$ rpki-client -vvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft File: YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json) Hash identifier: VPs3wb0kBQu0ckFegA6BLW9fBMfdbzlhArgWiykRbxY= Subject key identifier: E5:1B:9D:39:6D:86:1B:1A:CE:8C:C0:E1:05:A0:71:D7:60:B2:7F:9A Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B Certificate issuer: /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft Manifest number: 0105 Signing time: Sat 09 Aug 2025 05:27:18 +0000 Manifest this update: Sat 09 Aug 2025 05:27:17 +0000 Manifest next update: Sat 16 Aug 2025 05:27:17 +0000 Files and hashes: 1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: YTznrCHBgfVn2YpSj0qgLDlU8v91i7izrPoONxBFnf8=) 2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: yl/E8QHLka4/lwMsB6BevGouPJwrIPgnFEOjdbPwsG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91605D7, serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B Validity Not Before: Aug 9 05:27:17 2025 GMT Not After : Aug 16 05:27:17 2025 GMT Subject: CN=6896dc35-a0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:48:14:20:5a:a7:8c:9c:e4:7e:86:bf:cc: 42:20:03:5e:e4:3c:45:a8:8d:79:cb:1a:18:60:69: 2c:04:6e:f6:01:dc:5d:5f:09:e0:f4:e9:e0:ee:84: 46:ba:1a:7a:ec:4e:58:09:06:e0:25:07:37:85:81: 13:ec:0f:aa:03:7e:e9:ef:ba:3a:53:7d:45:59:34: f6:90:57:88:64:cd:42:65:2e:ab:f0:68:6a:aa:54: bf:f9:47:cb:a8:4d:09:39:2c:03:5d:34:d1:c9:9c: 9c:95:5a:71:08:13:f9:f1:04:eb:f8:ec:05:b1:7d: d3:05:35:2e:e5:26:47:be:c9:2d:dd:ae:9d:05:81: 3f:a0:54:ba:84:3a:9b:49:ec:23:f0:87:fd:e6:36: 47:0b:f1:af:2c:06:97:e3:6e:90:ea:8a:5c:3a:2d: e6:af:94:0d:c7:48:fb:73:f4:38:ec:0d:56:55:02: d4:ea:1a:15:59:67:f4:d1:47:50:ff:8d:f1:3d:c9: db:c8:b7:20:09:4a:ec:ff:32:fe:c9:23:4c:1e:85: a3:ec:0c:9f:32:89:3c:90:e0:68:f1:97:fc:a6:98: cb:62:4f:09:6e:a8:58:8e:bc:4a:cf:bf:30:84:66: 29:6d:ad:32:71:3f:89:56:31:5f:cc:a0:49:f5:ce: f3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1B:9D:39:6D:86:1B:1A:CE:8C:C0:E1:05:A0:71:D7:60:B2:7F:9A X509v3 Authority Key Identifier: keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bb:15:58:bb:60:c3:e0:c5:72:01:57:05:57:9e:39:6d:b2: 04:e2:19:b7:37:cc:04:24:92:83:bf:e4:fe:d5:13:1c:57:86: b7:8e:a3:4a:00:b0:91:6d:88:ad:19:f0:6c:de:c7:12:99:6f: 81:48:6e:e0:c3:82:3a:ac:52:c7:ee:37:53:18:2e:42:ad:22: e5:41:50:06:c0:b5:11:fa:e0:fe:d0:45:de:ed:58:99:40:ff: 6a:ec:69:b6:62:ad:fb:fd:37:ae:21:76:05:51:01:ba:00:32: 9b:f1:db:0d:50:14:7f:77:10:e5:ef:d5:ef:22:d4:fa:ae:57: 65:c4:20:dc:d4:37:06:a3:2c:8e:93:59:37:ef:53:6b:06:8f: 0f:d6:75:ec:dc:f9:94:32:3f:a5:b8:b1:90:7e:e7:c4:ee:ad: 73:a4:f6:dc:7a:43:f7:ec:48:31:ed:c2:78:f8:7d:e2:0e:16: 18:ae:d6:a5:69:6b:e4:59:f6:2a:b7:9b:51:96:1d:bb:d6:2d: 70:14:25:27:71:1c:78:2e:31:05:f3:77:ab:2b:e2:70:64:6a: 25:c3:b6:fb:e5:46:94:a7:28:cf:58:de:58:d3:c4:25:d5:a3: cc:0c:ef:b8:73:c6:f1:26:b3:08:5c:81:dc:47:02:bc:92:b7: 02:79:7f:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA1RDcxMTAvBgNVBAUTKDYxRTRGODYxNkI2MjQyNjYxQTkxRjdEMDEyQjZDRDFF NDA5Mzg5MEIwHhcNMjUwODA5MDUyNzE3WhcNMjUwODE2MDUyNzE3WjAYMRYwFAYD VQQDEw02ODk2ZGMzNS1hMGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJZIFCBap4yc5H6Gv8xCIANe5DxFqI15yxoYYGksBG72AdxdXwng9Ong7oRG uhp67E5YCQbgJQc3hYET7A+qA37p77o6U31FWTT2kFeIZM1CZS6r8GhqqlS/+UfL qE0JOSwDXTTRyZyclVpxCBP58QTr+OwFsX3TBTUu5SZHvskt3a6dBYE/oFS6hDqb Sewj8If95jZHC/GvLAaX426Q6opcOi3mr5QNx0j7c/Q47A1WVQLU6hoVWWf00UdQ /43xPcnbyLcgCUrs/zL+ySNMHoWj7AyfMok8kOBo8Zf8ppjLYk8JbqhYjrxKz78w hGYpba0ycT+JVjFfzKBJ9c7z1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUbnTlt hhsazozA4QWgcddgsn+aMB8GA1UdIwQYMBaAFGHk+GFrYkJmGpH30BK2zR5Ak4kL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDVENy8zQjUwRjEzMkU1 N0YxMUVFQUYxRDI5MUJDNEY5QUUwMi9ZZVQ0WVd0aVFtWWFrZmZRRXJiTkhrQ1Rp UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1llVDRZV3RpUW1ZYWtmZlFFcmJOSGtDVGlRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDVENy8zQjUwRjEzMkU1N0YxMUVFQUYxRDI5MUJDNEY5QUUwMi9ZZVQ0WVd0aVFt WWFrZmZRRXJiTkhrQ1RpUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBquxVYu2DD4MVyAVcFV545bbIE4hm3N8wEJJKDv+T+1RMcV4a3jqNK ALCRbYitGfBs3scSmW+BSG7gw4I6rFLH7jdTGC5CrSLlQVAGwLUR+uD+0EXe7ViZ QP9q7Gm2Yq37/TeuIXYFUQG6ADKb8dsNUBR/dxDl79XvItT6rldlxCDc1DcGoyyO k1k371NrBo8P1nXs3PmUMj+luLGQfufE7q1zpPbcekP37Egx7cJ4+H3iDhYYrtal aWvkWfYqt5tRlh271i1wFCUncRx4LjEF83erK+JwZGolw7b75UaUpyjPWN5Y08Ql 1aPMDO+4c8bxJrMIXIHcRwK8krcCeX9R -----END CERTIFICATE-----Generated at Sun Aug 10 18:18:59 2025 by rpki-client