$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json) Hash identifier: 29q/FDhg6xqSRvsV6bURMcl+XMdrlyIzw0qxA9VrCxg= Subject key identifier: C6:9D:B1:B4:3C:4A:F5:23:73:39:C6:79:57:BE:2F:24:12:FD:5F:33 Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft Manifest number: 0D74 Signing time: Fri 08 Aug 2025 18:10:39 +0000 Manifest this update: Fri 08 Aug 2025 18:10:39 +0000 Manifest next update: Fri 15 Aug 2025 18:10:39 +0000 Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: LohSpMw5JcIGI/NboazdIMMLMil6jy28yQH4OwTAYuM=) 2: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: h9Ek+uVHJkd43jpvXLhIeId4TZWOhn+0W2MAspUZuOw=) 3: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: sy4Su4ASjc+OqwWE5jPxA/U7NJeDsxDapY34Q7SzDAE=) 4: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: +QLq15+GCrbTMv3T/U18UwN/WHFJnfWgXMxuf5yq0ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3465 (0xd89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Validity Not Before: Aug 8 18:10:39 2025 GMT Not After : Aug 15 18:10:39 2025 GMT Subject: CN=68963d9f-76bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:2a:d7:76:9b:70:08:df:38:9f:9d:2c:7b: 0e:2c:fa:ef:6d:3c:52:60:b1:4c:62:33:39:3b:23: ad:77:42:93:b5:a9:96:f6:19:57:a7:82:d2:b2:c6: d7:00:64:3a:7b:2d:c7:16:c8:04:40:c7:7b:ab:b0: 28:a1:93:2d:79:33:07:9c:4e:31:fe:23:e0:2b:72: 1b:bf:1a:74:b9:36:58:d0:b1:41:b7:2b:3e:ee:cb: 76:a4:70:46:34:67:ed:5c:6f:c0:59:16:88:ee:7c: 0a:20:05:35:7c:7f:1d:7c:d6:0b:d8:32:47:43:30: 50:55:0f:22:5d:97:97:1d:58:00:b1:8a:8c:14:d7: e1:81:e0:39:8a:6d:d4:49:c6:b8:f3:cb:68:d0:a1: 9d:a9:fc:52:6a:df:5d:ee:f6:cd:15:b3:8a:9b:7a: 5d:c4:ba:4f:f4:1c:6c:94:dc:73:4b:da:a3:47:af: d4:d3:b6:c1:f0:70:81:af:cc:b1:fd:a3:45:39:f0: c3:ee:da:3b:ec:87:32:aa:f7:a0:7a:6b:f6:97:17: 38:81:16:e8:ed:dd:40:d2:4d:d0:9c:9e:9a:0d:74: 3f:bc:de:7e:cc:a7:e9:1e:3b:70:a4:19:d0:c2:f4: 1c:8c:dd:4a:2a:4a:56:b9:73:bc:0d:20:66:f9:84: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9D:B1:B4:3C:4A:F5:23:73:39:C6:79:57:BE:2F:24:12:FD:5F:33 X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:26:a5:97:58:50:be:c9:de:2a:06:9f:27:e3:86:ba:be:51: f8:07:4d:d7:54:30:9c:92:57:4a:cd:ad:3b:31:25:07:a9:6e: b8:bb:c1:3e:8d:d6:c8:ee:6e:67:40:14:6a:d6:ae:64:9b:15: c7:5c:70:ce:ec:9b:03:58:cb:cb:79:3a:a1:49:72:3d:49:03: bc:f5:ad:15:52:54:d6:9b:3e:e3:f2:77:a8:a9:c7:d0:a1:80: fa:ee:36:74:a3:46:c5:ee:eb:55:80:e6:8d:3c:98:30:1f:df: 6d:b6:e8:77:66:74:50:7a:43:3b:40:df:c3:9b:9c:af:60:af: cc:bf:46:e3:cf:11:bb:74:6b:76:46:19:06:87:35:83:2a:85: 01:bf:f2:24:55:d1:a7:ab:40:03:94:3b:f1:bf:d2:53:aa:95: 1f:71:9c:f3:ed:22:80:e8:fa:b1:13:4d:1b:cc:74:62:e5:13: 93:83:64:fd:42:4e:fb:66:51:4b:fc:cd:61:09:da:e5:05:b7: 79:4b:13:46:19:81:b2:3f:7d:e3:f1:0d:e1:39:3d:08:e4:fd: f2:92:47:88:2e:83:3f:54:52:ce:77:a5:09:b5:6b:c9:9a:7e: 02:ac:94:2d:12:d9:48:8e:85:a0:aa:ea:7b:b5:bb:7c:86:6e: 3d:0d:19:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjUwODA4MTgxMDM5WhcNMjUwODE1MTgxMDM5WjAYMRYwFAYD VQQDEw02ODk2M2Q5Zi03NmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0egq13abcAjfOJ+dLHsOLPrvbTxSYLFMYjM5OyOtd0KTtamW9hlXp4LSssbX AGQ6ey3HFsgEQMd7q7AooZMteTMHnE4x/iPgK3Ibvxp0uTZY0LFBtys+7st2pHBG NGftXG/AWRaI7nwKIAU1fH8dfNYL2DJHQzBQVQ8iXZeXHVgAsYqMFNfhgeA5im3U Sca488to0KGdqfxSat9d7vbNFbOKm3pdxLpP9BxslNxzS9qjR6/U07bB8HCBr8yx /aNFOfDD7to77Icyqvegemv2lxc4gRbo7d1A0k3QnJ6aDXQ/vN5+zKfpHjtwpBnQ wvQcjN1KKkpWuXO8DSBm+YRZiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMadsbQ8 SvUjcznGeVe+LyQS/V8zMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkUwNy85NjJDNEI3RUQyQkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1 a3VaOFFJdlFONGU2NnVESzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtJqWXWFC+yd4qBp8n44a6vlH4B03XVDCckldKza07MSUHqW64u8E+ jdbI7m5nQBRq1q5kmxXHXHDO7JsDWMvLeTqhSXI9SQO89a0VUlTWmz7j8neoqcfQ oYD67jZ0o0bF7utVgOaNPJgwH99ttuh3ZnRQekM7QN/Dm5yvYK/Mv0bjzxG7dGt2 RhkGhzWDKoUBv/IkVdGnq0ADlDvxv9JTqpUfcZzz7SKA6PqxE00bzHRi5ROTg2T9 Qk77ZlFL/M1hCdrlBbd5SxNGGYGyP33j8Q3hOT0I5P3ykkeILoM/VFLOd6UJtWvJ mn4CrJQtEtlIjoWgqup7tbt8hm49DRnW -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:12 2025 by rpki-client