae:38:52:7d:69:d0:23: 8d:c9:86:d4:9a:44:7a:44:9a:01:40:d5:95:cb:d1: 79:d3:c5:44:70:fe:fb:c2:bd:71:af:ba:34:56:c0: 96:55:52:52:7c:f7:75:7b:fd:27:f1:a9:69:c8:5b: 87:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:87:39:19:B7:EC:31:86:AC:D6:22:13:23:C0:B7:FF:A6:08:DF:8D X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:48:66:c5:59:9f:4f:f4:e4:f1:4b:b2:b7:b9:a5:73:fe:de: b6:51:74:49:83:46:bf:c0:e7:dc:c4:c4:ea:38:06:d1:b8:a2: 3f:fb:86:98:26:17:36:02:d2:11:a7:0d:6a:94:d4:5a:e4:dc: 24:45:d3:56:e1:f3:fd:32:2e:a9:25:b8:b2:3c:53:32:b5:27: fa:e7:93:90:34:8b:b1:d6:f8:7e:e4:6d:6a:46:9f:66:31:34: 48:df:63:ef:29:39:57:44:3b:eb:27:d2:27:cd:cd:aa:e8:c4: e6:79:a2:db:c2:9f:c0:0a:c3:64:a7:8b:36:30:1a:f9:e5:60: 3e:75:a9:35:52:77:c9:40:c4:8e:7a:8e:d9:41:6d:bb:6b:5f: 72:1e:a6:a8:47:4f:12:ec:85:4a:8b:50:0a:c5:52:d3:fa:40: cb:0e:6b:ae:e5:89:84:ca:23:c3:ef:71:68:aa:9e:d2:23:37: 47:2e:90:f5:d1:ce:73:78:2f:ec:fb:f5:21:dc:b5:8e:93:da: 0b:fd:f4:21:9c:d1:fe:cd:15:c6:34:63:8f:61:5b:39:0c:6f: 2e:db:6a:31:af:a5:64:26:f4:43:e1:a6:a1:bb:63:c8:83:3a: 9d:ac:f8:56:f2:a7:5b:45:c1:2c:fc:ef:5f:9d:f6:92:62:cb: c6:63:15:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjUwODIyMTcyMTQ1WhcNMjUwODI5MTcyMTQ1WjAYMRYwFAYD VQQDEw02OGE4YTcyYS00ZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5A3KfzAhUlhlNfdxgDzxJrHS8C/Rw3FZNo6Wj7guSCijwcunVlvYKfFRkkEV +UprIZjWxQAHaWxldHL9xiwMBiAx321Uq5VhE0ECvAWd/1Udq/EXz1A2iIHZnsNH TMkN224KPBGV/okFAm0TAsgxAz5C45khqxpAQVnQ+pItiHycZE1s7KxMjppAP0Tf QS4A5E7FsCKXtcfdW7BRNMmyGRffHuafM5oWywvwFK/p9w7ZwZPB5wX2g7sE8HPp 9KkbmDZrc+Kwl8dZvq44Un1p0CONyYbUmkR6RJoBQNWVy9F508VEcP77wr1xr7o0 VsCWVVJSfPd1e/0n8alpyFuHlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWHORm3 7DGGrNYiEyPAt/+mCN+NMB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwSGbFWZ9P9OTxS7K3uaVz/t62UXRJg0a/wOfcxMTqOAbRuKI/+4aY Jhc2AtIRpw1qlNRa5NwkRdNW4fP9Mi6pJbiyPFMytSf655OQNIux1vh+5G1qRp9m MTRI32PvKTlXRDvrJ9Inzc2q6MTmeaLbwp/ACsNkp4s2MBr55WA+dak1UnfJQMSO eo7ZQW27a19yHqaoR08S7IVKi1AKxVLT+kDLDmuu5YmEyiPD73Foqp7SIzdHLpD1 0c5zeC/s+/Uh3LWOk9oL/fQhnNH+zRXGNGOPYVs5DG8u22oxr6VkJvRD4aahu2PI gzqdrPhW8qdbRcEs/O9fnfaSYsvGYxX3 -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:26 2025 by rpki-client