$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json) Hash identifier: t329SNj/Sbbv5jdza4l3ugwhpwTPZzxrO1xyRVzTbLE= Subject key identifier: DF:43:3A:FB:64:4F:91:1B:0F:AA:C3:FC:F6:5D:74:83:B4:AF:6E:3D Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 0650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft Manifest number: 0645 Signing time: Tue 12 Aug 2025 23:05:17 +0000 Manifest this update: Tue 12 Aug 2025 23:05:17 +0000 Manifest next update: Tue 19 Aug 2025 23:05:17 +0000 Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: lCOyMm8TagkoukZHERxeNxasbwaug+YKzaP6WwXS+L0=) 2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=) 3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: WNqUPBF8HNjFohXgQh/4EEtiPRYZ8HZnCTlz6HaVU7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Validity Not Before: Aug 12 23:05:17 2025 GMT Not After : Aug 19 23:05:17 2025 GMT Subject: CN=689bc8ad-7ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0c:fb:bc:b9:ef:b7:a5:3c:e2:e0:4c:84:0c: 5a:d4:78:2c:dc:d2:dc:9b:4f:7b:50:de:4e:15:3b: 22:76:2f:44:41:0e:33:5e:68:6e:18:70:3c:97:96: 4a:ca:c5:b7:4e:43:11:1c:ee:6e:34:4e:0c:4e:32: 6e:8b:65:1f:13:ee:37:9c:e6:2e:12:1d:62:ba:92: 02:06:c5:20:4e:de:79:9f:7b:00:46:81:1a:04:77: 66:ac:fb:99:43:63:28:3d:2c:2e:ec:5c:b8:ed:41: 91:6d:a3:e0:c6:01:82:c7:d6:27:12:ee:1a:fa:7c: 9c:52:ed:03:57:2e:eb:9b:a6:b4:a3:04:14:38:c9: 39:26:ab:63:20:b5:1d:4e:74:64:10:97:04:5b:df: ef:76:d2:32:5c:4d:98:57:c5:dd:56:79:12:20:77: 50:aa:a9:a1:5d:aa:fc:9f:ba:d4:29:92:36:7e:1e: c9:3e:2a:f9:f0:1f:9b:e7:e6:b1:ec:f7:04:46:4f: 25:ce:ea:75:e9:08:dd:d7:93:f6:7c:48:84:d6:b2: b6:b7:99:be:67:60:68:9f:49:2d:87:54:7c:1d:b8: d5:2d:03:91:b6:8b:18:47:2c:60:51:2c:95:cb:01: 87:43:5b:20:28:eb:c6:a1:a1:02:bc:bb:23:db:e7: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:43:3A:FB:64:4F:91:1B:0F:AA:C3:FC:F6:5D:74:83:B4:AF:6E:3D X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:92:38:24:53:bf:7f:e1:b5:76:65:85:84:7e:e6:0b:2b:8f: 67:4f:24:2a:e8:55:11:c2:6d:2e:b2:54:ce:5a:9d:84:b9:31: f1:98:69:f5:cc:7c:2b:83:b5:41:a0:a8:d9:ad:1d:d4:50:05: a1:7b:66:66:84:3b:28:28:cb:e6:fc:d9:ee:d1:83:bf:3c:38: 47:4e:14:24:56:63:50:8d:21:3c:ec:31:07:c8:f5:14:4c:6d: 06:c7:2f:04:10:bf:46:d5:34:59:d9:52:03:7d:99:b0:4a:88: 7f:76:63:79:51:be:ea:7d:69:98:e1:02:7d:cd:29:31:67:7e: 3a:23:ae:d9:d5:13:e9:3e:9b:fd:66:a2:d4:c8:29:e4:4a:c8: c7:06:79:ca:97:0e:b0:b1:f0:5c:9f:e8:3f:ed:88:d7:ab:9e: 6b:9a:0d:9c:e7:fa:97:53:d1:97:24:66:4e:cb:12:93:f7:a8: 7f:3a:a7:a5:4b:14:11:ad:55:4d:56:ea:71:53:9a:03:74:99: ed:bb:f3:be:a6:0c:b3:ed:3e:37:d7:c7:e6:bc:8c:9f:f2:77: da:7e:01:30:d5:7a:b7:02:da:ff:af:6c:ae:2c:d6:ce:7a:18: c2:97:40:b5:ff:91:49:f3:4b:c3:2b:7f:ad:53:4c:03:f9:c2: 52:0d:91:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjUwODEyMjMwNTE3WhcNMjUwODE5MjMwNTE3WjAYMRYwFAYD VQQDEw02ODliYzhhZC03YWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlAz7vLnvt6U84uBMhAxa1Hgs3NLcm097UN5OFTsidi9EQQ4zXmhuGHA8l5ZK ysW3TkMRHO5uNE4MTjJui2UfE+43nOYuEh1iupICBsUgTt55n3sARoEaBHdmrPuZ Q2MoPSwu7Fy47UGRbaPgxgGCx9YnEu4a+nycUu0DVy7rm6a0owQUOMk5JqtjILUd TnRkEJcEW9/vdtIyXE2YV8XdVnkSIHdQqqmhXar8n7rUKZI2fh7JPir58B+b5+ax 7PcERk8lzup16Qjd15P2fEiE1rK2t5m+Z2Bon0kth1R8HbjVLQORtosYRyxgUSyV ywGHQ1sgKOvGoaECvLsj2+d9/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9DOvtk T5EbD6rD/PZddIO0r249MB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTk5OC8yQzU5MkUyODlGMUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JR Z09fWnFtejZXbEhFcDUzU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOkjgkU79/4bV2ZYWEfuYLK49nTyQq6FURwm0uslTOWp2EuTHxmGn1 zHwrg7VBoKjZrR3UUAWhe2ZmhDsoKMvm/Nnu0YO/PDhHThQkVmNQjSE87DEHyPUU TG0Gxy8EEL9G1TRZ2VIDfZmwSoh/dmN5Ub7qfWmY4QJ9zSkxZ346I67Z1RPpPpv9 ZqLUyCnkSsjHBnnKlw6wsfBcn+g/7YjXq55rmg2c5/qXU9GXJGZOyxKT96h/Oqel SxQRrVVNVupxU5oDdJntu/O+pgyz7T4318fmvIyf8nfafgEw1Xq3Atr/r2yuLNbO ehjCl0C1/5FJ80vDK3+tU0wD+cJSDZEA -----END CERTIFICATE-----Generated at Thu Aug 14 11:07:26 2025 by rpki-client