$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json) Hash identifier: ry5XJhOFLl+G+3+JAEZVf2iE2VhCb1sb5YgCfIscHMo= Subject key identifier: 0D:B6:DE:0B:A2:9D:9B:DA:2E:7F:87:F0:2E:3F:55:9E:CE:4C:C6:59 Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft Manifest number: 01D9 Signing time: Tue 09 Sep 2025 02:46:15 +0000 Manifest this update: Tue 09 Sep 2025 02:46:14 +0000 Manifest next update: Tue 16 Sep 2025 02:46:14 +0000 Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: p9XWLbkTuKsCfihgt0xyRtYcNdIpcS+9fPaWmx0rAxI=) 2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: aPCaqml7t2F2+k6pOKIapyXqL1F8xbtnk+/zEbIo0oM=) 3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: gMPv9NciLB3BAjtT8uTP/7SkhRaSaS/Bj12QLWTIGsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Validity Not Before: Sep 9 02:46:14 2025 GMT Not After : Sep 16 02:46:14 2025 GMT Subject: CN=68bf94f6-fd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:69:b5:37:82:6f:24:4e:bc:0b:22:39:2b: 12:17:47:aa:39:02:71:b5:42:a5:9a:d0:b5:0d:da: b6:f6:32:79:cc:fc:f9:83:fc:c2:0a:fa:f8:d7:3c: 16:fe:a6:5a:36:b2:24:86:19:72:b1:0e:90:ab:28: e3:44:07:07:4a:29:c8:b9:85:ba:a1:25:b3:9e:44: 21:91:e0:fc:d3:bb:7f:27:18:a8:fa:21:ed:a2:24: d1:85:a5:a3:75:a7:37:c5:1e:06:1d:91:3b:bf:42: 16:fe:ae:f3:bd:61:b0:07:de:bd:2f:6d:8d:85:b9: 33:86:84:28:c4:3f:09:ca:f1:6c:06:8d:9d:ae:66: 92:36:4c:8f:4a:6d:ac:a7:15:88:79:d5:5b:9d:b3: 8a:e3:c7:d5:1a:7f:b6:a0:b2:14:91:c8:f8:d1:c1: 76:3c:02:88:50:73:40:75:c8:6c:18:12:6f:96:e4: ce:6a:54:c9:f3:8d:a0:fd:fa:ac:9b:33:a2:de:bf: 2c:ee:74:14:75:1b:7b:ba:19:c0:0e:95:a3:ea:38: c0:b8:f0:b6:4b:e8:48:3f:d9:14:fd:63:ff:a2:d3: 24:20:c7:69:82:3e:35:c0:de:b8:f8:ca:db:41:bf: 24:f9:99:6b:04:f3:f4:ca:2a:13:81:76:80:a1:12: 0c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B6:DE:0B:A2:9D:9B:DA:2E:7F:87:F0:2E:3F:55:9E:CE:4C:C6:59 X509v3 Authority Key Identifier: keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:8f:63:6d:30:1c:22:72:79:c3:4b:95:2b:48:8d:28:a6:ea: ae:71:8a:da:3e:a2:33:b6:2e:37:53:70:69:fa:26:ec:03:d6: 6b:61:98:53:c9:0c:79:2f:d4:7e:1c:c8:d2:8f:c5:dc:e8:f1: 93:87:fc:8d:15:b8:79:b5:b3:62:11:8f:9f:ed:1b:9e:54:fd: a2:2f:9c:7c:cc:57:7e:98:5f:12:9d:dd:53:27:6d:86:68:88: ba:19:2f:1e:0e:ed:87:2c:b2:9c:b9:ef:4a:c1:3a:ba:dd:85: 85:23:a9:92:bd:cb:b3:5d:03:84:54:aa:f6:79:ef:b7:9b:8c: 3d:d1:97:35:20:a0:6e:55:9e:c2:e8:d3:15:db:bc:86:24:4f: 71:ce:c0:70:43:61:3b:fa:bc:3c:0f:8d:cd:c4:6f:13:54:3a: 89:ea:4d:bb:77:3e:62:c2:5a:74:64:e0:20:f1:c3:82:cd:39: 00:47:25:d2:82:1f:78:7b:6f:d6:ae:24:83:89:ff:98:37:fc: bd:93:12:88:1d:2e:cd:f6:eb:ff:4a:94:0b:91:59:82:ee:6c: 32:64:33:1a:b8:97:b6:44:51:16:13:4d:31:e2:4b:4c:c0:e5: 67:58:3d:3e:5c:ba:15:77:35:79:95:bf:26:75:9b:7d:a9:55: 3c:9a:dc:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA3RjAxMTAvBgNVBAUTKDYyQkVGQTFDMjM4REY4REU5NzJFQTVGRTE4MDk3QjEx MkVGMDQ3N0IwHhcNMjUwOTA5MDI0NjE0WhcNMjUwOTE2MDI0NjE0WjAYMRYwFAYD VQQDEw02OGJmOTRmNi1mZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvBptTeCbyROvAsiOSsSF0eqOQJxtUKlmtC1Ddq29jJ5zPz5g/zCCvr41zwW /qZaNrIkhhlysQ6QqyjjRAcHSinIuYW6oSWznkQhkeD807t/Jxio+iHtoiTRhaWj dac3xR4GHZE7v0IW/q7zvWGwB969L22NhbkzhoQoxD8JyvFsBo2drmaSNkyPSm2s pxWIedVbnbOK48fVGn+2oLIUkcj40cF2PAKIUHNAdchsGBJvluTOalTJ842g/fqs mzOi3r8s7nQUdRt7uhnADpWj6jjAuPC2S+hIP9kU/WP/otMkIMdpgj41wN64+Mrb Qb8k+ZlrBPP0yioTgXaAoRIMqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA223gui nZvaLn+H8C4/VZ7OTMZZMB8GA1UdIwQYMBaAFGK++hwjjfjely6l/hgJexEu8Ed7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDdGMC82MEQwQzlGQUI4 QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1ONlhMcVgtR0FsN0VTN3dS M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lyNzZIQ09OLU42WExxWC1HQWw3RVM3d1Izcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDdGMC82MEQwQzlGQUI4QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1O NlhMcVgtR0FsN0VTN3dSM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyj2NtMBwicnnDS5UrSI0opuqucYraPqIzti43U3Bp+ibsA9ZrYZhT yQx5L9R+HMjSj8Xc6PGTh/yNFbh5tbNiEY+f7RueVP2iL5x8zFd+mF8Snd1TJ22G aIi6GS8eDu2HLLKcue9KwTq63YWFI6mSvcuzXQOEVKr2ee+3m4w90Zc1IKBuVZ7C 6NMV27yGJE9xzsBwQ2E7+rw8D43NxG8TVDqJ6k27dz5iwlp0ZOAg8cOCzTkARyXS gh94e2/WriSDif+YN/y9kxKIHS7N9uv/SpQLkVmC7mwyZDMauJe2RFEWE00x4ktM wOVnWD0+XLoVdzV5lb8mdZt9qVU8mtxL -----END CERTIFICATE-----Generated at Tue Sep 9 13:16:25 2025 by rpki-client