$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json) Hash identifier: UBrYlqRdnXcgO5lv/oLzsiJyuHs8pGZZRlpPVM473KU= Subject key identifier: 85:89:2A:17:DD:E4:23:17:74:FD:B7:5E:73:35:14:68:FA:B0:36:50 Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft Manifest number: 077C Signing time: Fri 08 Aug 2025 21:54:16 +0000 Manifest this update: Fri 08 Aug 2025 21:54:15 +0000 Manifest next update: Fri 15 Aug 2025 21:54:15 +0000 Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: 9I5Pw5qXHUaRJA6psGY8dMZxmfXcf2CuLS5HsaEUSqI=) 2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: 6tZzkzjjo4oBxSeK/R1NOhuzbe0x0nCnZv7oHnkeXMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Validity Not Before: Aug 8 21:54:15 2025 GMT Not After : Aug 15 21:54:15 2025 GMT Subject: CN=68967207-20d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:74:9d:ea:10:fb:5b:a8:c0:a4:13:3c:c5: ad:73:12:7e:2f:c8:43:5f:78:2f:10:0a:b9:77:dd: 90:2d:3c:39:a1:33:09:d7:74:83:f1:78:aa:bd:18: 1a:a1:a3:82:30:a0:9b:73:89:75:f6:d9:9a:9f:3d: 7a:73:c6:57:27:7d:d9:dc:a7:ae:11:9f:54:40:0f: 15:72:4e:1c:b6:75:6f:b4:39:bd:92:4a:b7:70:6a: 3a:5b:3a:70:1b:20:19:61:a3:38:19:a6:21:de:10: b8:9d:6a:08:ed:05:90:af:2b:a3:21:24:3e:7f:2b: 8d:ad:70:6b:37:16:a2:ec:be:27:83:66:1a:b7:6b: 29:10:90:a5:74:7f:5a:27:3b:31:8a:1a:b4:86:85: 85:42:70:a2:02:3b:74:cf:01:ae:e0:46:01:54:5e: 2c:d4:97:20:6e:13:15:7c:ee:65:7a:91:58:b5:fb: 83:7d:9d:a5:c6:15:24:c1:49:34:a7:66:30:e5:f2: cf:e0:b0:7d:b2:74:14:f0:01:cc:29:de:8d:74:2b: 61:08:d7:ff:ef:46:d1:ce:b0:b1:51:96:41:29:0a: 23:8b:65:20:73:54:f7:88:16:53:d2:b2:7e:d0:90: ac:6d:7d:a9:c0:84:99:0d:67:67:c8:9c:1e:be:b9: 50:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:2A:17:DD:E4:23:17:74:FD:B7:5E:73:35:14:68:FA:B0:36:50 X509v3 Authority Key Identifier: keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:b3:7c:8e:46:7e:27:a2:22:c2:ef:6a:23:73:45:a5:87:d4: 64:a7:1f:ef:9a:4a:4b:6f:b9:7a:61:01:d5:ae:96:95:9d:f1: 86:4d:38:10:db:c4:c8:e6:29:59:de:31:44:d6:c4:ca:dc:23: af:52:d7:de:88:3d:02:dd:eb:35:ca:86:92:e9:c9:a5:8f:c1: 6f:69:63:f5:02:e9:b8:a0:f5:e3:2d:4c:b6:55:d5:73:d9:59: ef:f0:7b:2f:6c:c3:fd:a0:13:64:b7:d9:a0:e1:db:3d:97:90: 1b:3a:4a:fd:fa:3a:96:b3:74:ea:9e:b4:f7:8b:62:13:98:97: d6:23:e0:40:c7:d7:06:3c:5b:95:d9:5d:d3:9e:1d:39:71:83: f5:80:2f:9e:6a:a8:d2:ee:12:49:b7:43:f0:5f:e1:56:44:a4: a8:fc:de:1f:cf:ed:d4:70:7f:36:c3:1b:68:73:94:d2:9c:64: de:95:65:22:e8:08:ca:9c:ae:f5:ee:d1:00:bf:66:12:c8:d6: f6:a2:73:b6:c6:b7:c0:ee:bd:0f:3c:34:92:6d:4d:75:8e:ee: 4b:15:43:07:e9:71:7f:bf:00:80:19:90:58:88:13:ce:26:05: fd:65:ab:d4:a2:9c:0b:a0:cb:20:ec:3a:b6:ee:d4:0b:a2:fe: 2e:e2:25:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMUExMTAvBgNVBAUTKEM5OTM1OTQzNjkxQUQxRTk1MzY2RTc0MUMxMzkzMDFG QjdGN0U2REIwHhcNMjUwODA4MjE1NDE1WhcNMjUwODE1MjE1NDE1WjAYMRYwFAYD VQQDEw02ODk2NzIwNy0yMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQp0neoQ+1uowKQTPMWtcxJ+L8hDX3gvEAq5d92QLTw5oTMJ13SD8XiqvRga oaOCMKCbc4l19tmanz16c8ZXJ33Z3KeuEZ9UQA8Vck4ctnVvtDm9kkq3cGo6Wzpw GyAZYaM4GaYh3hC4nWoI7QWQryujISQ+fyuNrXBrNxai7L4ng2Yat2spEJCldH9a Jzsxihq0hoWFQnCiAjt0zwGu4EYBVF4s1JcgbhMVfO5lepFYtfuDfZ2lxhUkwUk0 p2Yw5fLP4LB9snQU8AHMKd6NdCthCNf/70bRzrCxUZZBKQoji2Ugc1T3iBZT0rJ+ 0JCsbX2pwISZDWdnyJwevrlQeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWJKhfd 5CMXdP23XnM1FGj6sDZQMB8GA1UdIwQYMBaAFMmTWUNpGtHpU2bnQcE5MB+39+bb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMxQS8yQkRERkFDRTIx OTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBlbFRadWRCd1Rrd0g3ZjM1 dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laTlpRMmthMGVsVFp1ZEJ3VGt3SDdmMzV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMxQS8yQkRERkFDRTIxOTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBl bFRadWRCd1Rrd0g3ZjM1dHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRs3yORn4noiLC72ojc0Wlh9Rkpx/vmkpLb7l6YQHVrpaVnfGGTTgQ 28TI5ilZ3jFE1sTK3COvUtfeiD0C3es1yoaS6cmlj8FvaWP1Aum4oPXjLUy2VdVz 2Vnv8HsvbMP9oBNkt9mg4ds9l5AbOkr9+jqWs3TqnrT3i2ITmJfWI+BAx9cGPFuV 2V3Tnh05cYP1gC+eaqjS7hJJt0PwX+FWRKSo/N4fz+3UcH82wxtoc5TSnGTelWUi 6AjKnK717tEAv2YSyNb2onO2xrfA7r0PPDSSbU11ju5LFUMH6XF/vwCAGZBYiBPO JgX9ZavUopwLoMsg7Dq27tQLov4u4iUz -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:26 2025 by rpki-client