$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft File: Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json) Hash identifier: 8QPnJ8J+4cbZkYJrmc92OpmZEnlJyjiuBq2GhGJWbRc= Subject key identifier: CD:29:36:BE:88:E9:FF:C9:55:04:D3:EF:CE:E7:D9:D0:8B:2F:68:2D Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B Certificate issuer: /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft Manifest number: 066E Signing time: Wed 06 Aug 2025 22:50:07 +0000 Manifest this update: Wed 06 Aug 2025 22:50:07 +0000 Manifest next update: Wed 13 Aug 2025 22:50:06 +0000 Files and hashes: 1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: hkzz2ZPaVUdYPb4VESLpkjdWhpLUl3bjufZqBriLM+c=) 2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: 1AEXU+7Y4PfWz8jQxA5HlFwuXkljqopTv6bNdtPTBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B Validity Not Before: Aug 6 22:50:07 2025 GMT Not After : Aug 13 22:50:06 2025 GMT Subject: CN=6893dc1f-5313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:41:81:11:d6:1f:c2:08:37:20:4d:8c:23: 8d:20:85:44:83:8e:a9:17:6e:60:60:70:e6:7d:26: d5:38:e0:c5:1b:51:1b:9e:24:34:64:8c:53:1e:fd: bb:7d:24:51:c1:13:e5:72:03:70:14:5c:90:92:c6: 72:13:62:6b:ea:0f:a6:a9:7a:75:0b:fb:c7:d2:25: 70:3f:57:46:37:ab:59:e6:dd:5a:18:a1:d4:49:3f: 74:c2:df:06:bb:6c:6d:66:a7:41:cd:e4:05:bc:e6: 48:7c:a7:83:05:41:a8:31:0e:4d:0d:42:a9:5d:63: 90:a2:fa:37:91:50:f9:7f:12:6d:bb:7a:cf:32:a8: 41:0d:5c:65:45:bf:4d:21:1c:c1:1c:18:8d:2e:4e: dd:bc:f4:b3:74:23:13:0c:d5:a7:b8:36:7d:d6:2f: a9:e6:8e:c1:1a:a3:bb:9a:a6:8d:4f:87:91:ff:2c: ef:65:19:f0:42:c2:b9:4a:fd:87:06:1a:8f:ed:ba: ae:3a:f3:76:2b:26:1a:33:1f:4c:24:82:74:a9:e7: 7e:11:68:c1:7e:a4:9b:cf:d0:dd:89:94:b1:dd:15: 05:91:0d:8f:53:91:ad:76:2e:a8:4f:ac:26:d4:f1: 67:76:bb:0f:b6:c1:f4:a2:68:f6:ca:02:c8:d5:b2: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:29:36:BE:88:E9:FF:C9:55:04:D3:EF:CE:E7:D9:D0:8B:2F:68:2D X509v3 Authority Key Identifier: keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:19:b1:7c:6e:5f:5b:c9:8a:cc:37:69:95:1c:8d:b5:38:8d: cc:42:4f:a3:57:03:b2:08:a7:c9:9f:d9:58:47:b5:88:6d:ad: a0:d5:9b:f0:13:31:eb:64:4f:0a:9d:8f:62:6f:22:ba:35:96: 09:62:ab:95:26:6d:34:7f:85:c3:62:fe:fb:c0:9b:aa:66:1f: 3f:1f:f3:88:c6:ad:16:60:8d:66:1e:73:18:3a:de:c5:88:f9: 8c:d7:e8:60:73:72:c5:e6:1c:72:10:30:1a:7b:9c:bc:6e:de: de:8c:d3:c0:38:fc:2c:f3:38:0a:3b:d8:a7:de:b9:61:10:8c: 44:55:c2:79:02:1e:78:1a:d0:22:2d:64:02:18:7c:c2:8c:c8: b0:8a:88:e3:86:d9:69:db:48:2e:b2:5e:10:0a:ea:5c:ef:17: c4:d0:c3:20:e9:5b:24:44:f9:cd:3a:df:d6:dd:80:b5:08:05: d6:71:41:b9:99:1b:c9:23:d6:86:55:2a:fb:10:a3:9d:53:a1: 56:1d:f4:cd:19:a5:32:39:0b:af:ce:70:bd:08:18:55:f1:f8: 3a:b9:5d:da:98:e0:f7:59:f7:7f:7d:6c:47:59:e4:af:6a:16: 5c:f9:13:3f:52:74:20:2d:40:75:5d:00:3a:b1:5c:47:ec:52: 61:2c:37:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzNUQxMTAvBgNVBAUTKDYzNTkzMDlFRjQ5QjQ0NUY2RUI1MzMxQkRGMEE5NEM1 QzZFRkMzN0IwHhcNMjUwODA2MjI1MDA3WhcNMjUwODEzMjI1MDA2WjAYMRYwFAYD VQQDEw02ODkzZGMxZi01MzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtVBgRHWH8IINyBNjCONIIVEg46pF25gYHDmfSbVOODFG1EbniQ0ZIxTHv27 fSRRwRPlcgNwFFyQksZyE2Jr6g+mqXp1C/vH0iVwP1dGN6tZ5t1aGKHUST90wt8G u2xtZqdBzeQFvOZIfKeDBUGoMQ5NDUKpXWOQovo3kVD5fxJtu3rPMqhBDVxlRb9N IRzBHBiNLk7dvPSzdCMTDNWnuDZ91i+p5o7BGqO7mqaNT4eR/yzvZRnwQsK5Sv2H BhqP7bquOvN2KyYaMx9MJIJ0qed+EWjBfqSbz9DdiZSx3RUFkQ2PU5Gtdi6oT6wm 1PFndrsPtsH0omj2ygLI1bIv7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0pNr6I 6f/JVQTT787n2dCLL2gtMB8GA1UdIwQYMBaAFGNZMJ70m0RfbrUzG98KlMXG78N7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTM1RC9GNTAwRjcyODhB QjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJGOXV0VE1iM3dxVXhjYnZ3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxa3dudlNiUkY5dXRUTWIzd3FVeGNidnczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTM1RC9GNTAwRjcyODhBQjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJG OXV0VE1iM3dxVXhjYnZ3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGGbF8bl9byYrMN2mVHI21OI3MQk+jVwOyCKfJn9lYR7WIba2g1Zvw EzHrZE8KnY9ibyK6NZYJYquVJm00f4XDYv77wJuqZh8/H/OIxq0WYI1mHnMYOt7F iPmM1+hgc3LF5hxyEDAae5y8bt7ejNPAOPws8zgKO9in3rlhEIxEVcJ5Ah54GtAi LWQCGHzCjMiwiojjhtlp20gusl4QCupc7xfE0MMg6VskRPnNOt/W3YC1CAXWcUG5 mRvJI9aGVSr7EKOdU6FWHfTNGaUyOQuvznC9CBhV8fg6uV3amOD3Wfd/fWxHWeSv ahZc+RM/UnQgLUB1XQA6sVxH7FJhLDfD -----END CERTIFICATE-----Generated at Fri Aug 8 20:44:57 2025 by rpki-client