$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json) Hash identifier: Ejjnsx8hBNxu9RqM5M6ELbp+Z6hteLJICgfKcItBfFw= Subject key identifier: CF:34:01:E5:3A:AB:9E:CC:0B:63:EE:3A:C0:98:AB:50:DA:52:E6:5C Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft Manifest number: A7 Signing time: Sat 23 Aug 2025 06:22:30 +0000 Manifest this update: Sat 23 Aug 2025 06:22:29 +0000 Manifest next update: Sat 30 Aug 2025 06:22:29 +0000 Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: opWjMoYfhS1pQ/LUBDSDPpsciOfqVyaKU3zkda05glk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Validity Not Before: Aug 23 06:22:29 2025 GMT Not After : Aug 30 06:22:29 2025 GMT Subject: CN=68a95e26-55e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:bf:df:c5:fc:0b:8a:70:17:03:de:c4:1d: 49:86:5d:5d:5d:36:75:6a:a9:0c:46:10:c3:96:4a: f0:2e:54:59:e0:8c:83:1e:13:63:2c:d0:cf:91:1c: 00:8d:ca:58:ba:96:b3:a7:6d:4e:6d:5e:55:11:69: 19:89:7d:3c:36:b6:83:58:bf:2c:ff:5a:d2:c9:9e: 4d:47:46:36:f1:20:db:7e:d0:ac:fd:bf:27:60:dd: 14:ba:d2:54:84:65:a3:a2:0e:ac:e3:d0:d7:81:51: c5:b9:8a:81:22:b4:d8:4d:a5:0d:5a:d8:09:05:f8: 99:ae:ce:0e:3d:03:3f:ab:22:06:d1:6a:e9:f9:98: 7e:1b:d0:92:d6:cb:48:9c:62:a5:9f:e7:f3:59:00: fc:a8:55:62:b8:82:4e:87:fd:38:23:49:67:0e:96: d0:db:74:2a:93:74:28:fe:bd:c9:97:13:0b:b0:34: f6:06:d5:be:67:80:b2:c4:ea:98:13:a5:82:1a:a5: 07:f0:96:dc:68:19:b3:2a:93:68:f4:2b:1f:f2:0c: 2d:eb:4b:d4:bd:a6:cd:a6:af:fa:e5:dd:1e:c0:9f: 35:d3:2e:df:16:0e:9a:3d:d5:71:c7:83:27:33:bf: d2:0d:2f:a1:51:f0:d4:80:8e:6a:0a:b6:5f:c9:7d: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:34:01:E5:3A:AB:9E:CC:0B:63:EE:3A:C0:98:AB:50:DA:52:E6:5C X509v3 Authority Key Identifier: keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b5:03:3a:e4:76:ee:23:2a:8f:8d:9e:67:d4:e4:02:06:7b: 87:f5:b7:a2:6a:3b:fd:ca:bf:8d:30:a4:7c:a6:de:ac:23:95: 8b:c8:69:0f:a2:12:4f:9c:31:ed:a5:b5:eb:6c:81:32:40:09: fb:8d:8f:14:e4:df:a9:c3:25:92:a3:ca:6b:00:f5:72:e0:da: cc:4f:2a:c0:66:3b:8f:f5:c8:cf:08:ac:f7:2b:93:62:28:7a: 1c:f6:db:07:16:66:2d:c2:c7:f0:57:29:7e:51:ea:38:0f:d8: 64:d4:a0:a5:73:70:0d:cb:d5:bb:f0:19:72:ec:ab:f2:52:b5: 5b:0f:cb:e3:03:09:8e:85:e9:df:95:54:2c:4e:dc:81:8e:9f: cd:6f:32:f6:4e:d0:ae:57:92:4e:73:8c:9a:22:f0:13:8f:82: 2f:0d:fa:d5:93:e3:8a:65:b5:f4:9f:73:ce:12:24:5f:d9:9b: fa:2d:95:c3:25:13:1c:03:77:3b:11:98:83:b9:56:ef:10:90: bd:40:9e:bb:05:85:ae:39:1c:09:4a:57:d1:7c:d3:34:82:c6: a4:94:b8:fb:32:5b:41:a5:67:d0:f7:cf:20:94:37:98:e0:e1: 65:9d:0b:46:75:17:4c:e0:44:2b:fd:65:20:13:98:1a:85:2c: 9f:ba:c2:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDRDUxMTAvBgNVBAUTKDYzMDVEQ0I1NUZEMTRCNUM3QUEyOTRBRTM3QzcwMjc1 NjkyRjQxODAwHhcNMjUwODIzMDYyMjI5WhcNMjUwODMwMDYyMjI5WjAYMRYwFAYD VQQDEw02OGE5NWUyNi01NWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsye/38X8C4pwFwPexB1Jhl1dXTZ1aqkMRhDDlkrwLlRZ4IyDHhNjLNDPkRwA jcpYupazp21ObV5VEWkZiX08NraDWL8s/1rSyZ5NR0Y28SDbftCs/b8nYN0UutJU hGWjog6s49DXgVHFuYqBIrTYTaUNWtgJBfiZrs4OPQM/qyIG0Wrp+Zh+G9CS1stI nGKln+fzWQD8qFViuIJOh/04I0lnDpbQ23Qqk3Qo/r3JlxMLsDT2BtW+Z4CyxOqY E6WCGqUH8JbcaBmzKpNo9Csf8gwt60vUvabNpq/65d0ewJ810y7fFg6aPdVxx4Mn M7/SDS+hUfDUgI5qCrZfyX3ihwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM80AeU6 q57MC2PuOsCYq1DaUuZcMB8GA1UdIwQYMBaAFGMF3LVf0UtceqKUrjfHAnVpL0GA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83QTlBMjUxMDdG RUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMxeDZvcFN1TjhjQ2RXa3ZR WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNENS83QTlBMjUxMDdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMx eDZvcFN1TjhjQ2RXa3ZRWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWtQM65HbuIyqPjZ5n1OQCBnuH9beiajv9yr+NMKR8pt6sI5WLyGkP ohJPnDHtpbXrbIEyQAn7jY8U5N+pwyWSo8prAPVy4NrMTyrAZjuP9cjPCKz3K5Ni KHoc9tsHFmYtwsfwVyl+Ueo4D9hk1KClc3ANy9W78Bly7KvyUrVbD8vjAwmOhenf lVQsTtyBjp/NbzL2TtCuV5JOc4yaIvATj4IvDfrVk+OKZbX0n3POEiRf2Zv6LZXD JRMcA3c7EZiDuVbvEJC9QJ67BYWuORwJSlfRfNM0gsaklLj7MltBpWfQ988glDeY 4OFlnQtGdRdM4EQr/WUgE5gahSyfusKe -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:37 2025 by rpki-client