$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft File: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json) Hash identifier: pavX+BHflOaTrjSje3dkhTyFfzRTs7NXqYs8gU16aJk= Subject key identifier: A7:FA:7E:EB:3A:9D:CF:1F:86:76:53:A2:AC:40:9F:2F:70:5E:DC:19 Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Certificate serial: 0C4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft Manifest number: 0C47 Signing time: Fri 08 Aug 2025 18:46:16 +0000 Manifest this update: Fri 08 Aug 2025 18:46:16 +0000 Manifest next update: Fri 15 Aug 2025 18:46:15 +0000 Files and hashes: 1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: lFpYzYEmxamPX6AoO4gycndCmWlxtQTGzGl8olKQe8A=) 2: 69308C200A9611EABF034172C4F9AE02.roa (hash: UpR8nuBc/YxAqJ5KwZdD471HRL+h2X0H2SIoY13S/74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3151 (0xc4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Validity Not Before: Aug 8 18:46:16 2025 GMT Not After : Aug 15 18:46:15 2025 GMT Subject: CN=689645f8-d5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d5:1c:ef:a2:46:8a:ab:e6:0f:e9:40:15:82: 01:77:00:5f:0a:4a:d6:be:77:70:66:4d:53:33:30: 8f:21:20:07:5e:57:7a:6e:b2:58:a3:2a:40:36:75: 2d:a5:1c:f4:25:d9:79:ca:a7:9d:87:fb:d8:09:8a: 11:76:92:9d:be:6e:de:4e:d6:50:b4:23:50:fe:77: 53:04:0f:ce:bd:7d:b5:82:d4:0d:e5:07:49:d5:97: 33:92:7d:3e:3f:41:8e:39:8a:b3:66:6d:6e:00:b5: 64:70:39:0a:1f:55:e4:83:fe:6c:b0:88:db:5b:a3: 71:d4:f9:c1:12:93:41:1c:a4:bf:21:68:9a:0c:e4: 20:08:1a:84:e8:2a:c9:91:c7:a8:75:34:1d:85:90: 14:cf:1e:15:0b:fe:88:0f:21:4f:0d:c8:e4:61:30: 74:74:90:48:d1:ef:97:6d:ba:27:96:e9:60:d3:c2: 8d:24:d0:73:af:82:cb:0b:21:ff:3f:85:b4:bc:f6: fd:24:8e:8d:cd:c7:ef:9f:a4:7b:a8:80:04:77:83: fa:19:8c:83:17:45:3b:82:09:e9:d9:51:a9:10:e5: 31:d4:1d:20:1e:b8:b5:0f:93:15:fc:2d:71:5f:89: 58:35:07:0b:b2:64:c4:c9:ca:9d:fa:3e:33:9a:ce: 4c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FA:7E:EB:3A:9D:CF:1F:86:76:53:A2:AC:40:9F:2F:70:5E:DC:19 X509v3 Authority Key Identifier: keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:91:56:36:1d:02:2b:1d:c7:19:60:82:35:e4:fc:bf:03:fc: 7d:38:0a:6a:c5:01:c4:37:55:ac:64:4b:c1:ad:ac:62:d7:ed: fe:65:c4:8b:c7:3a:fb:e8:d6:b0:34:3d:49:df:33:a3:9b:18: 19:67:db:97:af:5b:3c:f5:52:96:ec:05:e2:71:e9:96:3e:4e: e8:10:bc:25:ca:47:75:5d:74:3e:90:2b:98:82:1b:35:83:b7: a5:46:5c:75:4b:63:b1:63:81:ba:3f:a6:c1:9d:fc:da:d2:f0: 3a:b9:c3:bd:90:d6:dc:2b:90:ad:32:d2:76:f3:2f:97:80:b9: 33:eb:aa:1b:e5:f0:9d:7a:d7:07:cd:d7:39:a6:d7:4e:d7:80: b0:93:06:87:03:c4:48:3f:7c:32:41:80:a0:3a:0f:c5:73:1a: 75:fa:b0:f1:a6:08:ac:13:6c:56:20:c2:c3:74:86:8b:5a:63: 49:fd:4a:bb:8f:c3:dc:3a:0a:d1:7a:09:16:6c:4c:86:8b:32: 15:7f:12:62:56:ba:3b:25:9e:5f:cf:d3:94:2d:3f:60:d4:c5: d7:6b:02:38:16:fc:33:1d:30:b7:13:1d:02:8c:1c:83:4f:ed: eb:e7:f8:c9:4b:b5:0c:33:b1:04:3f:ed:3d:43:29:b7:56:98: 52:c6:43:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4QjExMTAvBgNVBAUTKEM4N0ZDQUU5MDdCRDIwNUEwOEU1NEM2N0E2MzM1NkQ5 MjFDNTkxM0IwHhcNMjUwODA4MTg0NjE2WhcNMjUwODE1MTg0NjE1WjAYMRYwFAYD VQQDEw02ODk2NDVmOC1kNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dUc76JGiqvmD+lAFYIBdwBfCkrWvndwZk1TMzCPISAHXld6brJYoypANnUt pRz0Jdl5yqedh/vYCYoRdpKdvm7eTtZQtCNQ/ndTBA/OvX21gtQN5QdJ1Zczkn0+ P0GOOYqzZm1uALVkcDkKH1Xkg/5ssIjbW6Nx1PnBEpNBHKS/IWiaDOQgCBqE6CrJ kceodTQdhZAUzx4VC/6IDyFPDcjkYTB0dJBI0e+Xbbonlulg08KNJNBzr4LLCyH/ P4W0vPb9JI6Nzcfvn6R7qIAEd4P6GYyDF0U7ggnp2VGpEOUx1B0gHri1D5MV/C1x X4lYNQcLsmTEycqd+j4zms5MtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf6fus6 nc8fhnZToqxAny9wXtwZMB8GA1UdIwQYMBaAFMh/yukHvSBaCOVMZ6YzVtkhxZE7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzhCMS9DRTg1MUE1NjBB OTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlGb0k1VXhucGpOVzJTSEZr VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX0s2UWU5SUZvSTVVeG5wak5XMlNIRmtUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzhCMS9DRTg1MUE1NjBBOTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlG b0k1VXhucGpOVzJTSEZrVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmkVY2HQIrHccZYII15Py/A/x9OApqxQHEN1WsZEvBraxi1+3+ZcSL xzr76NawND1J3zOjmxgZZ9uXr1s89VKW7AXicemWPk7oELwlykd1XXQ+kCuYghs1 g7elRlx1S2OxY4G6P6bBnfza0vA6ucO9kNbcK5CtMtJ28y+XgLkz66ob5fCdetcH zdc5ptdO14CwkwaHA8RIP3wyQYCgOg/Fcxp1+rDxpgisE2xWIMLDdIaLWmNJ/Uq7 j8PcOgrRegkWbEyGizIVfxJiVro7JZ5fz9OULT9g1MXXawI4FvwzHTC3Ex0CjByD T+3r5/jJS7UMM7EEP+09Qym3VphSxkOV -----END CERTIFICATE-----Generated at Sun Aug 10 05:44:13 2025 by rpki-client