$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft File: YrvIR87fi9d90MN073t-ZMJQ470.mft (raw, json) Hash identifier: paANNv2zixIcX4gw9Su8DhURGHVM3HxdBCedRlSYQ6A= Subject key identifier: 0F:BB:34:28:D2:06:33:1E:8B:97:A5:81:A1:B4:14:38:26:B1:90:73 Authority key identifier: 62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD Certificate issuer: /CN=A91EF634/serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft Manifest number: 04 Signing time: Sat 23 Aug 2025 08:24:36 +0000 Manifest this update: Sat 23 Aug 2025 08:24:36 +0000 Manifest next update: Sat 30 Aug 2025 08:24:36 +0000 Files and hashes: 1: YrvIR87fi9d90MN073t-ZMJQ470.crl (hash: 5iPwtEwAbnRVGNz5kw8rYl7o+CM48IfNI+NX5UYqeb8=) 2: 746CEA6E7CD911F0942A980CC4F9AE02.roa (hash: dtwgvFiT0agZNrnZV5YlHwJWndOHgTVg9Hlvyneymg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF634, serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD Validity Not Before: Aug 23 08:24:36 2025 GMT Not After : Aug 30 08:24:36 2025 GMT Subject: CN=68a97ac4-a2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9c:7f:9d:b3:e0:91:bf:12:33:90:27:7a:9f: e8:2f:e9:c0:ac:f2:06:fe:62:f1:2f:70:34:28:3f: 1b:45:c9:64:00:7c:fc:67:03:6e:d0:7c:aa:ab:df: e3:0d:bb:a4:ba:e3:36:a6:ea:76:c5:7d:f7:d2:f9: 39:4b:bd:95:6c:bd:59:bc:6e:a3:bc:23:b2:ef:08: 10:8d:5c:e9:c0:dd:ac:71:1b:22:6e:fb:a0:50:32: 96:cb:87:84:08:02:31:7a:46:07:70:16:7a:0e:dc: 27:0f:e2:12:c3:35:b6:f8:50:74:27:6b:7b:bb:e3: 4b:be:fc:0c:6a:48:30:46:2c:1c:20:6a:83:59:90: e3:9e:84:71:79:9b:81:6f:e1:c1:fc:80:25:c6:2d: 7a:ea:57:b5:21:ea:b6:d8:8d:74:ec:ef:ae:f3:31: 1a:11:f1:4f:fc:85:79:a9:85:7e:ce:4d:2a:ba:4f: e0:00:54:5e:89:90:44:cf:98:12:0d:b5:1e:c9:42: fb:f7:7a:72:c0:aa:89:e3:a9:27:78:69:3e:31:45: 6d:b1:a9:b3:1a:d2:63:62:bc:6a:61:a6:fc:37:3a: 80:cc:ec:bc:42:31:3e:b3:f9:39:0a:94:0f:16:39: 00:e3:7f:ae:bf:32:0c:cf:18:70:ce:d6:01:64:0d: 16:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BB:34:28:D2:06:33:1E:8B:97:A5:81:A1:B4:14:38:26:B1:90:73 X509v3 Authority Key Identifier: keyid:62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:01:8b:eb:91:9f:a9:34:d4:f5:19:da:eb:ef:1b:cd:94:ea: 3c:5e:4c:8c:9e:1c:01:98:f1:fc:f9:a2:a1:b2:ac:12:29:c7: 3f:84:a6:28:b4:4d:fc:c6:c1:92:13:9e:ca:d7:16:9f:9d:2d: 97:72:f8:35:6b:8f:2d:9f:db:c3:2e:14:92:72:96:14:e9:20: 14:06:0d:67:b5:bf:5b:6f:13:d7:47:5b:1d:3a:0a:3e:b5:ff: 63:0a:29:91:86:0a:32:3d:9a:f1:4d:5a:24:17:fa:d3:b3:b5: 7e:ed:32:16:d6:eb:a6:59:2e:a9:dd:ec:c3:31:a4:69:dc:26: ad:4b:06:40:d3:5c:f8:cb:ea:cc:df:d8:1d:8d:62:4f:f2:b9: 76:12:a6:fc:ea:58:48:94:0b:fb:3e:a8:13:d2:a2:b2:45:eb: eb:37:4e:a6:e3:ec:9a:61:9d:80:ca:d6:e7:c4:0d:e6:54:d1: 51:6c:23:db:b3:9e:aa:44:e6:e7:d9:07:20:56:88:ab:4c:9a: 02:95:d0:ce:51:17:36:0c:77:54:d7:7d:a0:ea:49:42:a3:6d: 80:52:11:ea:5c:3a:7f:e6:a0:59:c7:7e:16:27:84:60:f6:1f: 13:cb:c8:00:0c:7a:99:72:ca:34:fa:36:8a:11:06:e4:c1:b7: 2d:14:87:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjYzNDExMC8GA1UEBRMoNjJCQkM4NDdDRURGOEJENzdERDBDMzc0RUY3QjdFNjRD MjUwRTNCRDAeFw0yNTA4MjMwODI0MzZaFw0yNTA4MzAwODI0MzZaMBgxFjAUBgNV BAMTDTY4YTk3YWM0LWEyYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsnH+ds+CRvxIzkCd6n+gv6cCs8gb+YvEvcDQoPxtFyWQAfPxnA27QfKqr3+MN u6S64zam6nbFfffS+TlLvZVsvVm8bqO8I7LvCBCNXOnA3axxGyJu+6BQMpbLh4QI AjF6RgdwFnoO3CcP4hLDNbb4UHQna3u740u+/AxqSDBGLBwgaoNZkOOehHF5m4Fv 4cH8gCXGLXrqV7Uh6rbYjXTs767zMRoR8U/8hXmphX7OTSq6T+AAVF6JkETPmBIN tR7JQvv3enLAqonjqSd4aT4xRW2xqbMa0mNivGphpvw3OoDM7LxCMT6z+TkKlA8W OQDjf66/MgzPGHDO1gFkDRbjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD7s0KNIG Mx6Ll6WBobQUOCaxkHMwHwYDVR0jBBgwFoAUYrvIR87fi9d90MN073t+ZMJQ470w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGNjM0LzFCRkRFRTVBN0NE OTExRjBBOUE0M0QwQkM0RjlBRTAyL1lydklSODdmaTlkOTBNTjA3M3QtWk1KUTQ3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXJ2SVI4N2ZpOWQ5ME1OMDczdC1aTUpRNDcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG NjM0LzFCRkRFRTVBN0NEOTExRjBBOUE0M0QwQkM0RjlBRTAyL1lydklSODdmaTlk OTBNTjA3M3QtWk1KUTQ3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACQBi+uRn6k01PUZ2uvvG82U6jxeTIyeHAGY8fz5oqGyrBIpxz+Epii0 TfzGwZITnsrXFp+dLZdy+DVrjy2f28MuFJJylhTpIBQGDWe1v1tvE9dHWx06Cj61 /2MKKZGGCjI9mvFNWiQX+tOztX7tMhbW66ZZLqnd7MMxpGncJq1LBkDTXPjL6szf 2B2NYk/yuXYSpvzqWEiUC/s+qBPSorJF6+s3Tqbj7JphnYDK1ufEDeZU0VFsI9uz nqpE5ufZByBWiKtMmgKV0M5RFzYMd1TXfaDqSUKjbYBSEepcOn/moFnHfhYnhGD2 HxPLyAAMeplyyjT6NooRBuTBty0Uh3E= -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:39 2025 by rpki-client