$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft File: YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft (raw, json) Hash identifier: fLaqe0UlaxZmw0wHU8VM7cySa1MgBNb67txwBQZhUh0= Subject key identifier: 7D:86:83:BD:D7:18:03:9F:EC:41:A0:F6:5F:99:68:BC:5C:78:91:2B Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D Certificate issuer: /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft Manifest number: 0336 Signing time: Mon 11 Aug 2025 01:18:39 +0000 Manifest this update: Mon 11 Aug 2025 01:18:39 +0000 Manifest next update: Mon 18 Aug 2025 01:18:39 +0000 Files and hashes: 1: YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl (hash: NbF0cE9K4yM0CeyYxsDplBJy9iJC8pl99s8YT1IC1Jg=) 2: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (hash: PuEOajLEUChOIrthB/05mvECIB7cIWFQzgLmdVBLTBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 01:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC01A, serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Validity Not Before: Aug 11 01:18:39 2025 GMT Not After : Aug 18 01:18:39 2025 GMT Subject: CN=689944ef-2610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:93:32:a9:43:99:56:33:5a:8c:c1:f5:18: c0:e8:db:d3:95:7a:26:a4:dc:eb:b4:16:78:09:b3: ef:fe:17:3a:eb:02:2a:ef:79:25:fc:e8:fe:c6:3d: 7a:b5:80:de:10:90:c6:30:4a:52:84:dd:3f:0d:45: 73:3e:16:46:99:be:cd:98:56:54:ce:b8:23:40:9a: 52:5c:17:0e:13:fd:a6:db:3d:65:9d:e5:be:4d:58: 3a:d2:32:74:aa:35:fb:ec:26:95:f2:95:44:2c:05: 9c:99:06:1d:80:19:a9:0c:c2:18:a2:d2:7f:89:95: bd:d6:8f:93:ef:b8:e7:2f:a8:8e:a8:c6:4b:87:19: 4a:ef:c3:f6:9a:5c:31:90:27:90:3f:f3:e7:fa:22: 15:a9:3a:c3:63:d1:b3:73:21:a0:ba:eb:f7:e8:9f: 09:8d:1d:02:c2:7a:6c:ff:b5:c4:66:5a:49:a9:ce: 70:8e:94:92:db:57:03:0e:df:2d:d2:d7:19:41:50: 80:e8:a0:8f:f5:63:2d:0e:4d:8b:36:7b:8f:ea:07: f4:44:4f:f6:36:62:83:f7:46:f7:b7:7a:51:4d:d9: 16:4c:dd:c6:49:7f:01:8b:22:0a:17:ca:3e:84:c1: a1:ae:52:c0:65:b9:db:fa:9e:e4:6c:22:e3:4b:9f: 4d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:86:83:BD:D7:18:03:9F:EC:41:A0:F6:5F:99:68:BC:5C:78:91:2B X509v3 Authority Key Identifier: keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:23:c7:ba:c6:a6:f8:5a:e0:51:0e:f3:b9:43:d5:7e:a1:5e: 97:b7:3b:61:6a:9a:b4:b2:3f:fd:84:ef:92:55:b9:61:67:5d: f1:cb:9f:7f:51:7c:4d:be:4e:ec:03:91:b4:35:c8:bc:bc:b5: a4:b1:4e:84:82:07:25:2d:9b:d3:8f:94:45:56:d2:83:23:c8: 32:03:8c:e6:49:dc:59:06:14:fb:76:ed:ab:33:4b:db:7c:5c: 06:1c:a6:00:5b:45:91:8c:84:51:0a:d8:19:15:df:45:62:cb: b8:3d:f2:e2:96:17:44:27:c5:51:01:cd:0e:1e:ba:e8:d8:76: d8:64:ae:d6:be:03:b0:07:4c:07:17:67:76:4c:a6:0b:da:c5: 0d:d5:e1:ef:69:fa:4c:64:f8:f1:90:89:7d:d0:5c:ee:ef:8b: 57:c4:21:42:0d:b6:d9:90:82:53:27:4a:52:2a:04:bd:ed:68: a3:7e:9f:7e:76:b9:74:62:6f:72:b8:86:4c:68:45:b7:c5:1d: 0f:37:c0:d7:56:53:d6:10:73:8a:72:9a:ec:34:72:92:6d:a4: d1:b9:75:da:41:c3:cb:b1:c9:49:3e:50:49:e5:ac:91:fb:42: 36:a5:6c:b0:7a:c5:a3:f1:27:64:d2:26:7b:38:23:cd:9f:67: 80:91:92:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMwMUExMTAvBgNVBAUTKDYwNUJEQTNEN0FEQ0MwMkRBQzczODZBRTM5MTQ3QTY0 NjU5M0E4OUQwHhcNMjUwODExMDExODM5WhcNMjUwODE4MDExODM5WjAYMRYwFAYD VQQDEw02ODk5NDRlZi0yNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQOTMqlDmVYzWozB9RjA6NvTlXompNzrtBZ4CbPv/hc66wIq73kl/Oj+xj16 tYDeEJDGMEpShN0/DUVzPhZGmb7NmFZUzrgjQJpSXBcOE/2m2z1lneW+TVg60jJ0 qjX77CaV8pVELAWcmQYdgBmpDMIYotJ/iZW91o+T77jnL6iOqMZLhxlK78P2mlwx kCeQP/Pn+iIVqTrDY9GzcyGguuv36J8JjR0Cwnps/7XEZlpJqc5wjpSS21cDDt8t 0tcZQVCA6KCP9WMtDk2LNnuP6gf0RE/2NmKD90b3t3pRTdkWTN3GSX8BiyIKF8o+ hMGhrlLAZbnb+p7kbCLjS59NowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2Gg73X GAOf7EGg9l+ZaLxceJErMB8GA1UdIwQYMBaAFGBb2j163MAtrHOGrjkUemRlk6id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzAxQS8wRjg1MDE0Q0Qx MUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dDMnNjNGF1T1JSNlpHV1Rx SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lGdmFQWHJjd0Myc2M0YXVPUlI2WkdXVHFKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzAxQS8wRjg1MDE0Q0QxMUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dD MnNjNGF1T1JSNlpHV1RxSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJI8e6xqb4WuBRDvO5Q9V+oV6Xtzthapq0sj/9hO+SVblhZ13xy59/ UXxNvk7sA5G0Nci8vLWksU6EggclLZvTj5RFVtKDI8gyA4zmSdxZBhT7du2rM0vb fFwGHKYAW0WRjIRRCtgZFd9FYsu4PfLilhdEJ8VRAc0OHrro2HbYZK7WvgOwB0wH F2d2TKYL2sUN1eHvafpMZPjxkIl90Fzu74tXxCFCDbbZkIJTJ0pSKgS97Wijfp9+ drl0Ym9yuIZMaEW3xR0PN8DXVlPWEHOKcprsNHKSbaTRuXXaQcPLsclJPlBJ5ayR +0I2pWywesWj8Sdk0iZ7OCPNn2eAkZLZ -----END CERTIFICATE-----Generated at Wed Aug 13 00:27:48 2025 by rpki-client