$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json) Hash identifier: GpImqwQSs4+UWOo9Uev1iFu/A+rIgJIl+YQuWWu+H+Q= Subject key identifier: 3C:83:69:CD:DA:61:15:E8:6C:B8:F5:6B:A0:B2:81:F5:D1:ED:78:D4 Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0C0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft Manifest number: 0BF7 Signing time: Fri 22 Aug 2025 18:59:19 +0000 Manifest this update: Fri 22 Aug 2025 18:59:19 +0000 Manifest next update: Fri 29 Aug 2025 18:59:19 +0000 Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: PiBcuzgqq0/9CJJHhEVp9aw71venakQJ3M7ZINl/Qfo=) 2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: RoK/Liyg5Z/zOr0f0lIzQ8yWfepOU0FGv2MoxE2M0l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3087 (0xc0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: Aug 22 18:59:19 2025 GMT Not After : Aug 29 18:59:19 2025 GMT Subject: CN=68a8be07-8fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:69:a7:75:93:ab:9e:36:69:30:fb:d1:c8:26: 86:b2:5f:ed:71:62:15:50:74:97:dc:df:7c:d1:69: 63:b0:54:36:0c:3f:89:08:9f:10:cd:c4:9a:d4:3b: f2:fa:f8:e3:49:43:21:ed:bd:0b:39:d8:42:bb:7d: 0f:5c:3f:17:5f:e3:56:2c:db:09:c6:5b:cb:d9:d4: 52:7c:b4:bb:42:53:7a:af:0a:cd:50:a6:b2:35:aa: 81:86:c1:5e:d1:da:c6:f1:d1:86:17:1b:9c:85:b2: d2:bd:6a:ee:c5:4e:9a:8f:b8:75:ff:27:19:57:08: 75:d2:5a:14:70:ab:fe:dd:cd:36:fb:8f:31:c9:40: 9f:5c:49:fa:6b:21:82:79:af:42:3d:7a:dc:fb:5b: 37:29:bc:87:9f:60:fc:a4:78:46:55:c1:35:b7:36: 53:aa:70:3b:ec:35:92:f8:97:29:db:0a:2b:39:76: cb:81:33:ef:9d:92:1a:ee:55:ea:86:b9:8e:61:e2: 78:8d:af:87:be:32:d5:27:a3:e5:9c:a5:75:14:83: ef:eb:ea:a3:6a:46:e5:0e:23:b5:20:56:1c:41:0d: d9:1a:9d:a4:9d:e9:db:2a:e0:59:81:0b:08:4a:4b: fb:f2:2a:96:2f:8a:85:2a:c9:c3:9d:00:c4:55:0f: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:83:69:CD:DA:61:15:E8:6C:B8:F5:6B:A0:B2:81:F5:D1:ED:78:D4 X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d6:74:6b:74:5c:24:d8:09:cb:50:a7:eb:14:c0:fb:4a:6d: ed:3d:8f:ab:06:aa:9c:c6:96:9e:ff:56:a7:03:c4:00:3f:8f: 9e:88:2d:c1:d5:cd:6e:90:8d:c1:12:9b:6a:3f:27:b3:5c:42: 9e:ba:3b:bc:35:58:bd:08:23:80:c0:71:12:d5:8b:ee:ff:93: 05:24:42:08:ab:0f:e5:eb:65:54:12:7a:1b:1b:6f:91:2b:0b: 3b:6a:fa:b6:e7:17:b9:97:62:83:ad:94:e8:58:0f:67:75:63: ff:07:2a:b9:69:5a:03:01:dc:9f:e4:5d:8d:44:a7:ba:32:89: aa:fb:b8:bd:c3:34:31:9d:06:47:ad:41:55:00:3c:3f:33:42: 9a:a3:96:c4:7f:c4:de:14:1d:1e:1f:f8:d2:f4:8b:0f:a9:10: 16:f0:6c:d2:17:00:e4:cd:ee:00:c1:89:2c:5b:40:9e:24:e2: cc:05:0f:4b:2a:e3:bc:c9:ed:b0:1b:80:00:cd:48:83:a6:de: 51:74:77:7c:26:3b:89:cb:c1:6e:1e:3a:3b:9a:fb:0c:20:4c: 9e:b0:e9:5f:eb:b7:5f:24:a9:00:3a:f2:a2:3a:d8:bd:43:e4: 5a:5d:dd:27:13:ba:ac:06:7b:c7:ac:2e:ce:e2:60:56:d5:b3: 3b:a6:2a:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjUwODIyMTg1OTE5WhcNMjUwODI5MTg1OTE5WjAYMRYwFAYD VQQDEw02OGE4YmUwNy04ZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mmndZOrnjZpMPvRyCaGsl/tcWIVUHSX3N980WljsFQ2DD+JCJ8QzcSa1Dvy +vjjSUMh7b0LOdhCu30PXD8XX+NWLNsJxlvL2dRSfLS7QlN6rwrNUKayNaqBhsFe 0drG8dGGFxuchbLSvWruxU6aj7h1/ycZVwh10loUcKv+3c02+48xyUCfXEn6ayGC ea9CPXrc+1s3KbyHn2D8pHhGVcE1tzZTqnA77DWS+Jcp2worOXbLgTPvnZIa7lXq hrmOYeJ4ja+HvjLVJ6PlnKV1FIPv6+qjakblDiO1IFYcQQ3ZGp2knenbKuBZgQsI Skv78iqWL4qFKsnDnQDEVQ/iywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyDac3a YRXobLj1a6CygfXR7XjUMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt YThTSjdJUW5KSUNpRWJCb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf1nRrdFwk2AnLUKfrFMD7Sm3tPY+rBqqcxpae/1anA8QAP4+eiC3B 1c1ukI3BEptqPyezXEKeuju8NVi9CCOAwHES1Yvu/5MFJEIIqw/l62VUEnobG2+R Kws7avq25xe5l2KDrZToWA9ndWP/Byq5aVoDAdyf5F2NRKe6Momq+7i9wzQxnQZH rUFVADw/M0Kao5bEf8TeFB0eH/jS9IsPqRAW8GzSFwDkze4AwYksW0CeJOLMBQ9L KuO8ye2wG4AAzUiDpt5RdHd8JjuJy8FuHjo7mvsMIEyesOlf67dfJKkAOvKiOti9 Q+RaXd0nE7qsBnvHrC7O4mBW1bM7piqg -----END CERTIFICATE-----Generated at Sat Aug 23 19:11:57 2025 by rpki-client