$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json) Hash identifier: PNKFaq7f5iHR/x/Hx/5uF/3Js1BCYYZLHz4qkTxYUp0= Subject key identifier: C5:E2:B4:F7:B0:B8:B9:73:2B:F2:22:36:FD:25:03:DF:B3:7F:24:7E Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Certificate serial: 0C94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft Manifest number: 0C86 Signing time: Sat 02 Aug 2025 18:29:08 +0000 Manifest this update: Sat 02 Aug 2025 18:29:08 +0000 Manifest next update: Sat 09 Aug 2025 18:29:08 +0000 Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: hMmbv67bX0XOpSq5n5pFL2yVBJ31tYX2on2XfTtvxk4=) 2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: VMJPLLhedlHAk4tQ5HhxEAJ5POLeqMTVPXSXcNzn0f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3220 (0xc94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Validity Not Before: Aug 2 18:29:08 2025 GMT Not After : Aug 9 18:29:08 2025 GMT Subject: CN=688e58f4-0594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:4e:c7:80:a6:0b:f1:a3:2a:2b:5c:ab:f8: e9:f5:eb:dd:0f:d2:d0:ea:72:2e:08:80:0e:19:70: ca:d9:98:83:2a:48:1c:dd:01:9a:a4:76:f8:97:62: 3e:b6:52:b8:bd:30:d1:49:bd:56:fa:ce:47:14:a2: 59:04:0e:91:bf:0e:d0:df:28:18:6a:05:b8:24:8e: 0a:e6:33:19:5a:d3:da:51:d0:e4:20:2b:74:f0:94: e4:b0:bc:e3:aa:12:6f:91:7c:2d:2a:08:2d:62:42: ac:a5:60:bc:85:92:48:a2:9d:92:75:63:e8:29:b5: 69:69:c1:1a:ab:6f:55:82:13:10:f7:9e:b6:2a:e7: 19:82:ad:6c:55:5c:7f:b5:b6:12:b0:2d:ed:73:ab: 87:f2:03:fa:2f:bd:a7:dd:ee:b0:f5:87:5d:c8:48: 63:0e:c1:ca:64:10:91:52:45:d9:be:3c:bf:4a:37: ab:a7:c7:3d:56:9d:6a:3e:e0:58:6f:20:96:12:2a: d5:da:29:26:b7:46:b3:25:e9:c1:d2:1b:44:c6:1d: 14:d3:aa:df:ad:29:e6:0a:d7:4c:f0:b9:67:85:e2: 6c:fd:64:0b:69:44:96:47:6d:17:5d:dd:5b:40:f2: 13:fc:54:f4:0e:25:e7:9c:de:7a:99:8d:26:5d:fd: 62:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E2:B4:F7:B0:B8:B9:73:2B:F2:22:36:FD:25:03:DF:B3:7F:24:7E X509v3 Authority Key Identifier: keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:99:d4:56:13:84:b5:db:1b:ac:94:fc:99:4d:83:69:7f:63: 4c:43:61:ea:e9:24:31:38:aa:f3:3c:00:c1:dd:f1:73:b3:e4: e4:67:2d:8c:85:b2:42:fa:82:83:bd:21:a2:e8:4a:ac:1a:9a: 2e:11:0c:d7:25:71:5b:73:ba:ae:88:e1:69:1b:06:90:fe:d2: 77:8f:a0:98:f7:a7:aa:58:c4:c1:6e:6c:7b:22:39:f5:04:e4: 5b:fb:e4:68:22:3e:ad:4a:fa:e4:d9:8e:91:9c:84:6d:f6:21: 32:e1:ff:b8:19:e0:ed:b4:8f:82:e1:52:a0:0e:e3:86:50:13: 87:02:6d:37:95:b6:29:94:21:cd:2d:44:21:cc:82:40:bc:45: 65:28:f6:9e:91:5c:47:85:a2:df:60:7d:85:25:66:0e:d3:05: eb:49:81:1d:0c:6a:d3:1a:a5:7e:60:79:2e:85:9c:b6:dd:d9: a8:56:44:a8:41:8b:b8:2b:82:77:f2:02:20:02:e3:06:ba:b2: ac:0e:13:bb:13:5e:45:a1:11:37:e7:84:9b:78:00:70:5e:c6: cc:2f:88:1c:69:10:ac:ba:d4:40:3c:04:72:f3:04:f8:8d:a3: 94:4d:b4:b9:7a:fc:73:0d:af:72:36:ea:b2:ad:d4:51:1b:08: 5d:ee:79:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NkIxMTAvBgNVBAUTKDYyMkVFNzU0MzZENkYyRjM5RkIyM0QyQ0VCMjIzMzcx ODQ1NzNERkUwHhcNMjUwODAyMTgyOTA4WhcNMjUwODA5MTgyOTA4WjAYMRYwFAYD VQQDEw02ODhlNThmNC0wNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YZOx4CmC/GjKitcq/jp9evdD9LQ6nIuCIAOGXDK2ZiDKkgc3QGapHb4l2I+ tlK4vTDRSb1W+s5HFKJZBA6Rvw7Q3ygYagW4JI4K5jMZWtPaUdDkICt08JTksLzj qhJvkXwtKggtYkKspWC8hZJIop2SdWPoKbVpacEaq29VghMQ9562KucZgq1sVVx/ tbYSsC3tc6uH8gP6L72n3e6w9YddyEhjDsHKZBCRUkXZvjy/Sjerp8c9Vp1qPuBY byCWEirV2ikmt0azJenB0htExh0U06rfrSnmCtdM8LlnheJs/WQLaUSWR20XXd1b QPIT/FT0DiXnnN56mY0mXf1iaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXitPew uLlzK/IiNv0lA9+zfyR+MB8GA1UdIwQYMBaAFGIu51Q21vLzn7I9LOsiM3GEVz3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ2Qi80OTMxRUU0NjAw N0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2T2ZzajBzNnlJemNZUlhQ ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpN25WRGJXOHZPZnNqMHM2eUl6Y1lSWFBmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjQ2Qi80OTMxRUU0NjAwN0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2 T2ZzajBzNnlJemNZUlhQZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNmdRWE4S12xuslPyZTYNpf2NMQ2Hq6SQxOKrzPADB3fFzs+TkZy2M hbJC+oKDvSGi6EqsGpouEQzXJXFbc7quiOFpGwaQ/tJ3j6CY96eqWMTBbmx7Ijn1 BORb++RoIj6tSvrk2Y6RnIRt9iEy4f+4GeDttI+C4VKgDuOGUBOHAm03lbYplCHN LUQhzIJAvEVlKPaekVxHhaLfYH2FJWYO0wXrSYEdDGrTGqV+YHkuhZy23dmoVkSo QYu4K4J38gIgAuMGurKsDhO7E15FoRE354SbeABwXsbML4gcaRCsutRAPARy8wT4 jaOUTbS5evxzDa9yNuqyrdRRGwhd7nmX -----END CERTIFICATE-----Generated at Mon Aug 4 11:22:07 2025 by rpki-client