$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: A6dErpnt0OtNAo9n3Y4XULG57gA/ATN7iFSBW5YKo58= Subject key identifier: C6:EE:41:4B:BB:09:23:37:7D:C7:9F:7A:68:8D:10:A4:0D:91:22:31 Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 34AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 34AB Signing time: Fri 08 Aug 2025 15:06:50 +0000 Manifest this update: Fri 08 Aug 2025 15:06:50 +0000 Manifest next update: Fri 15 Aug 2025 15:06:50 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: aWhYTcFdForaV5JoyXGNVZdJHFi+Xi2G1dHNqFr/2mQ=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: lc/qlMf4LlkPKULr4QDdOr7yT3mSRd2CWo/AG45TiUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: Aug 8 15:06:50 2025 GMT Not After : Aug 15 15:06:50 2025 GMT Subject: CN=6896128a-28ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cf:7e:70:d1:80:79:2a:f4:b9:4e:ad:a7:f2: aa:ad:66:29:8d:ec:de:92:a7:ec:41:50:ec:63:6c: d0:57:ac:a1:55:3e:9d:21:70:b2:73:cc:55:d0:be: 0b:16:78:9a:b0:8d:77:21:48:4f:a5:15:e9:96:2d: 82:3d:8f:53:15:0e:92:a7:18:a1:12:58:d1:b3:5e: 11:c9:0b:5f:d8:9d:5c:6d:27:f8:b4:b6:b0:d2:cb: 0f:ef:07:3d:78:14:66:59:ef:b2:9b:73:cf:9b:ed: fd:96:62:3d:9d:cd:e2:81:a9:5d:6b:ec:f8:e7:8d: ae:b7:80:ab:56:73:f7:fd:e3:df:2e:a8:4e:0e:46: 39:99:35:d7:c4:fa:57:e0:ea:80:d5:af:24:d3:eb: 6b:e4:f3:17:59:34:97:a8:b5:f5:2c:05:fb:1d:93: a2:5e:43:0c:96:9b:65:cb:46:4d:19:4a:28:35:24: b0:ec:3b:aa:40:69:08:aa:78:96:4a:52:c5:93:cb: 32:bf:19:34:bf:96:bb:ec:3c:1d:e0:34:d4:f6:60: ff:e9:c4:42:8f:ba:63:2f:4c:7d:c8:a7:7f:75:70: d2:05:0b:ca:2d:da:40:82:bd:06:9b:eb:07:5c:5b: e5:46:85:8d:23:26:9f:ab:c6:27:af:fd:bf:81:d7: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EE:41:4B:BB:09:23:37:7D:C7:9F:7A:68:8D:10:A4:0D:91:22:31 X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e4:55:07:25:bd:02:70:9c:c8:e9:27:31:dd:e4:72:47:80: 83:ca:37:b9:2c:77:ad:50:b7:14:34:ff:ee:0e:cb:50:27:46: 5e:ab:d5:58:68:1f:ee:65:5a:0b:58:41:45:6e:41:fc:33:de: 02:cd:e8:a6:35:25:dd:75:66:0c:4c:cf:79:1d:b7:57:c4:00: 90:4c:f6:34:61:54:9b:70:01:d0:8b:44:eb:5f:15:e1:67:3e: 01:9c:c9:c0:05:fe:6a:53:8c:fa:0f:8e:b2:0f:64:f6:0c:70: 34:f0:be:ff:8c:2c:2e:fa:4b:4c:80:6e:78:e0:3f:c2:18:fd: 9a:7d:28:13:21:58:51:f9:85:da:9b:d6:95:49:e4:c8:9c:05: f0:31:4c:49:93:30:a2:c9:55:cd:57:22:e5:c9:6f:c5:f0:a7: e7:34:56:82:23:c1:a5:7f:f4:9d:ec:f8:0e:10:83:07:f0:26: 87:1d:10:5e:d4:6f:32:99:c6:f6:2c:b8:19:7a:07:36:b1:38: 92:42:9b:90:0e:08:e6:97:d7:5a:07:08:e2:69:f0:cd:34:f1: 5a:8b:32:f2:ed:39:fa:eb:20:f4:9f:f0:a6:8d:0e:b7:12:51: 0d:26:0b:96:a1:42:c2:f9:69:53:34:5a:0d:14:11:b9:e2:54: d5:bd:2b:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjUwODA4MTUwNjUwWhcNMjUwODE1MTUwNjUwWjAYMRYwFAYD VQQDEw02ODk2MTI4YS0yOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c9+cNGAeSr0uU6tp/KqrWYpjezekqfsQVDsY2zQV6yhVT6dIXCyc8xV0L4L FniasI13IUhPpRXpli2CPY9TFQ6SpxihEljRs14RyQtf2J1cbSf4tLaw0ssP7wc9 eBRmWe+ym3PPm+39lmI9nc3igalda+z4542ut4CrVnP3/ePfLqhODkY5mTXXxPpX 4OqA1a8k0+tr5PMXWTSXqLX1LAX7HZOiXkMMlptly0ZNGUooNSSw7DuqQGkIqniW SlLFk8syvxk0v5a77Dwd4DTU9mD/6cRCj7pjL0x9yKd/dXDSBQvKLdpAgr0Gm+sH XFvlRoWNIyafq8Ynr/2/gdchqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbuQUu7 CSM3fcefemiNEKQNkSIxMB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa5FUHJb0CcJzI6Scx3eRyR4CDyje5LHetULcUNP/uDstQJ0Zeq9VY aB/uZVoLWEFFbkH8M94CzeimNSXddWYMTM95HbdXxACQTPY0YVSbcAHQi0TrXxXh Zz4BnMnABf5qU4z6D46yD2T2DHA08L7/jCwu+ktMgG544D/CGP2afSgTIVhR+YXa m9aVSeTInAXwMUxJkzCiyVXNVyLlyW/F8KfnNFaCI8Glf/Sd7PgOEIMH8CaHHRBe 1G8ymcb2LLgZegc2sTiSQpuQDgjml9daBwjiafDNNPFaizLy7Tn66yD0n/CmjQ63 ElENJguWoULC+WlTNFoNFBG54lTVvSs8 -----END CERTIFICATE-----Generated at Sat Aug 9 01:23:01 2025 by rpki-client