$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json) Hash identifier: QlNfsz8ae05UJAoyOYNCzCj0pX7QXv5dVonQMhROJQ0= Subject key identifier: 32:D7:17:C5:B0:2A:3B:BB:A9:D7:51:61:B7:85:6D:FF:30:FA:82:4F Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Certificate serial: 07BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft Manifest number: 07BA Signing time: Thu 04 Sep 2025 21:29:05 +0000 Manifest this update: Thu 04 Sep 2025 21:29:05 +0000 Manifest next update: Thu 11 Sep 2025 21:29:05 +0000 Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: QTZKupRBRYmVe+1ubnQoVvGNutNLxHy4/QpaM/VWi6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1978 (0x7ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Validity Not Before: Sep 4 21:29:05 2025 GMT Not After : Sep 11 21:29:05 2025 GMT Subject: CN=68ba04a1-d0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:19:9f:76:87:f0:d9:2e:75:c9:59:0f:68:85: 97:a6:5a:41:0a:8b:a3:5f:5a:02:a9:46:81:c1:e7: ed:7c:2d:90:59:ab:94:76:f1:70:eb:99:e5:ff:b9: fc:13:a8:be:67:7e:34:30:19:40:f9:e3:81:36:90: 3d:d7:41:0f:16:84:a7:73:cf:ba:dd:3e:c5:32:53: a7:2a:37:05:d2:8f:46:c4:2a:c4:d4:3e:ab:95:16: 63:4f:09:e2:c4:94:f0:a5:48:8a:f0:96:2c:16:c7: 8d:67:6e:df:ef:db:be:0a:d1:d5:3a:5a:0c:d9:06: 55:4a:5d:cd:0c:d3:c6:6c:92:5e:07:e5:34:b6:b9: 61:08:81:d4:36:ce:67:d4:b9:d2:85:a0:dd:65:a6: 2e:b9:7d:8b:a7:3f:b5:25:21:30:23:0c:6b:71:8f: 10:ad:5b:4d:aa:42:97:19:dc:90:1c:47:48:04:2d: 0c:0e:53:95:28:9e:0a:be:24:58:54:eb:31:a9:9a: 82:3e:9b:cb:29:88:16:b4:cf:46:3d:61:06:9a:72: 0d:ad:7c:80:bf:ef:33:98:e3:6a:93:4e:5f:a9:9b: db:2d:19:bf:d1:6e:7a:bd:df:56:3b:9c:1d:b3:22: 5d:c4:91:cc:f6:d3:b5:eb:bf:64:c0:82:48:10:03: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D7:17:C5:B0:2A:3B:BB:A9:D7:51:61:B7:85:6D:FF:30:FA:82:4F X509v3 Authority Key Identifier: keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f5:32:75:2f:31:21:60:02:ec:f5:9e:9c:e3:55:74:98:5e:9d: f6:75:51:e7:49:3e:3b:77:1e:57:c7:47:72:56:ab:84:bf:2c: 7e:6b:6b:bd:d9:97:75:ff:e2:fd:d0:b7:ce:51:fc:fc:04:da: 6d:03:43:a6:93:c6:f3:f3:72:87:bd:6a:d3:98:73:86:85:0d: d5:f2:bd:1d:5e:f1:47:6a:7f:76:52:cb:ad:93:a6:fe:48:12: 34:7e:c7:74:58:09:d1:2d:cc:93:31:14:de:fe:6f:2c:f4:79: 3f:cc:84:09:3a:95:cf:a9:52:11:0e:72:2e:2e:3c:a8:06:05: 76:5b:e8:5c:7f:24:f0:9b:31:d4:5e:b5:1c:fd:75:80:cd:48: 40:70:ab:12:1c:18:08:97:b7:ca:48:44:75:40:1e:31:74:ba: 4b:0e:3f:55:f2:40:d1:e5:11:a3:7d:70:d5:e2:52:ce:b6:d5: d9:e7:c1:50:ad:0f:34:ea:b2:34:7f:32:f8:da:47:65:33:95: 3e:e9:b9:cd:63:5c:3d:c6:8f:d9:2b:64:bb:d9:6b:11:9f:a1: 62:6e:32:c4:e9:08:8d:49:ab:46:e5:4f:76:4e:ce:4f:d4:0e: 1b:85:46:4b:48:a6:90:56:d6:e5:6e:1f:b7:79:7f:1f:14:74: 63:ba:01:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF OUYzODFGMTIwHhcNMjUwOTA0MjEyOTA1WhcNMjUwOTExMjEyOTA1WjAYMRYwFAYD VQQDEw02OGJhMDRhMS1kMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hmfdofw2S51yVkPaIWXplpBCoujX1oCqUaBweftfC2QWauUdvFw65nl/7n8 E6i+Z340MBlA+eOBNpA910EPFoSnc8+63T7FMlOnKjcF0o9GxCrE1D6rlRZjTwni xJTwpUiK8JYsFseNZ27f79u+CtHVOloM2QZVSl3NDNPGbJJeB+U0trlhCIHUNs5n 1LnShaDdZaYuuX2Lpz+1JSEwIwxrcY8QrVtNqkKXGdyQHEdIBC0MDlOVKJ4KviRY VOsxqZqCPpvLKYgWtM9GPWEGmnINrXyAv+8zmONqk05fqZvbLRm/0W56vd9WO5wd syJdxJHM9tO1679kwIJIEAOsjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLXF8Ww Kju7qddRYbeFbf8w+oJPMB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt NmU1SHEyLXViZkRwODRIeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD1MnUvMSFgAuz1npzjVXSYXp32dVHnST47dx5Xx0dyVquEvyx+a2u9 2Zd1/+L90LfOUfz8BNptA0Omk8bz83KHvWrTmHOGhQ3V8r0dXvFHan92Usutk6b+ SBI0fsd0WAnRLcyTMRTe/m8s9Hk/zIQJOpXPqVIRDnIuLjyoBgV2W+hcfyTwmzHU XrUc/XWAzUhAcKsSHBgIl7fKSER1QB4xdLpLDj9V8kDR5RGjfXDV4lLOttXZ58FQ rQ806rI0fzL42kdlM5U+6bnNY1w9xo/ZK2S72WsRn6FibjLE6QiNSatG5U92Ts5P 1A4bhUZLSKaQVtblbh+3eX8fFHRjugHZ -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:32 2025 by rpki-client