$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json) Hash identifier: SvoNih29Bq191yIsnVcpJaQfAno8UsbNEUvXbfL0s1g= Subject key identifier: 8A:37:B2:D5:C4:B5:F6:F7:C5:66:97:44:3B:24:3E:C4:9E:98:62:8E Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft Manifest number: D6 Signing time: Sat 09 Aug 2025 05:58:12 +0000 Manifest this update: Sat 09 Aug 2025 05:58:11 +0000 Manifest next update: Sat 16 Aug 2025 05:58:11 +0000 Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: D8eOXvI16zICkqoTYHIZvaC5HJZc4eEuBAIBRua59oc=) 2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: //CtK2APwvuKqYfNGso7I/JYlqJyjoNEWh980lWprcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Validity Not Before: Aug 9 05:58:11 2025 GMT Not After : Aug 16 05:58:11 2025 GMT Subject: CN=6896e373-d01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:25:d3:a1:d4:f5:4e:ce:90:5e:a5:18:1f: db:2f:4e:72:53:fd:04:08:0e:17:00:f4:77:46:e5: 47:78:74:d7:5c:e9:8c:a3:67:6f:ff:9b:0a:64:9e: 29:b7:f7:f5:3c:e8:6f:21:5e:40:9d:1a:b8:42:07: a7:31:a2:dd:26:03:f6:a0:6f:68:70:d4:06:d7:c3: d4:f1:98:43:83:6c:1a:aa:56:c2:93:7d:76:0c:2d: ad:52:d4:89:a0:bb:15:6d:c2:28:ff:f9:b8:14:af: f4:14:5b:aa:68:0c:dc:33:70:e0:04:14:61:cd:77: 10:75:5a:c1:09:45:0c:f3:e0:41:eb:43:cb:87:8c: 4b:f2:5c:f6:f2:03:15:40:23:da:33:0d:e5:be:ed: c7:4b:2f:3b:38:76:ba:c1:d8:64:5e:5e:93:25:a4: ea:a8:f0:ce:d7:fa:55:f8:40:97:34:4b:51:56:3c: 48:e0:b0:15:82:2b:87:32:20:46:4d:e6:d4:f2:6f: 63:b1:37:90:85:e0:8d:bc:85:89:b5:36:6f:3b:c8: be:2b:a7:cc:5b:3f:d2:68:7f:09:6c:c0:6e:7b:0a: 48:53:5d:f7:d1:88:b2:13:ac:3c:f3:72:82:90:e0: bf:f4:04:07:97:68:f9:d3:a8:71:9a:a9:7e:65:d4: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:37:B2:D5:C4:B5:F6:F7:C5:66:97:44:3B:24:3E:C4:9E:98:62:8E X509v3 Authority Key Identifier: keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:1c:9c:d5:81:db:a2:64:7b:d5:c6:49:ba:ec:57:a4:c4:61: e6:77:cd:0d:2d:23:02:ca:e7:32:02:81:88:56:c6:ab:cc:e9: 48:18:5c:f6:54:57:8b:da:b7:a4:ac:02:82:88:cf:a0:cc:e4: 91:5a:76:84:5a:c6:b8:eb:f5:db:70:83:26:53:2c:f8:ad:bf: b6:59:7c:f5:bd:a0:da:d2:72:b0:0e:33:05:7e:d5:40:d9:21: f2:fe:de:16:59:0b:07:7a:95:2c:07:fd:56:c5:3a:2d:3f:db: 79:c7:89:28:79:37:3e:1e:f3:f1:dc:82:5e:69:37:82:bd:f4: 09:72:2d:b1:ea:63:11:3c:0c:c0:ec:57:44:17:78:bf:a0:8e: 5d:3b:2d:bf:01:55:e1:d3:91:10:f8:e3:15:60:28:62:e8:b7: 18:4d:85:56:fd:34:90:69:47:1b:32:68:54:58:da:37:a3:aa: 10:c6:33:f7:35:69:c4:0e:e0:41:72:b6:3c:b1:b9:da:c2:62: be:14:b8:1a:79:e0:48:e8:24:db:45:b0:31:3a:2e:a6:09:06: 22:0d:e4:d7:c4:83:40:98:e9:13:a4:87:99:4b:e9:30:c9:e7: f0:de:63:35:cc:3c:8b:d0:1a:5d:13:6e:82:34:5f:74:3c:ea: e3:48:e1:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0 REQ2NzdGRUEwHhcNMjUwODA5MDU1ODExWhcNMjUwODE2MDU1ODExWjAYMRYwFAYD VQQDEw02ODk2ZTM3My1kMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXIl06HU9U7OkF6lGB/bL05yU/0ECA4XAPR3RuVHeHTXXOmMo2dv/5sKZJ4p t/f1POhvIV5AnRq4QgenMaLdJgP2oG9ocNQG18PU8ZhDg2waqlbCk312DC2tUtSJ oLsVbcIo//m4FK/0FFuqaAzcM3DgBBRhzXcQdVrBCUUM8+BB60PLh4xL8lz28gMV QCPaMw3lvu3HSy87OHa6wdhkXl6TJaTqqPDO1/pV+ECXNEtRVjxI4LAVgiuHMiBG TebU8m9jsTeQheCNvIWJtTZvO8i+K6fMWz/SaH8JbMBuewpIU1330YiyE6w883KC kOC/9AQHl2j506hxmql+ZdS/1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo3stXE tfb3xWaXRDskPsSemGKOMB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJHJzVgduiZHvVxkm67FekxGHmd80NLSMCyucyAoGIVsarzOlIGFz2 VFeL2rekrAKCiM+gzOSRWnaEWsa46/XbcIMmUyz4rb+2WXz1vaDa0nKwDjMFftVA 2SHy/t4WWQsHepUsB/1WxTotP9t5x4koeTc+HvPx3IJeaTeCvfQJci2x6mMRPAzA 7FdEF3i/oI5dOy2/AVXh05EQ+OMVYChi6LcYTYVW/TSQaUcbMmhUWNo3o6oQxjP3 NWnEDuBBcrY8sbnawmK+FLgaeeBI6CTbRbAxOi6mCQYiDeTXxINAmOkTpIeZS+kw yefw3mM1zDyL0BpdE26CNF90POrjSOEJ -----END CERTIFICATE-----Generated at Sun Aug 10 14:01:15 2025 by rpki-client