$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json) Hash identifier: cq3CmUeSeEX8q6jjqAqdKen3Vdd89zvJgotqizA3eBE= Subject key identifier: 68:00:50:F3:04:E7:78:7B:62:B8:FD:23:A2:59:5A:BA:CA:4A:35:E9 Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft Manifest number: 87 Signing time: Sat 09 Aug 2025 07:24:50 +0000 Manifest this update: Sat 09 Aug 2025 07:24:49 +0000 Manifest next update: Sat 16 Aug 2025 07:24:49 +0000 Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: b6SnYrArbFl3D8qtboYlr2r0EuDG9QALwQcMYcC/rmY=) 2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: fYzwGdwCqYZskymy95U02CPM2CRp+XXOXIkMFaQRIIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Validity Not Before: Aug 9 07:24:49 2025 GMT Not After : Aug 16 07:24:49 2025 GMT Subject: CN=6896f7c1-cab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:59:a4:31:e8:71:27:cd:e8:f7:a1:49:af:a9: 28:df:05:c4:be:a5:9e:55:f5:41:08:97:d1:1c:9c: 57:0c:23:b4:70:1e:c8:17:d4:d3:d6:f4:d3:40:b1: ab:a6:52:73:e0:01:6c:85:f9:95:3e:29:ec:01:17: 51:b1:bf:ba:6e:1d:7d:e0:f2:27:03:11:69:77:c1: 62:d2:9d:25:63:c6:0c:ea:92:8c:91:90:8e:e2:bc: f2:3a:78:29:14:04:2e:29:ad:81:e0:6e:39:4b:bb: be:2b:c7:ce:0d:d5:dd:9f:88:19:08:2e:07:55:63: b2:52:7f:94:b8:5b:8b:19:ae:f8:96:59:0d:fb:3f: 1c:e0:ab:ae:6b:43:3a:6c:ea:68:6a:73:1b:93:c4: 44:d0:0d:c3:61:45:91:40:e9:ad:bc:75:90:2a:4d: 13:45:46:fc:85:38:14:41:bb:59:80:df:dd:0b:2e: 5d:82:f6:a4:fd:7a:4c:83:a9:21:15:9d:b1:3f:95: 48:a0:f9:bf:62:9c:c3:31:fa:19:89:81:f4:10:a2: 9a:09:db:55:db:de:dc:eb:7e:4f:fa:5f:8c:31:32: 6f:ae:eb:ad:d0:24:8f:8c:93:fc:1f:38:6f:fc:ba: d9:4e:4a:17:06:29:08:9f:45:f9:cf:6a:74:24:0f: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:00:50:F3:04:E7:78:7B:62:B8:FD:23:A2:59:5A:BA:CA:4A:35:E9 X509v3 Authority Key Identifier: keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:ab:25:df:28:13:e2:0a:86:81:88:b7:f4:38:20:69:c8:90: 22:6a:66:7a:aa:bb:57:06:8a:68:61:8b:23:7b:70:16:1a:a6: 35:df:d8:b3:ea:87:50:a8:3a:21:da:1e:b9:21:0c:e5:20:5c: ba:24:f5:f5:b5:57:f5:a4:46:49:4b:83:85:b0:6c:6e:e8:75: 73:62:83:5a:f9:63:6a:64:27:d6:dc:4b:92:aa:29:d7:ea:69: a0:8c:c6:41:9d:b7:94:23:76:64:51:1d:9c:9e:15:9a:07:bf: 3c:e5:f1:0e:c1:4d:f2:12:02:0a:4c:9c:10:7d:a7:74:7e:80: 9c:31:93:4c:c8:23:17:4c:3c:15:d8:f5:a9:1d:aa:70:9b:fe: 90:27:9f:1f:75:3a:7d:3b:4f:e3:23:ac:f7:d8:00:5e:31:0a: ad:bf:29:9c:b5:4b:70:e8:01:ea:f1:a5:96:42:30:56:6c:f8: 1c:c0:9b:a5:a2:9f:26:51:09:f9:56:52:fc:2a:da:27:3e:cb: 1e:56:a5:6f:6b:5e:06:0d:b0:a2:cb:a0:04:6a:1e:14:86:f2: a9:71:b5:6d:56:24:47:a5:7f:2d:4f:65:4a:af:41:6a:47:48: a6:3d:b3:63:8e:ce:1f:1c:06:52:4b:91:fc:4f:a1:c7:a7:33: 76:6c:8a:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKDYyNEI5NkUxRDY2NUVENzhFNzhERkFGNkMyMjAxOTEw NzNEQjY2Q0MwHhcNMjUwODA5MDcyNDQ5WhcNMjUwODE2MDcyNDQ5WjAYMRYwFAYD VQQDEw02ODk2ZjdjMS1jYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VmkMehxJ83o96FJr6ko3wXEvqWeVfVBCJfRHJxXDCO0cB7IF9TT1vTTQLGr plJz4AFshfmVPinsARdRsb+6bh194PInAxFpd8Fi0p0lY8YM6pKMkZCO4rzyOngp FAQuKa2B4G45S7u+K8fODdXdn4gZCC4HVWOyUn+UuFuLGa74llkN+z8c4Kuua0M6 bOpoanMbk8RE0A3DYUWRQOmtvHWQKk0TRUb8hTgUQbtZgN/dCy5dgvak/XpMg6kh FZ2xP5VIoPm/YpzDMfoZiYH0EKKaCdtV297c635P+l+MMTJvruut0CSPjJP8Hzhv /LrZTkoXBikIn0X5z2p0JA+GqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgAUPME 53h7Yrj9I6JZWrrKSjXpMB8GA1UdIwQYMBaAFGJLluHWZe1454369sIgGRBz22bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DMTEyRjU1Q0Qx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdYam5qZnIyd2lBWkVIUGJa c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DMTEyRjU1Q0QxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdY am5qZnIyd2lBWkVIUGJac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVqyXfKBPiCoaBiLf0OCBpyJAiamZ6qrtXBopoYYsje3AWGqY139iz 6odQqDoh2h65IQzlIFy6JPX1tVf1pEZJS4OFsGxu6HVzYoNa+WNqZCfW3EuSqinX 6mmgjMZBnbeUI3ZkUR2cnhWaB7885fEOwU3yEgIKTJwQfad0foCcMZNMyCMXTDwV 2PWpHapwm/6QJ58fdTp9O0/jI6z32ABeMQqtvymctUtw6AHq8aWWQjBWbPgcwJul op8mUQn5VlL8KtonPsseVqVva14GDbCiy6AEah4UhvKpcbVtViRHpX8tT2VKr0Fq R0imPbNjjs4fHAZSS5H8T6HHpzN2bIrA -----END CERTIFICATE-----Generated at Sun Aug 10 10:33:42 2025 by rpki-client