$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: C3k6KF/UxyA6C8K87kNMnZH9KuwJxbGksYLBPAC4z0w= Subject key identifier: FC:A4:31:98:B0:CE:87:0D:2E:2C:DE:15:85:83:3D:0B:F5:E6:CC:1E Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 048E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 0489 Signing time: Sat 09 Aug 2025 00:31:38 +0000 Manifest this update: Sat 09 Aug 2025 00:31:37 +0000 Manifest next update: Sat 16 Aug 2025 00:31:37 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: 7ksqLv54OItf8bN70nfhInUPhwgbz3elm4GRbAhDrZ0=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: aRUayRfr0vMR7tS5Y4z3m5ZDFVHmg6WwIEoeJRznQ08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: Aug 9 00:31:37 2025 GMT Not After : Aug 16 00:31:37 2025 GMT Subject: CN=689696e9-c765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:29:e6:31:46:c9:42:a2:f3:38:34:db:69: 93:7f:c7:72:d4:eb:ab:1d:82:44:09:ee:aa:e7:4f: e9:95:d6:49:6d:26:78:ea:45:76:67:3e:fd:fb:21: 0f:45:d5:5f:0a:bb:ad:4d:19:19:77:db:0b:29:fb: 70:db:af:59:d6:b9:a5:6c:7d:53:39:de:dd:ea:1b: c2:e8:78:cc:96:df:2e:b5:05:db:11:72:38:ee:4d: 02:b8:a4:57:4d:fd:19:d9:d9:a3:47:f9:45:3b:cf: 37:b7:90:9a:b8:c8:77:f7:de:93:73:3d:de:ca:f6: 84:2e:f4:31:c3:e1:fe:4b:e4:17:e1:7b:fc:c5:61: 0a:d2:93:3a:09:28:d7:6c:e6:03:31:21:bd:42:25: 97:b4:5e:46:af:4f:6e:e1:e2:73:9c:e0:9c:75:ef: 84:38:27:d0:61:08:7c:8e:81:3f:8b:cf:4e:d4:90: 49:7f:9a:3e:9d:b2:70:44:d5:5f:a6:13:3b:9c:76: 06:e0:6e:b1:f8:c9:64:b6:5e:0e:25:25:c1:c3:d5: 32:25:70:70:e4:a7:4c:b1:b5:2a:f4:f9:dc:75:86: 45:d1:a1:19:6c:0c:dd:0c:e5:7b:d4:bb:19:ad:06: 05:60:4e:8f:1c:08:f6:a1:d8:7f:3f:f9:4f:28:db: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A4:31:98:B0:CE:87:0D:2E:2C:DE:15:85:83:3D:0B:F5:E6:CC:1E X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:71:fa:6a:05:9c:eb:d4:01:8c:f3:fd:3a:00:87:04:87:4f: 68:a7:3e:e4:3c:99:14:db:59:b8:59:13:02:1e:d9:2f:22:9b: 22:a8:82:2c:36:d2:ee:57:ed:92:aa:1f:2c:bf:d8:a3:bc:46: 1b:53:61:49:85:2f:e1:85:cb:cd:4d:64:18:53:26:11:af:7f: 59:3b:3e:16:81:4e:bd:93:86:c0:9b:9c:1e:2e:b3:c6:16:8d: 4b:8f:1f:cd:6e:63:b0:cb:c1:23:39:bf:d0:fd:64:f1:09:75: ac:6f:75:60:fc:2c:67:4c:c2:0f:29:87:52:81:40:87:a8:c3: 4a:37:6d:d4:c8:fb:2e:b5:4c:20:a4:64:ff:d1:4b:3e:86:02: f4:fe:05:ab:68:b9:5d:17:db:f8:c2:8c:b0:15:7e:1d:91:36: b2:b5:78:7d:fb:58:0c:23:f9:ad:5b:7e:0f:4b:95:52:9d:d9: 03:ed:c9:27:65:0c:5e:9d:25:79:0e:f1:61:34:26:4e:26:9f: 3e:da:96:60:b9:ec:16:64:97:d1:84:a7:94:d1:8e:b1:01:be: 3d:15:3d:24:36:d3:06:b2:89:90:da:e4:b8:c0:5b:bd:a9:de: 06:8a:1e:ed:ad:fc:6d:0b:7d:69:f3:d1:e7:a8:f2:39:4f:3c: 55:d3:ee:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjUwODA5MDAzMTM3WhcNMjUwODE2MDAzMTM3WjAYMRYwFAYD VQQDEw02ODk2OTZlOS1jNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBgp5jFGyUKi8zg022mTf8dy1OurHYJECe6q50/pldZJbSZ46kV2Zz79+yEP RdVfCrutTRkZd9sLKftw269Z1rmlbH1TOd7d6hvC6HjMlt8utQXbEXI47k0CuKRX Tf0Z2dmjR/lFO883t5CauMh3996Tcz3eyvaELvQxw+H+S+QX4Xv8xWEK0pM6CSjX bOYDMSG9QiWXtF5Gr09u4eJznOCcde+EOCfQYQh8joE/i89O1JBJf5o+nbJwRNVf phM7nHYG4G6x+Mlktl4OJSXBw9UyJXBw5KdMsbUq9PncdYZF0aEZbAzdDOV71LsZ rQYFYE6PHAj2odh/P/lPKNttIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPykMZiw zocNLizeFYWDPQv15sweMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNcfpqBZzr1AGM8/06AIcEh09opz7kPJkU21m4WRMCHtkvIpsiqIIs NtLuV+2Sqh8sv9ijvEYbU2FJhS/hhcvNTWQYUyYRr39ZOz4WgU69k4bAm5weLrPG Fo1Ljx/NbmOwy8EjOb/Q/WTxCXWsb3Vg/CxnTMIPKYdSgUCHqMNKN23UyPsutUwg pGT/0Us+hgL0/gWraLldF9v4woywFX4dkTaytXh9+1gMI/mtW34PS5VSndkD7ckn ZQxenSV5DvFhNCZOJp8+2pZguewWZJfRhKeU0Y6xAb49FT0kNtMGsomQ2uS4wFu9 qd4Gih7trfxtC31p89HnqPI5TzxV0+68 -----END CERTIFICATE-----Generated at Sun Aug 10 04:27:48 2025 by rpki-client