$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: iVNywSQ0gCIHyJTfSavu7sT2cYRLIhY7E0x8me+pB5w= Subject key identifier: 14:3D:61:A6:4A:E6:3A:94:70:3F:B1:3E:3C:0B:48:EA:56:FD:62:38 Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 0FC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 0FC0 Signing time: Tue 12 Aug 2025 17:38:08 +0000 Manifest this update: Tue 12 Aug 2025 17:38:07 +0000 Manifest next update: Tue 19 Aug 2025 17:38:07 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: /7sFhdsdrIE0umemuhqrL/1lNZ+Fvj5zQAPdcdUrrtA=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: cCIRQV7ckuHtyIWMyZbPGhi3IsjwZT86WZjPdbGRO6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 17:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4039 (0xfc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B, serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Validity Not Before: Aug 12 17:38:07 2025 GMT Not After : Aug 19 17:38:07 2025 GMT Subject: CN=689b7bff-56c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:43:89:94:4e:8e:83:42:e2:97:c9:d0:86:d7: 98:3e:4f:c3:65:9b:4c:de:38:d8:49:aa:e5:ad:8c: 12:b7:d9:c0:65:dd:e0:ce:27:b6:7a:40:04:43:d0: 96:90:79:86:83:22:42:60:96:17:b0:a1:e5:6c:d5: 06:de:05:cb:ed:d4:3d:2b:a1:5c:0f:ad:ab:96:f0: 66:0a:c9:90:b0:15:99:6a:0e:7f:d1:20:a8:40:58: 53:21:39:8f:51:9c:3e:1e:4a:c4:28:03:ea:b0:23: 22:fa:ee:8b:5b:fe:03:26:24:42:0f:01:8c:ec:f2: 3e:ac:73:c4:6d:93:f5:71:49:56:7e:f3:02:44:26: 02:5a:ae:91:b3:94:60:08:3a:8d:16:b8:37:8a:ea: b4:6a:78:75:d9:a2:82:f2:e6:45:56:14:08:10:d5: ca:b5:36:ff:9e:4a:9c:70:13:07:53:f7:00:58:c7: 4c:ff:bc:99:a2:2f:58:d8:4c:0b:c5:19:68:c1:db: 7c:a2:da:fe:73:ad:6e:07:fb:e2:7b:28:73:2c:b9: 85:82:5b:d6:3d:88:5f:ad:99:7a:ae:40:72:ce:a5: 7c:7f:2e:fc:7b:ac:c8:87:30:02:a2:aa:a5:19:b1: 03:b5:67:b8:38:90:be:bb:26:9f:9d:e8:f0:3e:5b: d8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3D:61:A6:4A:E6:3A:94:70:3F:B1:3E:3C:0B:48:EA:56:FD:62:38 X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f7:7d:e7:e8:2e:c1:03:ad:fd:85:52:a4:c8:d1:e3:0e:1a: 64:b0:c2:08:5b:6e:c3:47:3a:96:c5:95:53:bd:be:d3:38:61: 5d:77:32:52:78:a6:51:af:4f:f9:21:a9:c3:36:fd:6b:d5:8a: 95:d6:fc:30:f1:f2:b8:16:7c:4f:cf:e5:2a:cf:33:2a:83:31: 94:42:fd:61:74:01:c3:22:51:1e:ea:b2:1c:bb:8d:78:f1:3c: bb:a9:59:23:ce:40:d7:eb:9e:4b:90:b4:7e:70:50:7c:28:a2: b4:5d:12:df:73:e0:57:13:5c:70:0a:86:50:9a:87:37:fc:ae: 40:38:32:11:c2:7c:fb:7b:9f:6e:a0:7f:7b:f4:48:17:c8:d8: f0:bf:e7:0b:4e:79:b2:20:bc:3d:79:da:c0:9a:3b:2c:67:21: cf:46:cd:ee:c5:22:51:2f:6f:32:f5:9c:0d:53:67:13:ad:99: 95:6c:4b:61:b9:7a:1e:a3:ed:0f:6d:8f:53:ee:f5:28:0b:d3: 37:32:63:43:14:12:0b:3b:04:03:cf:a5:7b:7e:ed:d7:4f:04: 3a:0d:76:51:c5:85:9a:5b:1e:be:d7:55:b8:11:5a:4a:02:15: bb:c4:cb:ea:84:d6:0c:75:91:f7:53:ea:97:99:3c:07:f3:4a: 3b:53:34:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjUwODEyMTczODA3WhcNMjUwODE5MTczODA3WjAYMRYwFAYD VQQDEw02ODliN2JmZi01NmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkOJlE6Og0Lil8nQhteYPk/DZZtM3jjYSarlrYwSt9nAZd3gzie2ekAEQ9CW kHmGgyJCYJYXsKHlbNUG3gXL7dQ9K6FcD62rlvBmCsmQsBWZag5/0SCoQFhTITmP UZw+HkrEKAPqsCMi+u6LW/4DJiRCDwGM7PI+rHPEbZP1cUlWfvMCRCYCWq6Rs5Rg CDqNFrg3iuq0anh12aKC8uZFVhQIENXKtTb/nkqccBMHU/cAWMdM/7yZoi9Y2EwL xRlowdt8otr+c61uB/vieyhzLLmFglvWPYhfrZl6rkByzqV8fy78e6zIhzACoqql GbEDtWe4OJC+uyafnejwPlvYZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQ9YaZK 5jqUcD+xPjwLSOpW/WI4MB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR933n6C7BA639hVKkyNHjDhpksMIIW27DRzqWxZVTvb7TOGFddzJS eKZRr0/5IanDNv1r1YqV1vww8fK4FnxPz+UqzzMqgzGUQv1hdAHDIlEe6rIcu414 8Ty7qVkjzkDX655LkLR+cFB8KKK0XRLfc+BXE1xwCoZQmoc3/K5AODIRwnz7e59u oH979EgXyNjwv+cLTnmyILw9edrAmjssZyHPRs3uxSJRL28y9ZwNU2cTrZmVbEth uXoeo+0PbY9T7vUoC9M3MmNDFBILOwQDz6V7fu3XTwQ6DXZRxYWaWx6+11W4EVpK AhW7xMvqhNYMdZH3U+qXmTwH80o7UzTb -----END CERTIFICATE-----Generated at Wed Aug 13 05:34:36 2025 by rpki-client