$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: veyJPSgs6SxhtQ4bwW85H+k/fuTLg2e5INE5dmZYeyw= Subject key identifier: A1:11:2F:54:57:D6:44:F7:55:37:EF:84:05:F8:6D:56:81:9E:9B:FA Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: 0122 Signing time: Fri 05 Sep 2025 05:11:16 +0000 Manifest this update: Fri 05 Sep 2025 05:11:16 +0000 Manifest next update: Fri 12 Sep 2025 05:11:16 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: yJbjDfh0FzTcoUH6SvgFVgi9zhN6WgHdYTtbEY3WzqY=) 2: 0992C84EAC9111EF81B7B058C4F9AE02.roa (hash: 0r1+bjf/CBoFjNEUVu+pdLpoE7fYxxmBMNd9J5fRyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: Sep 5 05:11:16 2025 GMT Not After : Sep 12 05:11:16 2025 GMT Subject: CN=68ba70f4-c030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:ef:96:38:77:32:26:fe:d5:99:45:81:e3: c1:9b:6a:c7:4d:41:d5:89:16:d5:e2:0c:24:9f:eb: 00:a4:d9:15:61:bb:04:4a:2d:ac:fb:38:61:39:55: c9:72:95:a7:ed:7b:e7:3a:d6:37:b1:bd:36:5c:bf: 62:bb:24:6a:8f:76:65:25:b9:4c:4b:cf:e7:77:95: fb:98:da:6a:45:31:f2:78:3c:63:a3:11:24:92:12: 86:0b:0d:4d:68:cb:c0:f8:79:1c:9b:02:ae:02:9f: 9f:5d:fe:07:6b:5f:8d:0e:c8:5a:4e:cc:90:21:3b: 6d:9a:c4:7c:b6:b3:e9:75:47:08:92:46:37:5d:22: bf:33:c8:60:12:28:e2:95:f0:13:a3:86:d3:18:dd: 97:76:a2:09:86:51:ac:af:a6:fe:db:46:53:a8:71: b8:c7:e5:9d:57:75:11:ec:ff:1a:6e:2c:36:a5:f1: 04:ea:3c:fd:75:87:b8:27:0a:01:d3:5d:ff:4b:90: 36:e8:47:8a:34:78:e0:c0:6d:b3:66:e0:53:0b:a7: f3:59:05:6f:07:0c:07:4c:69:6a:4a:9a:39:22:c4: 75:bc:cd:ae:ad:d7:34:d9:61:89:6b:80:8b:46:24: 78:e5:37:45:13:5c:54:f6:02:12:22:9d:9a:16:05: 98:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:11:2F:54:57:D6:44:F7:55:37:EF:84:05:F8:6D:56:81:9E:9B:FA X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:76:2e:b3:80:68:78:9e:00:b6:58:d6:42:dd:fb:9a:24:59: 32:52:be:2c:18:b0:90:b6:a6:81:a9:af:71:42:6e:f5:46:4d: ef:f2:66:ba:ff:17:2e:cd:2f:3b:ca:16:6c:f7:65:d5:ce:c2: 32:d6:30:6d:e6:62:07:54:66:a1:0e:5c:2d:9b:6c:c4:7b:80: 5b:6b:af:dc:fe:fd:5a:f2:dc:30:4e:22:19:1e:ad:2d:33:1e: bb:11:d5:ed:ea:17:c6:e1:2f:db:f3:d7:8b:1e:2b:09:52:00: 46:a4:64:35:be:72:9a:da:1f:2f:59:88:11:fe:1d:ea:73:ff: dc:32:6d:25:02:74:83:9c:6e:2d:17:28:2b:0c:43:80:50:31: 78:5d:68:d4:7f:ae:d5:2f:93:47:e0:cc:95:ea:c7:cc:35:67: d8:c9:58:6b:e7:4a:d9:46:b3:a5:f6:6c:0e:12:73:fd:90:cd: 7d:ff:d4:5f:5e:54:61:e9:d0:41:4f:88:9a:02:48:2f:7f:f6: f5:46:e8:f2:8d:0f:46:06:10:8c:73:4f:f5:e9:22:c6:10:69: 73:0b:ed:91:44:98:41:03:f5:59:c6:7c:44:92:ab:f4:b1:51: 82:78:01:ca:08:27:89:b6:5f:be:c1:fd:77:a3:3a:81:5a:c6: 9d:e4:fe:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKDYxNjNBOTU1NEMzMzA2NzlGN0VBMTY2NzhCMTA4RDk2 NEVDMUM4MDIwHhcNMjUwOTA1MDUxMTE2WhcNMjUwOTEyMDUxMTE2WjAYMRYwFAYD VQQDEw02OGJhNzBmNC1jMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgvvljh3Mib+1ZlFgePBm2rHTUHViRbV4gwkn+sApNkVYbsESi2s+zhhOVXJ cpWn7XvnOtY3sb02XL9iuyRqj3ZlJblMS8/nd5X7mNpqRTHyeDxjoxEkkhKGCw1N aMvA+HkcmwKuAp+fXf4Ha1+NDshaTsyQITttmsR8trPpdUcIkkY3XSK/M8hgEiji lfATo4bTGN2XdqIJhlGsr6b+20ZTqHG4x+WdV3UR7P8abiw2pfEE6jz9dYe4JwoB 013/S5A26EeKNHjgwG2zZuBTC6fzWQVvBwwHTGlqSpo5IsR1vM2urdc02WGJa4CL RiR45TdFE1xU9gISIp2aFgWYDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKERL1RX 1kT3VTfvhAX4bVaBnpv6MB8GA1UdIwQYMBaAFGFjqVVMMwZ59+oWZ4sQjZZOwcgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS81QjVCOTNFQ0Q5 RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJubjM2aFpuaXhDTmxrN0J5 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS81QjVCOTNFQ0Q5RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJu bjM2aFpuaXhDTmxrN0J5QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBydi6zgGh4ngC2WNZC3fuaJFkyUr4sGLCQtqaBqa9xQm71Rk3v8ma6 /xcuzS87yhZs92XVzsIy1jBt5mIHVGahDlwtm2zEe4Bba6/c/v1a8twwTiIZHq0t Mx67EdXt6hfG4S/b89eLHisJUgBGpGQ1vnKa2h8vWYgR/h3qc//cMm0lAnSDnG4t FygrDEOAUDF4XWjUf67VL5NH4MyV6sfMNWfYyVhr50rZRrOl9mwOEnP9kM19/9Rf XlRh6dBBT4iaAkgvf/b1RujyjQ9GBhCMc0/16SLGEGlzC+2RRJhBA/VZxnxEkqv0 sVGCeAHKCCeJtl++wf13ozqBWsad5P67 -----END CERTIFICATE-----Generated at Sat Sep 6 21:41:22 2025 by rpki-client