$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json) Hash identifier: 9IerW05TWCse8fmkfd03qs413iDKAtAbj9+2+zCmCP8= Subject key identifier: 63:C1:C8:8A:E2:96:3D:64:AD:9C:E2:76:18:4B:D9:B4:14:AA:7D:16 Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft Manifest number: 78 Signing time: Fri 05 Sep 2025 07:19:10 +0000 Manifest this update: Fri 05 Sep 2025 07:19:09 +0000 Manifest next update: Fri 12 Sep 2025 07:19:09 +0000 Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: RsEOC4ebiRv3icpONCpmLXNk7e/Dh2Txgq23gkyfCHw=) 2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: vXg2V9oSq+UecV6UR/hi4Z0CckYReJT3wpjl4H/MqsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Validity Not Before: Sep 5 07:19:09 2025 GMT Not After : Sep 12 07:19:09 2025 GMT Subject: CN=68ba8eed-e389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:3e:2d:dd:61:dc:0d:86:93:ae:12:14:9c: ab:da:84:c5:98:bf:05:eb:85:e9:a2:35:4e:82:15: cd:7b:e6:26:91:2b:ce:f6:68:12:1d:e3:41:1d:1b: 49:67:1c:df:e1:0e:6f:4e:fb:4f:75:c7:a3:8c:39: d4:a2:d2:d9:59:65:c7:39:71:03:8b:97:55:96:ec: a2:16:65:b2:4e:30:01:ff:43:1e:70:32:eb:fd:2e: 1e:82:0d:f7:04:b4:e6:78:03:6c:3b:60:33:46:4c: 29:f0:84:c9:b9:89:12:3f:78:8a:7e:9e:88:5b:e8: 70:56:8c:0a:0d:bb:59:d0:b0:d5:87:7f:72:df:c5: d0:83:91:b1:13:05:a5:c4:1c:c4:e5:29:29:98:61: 8d:93:d5:21:d0:75:27:ff:15:e4:93:b7:ac:cd:00: b7:50:6c:e4:4e:d0:58:75:76:a2:5e:f9:f3:11:01: 3a:c5:65:0c:96:60:d5:5c:77:56:af:13:04:dc:17: eb:5c:74:8f:12:5c:eb:48:98:cf:e0:6a:62:34:e9: 24:c3:33:0e:5c:87:e1:27:f5:9c:57:5d:66:6b:35: 48:9e:84:f0:ae:16:51:cf:4c:5d:6e:9d:62:2a:f0: 65:ed:43:b5:5b:6c:96:7d:ce:e4:87:79:44:b8:75: cb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C1:C8:8A:E2:96:3D:64:AD:9C:E2:76:18:4B:D9:B4:14:AA:7D:16 X509v3 Authority Key Identifier: keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a2:dc:f2:37:28:bc:ff:2e:fe:0e:e7:e7:b3:34:7a:8f:0e: 21:eb:d0:6b:54:8c:1f:6b:4b:09:ac:38:63:0d:49:dd:35:5f: 40:58:58:b0:e6:e7:14:c4:93:0b:52:91:79:bb:38:a8:44:d9: 4f:c3:8e:69:7b:89:99:f3:b8:d7:77:52:9a:94:0f:39:9d:37: d0:39:71:bb:a7:06:ad:48:31:ee:c1:ce:6e:57:32:8b:1c:75: 81:f6:cf:d8:28:c4:f0:7a:0b:7e:90:0c:bc:e6:2a:7e:56:11: 9a:e5:58:6f:d3:ee:06:fc:a2:05:97:7c:5a:5d:4c:37:49:42: 71:f7:11:ff:87:b1:cd:b9:f1:36:3e:55:d8:d7:44:a1:08:0c: 6b:d7:11:8e:bc:56:91:e4:51:68:79:66:49:ce:43:37:81:d4: c8:b8:9e:83:27:43:da:27:d8:6f:e3:8a:f0:bf:ad:93:37:38: 19:b7:dc:d7:85:da:93:b4:31:2f:0b:bc:99:c5:ce:5f:94:56: 8e:e5:65:a3:58:6e:53:8b:70:58:94:c9:ea:75:b3:14:bb:0f: 03:a9:cc:ea:0d:6d:99:f0:f6:73:10:72:9b:04:7c:07:f3:19: 6d:86:73:76:60:db:7b:f3:97:39:ba:56:be:f2:61:63:bc:2d: a4:01:5a:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoQ0EyOTc3NDc0MzBBMUJFQjM0MEJDQTM5RDYyMjJGRDI2 NDE5QjdEQjAeFw0yNTA5MDUwNzE5MDlaFw0yNTA5MTIwNzE5MDlaMBgxFjAUBgNV BAMTDTY4YmE4ZWVkLWUzODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC20j4t3WHcDYaTrhIUnKvahMWYvwXrhemiNU6CFc175iaRK872aBId40EdG0ln HN/hDm9O+091x6OMOdSi0tlZZcc5cQOLl1WW7KIWZbJOMAH/Qx5wMuv9Lh6CDfcE tOZ4A2w7YDNGTCnwhMm5iRI/eIp+nohb6HBWjAoNu1nQsNWHf3LfxdCDkbETBaXE HMTlKSmYYY2T1SHQdSf/FeSTt6zNALdQbORO0Fh1dqJe+fMRATrFZQyWYNVcd1av EwTcF+tcdI8SXOtImM/gamI06STDMw5ch+En9ZxXXWZrNUiehPCuFlHPTF1unWIq 8GXtQ7VbbJZ9zuSHeUS4dctPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY8HIiuKW PWStnOJ2GEvZtBSqfRYwHwYDVR0jBBgwFoAUyil3R0MKG+s0C8o51iIv0mQZt9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0UxQUM4MjEwRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL3lpbDNSME1LRy1zMEM4bzUxaUl2MG1RWnQ5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveWlsM1IwTUtHLXMwQzhvNTFpSXYwbVFadDlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0UxQUM4MjEwRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL3lpbDNSME1LRy1z MEM4bzUxaUl2MG1RWnQ5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABqi3PI3KLz/Lv4O5+ezNHqPDiHr0GtUjB9rSwmsOGMNSd01X0BYWLDm 5xTEkwtSkXm7OKhE2U/Djml7iZnzuNd3UpqUDzmdN9A5cbunBq1IMe7Bzm5XMosc dYH2z9goxPB6C36QDLzmKn5WEZrlWG/T7gb8ogWXfFpdTDdJQnH3Ef+Hsc258TY+ VdjXRKEIDGvXEY68VpHkUWh5ZknOQzeB1Mi4noMnQ9on2G/jivC/rZM3OBm33NeF 2pO0MS8LvJnFzl+UVo7lZaNYblOLcFiUyep1sxS7DwOpzOoNbZnw9nMQcpsEfAfz GW2Gc3Zg23vzlzm6Vr7yYWO8LaQBWlc= -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:57 2025 by rpki-client