$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: DKq9GxUliT0YlhVwJw9aGyWfX8/vByk1eLqx8QJSzcc= Subject key identifier: 4A:EA:4A:76:54:B4:06:7A:B6:43:C3:8D:4C:9E:FF:04:EF:A0:34:4E Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: 91 Signing time: Sat 09 Aug 2025 06:57:44 +0000 Manifest this update: Sat 09 Aug 2025 06:57:44 +0000 Manifest next update: Sat 16 Aug 2025 06:57:44 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: 8Z2vRKUu9GzOeHa848TAEhgBCBnobIcQywBRRqIfX4E=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Aug 9 06:57:44 2025 GMT Not After : Aug 16 06:57:44 2025 GMT Subject: CN=6896f168-9f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:18:07:f6:59:ce:f1:c8:d3:7f:05:4c:2c: 22:0d:e0:43:06:b3:d7:73:b5:9e:20:cf:da:84:67: 38:9a:0c:fa:e0:7c:4f:e5:f4:0d:a9:63:b5:2c:30: b8:f2:10:9c:4f:a0:24:de:82:c7:fa:07:e9:38:9f: 86:e1:b6:76:da:83:59:2b:1d:e6:3f:d2:4f:4d:70: 1c:a2:25:44:55:5f:10:b2:8f:bc:f4:ab:c5:a4:ee: 5f:5c:65:49:a1:1f:ae:88:80:38:cc:88:be:34:4c: b0:cd:96:f7:29:51:7e:36:47:c1:f6:df:8a:ba:0f: 28:90:c1:cd:72:1f:88:6d:36:e9:16:4b:9b:45:90: 63:87:f1:90:7b:9a:3a:c6:f5:2d:76:41:f3:b7:ae: 4b:08:0d:ee:86:9b:16:9e:66:1d:05:fd:48:f7:0b: 33:80:69:8f:86:41:69:51:f2:e1:dd:fd:8d:7c:f1: 67:30:65:f1:4b:5f:1c:71:c1:ec:79:5b:45:e4:f6: ad:52:a9:b4:4e:0e:db:38:1e:7f:e6:8f:cb:47:53: ee:23:d1:ba:86:d6:0a:09:de:44:53:db:a7:2c:a6: ad:57:f6:1a:63:ce:ae:08:4d:3e:30:63:7d:39:fb: a4:23:be:42:15:9b:87:50:06:cc:38:75:91:c6:be: de:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EA:4A:76:54:B4:06:7A:B6:43:C3:8D:4C:9E:FF:04:EF:A0:34:4E X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:67:8f:95:8e:58:4f:73:7d:65:e7:c2:82:eb:08:be:61:46: 89:97:b9:0c:6a:b9:48:0a:61:4f:5b:f6:4b:7f:e5:64:4d:da: aa:d8:bd:fe:72:66:47:d0:3c:d4:5b:86:0e:e2:1f:f7:0e:03: 49:2d:e7:6a:ee:29:03:ad:ed:e1:f2:73:a5:c7:32:76:f4:53: 3e:a6:0a:35:d5:76:43:75:f8:f5:d3:98:3f:5a:36:46:98:51: f8:8d:78:1f:7c:2e:7f:86:19:05:fe:78:66:8e:dc:6e:11:98: d4:6b:47:4a:a2:99:8e:87:65:49:9e:7d:70:d5:0d:bd:ce:dc: be:8e:58:87:e8:d4:12:ca:a2:44:24:21:b8:85:88:ab:2e:c1: 83:1d:8e:69:03:fd:c8:32:58:1f:23:ff:0a:fd:66:0e:85:27: b8:a6:27:de:e2:ad:76:01:db:b1:d6:33:d3:39:b7:10:e4:ba: 42:97:0e:df:68:66:a6:0a:07:cc:3a:74:0b:ae:76:76:a6:b0: cd:07:0d:a3:57:9e:43:fb:8e:8a:e1:84:7d:33:db:0e:87:c8: 11:c6:35:38:f1:86:36:3f:c0:a8:8a:2a:af:6b:05:28:be:c8: 95:f3:f5:04:d6:66:71:e4:3a:40:7b:90:3f:92:a6:23:4d:dd: 88:35:95:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy NENERjVFNkIwHhcNMjUwODA5MDY1NzQ0WhcNMjUwODE2MDY1NzQ0WjAYMRYwFAYD VQQDEw02ODk2ZjE2OC05Zjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp4YB/ZZzvHI038FTCwiDeBDBrPXc7WeIM/ahGc4mgz64HxP5fQNqWO1LDC4 8hCcT6Ak3oLH+gfpOJ+G4bZ22oNZKx3mP9JPTXAcoiVEVV8Qso+89KvFpO5fXGVJ oR+uiIA4zIi+NEywzZb3KVF+NkfB9t+Kug8okMHNch+IbTbpFkubRZBjh/GQe5o6 xvUtdkHzt65LCA3uhpsWnmYdBf1I9wszgGmPhkFpUfLh3f2NfPFnMGXxS18cccHs eVtF5PatUqm0Tg7bOB5/5o/LR1PuI9G6htYKCd5EU9unLKatV/YaY86uCE0+MGN9 OfukI75CFZuHUAbMOHWRxr7eKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErqSnZU tAZ6tkPDjUye/wTvoDROMB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5 QlJzb2FYS2JSbUVremZYbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEZ4+VjlhPc31l58KC6wi+YUaJl7kMarlICmFPW/ZLf+VkTdqq2L3+ cmZH0DzUW4YO4h/3DgNJLedq7ikDre3h8nOlxzJ29FM+pgo11XZDdfj105g/WjZG mFH4jXgffC5/hhkF/nhmjtxuEZjUa0dKopmOh2VJnn1w1Q29zty+jliH6NQSyqJE JCG4hYirLsGDHY5pA/3IMlgfI/8K/WYOhSe4pife4q12Adux1jPTObcQ5LpClw7f aGamCgfMOnQLrnZ2prDNBw2jV55D+46K4YR9M9sOh8gRxjU48YY2P8CoiiqvawUo vsiV8/UE1mZx5DpAe5A/kqYjTd2INZWN -----END CERTIFICATE-----Generated at Sun Aug 10 16:12:22 2025 by rpki-client