$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json) Hash identifier: GCBCaCJiUV4PTfKSqbZCDITCLgoH8jwOum+eY11pqy4= Subject key identifier: B8:84:E3:43:DE:6C:76:50:C4:07:57:6F:F2:C6:C6:88:F9:2B:C1:66 Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft Manifest number: 06A9 Signing time: Fri 22 Aug 2025 22:17:46 +0000 Manifest this update: Fri 22 Aug 2025 22:17:46 +0000 Manifest next update: Fri 29 Aug 2025 22:17:46 +0000 Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: PbbEoaAi0SZ+em5jDh/+FQMKSKVZgWxBSXExT4f4UJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Validity Not Before: Aug 22 22:17:46 2025 GMT Not After : Aug 29 22:17:46 2025 GMT Subject: CN=68a8ec8a-eb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:54:72:99:32:e6:54:a0:e9:67:9e:55:4e: 62:e0:c9:a5:59:d0:4f:8c:29:75:86:e4:17:00:15: 9f:03:38:25:40:4e:e3:e9:12:a8:e2:06:98:ee:92: 28:39:75:6c:e6:77:cc:6a:05:60:56:14:46:e9:01: 2c:e0:fe:95:32:a8:fa:59:b0:6f:9e:77:1f:be:40: f6:f7:3c:04:8b:a8:a4:6c:dd:34:53:18:e9:0f:63: cd:5e:38:b6:86:0f:52:e9:0a:91:fc:1a:c4:ce:db: f5:71:ee:e6:36:47:7b:fd:64:c9:15:eb:a1:2f:28: 4b:b0:02:4e:2f:41:d5:f9:37:a7:a5:92:ba:f2:38: 11:fb:b6:5c:d9:47:85:84:eb:ee:40:e4:53:fb:41: 4a:bf:93:fb:39:9f:7f:45:f4:65:33:af:b0:63:d0: 8a:e6:dc:51:a0:09:a6:6d:5d:fe:87:4e:8b:e1:ab: 4b:fc:14:0a:f6:d9:d8:69:4d:b3:82:43:4c:40:cc: e5:d9:29:79:99:69:81:de:28:9c:d7:db:2e:2d:34: 19:ef:a2:3f:be:9f:9b:c3:a2:f8:47:af:a4:6d:ca: 63:75:e4:87:0f:01:46:96:eb:de:60:c3:b5:51:e4: f9:75:55:0d:c2:56:b8:fe:0d:79:1e:78:10:02:13: e3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:84:E3:43:DE:6C:76:50:C4:07:57:6F:F2:C6:C6:88:F9:2B:C1:66 X509v3 Authority Key Identifier: keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a8:8e:b1:48:5a:98:b5:c7:0e:da:09:f2:b3:9b:9f:cb:28: b1:98:17:de:5f:da:63:46:e2:8e:d2:69:a9:6a:d8:25:78:c5: 73:2d:05:e1:8a:52:ae:72:98:9d:a8:7d:49:2e:7a:35:96:09: 83:2a:5d:10:ff:d3:c7:94:8b:ed:72:1b:44:0d:e6:13:04:8a: 79:59:af:43:5d:52:fa:93:8f:83:71:d3:d9:04:31:38:4d:b4: 34:f3:88:f1:31:08:f6:20:14:a5:9c:6c:74:32:59:25:b2:e2: e8:61:23:58:40:8a:4f:6e:b4:63:3e:04:6a:eb:af:0c:b4:28: d9:a9:44:27:4c:e0:74:86:26:57:23:f0:34:38:25:df:7b:71: 6c:36:bf:2c:e6:a5:77:5c:49:5e:b3:dc:a5:07:24:91:22:37: 8b:41:95:b8:d5:a6:e1:50:d0:3b:e6:7d:1e:2b:11:7c:53:50: a7:a1:43:0a:c7:39:81:e9:91:35:9a:96:94:3f:64:62:b2:73: 16:8b:aa:ee:9f:64:aa:43:0d:69:23:34:11:23:d4:0d:24:b9: 6d:b8:98:8e:a2:35:c5:74:fe:3a:27:bc:4c:79:6f:10:a1:8e: 3e:bc:5f:68:90:b8:cf:d2:2b:e2:06:f6:e8:0f:5e:ac:c9:9b: c2:c8:5c:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2QUE0MTFEMkUx OTk3NzkwMTcwHhcNMjUwODIyMjIxNzQ2WhcNMjUwODI5MjIxNzQ2WjAYMRYwFAYD VQQDEw02OGE4ZWM4YS1lYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD1Ucpky5lSg6WeeVU5i4MmlWdBPjCl1huQXABWfAzglQE7j6RKo4gaY7pIo OXVs5nfMagVgVhRG6QEs4P6VMqj6WbBvnncfvkD29zwEi6ikbN00UxjpD2PNXji2 hg9S6QqR/BrEztv1ce7mNkd7/WTJFeuhLyhLsAJOL0HV+TenpZK68jgR+7Zc2UeF hOvuQORT+0FKv5P7OZ9/RfRlM6+wY9CK5txRoAmmbV3+h06L4atL/BQK9tnYaU2z gkNMQMzl2Sl5mWmB3iic19suLTQZ76I/vp+bw6L4R6+kbcpjdeSHDwFGluveYMO1 UeT5dVUNwla4/g15HngQAhPjEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiE40Pe bHZQxAdXb/LGxoj5K8FmMB8GA1UdIwQYMBaAFMiNVbe/1UOIthAgaqQR0uGZd5AX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC8xQjg4RDJBMDc0 RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0aTJFQ0JxcEJIUzRabDNr QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJMVZ0N19WUTRpMkVDQnFwQkhTNFpsM2tCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0 aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdqI6xSFqYtccO2gnys5ufyyixmBfeX9pjRuKO0mmpatgleMVzLQXh ilKucpidqH1JLno1lgmDKl0Q/9PHlIvtchtEDeYTBIp5Wa9DXVL6k4+DcdPZBDE4 TbQ084jxMQj2IBSlnGx0MlklsuLoYSNYQIpPbrRjPgRq668MtCjZqUQnTOB0hiZX I/A0OCXfe3FsNr8s5qV3XEles9ylBySRIjeLQZW41abhUNA75n0eKxF8U1CnoUMK xzmB6ZE1mpaUP2RisnMWi6run2SqQw1pIzQRI9QNJLltuJiOojXFdP46J7xMeW8Q oY4+vF9okLjP0iviBvboD16syZvCyFz9 -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:25 2025 by rpki-client