$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json) Hash identifier: eE/muAQPWzethgPD2Q9mEiiBs3xsWX0XCP0iQm4g+R8= Subject key identifier: 33:A5:67:FD:D1:69:7E:5D:FE:04:C4:95:DA:CB:B1:84:E8:D9:23:9A Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Certificate serial: 24F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft Manifest number: 24DF Signing time: Sun 10 Aug 2025 15:43:33 +0000 Manifest this update: Sun 10 Aug 2025 15:43:32 +0000 Manifest next update: Sun 17 Aug 2025 15:43:32 +0000 Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: RBDX09l4H1cQ2d/XIdJmx/jcjuMhR8q3zrnoX7h4buI=) 2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: XiLxVcA3A5SvnNZPgANRplMFygJvziR4GhZISOC/34g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9457 (0x24f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Validity Not Before: Aug 10 15:43:32 2025 GMT Not After : Aug 17 15:43:32 2025 GMT Subject: CN=6898be24-312a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:3b:40:22:67:6d:67:ac:5b:4e:67:7a:24: e8:a3:b0:d1:b6:bd:1d:30:b4:de:0d:0d:23:c8:20: 24:e9:e5:13:7d:16:bb:d1:8f:e2:a1:1c:fb:d0:d1: b5:e5:9d:96:96:28:f3:5f:c0:bb:24:26:5a:32:b2: a1:be:42:65:b6:62:84:13:7a:13:3f:bf:a3:90:c7: 0e:94:ea:a0:7c:23:ff:04:e6:e8:a3:50:85:7c:b6: ab:63:fb:5c:bd:ac:47:63:30:f5:02:7f:46:8b:8b: e9:78:4c:fc:1a:03:c8:ca:1b:55:d1:ec:93:49:19: cd:2f:ab:1f:fb:2a:ae:7c:b5:05:6a:24:93:1d:34: bd:29:9e:1a:b9:fa:08:dc:4d:46:7b:32:54:c1:ef: b2:c3:05:a2:a6:77:cb:4c:31:c2:0f:64:a7:33:5b: ba:61:5b:84:77:6c:49:f0:9e:4f:81:3d:d7:e6:40: d0:6e:b5:04:d0:a8:b3:87:b6:19:86:15:9f:32:5b: 19:f5:60:74:84:39:77:21:57:9a:cd:ad:e7:bb:f7: 74:b4:c9:6c:bf:25:d8:21:3e:c1:92:22:41:40:59: 40:d1:8e:aa:03:0c:44:15:bb:59:e8:9a:3a:50:8c: 01:9a:fd:ce:19:ac:22:bb:b8:dc:40:42:80:7a:0d: 7d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A5:67:FD:D1:69:7E:5D:FE:04:C4:95:DA:CB:B1:84:E8:D9:23:9A X509v3 Authority Key Identifier: keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cd:41:03:eb:69:86:46:fa:4d:b5:21:6b:ba:7b:ca:c0:17: b9:9a:94:6f:39:34:f6:61:ab:13:f6:76:da:99:78:7d:df:80: 5c:a5:05:3c:bb:10:b6:31:e3:86:41:ee:e6:c6:0c:42:33:f8: 6e:aa:0c:da:e0:67:cb:8c:68:da:b8:b5:69:97:29:a9:62:7e: 15:f5:6b:93:4b:54:99:f3:47:44:da:f4:51:18:55:68:ab:c0: 2c:86:89:d9:5c:80:de:e3:77:b0:6a:24:e7:00:2e:34:af:24: 4e:af:b3:4a:57:c6:02:14:3e:e0:4c:f1:c2:17:42:98:f6:39: 3d:70:3c:2a:7c:4e:47:35:3b:9f:e4:bc:c2:74:b5:f6:ee:38: b8:ff:2f:36:00:38:d3:01:ee:db:c6:3d:0f:34:8a:95:33:d1: 69:0d:b7:fe:18:1a:66:d6:9e:4a:70:c6:b7:31:fb:38:9a:7b: 15:59:4e:55:f5:d4:8d:1c:d1:49:94:22:7e:19:9d:25:53:46: cb:91:0a:47:9e:ae:91:f2:47:76:68:55:19:be:88:07:da:83: b5:15:18:74:0d:fd:14:e4:5c:f2:a5:b5:65:c8:9c:b8:1f:91: 3f:c3:0e:54:cc:03:ef:6a:83:1b:81:f4:70:df:78:ed:21:21: 2e:5a:c3:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5 RUEwNEQ0RTEwHhcNMjUwODEwMTU0MzMyWhcNMjUwODE3MTU0MzMyWjAYMRYwFAYD VQQDEw02ODk4YmUyNC0zMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHk7QCJnbWesW05neiToo7DRtr0dMLTeDQ0jyCAk6eUTfRa70Y/ioRz70NG1 5Z2WlijzX8C7JCZaMrKhvkJltmKEE3oTP7+jkMcOlOqgfCP/BOboo1CFfLarY/tc vaxHYzD1An9Gi4vpeEz8GgPIyhtV0eyTSRnNL6sf+yqufLUFaiSTHTS9KZ4aufoI 3E1GezJUwe+ywwWipnfLTDHCD2SnM1u6YVuEd2xJ8J5PgT3X5kDQbrUE0Kizh7YZ hhWfMlsZ9WB0hDl3IVeaza3nu/d0tMlsvyXYIT7BkiJBQFlA0Y6qAwxEFbtZ6Jo6 UIwBmv3OGawiu7jcQEKAeg19SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOlZ/3R aX5d/gTEldrLsYTo2SOaMB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP NHp3QkttVEZRck9lb0UxT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKzUED62mGRvpNtSFrunvKwBe5mpRvOTT2YasT9nbamXh934BcpQU8 uxC2MeOGQe7mxgxCM/huqgza4GfLjGjauLVplympYn4V9WuTS1SZ80dE2vRRGFVo q8AshonZXIDe43ewaiTnAC40ryROr7NKV8YCFD7gTPHCF0KY9jk9cDwqfE5HNTuf 5LzCdLX27ji4/y82ADjTAe7bxj0PNIqVM9FpDbf+GBpm1p5KcMa3Mfs4mnsVWU5V 9dSNHNFJlCJ+GZ0lU0bLkQpHnq6R8kd2aFUZvogH2oO1FRh0Df0U5FzypbVlyJy4 H5E/ww5UzAPvaoMbgfRw33jtISEuWsMu -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:10 2025 by rpki-client