$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: e6oCw9mPgxOuOY7n8JleeSMOzRPgzvn6J5epb0dsxqE= Subject key identifier: 56:07:3E:57:5B:E8:20:E2:74:65:72:4B:B1:84:A0:26:8C:3E:07:AB Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 0FCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 0FC5 Signing time: Fri 22 Aug 2025 17:37:46 +0000 Manifest this update: Fri 22 Aug 2025 17:37:45 +0000 Manifest next update: Fri 29 Aug 2025 17:37:45 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: 3p/XYYyhJsQHdn4DC7zbi1LPzGUqt5T9dKi7X8+LLxA=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: cCIRQV7ckuHtyIWMyZbPGhi3IsjwZT86WZjPdbGRO6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4044 (0xfcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B, serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Validity Not Before: Aug 22 17:37:45 2025 GMT Not After : Aug 29 17:37:45 2025 GMT Subject: CN=68a8aaea-6ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ea:14:73:d0:e2:67:e6:30:ea:3f:56:98:1a: 46:0c:cb:32:aa:ba:5d:a6:19:d5:bd:18:39:24:76: c6:17:4d:bd:a7:3c:8d:58:57:22:fe:67:3f:4d:e9: 5d:2b:17:bd:6e:9e:2d:5a:79:9c:11:dd:dc:36:a3: a4:52:e5:49:5a:4f:98:8c:d3:0e:14:3c:bd:30:51: e9:84:38:18:df:c5:c0:cd:64:c7:00:18:d6:ed:a9: 17:f5:24:77:90:5d:4d:30:9a:72:0d:47:bc:f0:1d: 1e:84:cf:ac:bb:b6:10:5c:c7:b4:5d:de:6c:24:b2: d4:86:7b:50:6c:01:c8:49:70:dd:02:94:37:7b:64: 82:68:b9:55:63:f5:d7:d9:76:69:11:31:b3:c8:84: 19:79:71:0d:23:3e:71:4a:b1:eb:6d:13:7d:ea:6b: dc:8d:b4:23:2e:d2:de:47:c2:a0:b9:69:5e:4b:78: 1f:42:36:35:d7:b1:29:33:df:76:c6:07:aa:21:09: 27:13:f0:3b:35:9b:3c:84:95:85:69:16:24:17:b8: 44:63:36:da:c0:9b:92:47:55:d7:99:0b:60:7a:33: 75:ad:da:1e:d8:b4:47:d7:65:4c:ab:23:52:e9:72: 19:de:f8:8f:22:f8:67:d3:7e:d5:0d:c8:7e:85:30: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:07:3E:57:5B:E8:20:E2:74:65:72:4B:B1:84:A0:26:8C:3E:07:AB X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:18:11:77:44:94:9a:ae:ac:aa:ed:9c:f6:cc:84:de:6f:b8: 39:a4:4f:f8:03:6a:a7:9c:d9:f8:94:7e:fc:21:3a:5b:e0:42: e9:a1:91:80:18:9b:37:85:b0:1b:7e:b8:59:46:8a:e4:d9:26: b9:88:c2:eb:74:aa:a0:7a:ae:1d:22:25:2f:f4:ba:47:d4:62: ea:5c:ab:ae:5e:f6:ee:2e:97:ec:2f:37:a7:88:03:67:6a:62: 22:ec:9e:ff:a4:89:62:70:a6:04:9a:37:57:58:dc:aa:bd:20: 21:1b:fc:b1:9a:82:8d:95:41:5e:bb:42:e7:fb:67:df:7c:70: 08:89:f8:20:2b:ae:e3:ef:bf:c8:5d:09:16:07:23:1c:a0:05: 08:54:dc:97:fe:a0:e9:af:4c:7d:29:42:ac:d3:fb:95:45:40: 7a:cc:ed:37:dc:80:8a:8e:9e:93:cb:2a:25:98:2f:bc:5c:f3: d6:ca:f1:f3:3d:30:4a:7b:20:08:63:6b:18:f0:c0:0c:85:54: 50:ba:6a:7b:b6:d7:a6:62:f0:89:bf:1c:af:b5:83:4c:c7:e0: dd:a5:af:24:49:b7:22:14:ce:09:2e:97:aa:0b:0d:0f:f9:7c: 32:6f:55:23:f6:93:e9:1d:79:ec:13:aa:b7:dc:6d:6b:51:6d: 66:7a:59:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjUwODIyMTczNzQ1WhcNMjUwODI5MTczNzQ1WjAYMRYwFAYD VQQDEw02OGE4YWFlYS02YWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8eoUc9DiZ+Yw6j9WmBpGDMsyqrpdphnVvRg5JHbGF029pzyNWFci/mc/Teld Kxe9bp4tWnmcEd3cNqOkUuVJWk+YjNMOFDy9MFHphDgY38XAzWTHABjW7akX9SR3 kF1NMJpyDUe88B0ehM+su7YQXMe0Xd5sJLLUhntQbAHISXDdApQ3e2SCaLlVY/XX 2XZpETGzyIQZeXENIz5xSrHrbRN96mvcjbQjLtLeR8KguWleS3gfQjY117EpM992 xgeqIQknE/A7NZs8hJWFaRYkF7hEYzbawJuSR1XXmQtgejN1rdoe2LRH12VMqyNS 6XIZ3viPIvhn037VDch+hTBdNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYHPldb 6CDidGVyS7GEoCaMPgerMB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcGBF3RJSarqyq7Zz2zITeb7g5pE/4A2qnnNn4lH78ITpb4ELpoZGA GJs3hbAbfrhZRork2Sa5iMLrdKqgeq4dIiUv9LpH1GLqXKuuXvbuLpfsLzeniANn amIi7J7/pIlicKYEmjdXWNyqvSAhG/yxmoKNlUFeu0Ln+2fffHAIifggK67j77/I XQkWByMcoAUIVNyX/qDpr0x9KUKs0/uVRUB6zO033ICKjp6TyyolmC+8XPPWyvHz PTBKeyAIY2sY8MAMhVRQump7ttemYvCJvxyvtYNMx+Ddpa8kSbciFM4JLpeqCw0P +Xwyb1Uj9pPpHXnsE6q33G1rUW1melmj -----END CERTIFICATE-----Generated at Sat Aug 23 20:43:32 2025 by rpki-client