$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json) Hash identifier: cVDEMLz147mJmoeZIW8wM/ulNj5VpfNJ7uBDfIYTNE4= Subject key identifier: 26:A4:73:A2:82:0C:56:4E:13:68:1E:03:E3:A4:05:E5:29:A9:0F:39 Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft Manifest number: 0116 Signing time: Sat 09 Aug 2025 05:18:33 +0000 Manifest this update: Sat 09 Aug 2025 05:18:32 +0000 Manifest next update: Sat 16 Aug 2025 05:18:32 +0000 Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: njP2REmbeZ56p9PJpPXBFveE0AJC/gwo61AGl8lIokw=) 2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: 8r1ggxGUtscfFUhVNnn2tSXuD/VeviYdi6zXjlI+agM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Validity Not Before: Aug 9 05:18:32 2025 GMT Not After : Aug 16 05:18:32 2025 GMT Subject: CN=6896da29-d99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:54:18:49:72:bb:f2:78:20:89:a0:27:2e: 60:ef:49:df:cd:16:8b:63:ba:33:ed:27:31:cf:a2: d1:fb:b1:e2:4f:6a:b2:9d:cc:ba:fc:84:8e:6a:a3: 16:81:0d:72:b3:e9:75:3e:ab:cc:91:b4:ec:35:ef: 1c:6a:d6:22:16:ac:07:1f:e9:ce:30:63:0c:85:d0: 31:65:94:f9:2d:26:85:23:b1:71:de:9b:eb:d4:e1: ad:88:89:27:09:ff:45:31:66:8f:d0:c7:f7:58:89: 60:e1:4a:92:dd:72:7e:3e:65:fe:3b:f4:90:f6:c7: 61:0d:42:14:54:9e:c9:bf:b8:0c:92:fd:60:b7:b6: ae:c8:ee:4a:7b:1a:8b:a8:bd:26:77:39:39:5e:0c: eb:bd:4b:6f:6c:d4:e4:81:e2:8b:04:43:66:d6:0d: 01:00:53:af:eb:4e:c0:22:57:f6:a3:36:95:79:49: 82:c3:83:4a:e8:d6:e7:3c:b0:57:9a:f9:74:b4:e9: bb:ba:0d:3c:88:11:ed:b3:4a:69:4f:96:bb:b3:cf: d8:35:9d:34:0d:27:42:93:e9:1a:4d:a1:b4:1e:ee: f1:98:ca:ea:c8:c6:86:be:7f:38:4f:da:73:8a:07: 31:6f:fa:64:dd:96:c3:3d:7b:ac:72:ca:d4:08:cd: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A4:73:A2:82:0C:56:4E:13:68:1E:03:E3:A4:05:E5:29:A9:0F:39 X509v3 Authority Key Identifier: keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ae:08:86:f0:04:33:6d:41:7a:11:de:c7:23:a5:46:a1:ef: 4e:55:53:39:59:c2:9a:83:df:03:22:ef:e2:90:c2:89:52:fa: 4d:20:e5:7a:e9:2e:df:7b:d7:f3:33:89:ec:40:57:13:69:d0: 06:ac:fb:c8:59:b2:a3:07:27:ca:4a:66:6d:a0:b7:7d:13:93: 49:ac:fc:31:2b:3b:4b:2e:80:12:14:6a:7f:70:cf:9d:a4:5b: 7a:63:02:c8:55:24:36:79:c9:a8:63:f1:74:18:3a:66:df:c5: 5c:a6:40:59:6d:cf:63:df:ab:91:aa:07:9e:4b:fc:21:4c:1d: a8:ec:d0:ca:68:39:c5:fa:b7:a9:eb:37:9d:27:3a:30:88:46: dc:5f:e4:04:77:ff:0b:8a:ef:8c:b1:e4:12:f1:bc:6b:db:bb: d6:ae:42:a6:fa:71:3a:67:a2:ee:18:e0:fc:55:05:28:18:d8: 7a:a8:c8:1d:22:33:91:66:96:2e:a4:d2:cb:2f:ac:9d:34:f0: b2:da:53:25:8b:2e:dc:32:98:43:ec:e7:b9:cf:4a:d5:3c:9c: 5a:24:68:c9:e0:d8:c3:7f:fb:c9:ee:c7:c2:e2:7d:24:dd:96: dc:81:e5:32:9c:80:07:11:a1:a0:bd:c3:a3:14:d5:d3:f0:c3: 76:57:d7:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKDYyNjEwOUJCRUNDOThCQTUyRTdGMzk5QjgwOTYyRDNB RkU1QUIyRDQwHhcNMjUwODA5MDUxODMyWhcNMjUwODE2MDUxODMyWjAYMRYwFAYD VQQDEw02ODk2ZGEyOS1kOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlxUGElyu/J4IImgJy5g70nfzRaLY7oz7Scxz6LR+7HiT2qyncy6/ISOaqMW gQ1ys+l1PqvMkbTsNe8catYiFqwHH+nOMGMMhdAxZZT5LSaFI7Fx3pvr1OGtiIkn Cf9FMWaP0Mf3WIlg4UqS3XJ+PmX+O/SQ9sdhDUIUVJ7Jv7gMkv1gt7auyO5KexqL qL0mdzk5XgzrvUtvbNTkgeKLBENm1g0BAFOv607AIlf2ozaVeUmCw4NK6NbnPLBX mvl0tOm7ug08iBHts0ppT5a7s8/YNZ00DSdCk+kaTaG0Hu7xmMrqyMaGvn84T9pz igcxb/pk3ZbDPXuscsrUCM32VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCakc6KC DFZOE2geA+OkBeUpqQ85MB8GA1UdIwQYMBaAFGJhCbvsyYulLn85m4CWLTr+WrLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FRTMxRDg3NEQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2VXVmem1iZ0pZdE92NWFz dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FRTMxRDg3NEQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2 VXVmem1iZ0pZdE92NWFzdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOrgiG8AQzbUF6Ed7HI6VGoe9OVVM5WcKag98DIu/ikMKJUvpNIOV6 6S7fe9fzM4nsQFcTadAGrPvIWbKjByfKSmZtoLd9E5NJrPwxKztLLoASFGp/cM+d pFt6YwLIVSQ2ecmoY/F0GDpm38VcpkBZbc9j36uRqgeeS/whTB2o7NDKaDnF+rep 6zedJzowiEbcX+QEd/8Liu+MseQS8bxr27vWrkKm+nE6Z6LuGOD8VQUoGNh6qMgd IjORZpYupNLLL6ydNPCy2lMliy7cMphD7Oe5z0rVPJxaJGjJ4NjDf/vJ7sfC4n0k 3ZbcgeUynIAHEaGgvcOjFNXT8MN2V9cM -----END CERTIFICATE-----Generated at Mon Aug 11 05:57:12 2025 by rpki-client