$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: /CsRBpUSlruxdIItDQF4fFYId4jbJPfc8mkoIWor3LU= Subject key identifier: 2E:1C:97:50:4F:D9:B9:D1:C5:87:31:71:00:92:DA:1D:C3:1F:37:42 Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 6E Signing time: Sat 23 Aug 2025 07:11:13 +0000 Manifest this update: Sat 23 Aug 2025 07:11:12 +0000 Manifest next update: Sat 30 Aug 2025 07:11:12 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: PLk+pNO4xtht7a9vs8k3qXMXij4B0lycN6nBa4jFpqU=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: Aug 23 07:11:12 2025 GMT Not After : Aug 30 07:11:12 2025 GMT Subject: CN=68a96991-ef87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:51:bd:98:68:02:00:73:ca:bb:04:89:8b: 86:a9:9a:10:0c:51:4f:c4:c9:bb:2e:74:03:72:38: 78:cc:6b:aa:f6:07:53:17:e9:bf:a7:b1:8c:50:7f: c3:fe:2f:0d:95:71:af:d3:67:2c:ac:87:c4:07:a3: 68:30:b2:82:24:6f:65:08:d6:4d:75:92:ea:6f:ce: c8:42:03:b6:6e:8d:8d:d4:71:f1:e8:6d:2c:99:d9: 13:d4:39:41:b5:47:78:b3:15:ba:79:03:5f:cb:8a: 4c:b9:09:b0:fa:be:a1:7b:1b:ce:ef:24:e1:a3:95: 3c:22:00:b0:f8:e5:6c:85:6b:05:56:ab:70:52:4c: b0:a5:a3:9d:64:52:8e:7a:d1:e2:a0:be:8d:c7:8f: c0:8d:fe:e9:40:23:03:89:a1:20:a6:40:01:6c:01: 71:0f:02:9e:e1:7e:4b:09:a1:33:cb:ce:98:c6:16: ea:e5:bf:44:b9:6d:00:31:ee:3f:d0:1b:03:22:c8: 4d:5b:08:26:45:c6:05:a4:12:37:cc:83:91:09:96: b1:55:4c:99:d1:f1:5a:72:56:7e:f9:2d:8a:de:5c: 7b:d0:86:20:fb:17:e1:52:da:10:31:6b:ee:76:3d: dc:16:e4:ae:44:66:bf:c2:41:ff:9d:86:73:44:37: eb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1C:97:50:4F:D9:B9:D1:C5:87:31:71:00:92:DA:1D:C3:1F:37:42 X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:6b:ad:59:74:62:24:77:8f:bd:21:e4:38:9a:5f:75:15:02: c1:1c:42:a5:60:d5:5b:5a:b4:04:cd:17:34:d5:34:59:89:43: fc:7a:14:c1:dc:71:07:72:9f:96:10:0d:0a:d2:40:cb:28:d2: 46:b2:59:d6:22:25:c4:05:50:11:59:75:6e:db:37:13:52:42: 23:fd:64:f9:54:20:19:f2:9d:38:ac:77:f1:72:b3:3d:f6:15: 68:e3:ac:b0:ba:6c:a9:f0:73:50:28:fe:64:0b:92:df:f0:5c: 60:c0:8f:87:46:e9:c2:41:ff:3d:c5:e8:c7:62:81:84:45:20: 4c:58:6b:7f:74:95:9a:dd:dd:0c:44:c0:7b:b7:ba:42:63:35: de:a7:cd:fc:52:ce:1f:b6:ea:f3:4b:9c:60:5b:eb:91:81:59: 27:df:63:08:f1:ca:61:e2:c6:64:8d:76:9a:09:c4:27:56:c5: 83:66:1b:1a:39:35:1a:7b:db:b8:62:d2:75:47:ef:40:87:90: 93:6d:6a:ed:4a:aa:48:58:d2:18:bc:2b:c9:86:6d:4d:be:ec: 7c:d1:a3:32:dc:65:8b:8e:58:38:ee:2f:e0:30:6f:e8:bf:8f: 99:f4:dd:00:54:ff:0f:22:1f:e8:67:32:28:d4:8c:c4:d6:8b: 1a:30:e5:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODEwMzExMC8GA1UEBRMoNjAzMUQwNjAxRDVDMkQ4N0FENjYyMzYxRTYzQkZGRDkx RTA0MDczMzAeFw0yNTA4MjMwNzExMTJaFw0yNTA4MzAwNzExMTJaMBgxFjAUBgNV BAMTDTY4YTk2OTkxLWVmODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIKVG9mGgCAHPKuwSJi4apmhAMUU/EybsudANyOHjMa6r2B1MX6b+nsYxQf8P+ Lw2Vca/TZyysh8QHo2gwsoIkb2UI1k11kupvzshCA7ZujY3UcfHobSyZ2RPUOUG1 R3izFbp5A1/Liky5CbD6vqF7G87vJOGjlTwiALD45WyFawVWq3BSTLClo51kUo56 0eKgvo3Hj8CN/ulAIwOJoSCmQAFsAXEPAp7hfksJoTPLzpjGFurlv0S5bQAx7j/Q GwMiyE1bCCZFxgWkEjfMg5EJlrFVTJnR8VpyVn75LYreXHvQhiD7F+FS2hAxa+52 PdwW5K5EZr/CQf+dhnNEN+sZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULhyXUE/Z udHFhzFxAJLaHcMfN0IwHwYDVR0jBBgwFoAUYDHQYB1cLYetZiNh5jv/2R4EBzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MTAzLzkzREM3NTRFREUw MTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURIUVlCMWNMWWV0WmlOaDVqdl8yUjRFQnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MTAzLzkzREM3NTRFREUwMTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFll dFppTmg1anZfMlI0RUJ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL9rrVl0YiR3j70h5DiaX3UVAsEcQqVg1VtatATNFzTVNFmJQ/x6FMHc cQdyn5YQDQrSQMso0kayWdYiJcQFUBFZdW7bNxNSQiP9ZPlUIBnynTisd/Fysz32 FWjjrLC6bKnwc1Ao/mQLkt/wXGDAj4dG6cJB/z3F6MdigYRFIExYa390lZrd3QxE wHu3ukJjNd6nzfxSzh+26vNLnGBb65GBWSffYwjxymHixmSNdpoJxCdWxYNmGxo5 NRp727hi0nVH70CHkJNtau1KqkhY0hi8K8mGbU2+7HzRozLcZYuOWDjuL+Awb+i/ j5n03QBU/w8iH+hnMijUjMTWixow5a4= -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:51 2025 by rpki-client