$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: RWtgSknr/ljjMUGOoMyRanEGk+a+puTRZTFS5HwcKiQ= Subject key identifier: 43:5E:1D:96:52:6B:48:03:9C:0D:36:63:0F:4D:DD:3C:4B:D2:4A:2B Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 02C8 Signing time: Sat 09 Aug 2025 01:56:21 +0000 Manifest this update: Sat 09 Aug 2025 01:56:21 +0000 Manifest next update: Sat 16 Aug 2025 01:56:21 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: orzy16eUKb8+cithGhLWLHCfds1vsSZE50zdQmN8DkQ=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: 9MRdrfgCzJPWi60WfDAHGFIjA+2Au5PPZv6A0PmrENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: Aug 9 01:56:21 2025 GMT Not After : Aug 16 01:56:21 2025 GMT Subject: CN=6896aac5-ed81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:fc:ec:a4:d3:57:b0:47:66:47:7e:a3:e8: 36:87:c6:09:89:a3:f2:b1:74:c6:51:00:ad:2e:b6: 28:36:e9:74:46:e2:ec:4c:a1:b2:91:a0:c3:ca:03: 42:8a:63:f0:0a:30:f8:22:84:3f:de:86:e7:3f:43: ce:f5:f7:36:90:b8:2d:34:07:2b:5c:57:03:bf:6c: 6c:ae:05:0e:56:49:79:1c:d0:04:aa:c4:c6:9f:a6: ab:93:c9:dc:7e:78:7e:ec:04:67:0d:67:ba:4f:fb: 33:9e:1c:94:12:df:db:6c:7b:09:60:01:d0:56:23: 35:8a:c8:fe:2c:a0:42:aa:1e:83:e0:1f:8d:37:5c: f9:26:3c:0f:89:f5:d1:2f:3a:42:9c:05:a8:8b:5a: a2:cd:dd:94:d3:c0:0e:e2:f1:ef:10:13:e0:ee:09: 9f:f1:23:a9:2d:bb:68:e4:33:b4:3c:db:d2:35:f8: 5e:3f:86:91:eb:49:cb:1e:1e:d9:4f:16:47:03:32: cc:3a:72:39:40:71:3c:c6:61:aa:45:c9:91:e8:5f: 02:2f:de:cc:21:e1:5b:46:1d:f0:64:48:32:d7:a7: 77:f0:94:7a:4c:16:b6:f5:92:a5:12:29:ca:9b:3e: 31:1f:72:7a:07:fc:61:90:51:4f:00:88:b4:7c:b7: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5E:1D:96:52:6B:48:03:9C:0D:36:63:0F:4D:DD:3C:4B:D2:4A:2B X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:52:3e:6a:f6:07:d0:2b:67:0d:40:58:26:4e:1f:d9:08:3e: fe:ca:bf:b2:70:a6:f0:c5:05:00:d0:c6:e2:7e:92:5a:cc:84: c3:94:75:8f:1b:62:f7:50:19:e2:ac:bc:76:23:8c:d2:8f:85: 4b:e3:bd:a4:41:b0:bd:75:64:4b:a5:c3:45:c4:f3:51:94:34: 7e:11:b1:20:0c:e2:0e:ac:84:3e:a7:9b:ce:d1:a6:04:a8:99: d8:63:33:20:f5:a5:5c:6b:6a:82:9c:da:a0:16:4d:0a:72:47: ae:43:02:e8:0b:79:e5:ae:d2:9e:a5:3c:49:33:9e:d6:a5:14: 3f:82:64:f5:0c:47:56:b6:06:ce:92:05:97:43:50:a0:a3:03: d7:9c:26:59:75:13:63:d2:40:60:b2:54:58:22:8d:a9:48:f3: ff:5e:4f:7f:cf:5d:79:00:90:40:fa:5c:6e:39:5d:09:3e:f6: 00:01:7e:72:72:0a:3d:84:d2:81:26:5c:5b:79:92:cb:6a:de: ca:ce:d9:1a:46:a9:69:7e:32:be:ae:65:44:b4:2a:fa:63:9a: 27:65:f4:94:26:c9:df:9c:46:40:a3:11:9d:eb:f8:a7:d0:f6: fa:fd:59:d0:db:eb:09:31:65:ca:59:15:f6:23:d0:b6:fd:11: 9e:7a:31:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjUwODA5MDE1NjIxWhcNMjUwODE2MDE1NjIxWjAYMRYwFAYD VQQDEw02ODk2YWFjNS1lZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwD87KTTV7BHZkd+o+g2h8YJiaPysXTGUQCtLrYoNul0RuLsTKGykaDDygNC imPwCjD4IoQ/3obnP0PO9fc2kLgtNAcrXFcDv2xsrgUOVkl5HNAEqsTGn6ark8nc fnh+7ARnDWe6T/sznhyUEt/bbHsJYAHQViM1isj+LKBCqh6D4B+NN1z5JjwPifXR LzpCnAWoi1qizd2U08AO4vHvEBPg7gmf8SOpLbto5DO0PNvSNfheP4aR60nLHh7Z TxZHAzLMOnI5QHE8xmGqRcmR6F8CL97MIeFbRh3wZEgy16d38JR6TBa29ZKlEinK mz4xH3J6B/xhkFFPAIi0fLdaXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENeHZZS a0gDnA02Yw9N3TxL0korMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYUj5q9gfQK2cNQFgmTh/ZCD7+yr+ycKbwxQUA0MbifpJazITDlHWP G2L3UBnirLx2I4zSj4VL472kQbC9dWRLpcNFxPNRlDR+EbEgDOIOrIQ+p5vO0aYE qJnYYzMg9aVca2qCnNqgFk0KckeuQwLoC3nlrtKepTxJM57WpRQ/gmT1DEdWtgbO kgWXQ1CgowPXnCZZdRNj0kBgslRYIo2pSPP/Xk9/z115AJBA+lxuOV0JPvYAAX5y cgo9hNKBJlxbeZLLat7KztkaRqlpfjK+rmVEtCr6Y5onZfSUJsnfnEZAoxGd6/in 0Pb6/VnQ2+sJMWXKWRX2I9C2/RGeejGt -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:44 2025 by rpki-client