$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft File: YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json) Hash identifier: JGf5uaH/nT6tvlhyihyrtl022r9aorlEOWAJV63BlbU= Subject key identifier: 7C:30:68:8F:FF:A2:80:D8:33:0A:25:0C:C9:6A:56:87:1B:73:15:BA Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft Manifest number: 70 Signing time: Sat 23 Aug 2025 07:09:25 +0000 Manifest this update: Sat 23 Aug 2025 07:09:24 +0000 Manifest next update: Sat 30 Aug 2025 07:09:24 +0000 Files and hashes: 1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: uQ9YgxrJl3bEE+304FyJ4e4B4+8qV+2hdDcaSct/G0w=) 2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: Z/MKQEZHBao6uUjy3KntQF19ACE4AX6KONtzOcMde7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Validity Not Before: Aug 23 07:09:24 2025 GMT Not After : Aug 30 07:09:24 2025 GMT Subject: CN=68a96924-79e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:84:5a:79:7d:94:20:e6:cf:a9:3a:15:72: 2f:55:10:53:2e:f5:08:f1:3c:ea:b2:1a:45:01:85: b7:9a:02:8e:c1:f1:02:75:14:40:79:43:31:3a:8b: 2f:c0:05:7f:e6:c0:b0:f7:8d:1f:d8:25:15:1d:0f: 2c:8f:58:51:8d:eb:48:58:f9:e9:42:24:63:c1:56: 0e:57:d9:b5:7c:21:fc:20:15:6b:e0:70:e0:3d:25: 14:9e:7d:4c:15:9b:6c:37:92:91:87:cc:1d:c7:72: 9e:60:14:33:c8:d0:55:db:c0:7a:24:52:62:1b:40: dc:18:4a:e3:b0:07:17:8c:5b:50:59:40:93:eb:f7: 22:0d:50:77:e6:31:c8:6f:cc:ee:a8:6a:c6:7e:9e: de:e0:f5:28:f8:b4:a2:f3:d4:4f:6a:a2:c5:be:ec: ce:6c:ce:9c:29:a0:8b:85:4f:15:78:3a:0f:95:b0: 80:2e:be:26:ac:9b:d1:2b:a8:d1:4d:88:56:f3:2d: eb:0c:97:14:a6:d6:dc:d1:fa:46:77:c5:8e:54:8c: 1c:64:60:fd:70:44:96:40:c9:32:85:5c:9b:f8:ac: a0:f9:24:ab:95:41:d0:16:c8:6c:fe:5b:10:f4:a8: d9:fe:97:e7:34:ed:b2:a6:bb:4a:91:be:75:98:ec: 3e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:30:68:8F:FF:A2:80:D8:33:0A:25:0C:C9:6A:56:87:1B:73:15:BA X509v3 Authority Key Identifier: keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:57:23:46:a3:de:64:b1:60:9d:eb:dc:29:d5:3c:d6:a3:49: f6:e2:10:0e:8f:4c:90:c7:ac:aa:33:1c:ec:5e:bb:6c:2b:c7: b7:e1:27:74:0a:15:d6:0e:04:1c:0c:81:5e:e5:58:17:1e:5c: bb:91:7b:72:0d:9b:84:1d:50:dd:20:1c:b5:7c:fd:25:ee:b8: d1:94:2b:d7:ba:de:13:68:97:fc:01:5e:63:56:be:15:50:9d: 55:cb:c6:de:e2:58:22:16:78:d4:da:8d:68:38:cc:16:45:ac: 18:2b:c7:37:8a:9a:3e:0b:e3:0b:2b:e6:16:51:48:58:c2:1f: dd:28:37:5a:5c:78:15:ec:c5:7a:bb:f6:22:5b:d0:07:ff:e4: c6:af:f9:2e:e1:40:fc:4a:74:9b:90:24:f5:5f:79:77:84:b5: 37:80:93:38:91:ff:3f:f8:33:2c:d4:d2:ac:25:d2:d5:2f:e7: 1b:77:4d:99:2f:90:93:f7:a4:b2:f0:ec:46:25:14:66:b5:09: e3:d5:7b:74:52:4a:42:1c:7d:ee:ce:5b:85:89:c5:f0:cb:04: 8e:e8:61:06:e2:84:58:8b:45:7e:f6:e1:fd:61:17:98:7a:34: e0:66:71:6a:54:65:40:fb:9c:31:1f:76:7e:9e:0f:44:a7:16: 29:7e:61:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkQ3QjExMC8GA1UEBRMoNjE0RDFFQzhCNjkzRTdCQjVGMzJDRkE1MjdCNTAyODMy NjlERkUyQjAeFw0yNTA4MjMwNzA5MjRaFw0yNTA4MzAwNzA5MjRaMBgxFjAUBgNV BAMTDTY4YTk2OTI0LTc5ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFqoRaeX2UIObPqToVci9VEFMu9QjxPOqyGkUBhbeaAo7B8QJ1FEB5QzE6iy/A BX/mwLD3jR/YJRUdDyyPWFGN60hY+elCJGPBVg5X2bV8IfwgFWvgcOA9JRSefUwV m2w3kpGHzB3Hcp5gFDPI0FXbwHokUmIbQNwYSuOwBxeMW1BZQJPr9yINUHfmMchv zO6oasZ+nt7g9Sj4tKLz1E9qosW+7M5szpwpoIuFTxV4Og+VsIAuviasm9ErqNFN iFbzLesMlxSm1tzR+kZ3xY5UjBxkYP1wRJZAyTKFXJv4rKD5JKuVQdAWyGz+WxD0 qNn+l+c07bKmu0qRvnWY7D7hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfDBoj/+i gNgzCiUMyWpWhxtzFbowHwYDVR0jBBgwFoAUYU0eyLaT57tfMs+lJ7UCgyad/isw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRDdCL0E3NEY1RURDRDg3 MjExRUZBMzFGODQxOUM0RjlBRTAyL1lVMGV5TGFUNTd0Zk1zLWxKN1VDZ3lhZF9p cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVUwZXlMYVQ1N3RmTXMtbEo3VUNneWFkX2lzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RDdCL0E3NEY1RURDRDg3MjExRUZBMzFGODQxOUM0RjlBRTAyL1lVMGV5TGFUNTd0 Zk1zLWxKN1VDZ3lhZF9pcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACtXI0aj3mSxYJ3r3CnVPNajSfbiEA6PTJDHrKozHOxeu2wrx7fhJ3QK FdYOBBwMgV7lWBceXLuRe3INm4QdUN0gHLV8/SXuuNGUK9e63hNol/wBXmNWvhVQ nVXLxt7iWCIWeNTajWg4zBZFrBgrxzeKmj4L4wsr5hZRSFjCH90oN1pceBXsxXq7 9iJb0Af/5Mav+S7hQPxKdJuQJPVfeXeEtTeAkziR/z/4MyzU0qwl0tUv5xt3TZkv kJP3pLLw7EYlFGa1CePVe3RSSkIcfe7OW4WJxfDLBI7oYQbihFiLRX724f1hF5h6 NOBmcWpUZUD7nDEfdn6eD0SnFil+YY8= -----END CERTIFICATE-----Generated at Sat Aug 23 19:07:30 2025 by rpki-client