$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft File: yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json) Hash identifier: rVPedx8Gw4tISNcH+BJHery1tq5QUiCI1H5vTsxASPM= Subject key identifier: C4:7B:1F:F8:4B:BD:54:F1:17:26:A5:3C:BA:D9:F2:57:CB:4C:C6:49 Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77 Certificate issuer: /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277 Certificate serial: 09C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft Manifest number: 09BC Signing time: Wed 06 Aug 2025 20:17:21 +0000 Manifest this update: Wed 06 Aug 2025 20:17:20 +0000 Manifest next update: Wed 13 Aug 2025 20:17:20 +0000 Files and hashes: 1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: orrIrLUmE9drgTEhr2A1hsldJISGJ4zwKtOHNgb29sg=) 2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: LX76oihYc6Vcq0IqMjxINDxugVvobb/j/buf30BAPmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2498 (0x9c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277 Validity Not Before: Aug 6 20:17:20 2025 GMT Not After : Aug 13 20:17:20 2025 GMT Subject: CN=6893b851-3b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:ce:06:de:44:24:ce:9e:53:58:6a:70:1e: 98:30:ae:78:7c:15:7c:a9:14:a0:6f:1e:6a:f5:29: 2a:d4:b6:3e:75:81:95:03:87:ed:36:d6:ed:ce:8c: 61:3e:d0:6a:e5:38:36:85:de:30:59:bb:c5:0d:f1: d9:29:bf:89:79:ae:72:6c:cc:49:9b:07:40:70:1e: 03:08:8f:a4:44:8f:73:1d:d6:d5:7b:ee:03:01:3c: c9:bb:a2:21:c5:81:ee:5b:f5:37:76:f4:d6:3c:3c: be:b9:ec:74:d8:35:9f:f4:0d:dd:c5:98:56:e0:0f: 30:e1:0d:7d:9b:67:c3:7d:3e:c8:4f:e6:c8:89:58: 08:60:41:66:c0:85:c9:2a:4a:c4:70:48:3b:d5:a8: 11:54:d0:63:a9:b6:34:88:99:66:1c:6d:94:c1:88: bc:cc:68:f9:86:66:f6:7d:59:eb:8f:ee:1f:7e:61: 59:e9:ff:48:bd:c8:39:14:72:32:3d:3a:5d:8d:9d: fe:10:44:2e:b5:64:33:d4:5e:18:f4:cf:ba:d7:b1: 0e:8a:22:96:ea:6b:a7:fa:3e:2a:6b:f7:86:4a:1a: 39:e6:83:9a:c3:97:e3:94:cf:d7:6f:fb:d5:25:1b: 0d:77:fd:67:06:7e:6e:87:78:d9:e6:06:78:e5:ad: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7B:1F:F8:4B:BD:54:F1:17:26:A5:3C:BA:D9:F2:57:CB:4C:C6:49 X509v3 Authority Key Identifier: keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:64:60:7f:5c:44:7b:99:9e:36:a3:b2:67:9e:d4:ba:bc:6d: 42:84:06:a8:4b:13:9a:16:27:09:7d:e3:8f:db:21:c5:60:af: 07:56:e4:75:cc:aa:ac:d8:9e:5f:fe:1a:9f:19:3c:eb:8c:0c: 15:60:12:bf:40:8f:a8:6a:65:12:84:b6:d4:66:b5:d0:0c:a4: 89:a2:96:7d:d4:da:41:ff:76:fa:81:95:d5:85:1c:ca:4f:08: 96:17:a4:37:43:fe:13:35:1f:06:db:65:74:b4:96:92:2d:32: 65:94:92:34:a8:4d:5c:e1:ed:47:62:4e:14:8e:61:2e:74:27: 61:ab:1a:5e:32:14:c3:b3:a4:a0:a6:ca:17:ce:d9:6c:12:88: a5:63:d1:70:3f:1d:04:a2:e7:3a:d4:eb:41:3a:f1:27:ab:3c: 59:36:d0:bd:dc:7a:07:35:b3:29:dc:55:af:83:e7:58:0c:65: 17:ec:63:ba:0d:f8:76:05:60:0b:c8:cb:43:57:fd:35:ba:b3: d4:1a:73:72:cd:7c:69:8d:5e:96:0b:2c:a0:71:11:aa:00:3a: f8:cd:06:ba:87:ca:2c:8d:c2:5f:08:82:d1:73:4a:8c:9d:a0: d3:43:dd:53:37:05:44:84:c2:e3:a9:3d:4c:69:64:9e:88:d8: 5a:9b:d2:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENDQjMxMTAvBgNVBAUTKENBQURDQkFDQzUxQjJBNDY1MkRENzMwNzRGMjgyQzMz NEQwMTAyNzcwHhcNMjUwODA2MjAxNzIwWhcNMjUwODEzMjAxNzIwWjAYMRYwFAYD VQQDEw02ODkzYjg1MS0zYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCzOBt5EJM6eU1hqcB6YMK54fBV8qRSgbx5q9Skq1LY+dYGVA4ftNtbtzoxh PtBq5Tg2hd4wWbvFDfHZKb+Jea5ybMxJmwdAcB4DCI+kRI9zHdbVe+4DATzJu6Ih xYHuW/U3dvTWPDy+uex02DWf9A3dxZhW4A8w4Q19m2fDfT7IT+bIiVgIYEFmwIXJ KkrEcEg71agRVNBjqbY0iJlmHG2UwYi8zGj5hmb2fVnrj+4ffmFZ6f9Ivcg5FHIy PTpdjZ3+EEQutWQz1F4Y9M+617EOiiKW6mun+j4qa/eGSho55oOaw5fjlM/Xb/vV JRsNd/1nBn5uh3jZ5gZ45a2OgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR7H/hL vVTxFyalPLrZ8lfLTMZJMB8GA1UdIwQYMBaAFMqty6zFGypGUt1zB08oLDNNAQJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0NCMy80MUZENjAxNjg5 NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktrWlMzWE1IVHlnc00wMEJB bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxM0xyTVViS2taUzNYTUhUeWdzTTAwQkFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0NCMy80MUZENjAxNjg5NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktr WlMzWE1IVHlnc00wMEJBbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/ZGB/XER7mZ42o7JnntS6vG1ChAaoSxOaFicJfeOP2yHFYK8HVuR1 zKqs2J5f/hqfGTzrjAwVYBK/QI+oamUShLbUZrXQDKSJopZ91NpB/3b6gZXVhRzK TwiWF6Q3Q/4TNR8G22V0tJaSLTJllJI0qE1c4e1HYk4UjmEudCdhqxpeMhTDs6Sg psoXztlsEoilY9FwPx0Eouc61OtBOvEnqzxZNtC93HoHNbMp3FWvg+dYDGUX7GO6 Dfh2BWALyMtDV/01urPUGnNyzXxpjV6WCyygcRGqADr4zQa6h8osjcJfCILRc0qM naDTQ91TNwVEhMLjqT1MaWSeiNham9JD -----END CERTIFICATE-----Generated at Thu Aug 7 05:12:45 2025 by rpki-client