$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: QQ479ed1fd9H4Ifd9LIjg4VelhyMUXMJ7PlOcAF5QJY= Subject key identifier: 9B:E1:24:35:81:A0:4B:BF:3F:A7:B4:24:FB:24:B6:6F:FB:36:8A:5B Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: 98 Signing time: Sat 23 Aug 2025 06:38:51 +0000 Manifest this update: Sat 23 Aug 2025 06:38:50 +0000 Manifest next update: Sat 30 Aug 2025 06:38:50 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: +lt53GmhfZTkTaa09Ztdxok+Q05ZOWVU2aGdl9C40i8=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Aug 23 06:38:50 2025 GMT Not After : Aug 30 06:38:50 2025 GMT Subject: CN=68a961fb-bc98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:ff:36:d4:af:f0:37:f6:fc:4c:bf:8d:68: 29:cb:8d:3a:6b:9b:93:ba:1b:1d:43:f4:22:20:3a: 2d:60:2e:5c:67:58:b1:38:32:13:42:47:08:b1:4b: 79:4c:32:46:a1:b0:b6:88:54:b7:91:80:0a:8d:ef: a5:f6:76:b7:c4:36:14:c5:ff:77:d2:b5:e3:35:8b: 99:ec:4a:6b:40:e0:a5:53:c2:76:3c:b9:c6:b3:a4: 00:24:ea:e3:5e:24:ab:9a:1b:80:ce:82:ef:93:ec: 56:cb:f6:47:6a:b5:d2:98:52:42:fc:6c:0d:c2:b0: 36:86:ba:e6:d2:b4:68:04:4c:3a:21:45:b4:f9:f1: a6:5e:91:8a:1f:35:0c:8e:42:e5:87:ab:00:cb:ff: e3:35:a6:9e:8a:61:7e:e7:7e:e1:71:ab:d4:d4:a4: d4:87:23:26:4d:96:2d:d3:7a:f2:9c:43:9e:4f:35: 67:b2:fb:38:4c:97:ac:1e:d5:1a:c9:30:92:86:04: a7:b1:0c:d3:70:24:1a:96:5a:54:43:5f:a6:70:92: 67:6b:2f:ce:a5:88:22:77:29:8d:6d:f1:84:9d:be: 93:95:dd:bc:76:8c:5e:7c:be:6e:2a:2d:a8:e4:71: 74:92:81:84:39:d0:b1:d2:be:03:db:d8:e3:1c:cc: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E1:24:35:81:A0:4B:BF:3F:A7:B4:24:FB:24:B6:6F:FB:36:8A:5B X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7e:a7:cb:6e:5a:eb:7c:b6:b5:ea:47:40:aa:f5:a7:0e:7a: 08:5b:86:08:61:f0:11:86:37:a4:d2:f8:0a:2b:16:3f:b3:47: 1c:1e:31:ad:da:d1:81:42:f5:54:83:7e:8c:1e:e9:ec:62:c1: d4:9d:d0:59:2f:31:9e:b8:cc:2c:e0:8f:32:c0:4a:43:99:71: e0:a2:d7:4b:5c:a9:e4:a8:52:8b:d0:64:14:11:63:90:56:39: 11:1f:81:01:16:3e:fa:16:f7:a1:7a:77:b5:d1:8c:a9:df:8f: 41:28:d0:86:2e:69:ef:21:ea:c7:31:22:27:ee:16:32:00:41: 8b:8d:2b:ad:14:58:df:fc:3b:7e:e4:c5:52:7a:fd:c0:f1:33: f7:34:54:23:96:36:14:ea:af:58:9b:c4:62:c2:64:80:27:ba: cc:4e:01:0d:18:55:82:57:e6:27:3c:3b:26:4a:85:ad:3f:9d: 6f:f3:0f:4d:16:bf:a9:85:5b:de:4b:bb:f4:fd:e9:24:a6:c2: 2a:0f:9a:a1:f0:ef:7b:e1:85:e2:5f:20:ff:e0:79:82:4c:25: 1c:81:40:fb:cd:63:9f:db:34:a8:79:42:2b:04:fb:81:d9:61: 5b:04:f9:08:88:ab:62:e1:b4:da:43:e6:ec:83:3a:86:42:5b: f7:67:74:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy NENERjVFNkIwHhcNMjUwODIzMDYzODUwWhcNMjUwODMwMDYzODUwWjAYMRYwFAYD VQQDEw02OGE5NjFmYi1iYzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAj/NtSv8Df2/Ey/jWgpy406a5uTuhsdQ/QiIDotYC5cZ1ixODITQkcIsUt5 TDJGobC2iFS3kYAKje+l9na3xDYUxf930rXjNYuZ7EprQOClU8J2PLnGs6QAJOrj XiSrmhuAzoLvk+xWy/ZHarXSmFJC/GwNwrA2hrrm0rRoBEw6IUW0+fGmXpGKHzUM jkLlh6sAy//jNaaeimF+537hcavU1KTUhyMmTZYt03rynEOeTzVnsvs4TJesHtUa yTCShgSnsQzTcCQallpUQ1+mcJJnay/OpYgidymNbfGEnb6Tld28doxefL5uKi2o 5HF0koGEOdCx0r4D29jjHMxUoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvhJDWB oEu/P6e0JPsktm/7NopbMB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5 QlJzb2FYS2JSbUVremZYbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNfqfLblrrfLa16kdAqvWnDnoIW4YIYfARhjek0vgKKxY/s0ccHjGt 2tGBQvVUg36MHunsYsHUndBZLzGeuMws4I8ywEpDmXHgotdLXKnkqFKL0GQUEWOQ VjkRH4EBFj76Fvehene10Yyp349BKNCGLmnvIerHMSIn7hYyAEGLjSutFFjf/Dt+ 5MVSev3A8TP3NFQjljYU6q9Ym8RiwmSAJ7rMTgENGFWCV+YnPDsmSoWtP51v8w9N Fr+phVveS7v0/ekkpsIqD5qh8O974YXiXyD/4HmCTCUcgUD7zWOf2zSoeUIrBPuB 2WFbBPkIiKti4bTaQ+bsgzqGQlv3Z3Rz -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:19 2025 by rpki-client