$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft File: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json) Hash identifier: bqJearWbvEiyb1xnC+36olchWE0mkuJCYeuK+7Bwlz0= Subject key identifier: E3:7D:70:FC:79:28:FC:68:39:61:6E:CF:9D:BB:8E:91:E3:B3:21:28 Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Certificate serial: 0C56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft Manifest number: 0C4E Signing time: Fri 22 Aug 2025 18:38:53 +0000 Manifest this update: Fri 22 Aug 2025 18:38:52 +0000 Manifest next update: Fri 29 Aug 2025 18:38:52 +0000 Files and hashes: 1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: dSxBtx5rrjpPYFW0v72WlO06+NpRoAEvR1EAnsCJ6NU=) 2: 69308C200A9611EABF034172C4F9AE02.roa (hash: UpR8nuBc/YxAqJ5KwZdD471HRL+h2X0H2SIoY13S/74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Validity Not Before: Aug 22 18:38:52 2025 GMT Not After : Aug 29 18:38:52 2025 GMT Subject: CN=68a8b93c-c34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:97:46:b8:d9:e5:d9:05:90:c4:81:05:77:46: b2:75:4e:1c:1d:b5:b2:b4:38:27:82:1a:0f:3e:f6: 67:a2:a1:67:bc:02:57:be:44:ed:54:93:ff:8f:e8: 84:ff:79:75:6f:68:83:db:73:ad:ca:5e:11:e2:5e: 9e:b4:20:f9:cc:a9:9b:52:3d:19:04:de:f4:47:5a: 53:43:2f:5b:c6:b8:c5:02:4f:8e:a2:8f:cf:9a:7d: 55:0d:a6:dd:25:af:75:1c:8d:09:c4:86:87:80:2d: 09:b8:7e:5e:d6:57:3e:29:6e:c9:52:e5:bc:6d:23: 4b:43:1c:8c:9a:b5:72:5e:91:ac:49:81:f1:1f:a6: 63:8e:7e:8c:39:a3:6f:c1:e5:bf:5c:70:f0:e4:68: 50:af:c2:b8:52:a5:1d:2b:c0:8c:0a:5b:cb:2a:8c: 16:49:3a:ec:f8:46:39:a2:b1:3c:f1:ac:88:e8:59: 60:9a:8c:e1:22:35:54:76:bc:7b:93:aa:f1:23:c8: 94:ff:47:e3:eb:56:55:ce:86:a8:e0:c2:ff:fd:ab: 9a:e7:43:e4:a8:4c:6b:3c:5c:fa:39:fb:33:28:ef: 09:d9:c4:79:01:da:85:c0:e5:57:f7:f9:d8:b3:c5: 08:de:ef:ab:d6:6b:99:3a:69:a7:91:ba:5b:a0:1b: 2a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7D:70:FC:79:28:FC:68:39:61:6E:CF:9D:BB:8E:91:E3:B3:21:28 X509v3 Authority Key Identifier: keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:bb:b2:db:75:c5:a1:f2:88:ef:be:95:a1:d7:10:40:c0:11: ee:cd:c1:98:5f:b6:38:c0:39:da:91:24:4b:f8:e7:3f:b3:96: 2c:e8:cf:a8:78:73:9c:48:26:64:a1:3d:7f:cf:02:fc:76:66: 9e:4f:6a:34:e7:a4:06:fc:7c:4d:04:c0:06:48:db:5b:73:c2: af:5d:c4:ef:02:35:0b:bf:c2:75:8f:55:36:1e:c8:32:63:b3: 50:90:9e:56:80:8f:34:3c:26:40:af:7d:8b:ce:32:d8:08:17: ed:cc:d3:ad:9f:b3:70:bf:2d:f5:9c:f3:7b:ff:88:cf:ac:ac: ca:9d:8b:f8:af:b7:e2:fc:fd:34:e6:23:d4:e6:60:00:ca:d7: 89:c8:71:8e:cf:e6:5c:90:1a:b0:65:e1:f8:9e:a9:5a:11:03: 01:37:af:e2:38:e8:ac:08:9b:3c:8a:a5:f8:e2:52:b3:e8:62: 0f:ad:7a:ff:db:c3:af:e5:88:a8:62:54:7d:b5:ec:4c:24:95: ae:6c:e9:8f:11:7e:c4:82:d8:6d:93:e5:6b:76:2c:e7:83:5b: fe:c8:ae:b4:43:06:39:6b:a3:65:8e:68:b6:4b:69:e7:72:2b: f6:a0:3d:ec:c0:56:99:8d:ca:f3:c2:90:24:b7:f8:ab:7a:a9: aa:61:1e:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4QjExMTAvBgNVBAUTKEM4N0ZDQUU5MDdCRDIwNUEwOEU1NEM2N0E2MzM1NkQ5 MjFDNTkxM0IwHhcNMjUwODIyMTgzODUyWhcNMjUwODI5MTgzODUyWjAYMRYwFAYD VQQDEw02OGE4YjkzYy1jMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZdGuNnl2QWQxIEFd0aydU4cHbWytDgnghoPPvZnoqFnvAJXvkTtVJP/j+iE /3l1b2iD23Otyl4R4l6etCD5zKmbUj0ZBN70R1pTQy9bxrjFAk+Ooo/Pmn1VDabd Ja91HI0JxIaHgC0JuH5e1lc+KW7JUuW8bSNLQxyMmrVyXpGsSYHxH6Zjjn6MOaNv weW/XHDw5GhQr8K4UqUdK8CMClvLKowWSTrs+EY5orE88ayI6FlgmozhIjVUdrx7 k6rxI8iU/0fj61ZVzoao4ML//aua50PkqExrPFz6OfszKO8J2cR5AdqFwOVX9/nY s8UI3u+r1muZOmmnkbpboBsq4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFON9cPx5 KPxoOWFuz527jpHjsyEoMB8GA1UdIwQYMBaAFMh/yukHvSBaCOVMZ6YzVtkhxZE7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzhCMS9DRTg1MUE1NjBB OTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlGb0k1VXhucGpOVzJTSEZr VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX0s2UWU5SUZvSTVVeG5wak5XMlNIRmtUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzhCMS9DRTg1MUE1NjBBOTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlG b0k1VXhucGpOVzJTSEZrVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyu7LbdcWh8ojvvpWh1xBAwBHuzcGYX7Y4wDnakSRL+Oc/s5Ys6M+o eHOcSCZkoT1/zwL8dmaeT2o056QG/HxNBMAGSNtbc8KvXcTvAjULv8J1j1U2Hsgy Y7NQkJ5WgI80PCZAr32LzjLYCBftzNOtn7Nwvy31nPN7/4jPrKzKnYv4r7fi/P00 5iPU5mAAyteJyHGOz+ZckBqwZeH4nqlaEQMBN6/iOOisCJs8iqX44lKz6GIPrXr/ 28Ov5YioYlR9texMJJWubOmPEX7Egthtk+Vrdizng1v+yK60QwY5a6Nljmi2S2nn civ2oD3swFaZjcrzwpAkt/ireqmqYR4v -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:38 2025 by rpki-client