$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json) Hash identifier: ThYTk6BHSxKxZRFyBKBfSHKVRN/4KYUw8XypcpY9j8w= Subject key identifier: 90:F8:1D:60:DD:58:A1:A2:03:96:6E:56:38:06:FA:9F:87:F2:1B:89 Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft Manifest number: 0157 Signing time: Sat 23 Aug 2025 04:15:20 +0000 Manifest this update: Sat 23 Aug 2025 04:15:19 +0000 Manifest next update: Sat 30 Aug 2025 04:15:19 +0000 Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: ho1BFIPw99JS9x6WvfT2mxu8Ng3tCrbRvh9CKEC3ME8=) 2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: zjnMnu7RY/dZWeqb3tnlHnJORJa1AYwPA3wCVz3+WfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Validity Not Before: Aug 23 04:15:19 2025 GMT Not After : Aug 30 04:15:19 2025 GMT Subject: CN=68a94058-eb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:fe:ea:7e:ef:83:cd:25:0a:4e:12:20:a2: 5f:49:61:7a:ef:96:63:b6:4c:27:3b:7c:50:3d:10: 1e:76:e1:fc:22:93:d0:95:52:3c:2c:e0:66:25:26: e0:db:38:7b:fb:d1:47:90:30:82:32:ce:f3:7f:d2: 90:0c:92:d4:17:57:75:31:14:a2:e7:5c:3b:99:1c: 49:d2:dd:b3:09:19:cd:03:e2:49:9b:cd:78:e6:1f: 2a:1f:c1:34:3a:68:62:44:a9:10:24:1b:81:b7:22: 95:5d:48:d6:07:4d:27:a3:bc:44:89:0e:50:35:d6: 7e:2b:e7:38:cd:8b:4f:12:67:c0:92:b9:54:68:6a: 66:bc:39:de:25:30:41:b2:bb:9f:d9:78:97:9a:bd: aa:b7:36:0d:40:51:ce:4e:81:fa:25:71:b7:e9:1d: 04:bc:d3:85:f2:bd:0c:af:d4:3f:a4:e6:8c:31:6e: 37:43:37:95:50:cf:5b:51:d3:6b:d5:62:8c:3e:f3: 0d:8c:06:c2:22:55:c1:07:1f:55:23:ca:f5:59:4d: b1:d7:1e:e9:f5:44:12:52:be:df:69:d3:6c:59:da: b8:0a:af:a0:79:63:e8:bf:38:cb:59:b7:12:6d:2f: 76:74:4b:57:41:e5:3f:85:41:3b:f3:1f:2b:a0:7e: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F8:1D:60:DD:58:A1:A2:03:96:6E:56:38:06:FA:9F:87:F2:1B:89 X509v3 Authority Key Identifier: keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ea:26:ee:d2:36:c0:be:e4:4a:32:2d:3b:d3:3a:9d:80:2a: 81:b6:19:f3:10:df:27:df:5b:e0:96:80:93:75:e2:94:d8:b7: 14:29:ee:79:ed:94:ba:58:f6:ce:93:f6:6e:1a:5f:49:f3:80: 75:ac:4b:64:8d:84:9b:ef:de:2e:d1:e8:24:d1:59:cb:f3:11: 4b:76:13:11:b3:cc:f6:78:58:25:b4:c8:eb:36:5c:d1:65:b3: a9:04:71:7d:54:e0:5c:dd:1d:6f:3c:cf:5e:52:54:b6:a1:10: 0f:c0:e2:42:b6:47:c8:3d:d0:d8:4c:67:24:be:a3:10:d1:a0: 08:57:31:bc:56:31:31:8b:95:2e:e6:ba:80:da:c7:05:4d:2f: c8:ac:67:a9:f4:7a:fe:9e:c1:21:e1:41:02:cd:ac:ab:3f:61: b3:bb:20:d8:ff:86:5b:2c:cc:9b:70:fe:3a:fe:aa:2d:12:ff: 4a:76:38:ab:0d:49:04:0f:e8:8e:21:eb:67:8e:cc:f0:c2:d9: 07:78:97:0f:43:80:0e:27:15:80:2f:54:60:32:8e:12:a7:7f: 1e:ba:bb:b1:f9:d3:c9:9a:95:7a:e2:93:4c:ea:c6:75:c0:73: 57:d2:0b:f4:14:12:23:23:bd:e0:ff:1e:5c:44:35:25:f9:e1: e7:70:20:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4RTIxMTAvBgNVBAUTKEM4OEMyQUE5NEFBRTVFRjlGNEQ0OTdFODM4N0EzOURE MUJDRTkzOUQwHhcNMjUwODIzMDQxNTE5WhcNMjUwODMwMDQxNTE5WjAYMRYwFAYD VQQDEw02OGE5NDA1OC1lYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSr+6n7vg80lCk4SIKJfSWF675ZjtkwnO3xQPRAeduH8IpPQlVI8LOBmJSbg 2zh7+9FHkDCCMs7zf9KQDJLUF1d1MRSi51w7mRxJ0t2zCRnNA+JJm8145h8qH8E0 OmhiRKkQJBuBtyKVXUjWB00no7xEiQ5QNdZ+K+c4zYtPEmfAkrlUaGpmvDneJTBB sruf2XiXmr2qtzYNQFHOToH6JXG36R0EvNOF8r0Mr9Q/pOaMMW43QzeVUM9bUdNr 1WKMPvMNjAbCIlXBBx9VI8r1WU2x1x7p9UQSUr7fadNsWdq4Cq+geWPovzjLWbcS bS92dEtXQeU/hUE78x8roH6j2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJD4HWDd WKGiA5ZuVjgG+p+H8huJMB8GA1UdIwQYMBaAFMiMKqlKrl759NSX6Dh6Od0bzpOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhFMi9DRTU0MDZGNjcy RTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2bjAxSmZvT0hvNTNSdk9r NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJd3FxVXF1WHZuMDFKZm9PSG81M1J2T2s1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhFMi9DRTU0MDZGNjcyRTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2 bjAxSmZvT0hvNTNSdk9rNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi6ibu0jbAvuRKMi070zqdgCqBthnzEN8n31vgloCTdeKU2LcUKe55 7ZS6WPbOk/ZuGl9J84B1rEtkjYSb794u0egk0VnL8xFLdhMRs8z2eFgltMjrNlzR ZbOpBHF9VOBc3R1vPM9eUlS2oRAPwOJCtkfIPdDYTGckvqMQ0aAIVzG8VjExi5Uu 5rqA2scFTS/IrGep9Hr+nsEh4UECzayrP2GzuyDY/4ZbLMybcP46/qotEv9Kdjir DUkED+iOIetnjszwwtkHeJcPQ4AOJxWAL1RgMo4Sp38eurux+dPJmpV64pNM6sZ1 wHNX0gv0FBIjI73g/x5cRDUl+eHncCBu -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:33 2025 by rpki-client