$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft File: YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft (raw, json) Hash identifier: NQzQYUWMBzH36a3aFonjp4+XCUijotBxvRHzRH+3qdw= Subject key identifier: F0:C5:30:7F:77:D7:10:89:18:D0:CB:D7:D2:98:E2:B9:79:4A:B3:6A Authority key identifier: 62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B Certificate issuer: /CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft Manifest number: C9 Signing time: Sat 23 Aug 2025 05:54:13 +0000 Manifest this update: Sat 23 Aug 2025 05:54:12 +0000 Manifest next update: Sat 30 Aug 2025 05:54:12 +0000 Files and hashes: 1: YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl (hash: AvfB5JfEn20690FzR+DNpqsDtY3ESS79mDRSNV5vtyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B Validity Not Before: Aug 23 05:54:12 2025 GMT Not After : Aug 30 05:54:12 2025 GMT Subject: CN=68a95784-3478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:de:59:26:f2:23:d1:0e:8f:1c:da:13:55: 79:7f:fb:a8:7a:85:0e:89:99:0a:7f:84:56:fe:d0: 32:b8:72:23:92:b1:8d:d4:40:93:11:37:0b:5a:60: b2:87:f2:02:e1:7a:99:7f:4e:a0:84:a4:1c:52:4e: 48:b5:a7:de:29:f9:7d:ce:38:46:31:33:ef:cf:18: e8:3e:4b:f6:c0:86:0f:bf:da:e9:8e:a9:7a:dc:83: fd:fb:98:e5:d3:4b:95:ab:69:df:81:8a:19:0d:04: e5:ad:cb:a0:ad:a1:06:45:2d:cb:6e:ee:6c:9d:72: f5:85:be:3d:56:4e:a3:a3:b3:1d:81:4a:72:46:e7: 6d:16:2c:f0:51:f5:06:98:40:bc:4f:48:68:be:b2: 83:70:6d:f5:e3:cd:d7:37:07:ac:13:1e:45:7e:1e: 34:06:af:58:91:94:e3:c6:1a:9f:12:bb:c5:23:89: 2c:f4:53:43:b0:3a:a5:73:cb:ee:17:a7:a6:e8:e6: 3d:6f:3b:12:ed:06:98:3f:7f:34:40:8e:b4:21:ae: d2:d0:92:9d:6f:49:ed:91:a0:37:ff:dc:80:1b:db: f1:14:c1:6a:6a:b1:9b:ed:54:ef:82:9d:bf:ab:6d: 1f:47:9d:f5:ac:f7:ff:0e:2c:1f:12:15:29:aa:6d: ad:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C5:30:7F:77:D7:10:89:18:D0:CB:D7:D2:98:E2:B9:79:4A:B3:6A X509v3 Authority Key Identifier: keyid:62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:37:86:27:17:b1:94:15:c9:82:f2:9e:98:66:6d:54:4f:ba: a7:9b:d3:00:8f:dc:a8:33:50:79:91:0b:f0:f0:18:ba:8f:81: 9f:3d:b2:15:59:f0:e9:e0:15:b3:a4:f3:44:42:14:62:4a:e9: b0:d4:b0:bd:eb:93:8c:80:0a:e7:86:b5:97:ab:a9:c9:e5:bd: 76:e4:58:24:e8:26:43:87:b0:a3:95:8a:93:4b:61:03:8a:52: d6:ad:a3:9f:2a:c6:82:a2:ca:76:ac:6c:25:54:0d:83:a4:eb: f1:f8:5b:95:bb:9e:ef:d8:93:d5:3a:79:3a:43:b3:df:fe:dc: d1:9c:ce:c3:2b:6f:69:0e:90:5b:45:a8:85:e0:c6:50:49:03: 58:98:a4:00:7c:db:53:53:cc:3b:e7:b8:13:47:7c:f3:86:3f: fd:d2:d0:a2:dd:cc:a1:9f:02:84:ac:9a:d5:38:2d:00:3e:0e: cb:31:84:3f:d2:f8:66:ca:c4:d2:dd:c0:23:06:d2:e1:72:24: 90:62:f4:81:25:aa:3f:f3:dd:4d:76:d1:00:57:d8:55:be:a4: d1:29:de:09:41:41:9d:be:ef:ea:6f:9b:8c:24:e1:c5:ad:b4: 1e:9a:b9:71:a2:3a:73:8d:05:99:90:a7:7c:b4:fd:21:63:db: bf:9f:e0:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKDYyQ0E5QzEyNkUxNEZGQkJCQzNENjQwNzEwNUVCRTE1 MUI5OTYwNUIwHhcNMjUwODIzMDU1NDEyWhcNMjUwODMwMDU1NDEyWjAYMRYwFAYD VQQDEw02OGE5NTc4NC0zNDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAHeWSbyI9EOjxzaE1V5f/uoeoUOiZkKf4RW/tAyuHIjkrGN1ECTETcLWmCy h/IC4XqZf06ghKQcUk5ItafeKfl9zjhGMTPvzxjoPkv2wIYPv9rpjql63IP9+5jl 00uVq2nfgYoZDQTlrcugraEGRS3Lbu5snXL1hb49Vk6jo7MdgUpyRudtFizwUfUG mEC8T0hovrKDcG31483XNwesEx5Ffh40Bq9YkZTjxhqfErvFI4ks9FNDsDqlc8vu F6em6OY9bzsS7QaYP380QI60Ia7S0JKdb0ntkaA3/9yAG9vxFMFqarGb7VTvgp2/ q20fR531rPf/DiwfEhUpqm2tBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDFMH93 1xCJGNDL19KY4rl5SrNqMB8GA1UdIwQYMBaAFGLKnBJuFP+7vD1kBxBevhUbmWBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80ODRGMjZFNjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi9Zc3FjRW00VV83dThQV1FIRUY2LUZSdVpZ RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzcWNFbTRVXzd1OFBXUUhFRjYtRlJ1WllGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80ODRGMjZFNjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi9Zc3FjRW00VV83 dThQV1FIRUY2LUZSdVpZRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARN4YnF7GUFcmC8p6YZm1UT7qnm9MAj9yoM1B5kQvw8Bi6j4GfPbIV WfDp4BWzpPNEQhRiSumw1LC965OMgArnhrWXq6nJ5b125Fgk6CZDh7CjlYqTS2ED ilLWraOfKsaCosp2rGwlVA2DpOvx+FuVu57v2JPVOnk6Q7Pf/tzRnM7DK29pDpBb RaiF4MZQSQNYmKQAfNtTU8w757gTR3zzhj/90tCi3cyhnwKErJrVOC0APg7LMYQ/ 0vhmysTS3cAjBtLhciSQYvSBJao/891NdtEAV9hVvqTRKd4JQUGdvu/qb5uMJOHF rbQemrlxojpzjQWZkKd8tP0hY9u/n+A/ -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:57 2025 by rpki-client