$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: uzpe8FIB9JibYTru4MQBwXGFoFAtJyeU9lTO3meY3es= Subject key identifier: 83:C8:9A:56:B5:FA:E2:DB:B3:6B:99:E0:7A:55:C5:72:B2:A4:91:55 Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: 01A1 Signing time: Sat 23 Aug 2025 03:23:57 +0000 Manifest this update: Sat 23 Aug 2025 03:23:56 +0000 Manifest next update: Sat 30 Aug 2025 03:23:56 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: aRa7wQRztSJ3cUP8cVAiO4hefegj+vJAd9iE8nMEGKA=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: dYTddJDImyu3rpg7QICAEFzGZsVfww3CPHFdjrscptU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: Aug 23 03:23:56 2025 GMT Not After : Aug 30 03:23:56 2025 GMT Subject: CN=68a9344d-bbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:2a:46:18:a8:38:13:1f:9e:09:2b:1a:95: 6b:9c:b8:21:0f:c0:ca:67:b7:03:90:db:57:54:ce: 8d:ed:3b:ff:af:29:69:b8:86:43:15:1c:fd:8a:74: fd:9f:78:19:4c:f1:d8:cd:ef:25:cf:11:75:cf:fd: 6c:75:10:e5:b3:2a:0e:8d:4d:ea:32:b9:a1:4f:c2: cc:e5:46:0b:93:1a:20:42:12:5c:17:9e:6f:f6:d4: f7:bb:26:e9:c3:35:3b:e5:8d:95:6e:4a:a1:f5:f4: 70:69:2d:ab:50:67:43:c7:56:f2:b8:01:fd:ef:1d: 67:a7:5a:39:0e:79:9f:7c:14:70:53:a6:00:26:95: 98:60:d9:3f:9f:76:80:6d:cc:10:66:88:9f:86:3a: b1:ad:b9:f8:1f:9e:c7:9b:b2:8d:8e:b5:6b:62:72: c7:db:27:4f:10:88:9b:00:a3:6c:90:1e:a0:e7:6a: ab:b9:ec:09:d1:37:a2:78:4f:c4:9e:d4:cb:37:69: 47:d4:38:a2:9d:95:a6:76:27:c4:3d:6a:1e:c6:75: 8e:0e:49:0d:67:b0:a6:1a:8a:2c:2c:a3:1d:cc:30: b9:7d:02:9c:6f:1e:66:dd:a3:fe:c2:e7:f8:69:ba: 73:d5:0f:8f:40:91:48:79:42:e2:86:a5:ba:3c:aa: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C8:9A:56:B5:FA:E2:DB:B3:6B:99:E0:7A:55:C5:72:B2:A4:91:55 X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a0:1a:7e:51:b9:97:e4:7f:13:6d:92:82:2d:20:71:d7:eb: 65:c3:3c:e7:a5:6a:91:3d:fc:63:e9:86:f6:c2:31:18:f7:ff: 64:d5:59:11:47:90:76:4d:cc:f3:c1:00:f4:99:37:de:51:a6: 70:35:1c:53:f9:81:5f:5c:a5:38:66:87:64:f4:22:b6:a9:ef: ed:fe:cd:09:00:6b:38:a0:23:87:ec:0d:24:05:88:47:2e:ba: 04:ed:82:7a:e1:8d:30:27:3d:be:e7:ab:7d:a5:f4:7e:0b:25: 54:57:95:a6:f8:44:83:38:23:92:c0:bc:0f:3d:fc:cb:9a:11: ca:0d:b6:2c:13:b1:14:2f:26:d8:69:4c:88:fd:02:72:6b:b5: d9:5c:f9:d9:fb:77:3c:8b:77:87:0a:dc:0e:6d:c8:17:40:7a: b3:70:75:ef:9b:de:1c:3b:0c:98:c7:a0:5c:20:2e:f3:f8:73: 5c:f8:2c:79:7f:a3:fe:52:21:69:b2:56:c5:e8:94:83:14:dd: 75:c5:56:f7:cd:9b:76:38:1b:19:be:50:c8:6b:30:74:ba:0a: 4d:c7:ad:8b:7e:18:b5:1f:d3:59:62:75:5f:7b:97:77:d9:b2: 42:a7:8d:cb:3c:fe:83:ac:05:5a:ff:8c:57:cf:bf:65:b1:7c: 70:82:f9:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjUwODIzMDMyMzU2WhcNMjUwODMwMDMyMzU2WjAYMRYwFAYD VQQDEw02OGE5MzQ0ZC1iYmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4gqRhioOBMfngkrGpVrnLghD8DKZ7cDkNtXVM6N7Tv/rylpuIZDFRz9inT9 n3gZTPHYze8lzxF1z/1sdRDlsyoOjU3qMrmhT8LM5UYLkxogQhJcF55v9tT3uybp wzU75Y2Vbkqh9fRwaS2rUGdDx1byuAH97x1np1o5DnmffBRwU6YAJpWYYNk/n3aA bcwQZoifhjqxrbn4H57Hm7KNjrVrYnLH2ydPEIibAKNskB6g52qruewJ0TeieE/E ntTLN2lH1DiinZWmdifEPWoexnWODkkNZ7CmGoosLKMdzDC5fQKcbx5m3aP+wuf4 abpz1Q+PQJFIeULihqW6PKo4vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPImla1 +uLbs2uZ4HpVxXKypJFVMB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGoBp+UbmX5H8TbZKCLSBx1+tlwzznpWqRPfxj6Yb2wjEY9/9k1VkR R5B2TczzwQD0mTfeUaZwNRxT+YFfXKU4Zodk9CK2qe/t/s0JAGs4oCOH7A0kBYhH LroE7YJ64Y0wJz2+56t9pfR+CyVUV5Wm+ESDOCOSwLwPPfzLmhHKDbYsE7EULybY aUyI/QJya7XZXPnZ+3c8i3eHCtwObcgXQHqzcHXvm94cOwyYx6BcIC7z+HNc+Cx5 f6P+UiFpslbF6JSDFN11xVb3zZt2OBsZvlDIazB0ugpNx62Lfhi1H9NZYnVfe5d3 2bJCp43LPP6DrAVa/4xXz79lsXxwgvn6 -----END CERTIFICATE-----Generated at Sat Aug 23 19:04:31 2025 by rpki-client