$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: 3Uw33eFZL/0pmq6IBfsRgBAH3iLxYegFtZcHPi1H3iw= Subject key identifier: E6:6D:B0:03:5B:EF:3A:CC:5F:C2:F9:DC:27:46:06:BC:58:5A:11:1F Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 02CF Signing time: Sat 23 Aug 2025 01:37:32 +0000 Manifest this update: Sat 23 Aug 2025 01:37:32 +0000 Manifest next update: Sat 30 Aug 2025 01:37:32 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: N3RNjKMDvqU8kdgGJKS8xS4aF4Cd17dePUAnbfDhgQA=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: 9MRdrfgCzJPWi60WfDAHGFIjA+2Au5PPZv6A0PmrENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: Aug 23 01:37:32 2025 GMT Not After : Aug 30 01:37:32 2025 GMT Subject: CN=68a91b5c-217c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:2e:32:9e:cb:f0:68:97:67:c2:0b:b3:ad: 17:fb:bf:40:00:38:4d:94:e2:2d:da:ab:c0:06:64: 8d:40:d3:63:8b:37:d3:be:60:21:6a:fb:93:10:f9: d7:32:0e:62:c3:21:7f:db:1c:c1:8e:ae:67:b6:6e: 69:b0:72:3c:36:94:ae:05:4e:a4:7d:53:88:3f:7f: fa:16:f7:ef:e4:9d:ef:a9:ad:27:0e:c7:99:bd:20: ce:2c:19:92:be:0a:2b:33:55:6f:b3:ed:43:20:7f: e5:78:ec:92:c1:80:77:31:4d:83:70:7d:76:bd:92: 94:6d:56:9f:25:d6:69:57:57:ea:e0:3e:9a:fc:1e: 14:75:6e:cf:e8:58:b0:73:85:69:55:4f:61:01:83: 48:b3:7f:85:d9:1c:68:13:84:62:41:51:eb:76:4f: b0:8e:e5:36:21:4f:7d:0e:20:69:e5:3f:81:0b:04: 13:09:85:ab:9a:c9:0e:e0:bc:31:02:9c:f3:9f:84: ac:9b:41:b8:ad:58:1a:b3:48:38:2b:0a:19:b3:bd: c4:1f:b5:a6:fb:d7:ad:10:4a:c9:8d:d3:cc:58:6b: fd:28:da:34:d1:ad:6b:d9:28:f2:99:08:ad:25:23: ef:6b:f6:b3:45:a4:94:bb:af:5d:ba:5c:1e:8e:6f: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6D:B0:03:5B:EF:3A:CC:5F:C2:F9:DC:27:46:06:BC:58:5A:11:1F X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:9e:47:89:24:b6:bf:6a:86:f5:6e:6e:0a:65:c7:b4:5f:86: 2b:93:7e:38:ce:55:ee:5d:c9:27:ae:85:5c:70:9d:04:08:b2: 5b:b8:c6:e8:80:91:be:dd:6f:62:02:73:f8:88:6e:53:15:be: d2:3e:4f:09:7b:5f:c1:36:a6:68:8c:bd:e1:e2:2c:11:c1:10: 9c:61:ab:d8:72:c3:a8:37:7b:0c:92:bb:ff:30:66:a3:b1:18: 9c:2c:26:2c:87:ca:47:4e:2b:19:ac:37:84:d2:c4:91:31:dc: 6c:6f:82:74:68:3d:cc:03:e5:f6:64:da:28:bd:ad:85:54:eb: e4:15:4e:a0:98:d5:13:4d:39:ca:8c:b4:da:db:0c:ef:bc:dd: b6:33:ab:c5:ab:35:55:5a:1c:70:37:69:94:6d:bb:65:40:a2: 19:88:0d:97:85:d8:c0:60:54:37:ea:48:db:77:5d:63:d0:70: 4f:40:6f:70:7d:38:a5:85:fb:f1:f8:6e:96:d1:0e:57:b9:26: c2:48:3f:ad:af:51:5d:f5:a5:fc:fb:f6:c5:cf:4b:25:33:8d: 8d:50:19:73:1a:44:11:0b:18:d1:01:e4:9c:0f:4b:50:a8:fa: 61:3a:ea:05:67:56:dc:7f:1f:e0:8a:d1:10:b9:8b:ce:b6:3c: 2f:eb:f2:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjUwODIzMDEzNzMyWhcNMjUwODMwMDEzNzMyWjAYMRYwFAYD VQQDEw02OGE5MWI1Yy0yMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJIuMp7L8GiXZ8ILs60X+79AADhNlOIt2qvABmSNQNNjizfTvmAhavuTEPnX Mg5iwyF/2xzBjq5ntm5psHI8NpSuBU6kfVOIP3/6Fvfv5J3vqa0nDseZvSDOLBmS vgorM1Vvs+1DIH/leOySwYB3MU2DcH12vZKUbVafJdZpV1fq4D6a/B4UdW7P6Fiw c4VpVU9hAYNIs3+F2RxoE4RiQVHrdk+wjuU2IU99DiBp5T+BCwQTCYWrmskO4Lwx Apzzn4Ssm0G4rVgas0g4KwoZs73EH7Wm+9etEErJjdPMWGv9KNo00a1r2SjymQit JSPva/azRaSUu69dulwejm98TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZtsANb 7zrMX8L53CdGBrxYWhEfMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+nkeJJLa/aob1bm4KZce0X4Yrk344zlXuXcknroVccJ0ECLJbuMbo gJG+3W9iAnP4iG5TFb7SPk8Je1/BNqZojL3h4iwRwRCcYavYcsOoN3sMkrv/MGaj sRicLCYsh8pHTisZrDeE0sSRMdxsb4J0aD3MA+X2ZNoova2FVOvkFU6gmNUTTTnK jLTa2wzvvN22M6vFqzVVWhxwN2mUbbtlQKIZiA2XhdjAYFQ36kjbd11j0HBPQG9w fTilhfvx+G6W0Q5XuSbCSD+tr1Fd9aX8+/bFz0slM42NUBlzGkQRCxjRAeScD0tQ qPphOuoFZ1bcfx/gitEQuYvOtjwv6/KB -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:49 2025 by rpki-client