$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json) Hash identifier: +jVnDv3kP7PTlrAEPtK6Yu4dXJWED3tLjgXEJcqlf8Y= Subject key identifier: EA:CE:A9:B2:E0:BD:3B:9D:CA:F6:30:51:2F:BB:99:9D:74:0B:C1:72 Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft Manifest number: D7 Signing time: Sat 23 Aug 2025 05:48:12 +0000 Manifest this update: Sat 23 Aug 2025 05:48:11 +0000 Manifest next update: Sat 30 Aug 2025 05:48:11 +0000 Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: Lve5KooAXctSLY+oBosi3gfj1IwAimQzPmaRS1ERiMA=) 2: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: BB5/p5ExgMeQd5Go8UNqIFMq/xQWZ4tohFPvDD4Zv98=) 3: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: SDdYRvXnG416X1QTBXKH/HiVb0zTXNC7wcw8Ko4jVbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Validity Not Before: Aug 23 05:48:11 2025 GMT Not After : Aug 30 05:48:11 2025 GMT Subject: CN=68a9561c-4cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:4f:f0:f0:70:d4:4a:26:d6:4b:69:46:18: d1:f8:25:f9:7e:3b:b3:bb:26:55:58:5f:bb:db:e9: cd:27:37:4c:2f:a8:41:cc:d9:3c:69:09:9d:c9:0f: 0d:a8:91:41:10:bc:0a:80:17:d0:23:fb:fc:c8:04: 97:16:b2:35:63:b2:ea:96:e5:ab:e7:49:5b:79:07: c0:37:be:bc:28:1e:8e:9f:99:22:0f:94:21:1f:87: 2d:c2:35:30:9b:c9:15:5a:6a:93:f1:a4:73:d0:30: bc:c7:9e:5f:da:44:b3:d1:09:0d:a2:4f:a4:34:7b: 9b:dc:48:fe:04:7d:79:35:5d:15:72:8b:0f:cd:51: e0:3d:d8:20:8e:65:b5:66:a8:b2:d5:90:de:3c:13: 8b:c5:42:7f:bf:b3:f0:f4:de:cc:8d:5f:e0:a1:1e: 30:53:ed:03:38:c8:f4:61:c9:17:9b:62:a5:3d:2b: 96:89:83:3c:4e:7c:3d:86:b9:54:2a:0e:fd:86:21: 0a:cb:52:33:09:31:ca:fb:f7:41:72:05:ba:b3:8a: 39:10:6f:d3:b1:46:ca:5e:43:7b:ea:87:ca:d7:8c: 9b:40:5c:80:98:55:a0:5b:26:e0:9d:1c:c9:63:22: a2:ca:ce:19:f4:b1:f0:1f:b4:f4:f1:43:27:76:f6: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CE:A9:B2:E0:BD:3B:9D:CA:F6:30:51:2F:BB:99:9D:74:0B:C1:72 X509v3 Authority Key Identifier: keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:49:7f:57:0e:a5:12:48:49:34:02:83:05:39:65:64:bc:e8: 60:d6:2a:bf:cf:3d:96:60:87:1e:bb:75:0e:f7:05:b4:8d:bf: 2e:c7:3e:3e:7e:67:c9:c7:3f:99:34:7a:f3:c3:73:eb:7d:25: 5a:41:5c:7f:26:72:a9:bb:c9:4c:e2:fe:93:16:23:9c:c3:92: 78:a9:ed:88:02:7c:41:51:8a:75:ba:02:a6:40:54:f7:a3:9c: 95:38:4a:cc:34:6f:1e:bd:13:a5:53:03:04:55:87:53:cb:60: 7c:2a:06:c3:27:ea:de:7c:13:b9:8d:f9:58:17:56:39:bf:31: 07:bc:1f:c0:07:e4:ce:56:53:0a:cc:f3:f6:63:d4:60:83:34: 6b:9c:4d:43:55:bb:16:e1:42:12:11:4a:bb:3c:7c:d2:d2:9b: 88:42:f3:3b:df:00:47:f5:3b:62:74:c5:74:50:81:97:aa:73: 2b:13:e2:d3:b0:66:13:41:c7:2f:57:89:db:0c:a7:d1:b0:db: e6:b3:d3:7c:26:c3:d9:25:85:52:5c:29:b8:aa:23:5a:51:98: dd:dd:e6:c9:e3:e9:e3:1e:7b:fb:a7:89:eb:a8:74:6e:aa:a5: 84:90:32:32:1e:c4:05:35:35:0a:96:b8:03:4a:1e:94:ad:c9: 1d:29:c9:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw RjAzQkY3QzYwHhcNMjUwODIzMDU0ODExWhcNMjUwODMwMDU0ODExWjAYMRYwFAYD VQQDEw02OGE5NTYxYy00Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3dP8PBw1Eom1ktpRhjR+CX5fjuzuyZVWF+72+nNJzdML6hBzNk8aQmdyQ8N qJFBELwKgBfQI/v8yASXFrI1Y7LqluWr50lbeQfAN768KB6On5kiD5QhH4ctwjUw m8kVWmqT8aRz0DC8x55f2kSz0QkNok+kNHub3Ej+BH15NV0VcosPzVHgPdggjmW1 Zqiy1ZDePBOLxUJ/v7Pw9N7MjV/goR4wU+0DOMj0YckXm2KlPSuWiYM8Tnw9hrlU Kg79hiEKy1IzCTHK+/dBcgW6s4o5EG/TsUbKXkN76ofK14ybQFyAmFWgWybgnRzJ YyKiys4Z9LHwH7T08UMndvauowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrOqbLg vTudyvYwUS+7mZ10C8FyMB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5 OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi82RDIwNzVGNjQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NP MWJ1dTF4Y2swaUlQQTc5OFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApSX9XDqUSSEk0AoMFOWVkvOhg1iq/zz2WYIceu3UO9wW0jb8uxz4+ fmfJxz+ZNHrzw3PrfSVaQVx/JnKpu8lM4v6TFiOcw5J4qe2IAnxBUYp1ugKmQFT3 o5yVOErMNG8evROlUwMEVYdTy2B8KgbDJ+refBO5jflYF1Y5vzEHvB/AB+TOVlMK zPP2Y9RggzRrnE1DVbsW4UISEUq7PHzS0puIQvM73wBH9TtidMV0UIGXqnMrE+LT sGYTQccvV4nbDKfRsNvms9N8JsPZJYVSXCm4qiNaUZjd3ebJ4+njHnv7p4nrqHRu qqWEkDIyHsQFNTUKlrgDSh6UrckdKckj -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:10 2025 by rpki-client