$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft File: yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json) Hash identifier: U+lrQl2nOMZzvSEpr0ZAMr5CR1LESxdpDpa1vKbLq5E= Subject key identifier: F0:FB:3C:12:E8:42:2F:F1:B4:8C:1D:33:9C:DF:A8:56:E0:CD:53:83 Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Certificate serial: 0551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft Manifest number: 054B Signing time: Fri 22 Aug 2025 23:38:20 +0000 Manifest this update: Fri 22 Aug 2025 23:38:19 +0000 Manifest next update: Fri 29 Aug 2025 23:38:19 +0000 Files and hashes: 1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: uewSmZd3DJDY/hTTpZuFQNbnQiTn0O/996no77rGaZ0=) 2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: azq2/w0vOg+2swjHdLzDRr5hvzTCb3H9CNSdtAvO6hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Validity Not Before: Aug 22 23:38:19 2025 GMT Not After : Aug 29 23:38:19 2025 GMT Subject: CN=68a8ff6b-b6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:0d:f1:59:60:7c:48:89:77:7f:e5:bd:4d: 81:d9:9a:bb:fb:bb:4b:b4:ef:21:06:a5:6d:c6:22: 36:60:53:1b:0f:a6:c4:7a:b7:55:da:ee:9c:dc:6a: 53:24:23:6d:54:be:85:08:24:b5:38:b5:c2:12:ad: 19:02:1b:88:0d:16:2f:ce:47:e7:24:26:b0:c8:4b: ce:d7:93:ad:3a:ce:42:a6:f6:e0:9d:a4:9f:65:5f: e4:50:4c:83:aa:13:da:9c:92:47:55:ef:ba:f1:de: 09:bf:76:f6:9e:da:53:9d:bf:ee:63:3e:4c:6b:19: 38:76:ab:af:64:0d:e0:8d:93:01:92:21:83:ac:37: fd:2c:17:c8:1b:6b:17:30:a5:ae:54:c1:95:e4:45: 34:f0:58:d1:99:d3:0b:e2:46:c3:b6:23:e9:93:6f: 47:bd:d4:38:74:05:25:91:96:47:2c:69:e3:ef:64: 13:fd:e6:80:e1:c6:08:fe:2b:29:67:fd:2d:ab:66: 01:3d:8e:a0:2b:71:0f:45:08:00:e3:e4:ab:b5:f1: 8a:f7:76:82:4b:79:ee:ce:de:38:9d:80:0c:57:fc: f7:68:25:c5:ac:34:4d:a7:74:d9:a3:42:59:f7:8d: 0c:ee:f4:a0:c3:73:81:b9:55:af:fa:fa:80:b5:a8: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FB:3C:12:E8:42:2F:F1:B4:8C:1D:33:9C:DF:A8:56:E0:CD:53:83 X509v3 Authority Key Identifier: keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:55:4b:7e:ad:f2:05:5c:53:39:c4:63:b3:7b:30:e6:d9:e9: 26:8c:87:c9:19:a4:a2:a9:ee:3c:c4:0c:9f:36:7d:09:9f:ea: 7d:56:32:a1:bb:df:51:61:5a:84:82:6b:4c:e9:8b:23:82:2a: 37:84:76:2f:42:d0:50:e6:1f:c3:67:83:36:de:11:70:ac:e1: 61:2d:7e:a1:06:f9:64:e3:71:72:a9:0a:29:b9:48:b1:59:a6: 1a:52:f8:d6:fa:4f:85:22:c4:a0:59:f3:8b:49:10:60:53:b7: 26:bb:ca:5d:a7:01:37:05:67:55:04:0f:88:86:7b:d9:a7:7d: fe:f7:bb:01:67:3c:f9:54:ed:6f:61:ed:60:31:11:16:8a:56: f9:ae:4e:1a:8b:e6:64:f5:46:a4:00:c2:75:79:eb:48:76:b5: c0:2e:b7:10:a1:ee:8d:34:52:5d:35:da:d1:e6:88:5a:68:f3: 11:db:18:e5:bd:86:5f:be:68:92:e2:cf:7b:de:cb:f6:65:8a: 54:c9:ea:63:ec:ff:e4:41:c7:4b:69:44:ca:b2:c6:f0:f3:c7: 00:b4:ec:21:bc:9e:ba:b5:3d:0c:93:da:cc:4c:da:22:f9:03: 92:32:ce:9f:8f:f7:e0:b8:18:81:73:bc:1b:80:5f:17:6a:c5: 9f:5c:3f:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUzNTIxMTAvBgNVBAUTKENBQTZFQjk5QjNGRTBFRkI2NUQzOEYxNUIyQUFFNERD MzlEQUIzMUQwHhcNMjUwODIyMjMzODE5WhcNMjUwODI5MjMzODE5WjAYMRYwFAYD VQQDEw02OGE4ZmY2Yi1iNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PoN8VlgfEiJd3/lvU2B2Zq7+7tLtO8hBqVtxiI2YFMbD6bEerdV2u6c3GpT JCNtVL6FCCS1OLXCEq0ZAhuIDRYvzkfnJCawyEvO15OtOs5CpvbgnaSfZV/kUEyD qhPanJJHVe+68d4Jv3b2ntpTnb/uYz5Maxk4dquvZA3gjZMBkiGDrDf9LBfIG2sX MKWuVMGV5EU08FjRmdML4kbDtiPpk29HvdQ4dAUlkZZHLGnj72QT/eaA4cYI/isp Z/0tq2YBPY6gK3EPRQgA4+SrtfGK93aCS3nuzt44nYAMV/z3aCXFrDRNp3TZo0JZ 940M7vSgw3OBuVWv+vqAtagqiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPD7PBLo Qi/xtIwdM5zfqFbgzVODMB8GA1UdIwQYMBaAFMqm65mz/g77ZdOPFbKq5Nw52rMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTM1Mi9DOEUyMkU4QTAx MTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2dGwwNDhWc3FyazNEbmFz eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxYnJtYlAtRHZ0bDA0OFZzcXJrM0RuYXN4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTM1Mi9DOEUyMkU4QTAxMTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2 dGwwNDhWc3FyazNEbmFzeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmVUt+rfIFXFM5xGOzezDm2ekmjIfJGaSiqe48xAyfNn0Jn+p9VjKh u99RYVqEgmtM6Ysjgio3hHYvQtBQ5h/DZ4M23hFwrOFhLX6hBvlk43FyqQopuUix WaYaUvjW+k+FIsSgWfOLSRBgU7cmu8pdpwE3BWdVBA+IhnvZp33+97sBZzz5VO1v Ye1gMREWilb5rk4ai+Zk9UakAMJ1eetIdrXALrcQoe6NNFJdNdrR5ohaaPMR2xjl vYZfvmiS4s973sv2ZYpUyepj7P/kQcdLaUTKssbw88cAtOwhvJ66tT0Mk9rMTNoi +QOSMs6fj/fguBiBc7wbgF8XasWfXD9g -----END CERTIFICATE-----Generated at Sun Aug 24 04:48:20 2025 by rpki-client