$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json) Hash identifier: YpAQYNHx+riz2egZ81+/jg1BpCIoUFqVkeTQ+/lt5UA= Subject key identifier: DC:E3:54:CB:4A:6C:31:55:32:7F:8B:C4:FB:36:2F:DF:13:28:D4:85 Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Certificate serial: 0B85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft Manifest number: 1409 Signing time: Fri 22 Aug 2025 19:09:56 +0000 Manifest this update: Fri 22 Aug 2025 19:09:56 +0000 Manifest next update: Fri 29 Aug 2025 19:09:56 +0000 Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: dTc8PM8VimlJINUZYFvljIk9OurPi75kSKBrJlqkbMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Validity Not Before: Aug 22 19:09:56 2025 GMT Not After : Aug 29 19:09:56 2025 GMT Subject: CN=68a8c084-cdfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:b0:86:45:30:b8:14:53:b1:19:90:6f:a0: 11:22:2d:68:d1:eb:58:6d:c0:e9:c3:b4:e7:83:42: 85:fe:32:68:6a:71:d6:71:73:44:d8:19:c8:70:e8: 45:a1:b2:b2:83:56:56:4a:7f:9b:d8:ca:d2:d5:2d: 66:87:fe:c4:3d:52:df:0d:56:b2:76:93:6a:a2:ef: 07:1f:bd:ea:59:27:86:66:2c:ec:68:29:f5:74:3a: 80:9f:ee:35:9a:25:c1:c1:50:5a:5d:ba:89:e0:98: e6:f0:4d:9b:08:68:66:e1:57:1f:5f:be:b4:09:26: 9c:68:ae:68:c4:be:dc:21:d9:67:44:96:13:80:ce: 9b:83:2c:ec:8d:99:8a:72:2f:1b:06:37:04:42:55: 6c:97:6e:71:21:0f:65:79:b7:bd:63:4e:0d:b6:d0: f7:8e:c0:36:12:76:33:ab:a8:3d:04:8f:3b:88:36: 38:eb:42:7d:a4:38:9f:3e:8a:1b:64:b4:f4:f2:55: 42:ff:ec:d4:01:c6:9b:e6:8e:07:70:a7:20:25:7c: 24:8f:c2:46:c4:6d:1b:42:96:e9:77:cc:98:96:8e: 2a:8b:d0:a3:09:e2:ad:4d:ab:35:2b:c7:c7:98:64: 31:d0:1f:1a:a4:b3:d0:94:e5:2a:e1:a7:0e:16:f4: 7e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E3:54:CB:4A:6C:31:55:32:7F:8B:C4:FB:36:2F:DF:13:28:D4:85 X509v3 Authority Key Identifier: keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:5c:60:b9:62:06:5f:d5:85:fe:be:ed:8b:b3:bd:4a:8f:24: b6:77:3a:35:0c:2f:c5:16:f0:6d:3b:48:6b:b7:c5:bd:4f:d2: cf:bd:f7:87:e9:0c:3b:6b:d7:41:fb:e0:90:93:c0:85:35:29: 8c:da:71:c7:0c:91:06:a8:bb:c2:3e:4e:01:09:2a:5c:11:f4: 83:33:af:f7:05:34:9f:ea:5c:cc:87:e9:31:da:41:c5:e3:06: 04:d8:a1:76:26:6e:04:c5:7b:0f:cb:62:d3:ac:b3:8c:42:69: 71:e1:b5:c3:54:43:01:fc:1e:9f:04:ad:1a:21:38:51:97:61: 2c:6d:4a:19:70:3a:fb:29:85:af:cc:73:72:57:22:2b:d4:8a: 0f:a6:42:f3:dd:6b:e6:61:56:b5:8a:3d:c4:fd:1b:b7:96:e5: cb:c5:97:c3:6f:47:90:38:e7:fb:d5:2c:ad:68:a0:f0:17:f8: ef:ed:24:9b:1d:a6:50:8d:1a:ef:0a:f6:bf:ff:7b:78:b7:53: 96:21:5c:b2:61:16:69:88:d1:16:12:06:80:51:a3:42:bd:b4: 03:80:3f:6b:37:87:15:f8:af:98:af:f8:e1:0d:db:51:3a:55: 3f:e5:3b:ed:09:69:ea:ac:2d:c3:23:32:b1:2d:0c:6e:f0:f0: 6a:ab:81:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx MjdBRjI5NUUwHhcNMjUwODIyMTkwOTU2WhcNMjUwODI5MTkwOTU2WjAYMRYwFAYD VQQDEw02OGE4YzA4NC1jZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDiwhkUwuBRTsRmQb6ARIi1o0etYbcDpw7Tng0KF/jJoanHWcXNE2BnIcOhF obKyg1ZWSn+b2MrS1S1mh/7EPVLfDVaydpNqou8HH73qWSeGZizsaCn1dDqAn+41 miXBwVBaXbqJ4Jjm8E2bCGhm4VcfX760CSacaK5oxL7cIdlnRJYTgM6bgyzsjZmK ci8bBjcEQlVsl25xIQ9lebe9Y04NttD3jsA2EnYzq6g9BI87iDY460J9pDifPoob ZLT08lVC/+zUAcab5o4HcKcgJXwkj8JGxG0bQpbpd8yYlo4qi9CjCeKtTas1K8fH mGQx0B8apLPQlOUq4acOFvR+LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzjVMtK bDFVMn+LxPs2L98TKNSFMB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw QzRKU1lkWHNJS2tTZXZLVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgXGC5YgZf1YX+vu2Ls71KjyS2dzo1DC/FFvBtO0hrt8W9T9LPvfeH 6Qw7a9dB++CQk8CFNSmM2nHHDJEGqLvCPk4BCSpcEfSDM6/3BTSf6lzMh+kx2kHF 4wYE2KF2Jm4ExXsPy2LTrLOMQmlx4bXDVEMB/B6fBK0aIThRl2EsbUoZcDr7KYWv zHNyVyIr1IoPpkLz3WvmYVa1ij3E/Ru3luXLxZfDb0eQOOf71SytaKDwF/jv7SSb HaZQjRrvCva//3t4t1OWIVyyYRZpiNEWEgaAUaNCvbQDgD9rN4cV+K+Yr/jhDdtR OlU/5TvtCWnqrC3DIzKxLQxu8PBqq4FR -----END CERTIFICATE-----Generated at Sun Aug 24 00:47:59 2025 by rpki-client