$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft File: _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json) Hash identifier: s29DG8V+VMjK1pgflxuZx/74YshQadtUItoiMDD9ZU8= Subject key identifier: 75:D6:BB:74:72:5C:52:64:4E:EB:9E:3F:11:8B:0F:9A:1B:A9:4E:3A Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft Manifest number: AF Signing time: Wed 03 Sep 2025 06:41:36 +0000 Manifest this update: Wed 03 Sep 2025 06:41:36 +0000 Manifest next update: Wed 10 Sep 2025 06:41:36 +0000 Files and hashes: 1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: 9KNbjiTylqkh5eO6i2g/0Y47UnLYXiadQjfc/1EGSPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Validity Not Before: Sep 3 06:41:36 2025 GMT Not After : Sep 10 06:41:36 2025 GMT Subject: CN=68b7e320-7217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:9e:2d:8c:ef:2d:94:f2:5a:2b:b3:d2:cc: 33:75:da:6c:5e:1a:ce:75:57:dc:e9:54:1d:20:4f: 46:8a:f6:17:56:a3:f3:e0:b0:6a:26:1d:f4:21:37: ef:b6:48:95:1e:05:24:95:90:64:2e:dd:1e:67:7e: d7:1c:cd:1a:17:9a:af:0c:7c:05:66:d4:74:15:59: 09:c8:6e:51:6a:f5:0f:b3:2d:38:f0:4a:2d:b9:dd: 13:8c:2e:73:2d:da:ce:8f:62:9d:e7:f6:2a:b4:02: fd:ee:56:16:a0:da:94:76:ec:15:ec:06:be:fb:60: 4c:90:c5:cd:0d:d1:8b:f8:f1:b9:c3:c0:74:8a:4d: e2:9b:21:97:6d:eb:96:ed:29:c4:30:c5:f9:cd:f1: e3:fb:31:94:bd:ae:cb:4c:89:bd:b6:fe:8d:18:28: 78:e7:42:6b:35:97:9a:44:ba:66:ed:2e:da:2b:46: 36:56:da:bb:05:32:4f:5f:cc:53:cc:1a:41:5c:3e: 2e:80:5a:09:96:7c:75:ba:41:1b:83:c7:dc:9b:89: 5e:4c:69:4f:bd:77:ce:89:74:c5:e0:9c:be:60:11: 80:48:70:14:d7:fa:7f:88:2f:5a:8f:11:67:a3:cc: 19:09:75:86:db:f4:c8:3e:b0:c4:d3:d0:09:c4:4c: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D6:BB:74:72:5C:52:64:4E:EB:9E:3F:11:8B:0F:9A:1B:A9:4E:3A X509v3 Authority Key Identifier: keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:cb:a2:7f:fb:51:bb:a2:2b:be:07:eb:a4:29:bf:53:fe:cf: 7c:bf:75:a1:bc:33:63:2e:3a:54:16:75:83:3b:02:fc:f6:0d: 1f:f5:ad:35:f5:d9:33:b3:a1:ed:fe:c4:97:4f:b9:66:83:ea: 88:ca:24:2d:43:bd:41:96:7e:ad:5a:b8:75:43:1e:67:03:3b: f2:1d:3a:66:a6:8b:2f:6d:40:93:bb:e6:8a:cb:bd:81:95:4a: f1:46:06:cb:1c:e9:57:e5:21:d7:c2:01:7b:79:17:82:70:ba: e7:29:ba:d2:d2:b0:ea:7e:95:24:ae:ea:46:4d:1e:82:e7:27: d5:3d:cd:b7:9d:d7:8f:7e:51:2e:0c:46:23:98:d7:91:ad:4e: 81:03:6c:a7:98:32:32:e1:c1:b0:24:dd:8d:02:22:74:0a:9c: 8e:2d:59:f2:d4:7e:dd:df:f6:5d:87:a9:f9:07:41:28:ff:71: 1c:16:21:09:0e:86:af:fa:53:ce:37:d9:77:45:68:49:3e:81: d1:75:f7:b5:a0:38:fe:16:04:7f:c1:63:3b:0f:b6:43:58:8f: 73:ec:fc:d0:ce:37:56:f7:36:e0:26:b5:68:1e:66:cf:32:17: 1c:10:30:d6:2d:16:ae:7a:78:44:97:57:42:d6:41:91:e7:e4: b9:6c:4d:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKEZEODAxMkJGRTk5MTI5RUY5QzhCQjdBNDYwMzIxNDQy RjZEMjY1NjIwHhcNMjUwOTAzMDY0MTM2WhcNMjUwOTEwMDY0MTM2WjAYMRYwFAYD VQQDEw02OGI3ZTMyMC03MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/OeLYzvLZTyWiuz0swzddpsXhrOdVfc6VQdIE9GivYXVqPz4LBqJh30ITfv tkiVHgUklZBkLt0eZ37XHM0aF5qvDHwFZtR0FVkJyG5RavUPsy048Eotud0TjC5z LdrOj2Kd5/YqtAL97lYWoNqUduwV7Aa++2BMkMXNDdGL+PG5w8B0ik3imyGXbeuW 7SnEMMX5zfHj+zGUva7LTIm9tv6NGCh450JrNZeaRLpm7S7aK0Y2Vtq7BTJPX8xT zBpBXD4ugFoJlnx1ukEbg8fcm4leTGlPvXfOiXTF4Jy+YBGASHAU1/p/iC9ajxFn o8wZCXWG2/TIPrDE09AJxEz6TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXWu3Ry XFJkTuuePxGLD5obqU46MB8GA1UdIwQYMBaAFP2AEr/pkSnvnIu3pGAyFEL20mVi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wMUQyMzlBNDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktlLWNpN2VrWURJVVF2YlNa V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wMUQyMzlBNDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktl LWNpN2VrWURJVVF2YlNaV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzy6J/+1G7oiu+B+ukKb9T/s98v3WhvDNjLjpUFnWDOwL89g0f9a01 9dkzs6Ht/sSXT7lmg+qIyiQtQ71Bln6tWrh1Qx5nAzvyHTpmposvbUCTu+aKy72B lUrxRgbLHOlX5SHXwgF7eReCcLrnKbrS0rDqfpUkrupGTR6C5yfVPc23ndePflEu DEYjmNeRrU6BA2ynmDIy4cGwJN2NAiJ0CpyOLVny1H7d3/Zdh6n5B0Eo/3EcFiEJ Doav+lPON9l3RWhJPoHRdfe1oDj+FgR/wWM7D7ZDWI9z7PzQzjdW9zbgJrVoHmbP MhccEDDWLRauenhEl1dC1kGR5+S5bE0q -----END CERTIFICATE-----Generated at Thu Sep 4 14:06:18 2025 by rpki-client