$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft File: YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json) Hash identifier: dwniYHpzIhH3yKuCdtz+whWNEbyeyqLe8wWQMeUQkrk= Subject key identifier: C4:50:FA:11:28:39:E7:7A:BF:D5:24:53:9A:4F:C8:65:DE:DD:61:3B Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 Certificate issuer: /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294 Certificate serial: 0417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft Manifest number: 0404 Signing time: Mon 11 Aug 2025 00:42:00 +0000 Manifest this update: Mon 11 Aug 2025 00:42:00 +0000 Manifest next update: Mon 18 Aug 2025 00:42:00 +0000 Files and hashes: 1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: 4XoiXxNoGCmZWsBITiTI9QeC9bShxpqEglfTlZPobE8=) 2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: HVGi2lUwCQZWcIQSfZT0TZMTdiphqEIo5eAKaq0V4N8=) 3: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: xAxqo/39ROKd3bFPPtYVdYrT8F7pY6ozf1j+GuGsqZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294 Validity Not Before: Aug 11 00:42:00 2025 GMT Not After : Aug 18 00:42:00 2025 GMT Subject: CN=68993c58-0a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:64:d8:cc:70:95:e8:68:7a:d9:5b:c5:ca: d3:07:94:b0:31:65:6a:db:93:df:b7:29:24:24:35: 06:0f:a1:90:40:86:7b:ff:ad:55:16:94:3a:91:7c: 47:00:b7:f9:0c:15:21:67:7d:6d:13:2d:ae:26:03: 76:61:ab:f3:94:8a:e0:bb:9b:f4:7d:57:58:75:d0: 6f:16:29:59:2b:de:6e:4c:ef:bf:b4:04:b5:4c:9b: 85:67:19:d8:77:18:a2:be:04:3f:53:0d:07:ef:a4: 4c:b7:39:fe:60:a7:1a:37:da:f5:a7:5c:e2:44:8c: 42:a3:8b:13:44:19:a1:71:d3:1b:07:c1:65:a5:0a: 9d:62:f1:73:6c:28:52:b1:17:ec:47:5c:2d:f8:c2: f3:7f:38:8f:d8:f4:b6:c6:39:20:fb:0a:40:64:ff: 7a:6b:9c:da:70:a0:a9:4c:b7:f8:b3:7a:0f:13:cc: 3b:44:7b:ad:cb:75:c8:7d:d7:6e:a1:f7:26:c8:4c: ce:d7:be:61:24:c7:56:ee:db:d0:ad:19:a7:b8:38: 26:ac:61:82:33:5b:0e:66:39:b2:06:10:fd:1d:06: b8:f1:38:bb:14:2e:b7:77:0a:a7:99:52:84:96:75: 40:a5:dc:ac:74:74:3d:16:a6:34:d4:2b:4d:b0:0b: f6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:50:FA:11:28:39:E7:7A:BF:D5:24:53:9A:4F:C8:65:DE:DD:61:3B X509v3 Authority Key Identifier: keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:4f:03:b1:02:ac:ca:77:c0:1a:3c:02:70:f9:77:94:42:f7: a1:1b:27:88:ce:f4:5c:79:2e:42:81:55:d6:f3:a7:8f:5f:88: ff:2a:cc:0f:5b:08:d6:39:e5:bc:e9:fc:56:9a:58:aa:da:78: d9:57:6e:ad:df:e2:1e:b0:e4:32:b0:72:63:95:c2:73:5e:a1: a1:80:37:a2:88:89:66:99:d7:7a:68:21:11:0d:2b:a1:68:6a: 2e:42:5e:ca:b6:94:e0:03:4e:f4:04:41:57:93:1d:98:ea:6f: b8:b5:d4:55:f6:97:8c:04:49:27:8a:8a:1f:a8:1a:c4:ac:10: 83:29:fb:1d:de:d8:f2:e0:f3:5c:51:64:31:b4:da:5c:97:31: 45:9f:03:a9:3a:2a:69:1c:3e:69:54:28:bd:4a:48:03:d4:c3: 17:3d:92:9c:84:19:a4:1c:12:e5:dc:ed:5e:37:ac:10:2c:57: 46:4c:aa:a4:79:66:e7:e4:06:d6:f3:d9:28:c6:3f:2d:ed:e3: d0:ec:13:ad:d4:3e:93:f4:ee:d1:d3:2a:77:51:1e:f7:fb:86: 86:4b:f3:d4:0c:11:2d:13:49:6a:88:d0:d3:09:cd:87:73:34: 3d:44:f5:4e:f8:fd:0b:d4:19:35:a7:43:09:06:32:5a:ed:e1: 49:eb:4d:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMDgxMTAvBgNVBAUTKDYxNENDRDI0Rjc4NUU5Mjk5MjE1OTE2NDA4Mjk0MDQy RjE0NjMyOTQwHhcNMjUwODExMDA0MjAwWhcNMjUwODE4MDA0MjAwWjAYMRYwFAYD VQQDEw02ODk5M2M1OC0wYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMNk2MxwlehoetlbxcrTB5SwMWVq25PftykkJDUGD6GQQIZ7/61VFpQ6kXxH ALf5DBUhZ31tEy2uJgN2YavzlIrgu5v0fVdYddBvFilZK95uTO+/tAS1TJuFZxnY dxiivgQ/Uw0H76RMtzn+YKcaN9r1p1ziRIxCo4sTRBmhcdMbB8FlpQqdYvFzbChS sRfsR1wt+MLzfziP2PS2xjkg+wpAZP96a5zacKCpTLf4s3oPE8w7RHuty3XIfddu ofcmyEzO175hJMdW7tvQrRmnuDgmrGGCM1sOZjmyBhD9HQa48Ti7FC63dwqnmVKE lnVApdysdHQ9FqY01CtNsAv2lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRQ+hEo Oed6v9UkU5pPyGXe3WE7MB8GA1UdIwQYMBaAFGFMzST3hekpkhWRZAgpQELxRjKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIwOC8zNzU1M0E1Njg5 OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZTbVNGWkZrQ0NsQVF2RkdN cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVek5KUGVGNlNtU0ZaRmtDQ2xBUXZGR01wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIwOC8zNzU1M0E1Njg5OUQxMUVDOEI0MjRFMEJDNEY5QUUwMi9ZVXpOSlBlRjZT bVNGWkZrQ0NsQVF2RkdNcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0TwOxAqzKd8AaPAJw+XeUQvehGyeIzvRceS5CgVXW86ePX4j/KswP WwjWOeW86fxWmliq2njZV26t3+IesOQysHJjlcJzXqGhgDeiiIlmmdd6aCERDSuh aGouQl7KtpTgA070BEFXkx2Y6m+4tdRV9peMBEknioofqBrErBCDKfsd3tjy4PNc UWQxtNpclzFFnwOpOippHD5pVCi9SkgD1MMXPZKchBmkHBLl3O1eN6wQLFdGTKqk eWbn5AbW89koxj8t7ePQ7BOt1D6T9O7R0yp3UR73+4aGS/PUDBEtE0lqiNDTCc2H czQ9RPVO+P0L1Bk1p0MJBjJa7eFJ603M -----END CERTIFICATE-----Generated at Wed Aug 13 00:35:42 2025 by rpki-client