$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json) Hash identifier: z+TKpcOZMRfyFvXRCShmSIC8lxeWhzIrH+d2W4jzTsQ= Subject key identifier: FE:B6:C5:86:DC:9C:3C:DC:A2:6E:9C:74:78:CF:64:66:07:B6:E6:94 Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft Manifest number: 65 Signing time: Sat 23 Aug 2025 07:17:01 +0000 Manifest this update: Sat 23 Aug 2025 07:17:01 +0000 Manifest next update: Sat 30 Aug 2025 07:17:01 +0000 Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: M3O0cJZqOA585wJ5udeXLDChJD5WvAdP8VQQBh27i4E=) 2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: Aug 23 07:17:01 2025 GMT Not After : Aug 30 07:17:01 2025 GMT Subject: CN=68a96aed-14e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8d:02:db:2b:73:8f:73:42:e9:6c:54:0c:b8: 9f:55:66:ad:0e:5b:2c:4a:9b:c5:f7:1f:00:d5:13: 4c:a7:61:58:c0:12:1e:08:c9:f3:71:94:c8:38:ef: a5:85:4a:ed:97:80:dd:66:a0:1c:ca:1c:93:f4:43: 1d:2a:e5:ab:5f:ba:d5:89:e3:88:5c:a5:40:e8:9b: 11:97:2c:ed:6a:9c:7a:f3:05:89:a1:7c:45:6b:31: a7:d1:bc:cf:d8:b8:2a:46:eb:7e:0b:c3:42:ce:3a: 06:46:12:52:42:77:3e:78:12:b2:6b:11:bb:ab:29: 80:bc:15:8e:21:38:34:24:5c:ad:dd:78:75:60:0a: a5:f0:06:3a:e9:06:55:41:f1:98:e6:bd:cc:c2:63: 04:53:a9:60:c6:8c:f9:f8:ce:3d:ba:75:26:85:fc: 3b:5f:e6:f6:76:8f:26:68:6b:ac:78:a3:3d:bd:48: bb:8c:a1:69:e5:e3:68:11:cc:b6:6d:fc:45:12:18: fc:f8:7c:59:49:d0:58:22:de:ed:50:19:3a:67:8e: 5c:ee:23:59:93:9a:81:69:7b:87:bf:0d:27:75:07: 17:12:25:7c:22:1e:33:83:43:aa:5d:5f:68:f5:62: 28:b4:0e:18:f9:2c:b5:fb:80:88:9c:74:cf:73:b8: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B6:C5:86:DC:9C:3C:DC:A2:6E:9C:74:78:CF:64:66:07:B6:E6:94 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:77:5d:ec:1d:8e:64:d5:57:dc:94:61:43:ea:6c:89:9b:25: 1d:f3:2a:51:6e:f8:e4:cb:08:bd:c3:f1:2b:14:aa:af:b6:09: 7f:4b:be:e6:8d:36:bf:dd:87:74:37:5a:2c:48:f2:8d:a4:c9: ea:29:e8:b5:c5:25:3a:a3:54:be:59:62:ec:ea:63:3d:9d:59: be:67:a2:4d:f8:f4:50:00:33:4a:c8:d1:3c:a5:5b:fb:ee:d5: ed:3b:7b:0a:02:29:93:59:33:e3:8b:17:31:77:07:ee:98:52: e5:06:1b:04:56:c9:7a:62:c1:ad:6d:1d:70:b1:1c:e9:e6:03: a3:cb:51:68:8c:06:ba:2b:67:4a:04:63:54:57:cc:33:08:90: f3:42:30:32:5e:51:8b:a1:72:3f:5a:08:d6:23:d2:c0:8d:64: 7e:05:f1:b0:35:a6:e0:ad:07:42:9f:3d:02:2d:48:14:77:53: f1:b9:a5:7c:e7:dc:bb:24:c0:f9:0d:2f:13:a4:60:40:15:0b: 92:1f:96:55:d0:5c:9a:b3:1c:d5:2d:81:a1:86:2d:9d:dc:5f: 47:cc:4c:33:35:f8:e9:07:20:00:a4:66:d3:ad:cd:52:66:f2: 2b:cb:f5:a5:e3:ff:a4:7a:92:84:99:a2:da:46:3b:70:92:ae: cf:47:38:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTc2NjExMC8GA1UEBRMoQzkyNDYwMTQyNTdFRUZGRkZFODBDRDNFQUJGRUQ2N0E4 OThENkY1NzAeFw0yNTA4MjMwNzE3MDFaFw0yNTA4MzAwNzE3MDFaMBgxFjAUBgNV BAMTDTY4YTk2YWVkLTE0ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1jQLbK3OPc0LpbFQMuJ9VZq0OWyxKm8X3HwDVE0ynYVjAEh4IyfNxlMg476WF Su2XgN1moBzKHJP0Qx0q5atfutWJ44hcpUDomxGXLO1qnHrzBYmhfEVrMafRvM/Y uCpG634Lw0LOOgZGElJCdz54ErJrEburKYC8FY4hODQkXK3deHVgCqXwBjrpBlVB 8ZjmvczCYwRTqWDGjPn4zj26dSaF/Dtf5vZ2jyZoa6x4oz29SLuMoWnl42gRzLZt /EUSGPz4fFlJ0Fgi3u1QGTpnjlzuI1mTmoFpe4e/DSd1BxcSJXwiHjODQ6pdX2j1 Yii0Dhj5LLX7gIicdM9zuLIRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/rbFhtyc PNyibpx0eM9kZge25pQwHwYDVR0jBBgwFoAUySRgFCV+7//+gM0+q/7WeomNb1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5NzY2LzgwRjU5RTk0RUE1 NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVNSZ0ZDVi03X18tZ00wLXFfN1dlb21OYjFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 NzY2LzgwRjU5RTk0RUE1NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19f LWdNMC1xXzdXZW9tTmIxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACh3XewdjmTVV9yUYUPqbImbJR3zKlFu+OTLCL3D8SsUqq+2CX9LvuaN Nr/dh3Q3WixI8o2kyeop6LXFJTqjVL5ZYuzqYz2dWb5nok349FAAM0rI0TylW/vu 1e07ewoCKZNZM+OLFzF3B+6YUuUGGwRWyXpiwa1tHXCxHOnmA6PLUWiMBrorZ0oE Y1RXzDMIkPNCMDJeUYuhcj9aCNYj0sCNZH4F8bA1puCtB0KfPQItSBR3U/G5pXzn 3LskwPkNLxOkYEAVC5IfllXQXJqzHNUtgaGGLZ3cX0fMTDM1+OkHIACkZtOtzVJm 8ivL9aXj/6R6koSZotpGO3CSrs9HOPE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:09 2025 by rpki-client