$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json) Hash identifier: +ItvKNC6MT75w4htHyLtRIG17FqEs8CXJ3wVhrgrX3o= Subject key identifier: 14:8D:7F:E2:E4:67:29:F6:AC:3B:D2:4D:7E:0B:4B:9C:D4:EC:7B:40 Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft Manifest number: 0C90 Signing time: Fri 22 Aug 2025 18:23:45 +0000 Manifest this update: Fri 22 Aug 2025 18:23:45 +0000 Manifest next update: Fri 29 Aug 2025 18:23:45 +0000 Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: OG2ttk703JiP+2OARmIkzBgGDtrYRsBZrXns6zSalAQ=) 2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: VMJPLLhedlHAk4tQ5HhxEAJ5POLeqMTVPXSXcNzn0f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Validity Not Before: Aug 22 18:23:45 2025 GMT Not After : Aug 29 18:23:45 2025 GMT Subject: CN=68a8b5b1-bb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:1d:e5:f6:c9:d1:ca:24:1c:2e:8e:e2:49: b3:0c:ab:76:bd:c1:ee:32:7d:25:08:80:3c:54:d4: 38:cf:b6:1d:fc:c5:7a:12:38:f3:e6:c2:ef:6d:76: a8:1b:24:46:c5:da:a0:78:dd:40:80:df:37:d2:79: a1:6c:39:e8:91:cf:c8:0c:f9:d6:fa:8f:ff:56:81: 4d:c5:8f:43:a3:60:83:5a:0f:2c:3c:77:8b:71:08: b6:53:b2:f1:23:0e:1b:bc:fd:f0:7e:57:5c:af:fa: 3f:32:29:0c:91:2d:95:4c:8c:5c:33:0e:93:88:0a: 73:b8:37:cb:4c:13:24:f3:4a:90:17:22:7f:1c:89: 42:27:83:ff:b3:9d:99:8d:2d:c5:59:e0:71:70:fe: 4a:e7:ab:71:2b:b7:3d:35:de:a1:d0:45:10:c5:47: 49:ec:a1:4b:32:09:2a:80:98:63:91:c6:fb:9a:6e: 5f:b9:2f:b2:53:d1:93:33:66:fe:f1:7f:8f:c7:0c: a0:26:9c:d9:c5:70:8b:55:02:29:4c:06:88:fb:98: e8:c5:d9:4a:11:e1:c7:ed:84:2f:7c:d5:57:5f:99: f1:3c:d8:eb:12:0d:15:f4:5f:5b:08:a2:d9:77:db: b5:dd:0c:d1:51:00:c6:03:71:80:6a:8b:3b:b7:a6: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8D:7F:E2:E4:67:29:F6:AC:3B:D2:4D:7E:0B:4B:9C:D4:EC:7B:40 X509v3 Authority Key Identifier: keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:30:f0:44:f8:af:c7:95:5e:6c:fb:46:ea:0c:96:58:f6:24: 6c:7d:94:8d:50:34:14:e9:fe:e1:76:db:90:b0:eb:7b:bb:e2: f1:92:cb:e8:7f:30:ac:5b:26:83:be:e2:ac:ac:c1:8a:7f:68: f1:a4:aa:8b:ed:2f:ce:78:63:4e:d7:c1:9f:88:f5:7a:f5:ac: 1e:c8:d5:bb:1e:e9:1d:6c:59:5d:57:83:4a:ef:b4:8d:0c:de: fa:e6:0e:2c:13:62:cf:86:e0:e4:d8:d2:0d:96:7b:f5:23:d8: 2a:9b:2d:19:b1:fd:a5:86:74:a0:5e:6d:eb:0f:85:76:65:71: 25:03:40:9a:35:19:9e:0b:f1:4b:e6:03:b2:61:74:1e:12:97: 63:07:9c:24:c4:9b:ab:ea:f5:f4:1e:d9:89:02:e6:1b:06:4b: ec:0c:76:a7:74:60:6b:a2:2e:e5:be:c2:70:ce:13:da:f9:99: 67:0d:3a:dc:be:77:01:a8:fc:26:c1:3e:1a:b8:e8:41:72:ab: a5:7a:06:54:d1:0b:50:ae:b5:69:5c:c8:81:6e:5c:74:30:1e: 97:5e:8a:5e:81:a7:19:16:49:ff:8c:94:8a:d1:7f:71:b5:5f: a5:fa:90:2c:dd:5c:6c:c8:dc:45:bf:b4:93:47:08:af:b8:28: 7c:f2:88:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NkIxMTAvBgNVBAUTKDYyMkVFNzU0MzZENkYyRjM5RkIyM0QyQ0VCMjIzMzcx ODQ1NzNERkUwHhcNMjUwODIyMTgyMzQ1WhcNMjUwODI5MTgyMzQ1WjAYMRYwFAYD VQQDEw02OGE4YjViMS1iYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxx0d5fbJ0cokHC6O4kmzDKt2vcHuMn0lCIA8VNQ4z7Yd/MV6Ejjz5sLvbXao GyRGxdqgeN1AgN830nmhbDnokc/IDPnW+o//VoFNxY9Do2CDWg8sPHeLcQi2U7Lx Iw4bvP3wfldcr/o/MikMkS2VTIxcMw6TiApzuDfLTBMk80qQFyJ/HIlCJ4P/s52Z jS3FWeBxcP5K56txK7c9Nd6h0EUQxUdJ7KFLMgkqgJhjkcb7mm5fuS+yU9GTM2b+ 8X+PxwygJpzZxXCLVQIpTAaI+5joxdlKEeHH7YQvfNVXX5nxPNjrEg0V9F9bCKLZ d9u13QzRUQDGA3GAaos7t6YUUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSNf+Lk Zyn2rDvSTX4LS5zU7HtAMB8GA1UdIwQYMBaAFGIu51Q21vLzn7I9LOsiM3GEVz3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ2Qi80OTMxRUU0NjAw N0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2T2ZzajBzNnlJemNZUlhQ ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpN25WRGJXOHZPZnNqMHM2eUl6Y1lSWFBmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjQ2Qi80OTMxRUU0NjAwN0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2 T2ZzajBzNnlJemNZUlhQZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBMPBE+K/HlV5s+0bqDJZY9iRsfZSNUDQU6f7hdtuQsOt7u+Lxksvo fzCsWyaDvuKsrMGKf2jxpKqL7S/OeGNO18GfiPV69aweyNW7HukdbFldV4NK77SN DN765g4sE2LPhuDk2NINlnv1I9gqmy0Zsf2lhnSgXm3rD4V2ZXElA0CaNRmeC/FL 5gOyYXQeEpdjB5wkxJur6vX0HtmJAuYbBkvsDHandGBroi7lvsJwzhPa+ZlnDTrc vncBqPwmwT4auOhBcqulegZU0QtQrrVpXMiBblx0MB6XXopegacZFkn/jJSK0X9x tV+l+pAs3VxsyNxFv7STRwivuCh88oh0 -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:59 2025 by rpki-client