$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft File: YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json) Hash identifier: FGkWxaR1j9KOxtWhxBjU0dqBMaGgvtjvxGwaL/2ehJE= Subject key identifier: F7:9F:04:CC:BF:69:F7:7D:A1:7B:A8:D9:92:7E:A8:18:FB:4A:5A:95 Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 Certificate issuer: /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft Manifest number: 0AEE Signing time: Thu 18 Sep 2025 20:35:29 +0000 Manifest this update: Thu 18 Sep 2025 20:35:29 +0000 Manifest next update: Thu 25 Sep 2025 20:35:29 +0000 Files and hashes: 1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: lUAgjdbaz95+hP636gjACQyp+BX5b8DIgtUXTnwbsOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Validity Not Before: Sep 18 20:35:29 2025 GMT Not After : Sep 25 20:35:29 2025 GMT Subject: CN=68cc6d11-26d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:12:67:db:8c:57:7d:81:ba:16:d0:8c:43: e8:bf:62:0b:88:5c:dc:b3:af:97:2e:07:ca:73:e9: 15:e7:10:bf:ff:29:63:d7:49:c3:05:94:32:15:14: 53:dd:0a:69:a7:30:d8:8c:5a:9c:a2:d8:36:e5:3e: aa:e9:ac:99:dd:d4:b3:72:b1:34:0c:47:9d:db:a6: f1:b3:b0:ff:cf:9e:03:81:94:6e:e2:21:d3:6a:71: 24:9f:57:0b:8b:83:81:67:e1:83:44:18:ff:79:45: 50:af:da:b1:f9:68:2d:71:c8:5b:da:a6:ba:8a:24: c1:9b:9b:2b:8d:8c:e2:fd:a0:e6:51:c7:81:86:65: 5f:32:7c:a5:9d:18:7d:27:ac:52:cc:a4:ef:0f:fb: 58:3c:ac:30:25:96:cb:a4:8f:48:47:cc:3f:98:fe: c1:e8:50:35:60:45:7e:87:10:ea:c8:ab:de:1a:f0: a5:f9:64:95:8b:e3:54:5b:c7:c2:fd:2d:dd:fe:b1: 10:15:11:69:e6:b2:71:68:58:ab:eb:84:cd:90:c9: 2f:f9:e9:83:b8:ac:33:3e:c4:88:c9:7f:f1:33:c0: 25:96:07:97:52:4a:0e:3d:9c:45:35:42:5f:38:d5: 95:22:33:80:25:06:ae:54:59:fc:cc:23:a7:51:89: df:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9F:04:CC:BF:69:F7:7D:A1:7B:A8:D9:92:7E:A8:18:FB:4A:5A:95 X509v3 Authority Key Identifier: keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a4:dd:81:4a:4c:54:97:53:a2:fd:52:5f:18:f0:ce:32:3b: 7f:fe:92:2c:ac:a0:1c:79:45:4b:c3:b8:7e:9c:9a:5f:58:d4: c0:49:af:01:ca:33:ea:9b:83:84:d7:9d:a7:88:97:e7:2b:4f: 9c:1a:44:c8:90:34:eb:b1:72:d4:85:b4:d2:41:e9:bf:a5:7a: 60:89:d0:e2:63:eb:31:05:a3:f8:79:85:66:2b:70:19:0b:18: ec:c8:31:77:a3:fa:a5:b5:9c:78:25:e4:ea:34:e9:33:be:c5: 19:8d:94:3b:cb:66:c6:55:e2:3f:7f:d7:bd:3a:01:69:69:65: cf:3d:d3:96:41:9f:9a:bb:b8:2a:37:b1:4d:ea:ec:a4:90:fb: 53:f9:c2:ab:e5:71:d0:63:56:e5:bc:46:7e:15:6a:ff:46:62: d6:57:38:d7:24:92:68:07:e1:c5:ab:75:b1:d3:71:6a:dd:e9: de:c3:66:1c:c9:6a:3f:fc:fe:1b:49:8b:3f:31:9d:e2:5a:2e: 98:16:32:db:bd:91:28:cd:e6:f8:b8:de:64:ad:3f:d0:d4:03: 93:8e:a9:57:fe:cf:49:ed:47:7e:8a:d8:9c:60:31:6f:3a:b4: a5:53:1f:56:2d:ed:cd:64:5b:04:a9:4e:11:2a:e0:ec:8c:83: ef:a0:c1:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE3RTYxMTAvBgNVBAUTKDYwNzYyOEJFNDU1RUYzNzlCRTY2QUY5RDZDQTlCQThF Q0RFRDNGMDQwHhcNMjUwOTE4MjAzNTI5WhcNMjUwOTI1MjAzNTI5WjAYMRYwFAYD VQQDEw02OGNjNmQxMS0yNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLESZ9uMV32BuhbQjEPov2ILiFzcs6+XLgfKc+kV5xC//ylj10nDBZQyFRRT 3QpppzDYjFqcotg25T6q6ayZ3dSzcrE0DEed26bxs7D/z54DgZRu4iHTanEkn1cL i4OBZ+GDRBj/eUVQr9qx+Wgtcchb2qa6iiTBm5srjYzi/aDmUceBhmVfMnylnRh9 J6xSzKTvD/tYPKwwJZbLpI9IR8w/mP7B6FA1YEV+hxDqyKveGvCl+WSVi+NUW8fC /S3d/rEQFRFp5rJxaFir64TNkMkv+emDuKwzPsSIyX/xM8AllgeXUkoOPZxFNUJf ONWVIjOAJQauVFn8zCOnUYnfZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPefBMy/ afd9oXuo2ZJ+qBj7SlqVMB8GA1UdIwQYMBaAFGB2KL5FXvN5vmavnWypuo7N7T8E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz QjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgzbS1acS1kYkttNmpzM3RQ d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIWW92a1ZlODNtLVpxLWRiS202anMzdFB3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgz bS1acS1kYkttNmpzM3RQd1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCupN2BSkxUl1Oi/VJfGPDOMjt//pIsrKAceUVLw7h+nJpfWNTASa8B yjPqm4OE152niJfnK0+cGkTIkDTrsXLUhbTSQem/pXpgidDiY+sxBaP4eYVmK3AZ CxjsyDF3o/qltZx4JeTqNOkzvsUZjZQ7y2bGVeI/f9e9OgFpaWXPPdOWQZ+au7gq N7FN6uykkPtT+cKr5XHQY1blvEZ+FWr/RmLWVzjXJJJoB+HFq3Wx03Fq3enew2Yc yWo//P4bSYs/MZ3iWi6YFjLbvZEozeb4uN5krT/Q1AOTjqlX/s9J7Ud+iticYDFv OrSlUx9WLe3NZFsEqU4RKuDsjIPvoMFx -----END CERTIFICATE-----Generated at Fri Sep 19 05:14:03 2025 by rpki-client