$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json) Hash identifier: 5+JmeUJjy03QVwOzeQ5nM/x2RIjASWGspwfwqYBiV64= Subject key identifier: DC:4F:0F:E6:EA:4A:1B:54:BA:44:AE:66:D3:AB:93:9C:EB:E2:CA:1C Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Certificate serial: 24F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft Manifest number: 24E6 Signing time: Sun 24 Aug 2025 15:44:17 +0000 Manifest this update: Sun 24 Aug 2025 15:44:17 +0000 Manifest next update: Sun 31 Aug 2025 15:44:17 +0000 Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: +fV/eprm3Ep2baaVm/yDYCUXCuleWq7z5ZA+gF9X6xw=) 2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: XiLxVcA3A5SvnNZPgANRplMFygJvziR4GhZISOC/34g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9464 (0x24f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Validity Not Before: Aug 24 15:44:17 2025 GMT Not After : Aug 31 15:44:17 2025 GMT Subject: CN=68ab3351-353e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:7b:40:39:43:f5:05:b3:77:65:57:72:8a: ca:c9:73:f2:ea:e6:a9:fe:c5:42:ba:25:3b:96:38: 00:2b:59:0b:6f:f3:5d:d4:55:30:c7:60:42:46:68: 38:57:47:94:55:bf:2e:6b:bd:fa:02:a3:83:b0:fc: 62:e5:27:43:39:94:ab:a3:3a:1e:89:fd:9a:32:49: e0:b5:b5:d3:df:45:75:2b:ea:71:98:ba:f6:01:fd: 0f:2b:a1:fd:8e:2c:c5:6c:27:3e:81:7a:f9:8e:60: 40:8c:97:3d:6d:01:e5:37:b0:e4:f3:51:c7:57:a1: 3a:db:e4:ea:c1:be:32:83:87:9e:ad:43:b4:14:f2: a5:88:81:9e:15:32:79:f5:c8:4d:11:e7:48:d9:99: 57:25:81:08:f2:d0:6a:ce:5e:dd:22:0a:35:46:ee: 1a:af:94:cb:5f:7d:63:d2:66:1a:0a:1f:51:2f:dc: 7d:2d:69:21:f4:f4:57:c8:96:92:91:89:7e:0b:76: 97:6c:ff:ac:64:c8:61:3c:34:69:ff:17:4c:57:26: db:82:d6:66:4a:fe:a9:cb:a7:ff:9b:31:d1:9f:27: c8:ef:cc:9e:5e:97:e5:6c:b6:b8:48:08:b2:0c:bf: 29:be:1c:a9:42:b9:7e:0b:54:e6:f8:33:fb:bd:00: ca:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:0F:E6:EA:4A:1B:54:BA:44:AE:66:D3:AB:93:9C:EB:E2:CA:1C X509v3 Authority Key Identifier: keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:31:85:53:e3:aa:d8:72:bc:c7:09:5f:0d:58:b1:57:9a:fa: e3:21:16:c6:1b:50:0b:9f:fd:00:41:af:d0:45:45:e7:1c:19: 30:e7:b8:30:86:4b:89:10:09:73:7b:b6:ae:89:ae:c8:2a:67: cc:cc:8e:fb:fc:88:f7:9c:a0:71:a6:bb:bd:56:4a:6e:21:b8: cc:fb:85:42:e0:c4:37:d3:f0:d6:6b:29:50:b2:64:da:55:83: 68:ae:ca:c9:8f:e2:77:28:ae:eb:4d:90:fb:a3:1a:52:17:ad: 36:81:92:2a:a0:8b:45:7f:12:b2:17:d5:ec:1a:60:8e:c9:45: a7:07:06:d6:00:90:1f:07:bd:81:4a:20:7e:74:a6:91:a6:ab: 9d:ca:b9:68:1e:45:80:30:6e:03:11:8c:b4:fd:a1:9f:2f:6e: 56:02:0b:5e:74:e4:7d:49:03:a2:e3:00:3b:84:18:0b:c3:fc: e8:5c:4e:2e:ac:1f:f1:52:85:5b:91:cd:b9:ed:17:7c:be:09: 53:3c:ec:03:02:27:87:54:30:95:be:f3:81:b9:1a:4f:43:53: 47:07:41:0a:b4:4d:f4:49:77:ff:ff:ba:6d:df:e9:d6:1c:76: e4:65:cb:c4:23:29:86:97:95:69:2b:f7:9f:1e:6d:6d:4a:67: 2c:18:89:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5 RUEwNEQ0RTEwHhcNMjUwODI0MTU0NDE3WhcNMjUwODMxMTU0NDE3WjAYMRYwFAYD VQQDEw02OGFiMzM1MS0zNTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsp7QDlD9QWzd2VXcorKyXPy6uap/sVCuiU7ljgAK1kLb/Nd1FUwx2BCRmg4 V0eUVb8ua736AqODsPxi5SdDOZSrozoeif2aMkngtbXT30V1K+pxmLr2Af0PK6H9 jizFbCc+gXr5jmBAjJc9bQHlN7Dk81HHV6E62+Tqwb4yg4eerUO0FPKliIGeFTJ5 9chNEedI2ZlXJYEI8tBqzl7dIgo1Ru4ar5TLX31j0mYaCh9RL9x9LWkh9PRXyJaS kYl+C3aXbP+sZMhhPDRp/xdMVybbgtZmSv6py6f/mzHRnyfI78yeXpflbLa4SAiy DL8pvhypQrl+C1Tm+DP7vQDKQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxPD+bq ShtUukSuZtOrk5zr4socMB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP NHp3QkttVEZRck9lb0UxT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSMYVT46rYcrzHCV8NWLFXmvrjIRbGG1ALn/0AQa/QRUXnHBkw57gw hkuJEAlze7auia7IKmfMzI77/Ij3nKBxpru9VkpuIbjM+4VC4MQ30/DWaylQsmTa VYNorsrJj+J3KK7rTZD7oxpSF602gZIqoItFfxKyF9XsGmCOyUWnBwbWAJAfB72B SiB+dKaRpqudyrloHkWAMG4DEYy0/aGfL25WAgtedOR9SQOi4wA7hBgLw/zoXE4u rB/xUoVbkc257Rd8vglTPOwDAieHVDCVvvOBuRpPQ1NHB0EKtE30SXf//7pt3+nW HHbkZcvEIymGl5VpK/efHm1tSmcsGImV -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:09 2025 by rpki-client