$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: k2Ln+TUMp2TT85pwwC2fJALRcv//LFS2dZLv80oQAjA= Subject key identifier: 48:53:26:45:36:AD:17:EB:98:5E:4A:6F:4D:FB:02:DD:DE:D7:AB:56 Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 02AB Signing time: Fri 05 Sep 2025 02:00:18 +0000 Manifest this update: Fri 05 Sep 2025 02:00:18 +0000 Manifest next update: Fri 12 Sep 2025 02:00:18 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: Lh0d3p+gMk4w9qeDFkDAXj1LUO0ubM9SWfkZbJHMYH0=) 2: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: LeMbdehFC4fTf/TGuaoRSnOw0VY+BgZy7lQOEpG5vyc=) 3: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: 0dIG8fQMRzlILpkTDJVo/XSoC64SAKbRto45S4Eicvs=) 4: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ZQQKFp5iiDEIGLxVFz3G6lECRRriefFnadRp8yKcQoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Sep 5 02:00:18 2025 GMT Not After : Sep 12 02:00:18 2025 GMT Subject: CN=68ba4432-aac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:8e:49:0e:af:f4:87:e5:5e:48:25:e5:3a: 51:d8:e8:94:02:c3:b4:60:af:f7:a8:9a:08:52:04: 60:c9:d5:8c:5f:7c:da:36:3d:ae:0b:6b:d6:38:38: e8:ea:93:b8:b7:e3:4e:a0:43:d8:bb:44:6c:bc:a7: 34:93:d2:bb:b6:8c:a9:cb:8f:89:8c:13:b9:20:a4: 3f:c3:a3:12:41:fb:43:37:61:65:74:73:47:96:a5: ef:24:41:67:57:e3:bc:c0:05:1c:1b:b5:c9:8c:33: 1e:10:91:eb:b5:76:c3:a1:d2:12:4a:2b:77:5d:b5: 15:9f:c6:76:40:c8:18:29:a4:59:30:67:c4:bf:38: 64:f3:53:dd:d1:6c:7e:bc:a4:a8:55:06:44:32:8a: 80:d6:0b:fa:fd:99:32:4a:1f:9c:e5:4c:3d:99:bf: d4:30:d6:24:fa:9d:3f:ef:70:0f:4b:72:7a:99:54: bf:d8:2b:64:37:b6:06:db:e7:0e:3a:06:97:05:25: ce:1b:7a:e7:f7:3d:ec:88:a1:c5:c8:a4:ec:8f:af: 72:97:3d:61:05:a2:70:27:ff:0e:e6:4d:59:47:22: 7e:50:62:bc:b1:22:77:5c:26:4f:c3:1b:7b:a9:f0: 2a:79:37:a2:ae:b0:98:23:dc:0c:f0:76:da:99:d6: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:53:26:45:36:AD:17:EB:98:5E:4A:6F:4D:FB:02:DD:DE:D7:AB:56 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:63:43:e8:c0:24:5f:fa:11:ba:b7:6a:ae:fe:e1:ae:f6:79: 58:d6:3b:70:d2:57:43:49:31:02:f4:8d:80:d8:35:be:ff:06: 26:38:57:92:c4:60:ac:60:1c:a3:ff:a7:0d:d0:0f:ae:14:67: d7:4e:93:21:ac:a5:0e:16:da:73:a6:16:26:21:73:b7:15:94: 78:cb:7a:8e:6c:03:4a:43:fc:73:d2:91:e2:cd:8e:44:78:96: ad:8d:38:58:58:2e:52:bf:19:a5:d0:94:bc:68:ed:84:6d:a7: a5:4b:d0:ea:38:fa:c7:ce:51:0b:26:7d:d3:8a:4a:27:25:bc: e1:5c:a7:9d:5a:3d:bf:f3:3e:f2:28:89:3c:29:4b:82:0e:db: c7:ff:8c:a6:1d:ca:eb:8c:f9:d7:6f:ab:00:0d:82:a4:15:25: 3a:c1:c8:1d:4d:18:bb:6f:91:9d:c1:1f:fd:59:ab:6b:30:7d: a7:4f:a3:12:e6:4d:32:b7:48:d2:26:aa:77:e5:19:bc:d3:86: 62:23:83:3c:21:60:5e:7e:9e:51:c7:79:dd:4c:ba:16:a2:35: 6d:83:63:5d:73:c5:a7:57:80:71:72:3f:1a:86:fb:59:5c:6f: fb:47:45:29:71:95:08:ec:e5:be:a8:b5:b8:d2:35:ef:e2:f4: 41:4f:b7:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjUwOTA1MDIwMDE4WhcNMjUwOTEyMDIwMDE4WjAYMRYwFAYD VQQDEw02OGJhNDQzMi1hYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lqOSQ6v9IflXkgl5TpR2OiUAsO0YK/3qJoIUgRgydWMX3zaNj2uC2vWODjo 6pO4t+NOoEPYu0RsvKc0k9K7toypy4+JjBO5IKQ/w6MSQftDN2FldHNHlqXvJEFn V+O8wAUcG7XJjDMeEJHrtXbDodISSit3XbUVn8Z2QMgYKaRZMGfEvzhk81Pd0Wx+ vKSoVQZEMoqA1gv6/ZkySh+c5Uw9mb/UMNYk+p0/73APS3J6mVS/2CtkN7YG2+cO OgaXBSXOG3rn9z3siKHFyKTsj69ylz1hBaJwJ/8O5k1ZRyJ+UGK8sSJ3XCZPwxt7 qfAqeTeirrCYI9wM8HbamdbwEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhTJkU2 rRfrmF5Kb037At3e16tWMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvY0PowCRf+hG6t2qu/uGu9nlY1jtw0ldDSTEC9I2A2DW+/wYmOFeS xGCsYByj/6cN0A+uFGfXTpMhrKUOFtpzphYmIXO3FZR4y3qObANKQ/xz0pHizY5E eJatjThYWC5Svxml0JS8aO2EbaelS9DqOPrHzlELJn3TikonJbzhXKedWj2/8z7y KIk8KUuCDtvH/4ymHcrrjPnXb6sADYKkFSU6wcgdTRi7b5GdwR/9WatrMH2nT6MS 5k0yt0jSJqp35Rm804ZiI4M8IWBefp5Rx3ndTLoWojVtg2Ndc8WnV4Bxcj8ahvtZ XG/7R0UpcZUI7OW+qLW40jXv4vRBT7cW -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:13 2025 by rpki-client