$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: OWRjM03WjwqoUof4M4ySxJZBGx71FhhCDm/jfkeyrcA= Subject key identifier: D0:CD:AF:94:02:6B:7C:80:00:DC:88:84:B1:BA:FF:27:4C:2D:31:89 Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 0499 Signing time: Tue 09 Sep 2025 00:02:41 +0000 Manifest this update: Tue 09 Sep 2025 00:02:40 +0000 Manifest next update: Tue 16 Sep 2025 00:02:40 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: SEuMDWcJJRdLqkNMYLjEXBmBZ4OgVKsW2tO+Isu05Jg=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: aRUayRfr0vMR7tS5Y4z3m5ZDFVHmg6WwIEoeJRznQ08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: Sep 9 00:02:40 2025 GMT Not After : Sep 16 00:02:40 2025 GMT Subject: CN=68bf6ea1-f67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:37:2e:b0:25:d3:f1:37:d9:e4:06:8b:f3: 81:66:00:83:5f:45:50:17:52:e6:27:97:21:cb:ab: aa:38:94:eb:d2:d5:f6:de:6e:b7:0d:d6:40:56:97: 98:03:81:2d:59:59:67:7e:5c:af:cd:c1:b6:c1:d5: 97:86:68:3f:72:5c:ea:a9:ff:8d:89:d7:23:d5:b1: c2:65:6d:f6:d7:5c:93:22:97:f1:9f:5c:91:c9:f1: 4f:e4:86:a4:d4:fc:7a:34:f0:ea:2c:da:04:43:64: f1:dd:72:7d:39:42:3f:0a:68:fc:bc:0d:3a:60:10: a6:e7:11:29:e7:71:81:95:67:55:2b:61:49:57:88: 93:6d:db:27:07:31:86:8d:13:1c:b9:11:ca:34:01: e5:2a:da:72:49:67:4b:95:05:dc:9b:29:24:24:d7: 1e:0c:6b:1d:90:5e:28:a9:7c:cf:76:0b:22:14:09: c3:9d:83:9a:c1:e0:7e:00:7a:61:b8:f0:82:b2:98: 5a:e0:ce:1b:8c:83:25:ea:e8:56:3e:dc:8b:64:3e: e3:1b:0d:1b:cb:04:e0:d9:85:bc:b4:36:7e:f4:dc: c3:65:46:3f:c0:f8:1d:1f:72:ae:fe:04:85:9a:b7: f3:0a:d3:eb:27:a7:ef:f2:6b:c5:bd:53:9d:17:c0: b8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CD:AF:94:02:6B:7C:80:00:DC:88:84:B1:BA:FF:27:4C:2D:31:89 X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:17:8d:60:ff:5f:3e:c1:90:c1:e3:60:5a:3e:4c:e5:38:dd: ce:9e:3b:88:c1:f7:a8:aa:3e:a9:8f:f6:21:8c:ce:9c:7a:4a: 02:d9:ff:8f:b8:c8:58:a7:25:aa:b6:9d:b1:5a:00:e8:6b:c2: 44:ea:35:1b:32:56:de:09:98:f9:96:ec:f0:27:ec:8e:ad:8f: b3:65:f5:e4:d7:0e:d3:c3:72:37:68:63:da:45:75:34:e0:e8: e7:ec:d1:86:48:d1:b2:40:a4:c4:72:13:c4:60:3c:52:c5:47: f4:e3:c6:29:96:8d:65:97:7f:6c:48:43:88:62:56:01:25:b2: 5f:99:d6:1a:f6:53:dd:d8:43:40:1c:97:ae:0c:9f:d2:c9:8a: 3f:4d:5a:65:cb:ae:b4:27:3f:7b:95:8b:11:6e:e6:06:5a:4c: 8f:fe:f4:91:49:8a:da:b5:dc:5c:02:1f:8a:b2:50:47:f6:66: e7:f3:76:64:b3:9c:07:5b:33:5d:24:b9:8d:d9:38:15:39:a8: 76:48:8b:32:23:8c:c8:b4:d6:bf:a0:7b:0e:f2:a8:ba:2e:32: ed:b1:2e:43:0e:b9:96:9d:14:5b:70:d4:45:ac:c1:f4:9d:d7: 25:de:14:f2:8b:e5:8a:2d:26:12:03:0c:9a:25:26:ae:7b:6c: 02:71:8f:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjUwOTA5MDAwMjQwWhcNMjUwOTE2MDAwMjQwWjAYMRYwFAYD VQQDEw02OGJmNmVhMS1mNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfY3LrAl0/E32eQGi/OBZgCDX0VQF1LmJ5chy6uqOJTr0tX23m63DdZAVpeY A4EtWVlnflyvzcG2wdWXhmg/clzqqf+Nidcj1bHCZW3211yTIpfxn1yRyfFP5Iak 1Px6NPDqLNoEQ2Tx3XJ9OUI/Cmj8vA06YBCm5xEp53GBlWdVK2FJV4iTbdsnBzGG jRMcuRHKNAHlKtpySWdLlQXcmykkJNceDGsdkF4oqXzPdgsiFAnDnYOaweB+AHph uPCCspha4M4bjIMl6uhWPtyLZD7jGw0bywTg2YW8tDZ+9NzDZUY/wPgdH3Ku/gSF mrfzCtPrJ6fv8mvFvVOdF8C4FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDNr5QC a3yAANyIhLG6/ydMLTGJMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4F41g/18+wZDB42BaPkzlON3OnjuIwfeoqj6pj/YhjM6cekoC2f+P uMhYpyWqtp2xWgDoa8JE6jUbMlbeCZj5luzwJ+yOrY+zZfXk1w7Tw3I3aGPaRXU0 4Ojn7NGGSNGyQKTEchPEYDxSxUf048Yplo1ll39sSEOIYlYBJbJfmdYa9lPd2ENA HJeuDJ/SyYo/TVply660Jz97lYsRbuYGWkyP/vSRSYratdxcAh+KslBH9mbn83Zk s5wHWzNdJLmN2TgVOah2SIsyI4zItNa/oHsO8qi6LjLtsS5DDrmWnRRbcNRFrMH0 ndcl3hTyi+WKLSYSAwyaJSaue2wCcY/o -----END CERTIFICATE-----Generated at Wed Sep 10 10:42:02 2025 by rpki-client