$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json) Hash identifier: 0HEEyB7TFuhYLyqQjUhjgFluidijYBDrkuJp+hA2inA= Subject key identifier: 76:1C:D2:C7:4B:EC:60:AF:75:C6:A9:65:BE:A3:84:3B:B1:17:D7:C3 Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft Manifest number: 0778 Signing time: Sat 02 Aug 2025 21:54:40 +0000 Manifest this update: Sat 02 Aug 2025 21:54:40 +0000 Manifest next update: Sat 09 Aug 2025 21:54:40 +0000 Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: UcdxkRMGjnYIVkFoJUwvFZSLIg97Ify+zffnE6EW5tU=) 2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: ae/KpKHVYIp48jLRoLaAXZhQ2bpbYIXVEw1zOqGKhNs=) 3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: 6VCktPY0Y/VVY9wKy7mnkatZ5tFS2gKEFeVDjxPVHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: Aug 2 21:54:40 2025 GMT Not After : Aug 9 21:54:40 2025 GMT Subject: CN=688e8920-3df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:7b:74:ee:6f:c3:62:2c:37:ad:bb:82:f4: c5:e4:ac:9e:a0:b3:5a:5b:5f:19:f7:0d:c1:cd:60: 1c:b8:9f:4f:65:40:de:63:24:fc:db:12:38:18:a8: 8e:8b:b6:eb:9c:16:42:a3:76:2d:59:11:f2:d8:3c: 8c:bc:75:9f:dc:a5:88:e9:99:18:ca:1a:b5:15:ea: aa:34:4d:f3:74:b1:a5:f9:86:a5:cb:8b:f8:d6:cb: b6:fa:c0:39:57:6d:d8:25:47:39:3b:83:8d:59:68: 54:b4:8b:7b:3d:02:a4:a9:10:67:56:54:06:bc:a6: cb:3b:c8:b4:af:36:e1:e4:ed:07:fd:a7:9e:2e:6f: c8:2e:35:cf:d8:41:c5:72:df:2b:89:b6:4a:6c:96: 9d:c2:c7:33:97:a1:16:ae:43:dc:be:0f:f1:00:5e: 1f:13:06:62:64:54:28:54:85:3c:2e:eb:a2:6d:3d: d2:0a:36:fb:c9:1d:77:87:a9:e4:45:2e:93:55:4a: 59:14:66:25:02:3e:1f:df:36:ef:ce:8b:79:14:b1: 3f:7c:87:68:2d:02:ac:59:b7:91:71:96:64:c6:22: 88:81:27:a5:97:e5:8d:f4:a2:cc:d4:5a:a7:36:cb: ce:67:69:ff:93:d0:c8:4f:d3:fd:ca:4c:d2:1f:5b: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1C:D2:C7:4B:EC:60:AF:75:C6:A9:65:BE:A3:84:3B:B1:17:D7:C3 X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:0f:87:ce:3b:fe:5a:ba:02:59:23:bb:5f:35:d0:99:bd:f0: c5:12:03:9a:2d:1e:48:4c:b1:08:e9:c5:aa:6d:43:23:be:b3: e4:71:34:44:b7:8f:42:d3:31:d1:14:7d:ed:7f:f4:1e:b5:93: ac:98:25:a1:25:5c:39:0f:01:01:96:38:cc:42:61:b5:b3:01: e7:29:f8:57:6c:e4:ea:f6:d5:93:1b:a5:80:7f:e6:1b:c5:71: e8:77:48:23:ab:39:85:f7:12:d2:85:e6:ca:86:11:20:a8:a5: 58:8a:10:82:c1:0f:ed:b8:8a:2b:0f:57:04:88:07:5d:ef:8b: 3a:74:eb:de:f2:25:35:6d:f4:58:76:64:38:b9:0c:8d:3b:02: ce:1a:a7:1d:dd:62:b4:30:cb:88:2a:6f:de:5d:f4:c4:3f:81: b0:b7:a9:fd:11:de:39:ab:53:df:e7:af:0a:df:b7:8e:3e:e2: 22:35:6c:c3:29:0f:f5:bd:17:1d:e9:62:a2:74:33:b5:ce:b6: 7c:aa:90:47:25:8b:85:9e:9f:93:49:b7:11:a4:9f:60:83:02: dc:e7:6a:92:76:58:f6:19:22:f8:a7:cb:a7:c6:ef:08:ff:31: 84:25:1c:8e:b0:27:9e:d5:84:5f:99:72:b2:d1:72:03:19:7e: 4c:6c:20:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjUwODAyMjE1NDQwWhcNMjUwODA5MjE1NDQwWjAYMRYwFAYD VQQDEw02ODhlODkyMC0zZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQp7dO5vw2IsN627gvTF5KyeoLNaW18Z9w3BzWAcuJ9PZUDeYyT82xI4GKiO i7brnBZCo3YtWRHy2DyMvHWf3KWI6ZkYyhq1FeqqNE3zdLGl+Yaly4v41su2+sA5 V23YJUc5O4ONWWhUtIt7PQKkqRBnVlQGvKbLO8i0rzbh5O0H/aeeLm/ILjXP2EHF ct8ribZKbJadwsczl6EWrkPcvg/xAF4fEwZiZFQoVIU8LuuibT3SCjb7yR13h6nk RS6TVUpZFGYlAj4f3zbvzot5FLE/fIdoLQKsWbeRcZZkxiKIgSell+WN9KLM1Fqn NsvOZ2n/k9DIT9P9ykzSH1tkpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYc0sdL 7GCvdcapZb6jhDuxF9fDMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI OWRCa0N5MzNYZThmWk1lNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWD4fOO/5augJZI7tfNdCZvfDFEgOaLR5ITLEI6cWqbUMjvrPkcTRE t49C0zHRFH3tf/QetZOsmCWhJVw5DwEBljjMQmG1swHnKfhXbOTq9tWTG6WAf+Yb xXHod0gjqzmF9xLShebKhhEgqKVYihCCwQ/tuIorD1cEiAdd74s6dOve8iU1bfRY dmQ4uQyNOwLOGqcd3WK0MMuIKm/eXfTEP4Gwt6n9Ed45q1Pf568K37eOPuIiNWzD KQ/1vRcd6WKidDO1zrZ8qpBHJYuFnp+TSbcRpJ9ggwLc52qSdlj2GSL4p8unxu8I /zGEJRyOsCee1YRfmXKy0XIDGX5MbCDA -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:30 2025 by rpki-client