$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: 7M6Zc8eqs1TT/86vvEe9UBTAquHFtoLpgo6BcjyeOiE= Subject key identifier: 26:F7:43:3E:8B:26:93:8D:E9:08:1F:1E:49:F2:91:ED:69:FC:53:34 Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 01AA Signing time: Fri 05 Sep 2025 03:38:37 +0000 Manifest this update: Fri 05 Sep 2025 03:38:37 +0000 Manifest next update: Fri 12 Sep 2025 03:38:37 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: 5H9rICGkC+D1G5Ph0GfAF8cPwv5Iu4sD9fQTrKRUvIA=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: vIvtHj4TVv3QcsCJzYo0IznJMaTQQl47vgi8rc8e+n4=) 3: CBECEF26736C11F0AB1C0331C4F9AE02.roa (hash: PohdabGkRRj8yF6hYAyIfaJYtFhBZ6QjhxOMrxm3cjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Sep 5 03:38:37 2025 GMT Not After : Sep 12 03:38:37 2025 GMT Subject: CN=68ba5b3d-1320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f5:ed:32:ce:09:07:2a:31:a4:63:27:6a:f5: 6d:9f:20:e5:2d:63:bf:99:72:0a:a5:b9:e4:bd:c8: d5:f9:14:50:27:39:67:bc:ea:36:1e:4d:c6:cb:95: 15:34:69:8a:14:9e:c7:19:ef:4a:84:00:48:0f:91: dc:20:1e:9a:81:50:10:f8:4c:c8:45:b6:b0:d7:f1: 7b:75:27:49:b6:2e:1c:de:8b:f6:6c:f6:72:4a:23: 24:4c:ed:b9:b7:fe:c3:19:8e:5d:e9:5f:b8:66:c5: 5e:55:c6:57:be:bc:a5:28:bf:fd:95:7f:c4:a9:9e: 2b:c8:17:1a:f6:b1:4b:91:37:5b:9c:4e:f8:d7:1a: bb:d4:36:fa:1f:af:00:3c:91:88:7d:09:20:55:7a: 6d:cb:36:a3:37:9f:a6:97:44:5c:4e:e7:23:52:4c: a3:8e:b4:ef:dc:28:39:32:86:27:16:fc:e5:11:63: ca:99:94:59:03:56:71:df:27:33:2e:02:cc:f9:a7: 22:08:58:e2:d0:58:ab:b2:c3:26:58:45:9c:c9:61: 35:66:22:1f:6c:24:f9:ab:8b:fd:e4:0d:3b:c6:de: b8:2a:15:f4:af:bd:c0:da:6c:37:96:0c:05:7f:b4: 4b:6e:07:ad:92:92:80:14:69:8b:60:42:b8:18:ce: 93:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F7:43:3E:8B:26:93:8D:E9:08:1F:1E:49:F2:91:ED:69:FC:53:34 X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b4:4b:66:6c:28:09:59:8c:7f:5f:3d:5c:0d:a2:8c:52:79: 2f:32:bb:ba:61:0d:fa:f0:2a:e9:b1:ff:42:a3:21:95:1a:d8: 53:94:18:e2:2f:5e:4b:31:75:3d:c1:a6:eb:2f:a9:a8:f6:8b: 65:b8:73:5c:8a:6c:be:a7:60:02:1c:16:b8:8d:03:f9:84:1d: 0b:45:61:5f:69:ff:06:a4:9f:fe:84:50:45:f2:4e:7a:cd:ae: e7:96:5d:38:84:61:b9:0b:85:45:69:52:4b:d6:a5:fa:b4:11: 4b:94:c1:dc:95:8b:a9:95:01:b4:5c:74:02:c7:be:02:d6:3f: e6:56:69:e3:a2:31:43:7d:d6:d6:64:ac:4d:11:39:c3:a4:e1: bb:37:be:d7:14:d8:7c:7a:79:20:6e:de:52:86:16:66:85:b8: 1f:b8:e3:fc:1d:14:75:4c:28:15:c6:c3:5b:32:17:c6:ee:47: e6:d8:09:90:49:e0:50:09:0b:fd:b6:ae:c1:a9:db:9d:44:bf: 50:c3:ac:48:87:e4:23:c3:13:32:bb:79:e3:6a:7f:f1:f9:c4: 05:1c:e8:64:de:8d:13:01:7a:f8:fe:a8:a4:74:f2:3c:7f:f0: 0a:bf:c5:fa:4b:43:05:1d:2b:31:f4:24:c6:93:d8:6b:6c:2c: eb:fd:a6:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjUwOTA1MDMzODM3WhcNMjUwOTEyMDMzODM3WjAYMRYwFAYD VQQDEw02OGJhNWIzZC0xMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vXtMs4JByoxpGMnavVtnyDlLWO/mXIKpbnkvcjV+RRQJzlnvOo2Hk3Gy5UV NGmKFJ7HGe9KhABID5HcIB6agVAQ+EzIRbaw1/F7dSdJti4c3ov2bPZySiMkTO25 t/7DGY5d6V+4ZsVeVcZXvrylKL/9lX/EqZ4ryBca9rFLkTdbnE741xq71Db6H68A PJGIfQkgVXptyzajN5+ml0RcTucjUkyjjrTv3Cg5MoYnFvzlEWPKmZRZA1Zx3ycz LgLM+aciCFji0FirssMmWEWcyWE1ZiIfbCT5q4v95A07xt64KhX0r73A2mw3lgwF f7RLbgetkpKAFGmLYEK4GM6TcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb3Qz6L JpON6QgfHknyke1p/FM0MB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCftEtmbCgJWYx/Xz1cDaKMUnkvMru6YQ368Crpsf9CoyGVGthTlBji L15LMXU9wabrL6mo9otluHNcimy+p2ACHBa4jQP5hB0LRWFfaf8GpJ/+hFBF8k56 za7nll04hGG5C4VFaVJL1qX6tBFLlMHclYuplQG0XHQCx74C1j/mVmnjojFDfdbW ZKxNETnDpOG7N77XFNh8enkgbt5ShhZmhbgfuOP8HRR1TCgVxsNbMhfG7kfm2AmQ SeBQCQv9tq7BqdudRL9Qw6xIh+QjwxMyu3njan/x+cQFHOhk3o0TAXr4/qikdPI8 f/AKv8X6S0MFHSsx9CTGk9hrbCzr/aad -----END CERTIFICATE-----Generated at Sat Sep 6 12:26:47 2025 by rpki-client