$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: cHUDsxoaL9Qcs8feuiaeblcE7h7qzx5S5ogZGTO1pog= Subject key identifier: E5:0B:0F:5E:07:F2:56:CB:29:BF:07:BA:62:82:92:78:C1:5F:81:E6 Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 0806 Signing time: Sun 24 Aug 2025 21:01:09 +0000 Manifest this update: Sun 24 Aug 2025 21:01:09 +0000 Manifest next update: Sun 31 Aug 2025 21:01:09 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: WSjWSXetopPQpM+KNCwz3vvia0UpgZemReKnC5lYllQ=) 2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: YDClsqxDW8aE74OivD5RPpVA+CxjmhxOOqfYIEgfLpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Aug 24 21:01:09 2025 GMT Not After : Aug 31 21:01:09 2025 GMT Subject: CN=68ab7d95-efea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:e2:e0:31:49:25:7f:1f:d7:85:1c:b9:d8: af:66:f7:a8:31:29:16:42:a5:ea:cb:aa:fa:8c:17: 10:39:cf:c1:91:6c:af:27:1c:7d:74:c5:6b:77:db: 94:65:c4:dc:9d:02:1f:62:96:54:c9:d4:05:6a:1c: 3b:41:22:af:e0:36:29:91:c1:f5:66:3d:0f:57:84: 29:b8:68:30:cf:2b:94:75:c0:7c:df:04:31:05:3b: 75:1e:df:22:49:c8:0e:ec:a8:a5:c2:2b:ce:52:9c: ef:2b:99:9d:75:bc:1f:54:87:8f:1a:27:0e:b6:6c: 77:e2:0e:7f:d7:46:d8:7c:01:a8:a0:ea:97:ea:53: 85:0e:75:ee:3c:27:88:9d:66:34:8e:d6:8e:70:51: 63:7c:95:c0:16:72:d7:05:4e:f6:f6:cd:76:bc:2d: ba:a3:de:95:9e:21:55:9c:48:0e:2c:90:5f:f6:c4: ed:fe:cc:64:04:da:3a:14:fa:1e:e4:e2:e5:04:b3: 51:61:c3:d5:81:d6:7f:86:d1:92:be:4b:3c:0a:2b: 83:38:d3:21:16:c3:66:99:0f:ce:fa:8c:90:71:1e: dd:8f:95:fe:b6:35:30:a4:74:f1:0f:6a:a2:fe:e1: 44:21:ba:a4:2d:d9:88:4e:5d:75:90:80:b1:e6:3a: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0B:0F:5E:07:F2:56:CB:29:BF:07:BA:62:82:92:78:C1:5F:81:E6 X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:cf:ba:97:73:f0:cb:d4:b3:10:83:b0:e9:d1:10:6d:75:2c: ba:a9:6b:a6:42:5a:cb:b8:d5:a9:7d:73:a4:2d:64:56:f7:18: df:aa:9a:67:de:b9:8f:0c:c4:ee:6a:e0:27:96:c2:6c:c7:e3: 00:35:80:11:a8:88:93:93:86:bc:84:76:80:b5:1a:bd:a1:b1: 1a:77:13:02:27:63:56:52:ea:3b:42:4f:5f:be:80:d3:f6:ea: 63:42:a1:35:1b:2f:35:af:f9:58:fb:f8:d0:08:be:ec:79:c2: 48:3b:e1:f4:7a:b3:81:8f:2b:bb:66:fa:40:e8:a8:cc:78:b9: 3f:0c:13:b7:e9:27:dd:c2:7a:be:bf:ce:97:66:07:ac:23:95: 4c:58:ff:0b:d8:7e:61:8f:66:69:58:b0:ce:84:de:eb:8b:a4: 2f:3b:02:c4:98:5f:56:c5:38:a7:63:c5:fc:c7:51:36:31:4f: f6:da:d8:40:23:b5:ef:72:64:56:59:dd:08:c3:0f:24:77:13: 4a:22:21:fd:25:64:aa:51:0a:80:d5:e2:a9:e6:49:e8:70:e1: 70:96:67:96:f7:d1:db:e1:d7:4f:3c:ed:7e:ba:aa:30:c2:4e: 55:30:0f:70:a3:78:14:2c:13:dc:1a:79:53:c4:d0:fe:45:0c: 51:26:d5:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjUwODI0MjEwMTA5WhcNMjUwODMxMjEwMTA5WjAYMRYwFAYD VQQDEw02OGFiN2Q5NS1lZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdri4DFJJX8f14UcudivZveoMSkWQqXqy6r6jBcQOc/BkWyvJxx9dMVrd9uU ZcTcnQIfYpZUydQFahw7QSKv4DYpkcH1Zj0PV4QpuGgwzyuUdcB83wQxBTt1Ht8i ScgO7KilwivOUpzvK5mddbwfVIePGicOtmx34g5/10bYfAGooOqX6lOFDnXuPCeI nWY0jtaOcFFjfJXAFnLXBU729s12vC26o96VniFVnEgOLJBf9sTt/sxkBNo6FPoe 5OLlBLNRYcPVgdZ/htGSvks8CiuDONMhFsNmmQ/O+oyQcR7dj5X+tjUwpHTxD2qi /uFEIbqkLdmITl11kICx5joV5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOULD14H 8lbLKb8HumKCknjBX4HmMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCz7qXc/DL1LMQg7Dp0RBtdSy6qWumQlrLuNWpfXOkLWRW9xjfqppn 3rmPDMTuauAnlsJsx+MANYARqIiTk4a8hHaAtRq9obEadxMCJ2NWUuo7Qk9fvoDT 9upjQqE1Gy81r/lY+/jQCL7secJIO+H0erOBjyu7ZvpA6KjMeLk/DBO36Sfdwnq+ v86XZgesI5VMWP8L2H5hj2ZpWLDOhN7ri6QvOwLEmF9WxTinY8X8x1E2MU/22thA I7XvcmRWWd0Iww8kdxNKIiH9JWSqUQqA1eKp5knocOFwlmeW99Hb4ddPPO1+uqow wk5VMA9wo3gULBPcGnlTxND+RQxRJtV1 -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:21 2025 by rpki-client