$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft File: YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json) Hash identifier: rN7To99AVW4mtwuF3EmTBs4fziNOV66by7/RqlP6mHc= Subject key identifier: EB:EE:0C:0B:A3:F1:9A:B8:CA:3C:2D:D7:B9:3A:FF:40:D3:40:1C:90 Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 Certificate issuer: /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft Manifest number: 02A1 Signing time: Wed 17 Sep 2025 02:05:39 +0000 Manifest this update: Wed 17 Sep 2025 02:05:38 +0000 Manifest next update: Wed 24 Sep 2025 02:05:38 +0000 Files and hashes: 1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: 3YB87tp/IhDg9jFGOH/hAEDv0+bV0OJiZXEpF1t8cbY=) 2: 008C0876148311ED856EF438C4F9AE02.roa (hash: P+roK1MWVCeuqJ3VqTzxEcvXNnpNsDkqcE1YQV3b+P8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9293, serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Validity Not Before: Sep 17 02:05:38 2025 GMT Not After : Sep 24 02:05:38 2025 GMT Subject: CN=68ca1772-3308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:91:7d:7d:e5:19:4d:75:fa:87:f3:47:bf: f5:a5:96:5e:c2:db:90:78:f6:64:61:d2:aa:f6:f0: 6c:dd:4e:2f:c0:94:26:dc:a6:97:13:4b:2f:ab:85: 46:7a:31:d3:3d:0d:14:1d:cf:5d:88:22:8c:de:ca: b4:a8:9d:f1:af:84:3f:07:53:ed:ac:52:f8:89:aa: db:2a:3c:a4:d5:30:20:9c:15:fa:1b:33:3a:d2:57: 9a:22:cc:bd:bc:93:2e:36:61:a7:cb:c0:e5:27:9d: 69:88:67:f3:db:28:49:71:bb:9c:18:ce:e3:ae:18: 30:77:67:90:ee:28:f1:8a:d3:8b:dd:0c:7c:83:81: a9:33:6d:90:16:b6:a4:f2:ba:09:3d:3c:a7:8e:c1: fe:5c:35:79:f4:1d:74:31:92:69:24:60:ad:6d:4c: 41:4c:e5:06:cf:69:e5:bb:6e:2e:e4:bb:97:11:fa: 4c:5f:91:d0:42:ef:e8:3d:2d:23:0d:67:c9:b3:e6: 15:e1:85:2c:c2:11:cc:ea:a0:78:3f:2e:56:00:eb: 12:e6:ee:08:c6:54:56:65:b0:86:11:9b:f4:1a:ac: d5:32:73:f5:0d:0c:85:6c:38:18:f1:9b:2d:e1:32: 1b:fc:98:11:71:d4:0f:c2:4a:90:ff:c5:24:ea:24: 99:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EE:0C:0B:A3:F1:9A:B8:CA:3C:2D:D7:B9:3A:FF:40:D3:40:1C:90 X509v3 Authority Key Identifier: keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:27:8e:71:d3:dc:f5:34:f9:4b:d1:6b:c8:14:94:26:aa:9d: be:e7:45:f7:dd:1c:2c:1d:62:ff:04:e5:05:e2:42:b3:b6:54: e2:8a:05:27:c7:bd:5b:ec:4b:99:74:12:b3:da:a9:48:86:0c: 2d:f0:6c:f4:cd:b6:ef:1d:d5:98:79:91:2e:51:15:a7:44:59: 1a:8c:e6:a0:c0:8a:e6:bc:8d:47:5f:8a:25:18:69:48:d0:cc: e0:73:14:45:6e:ea:35:01:1a:9a:6d:3b:0f:f9:44:32:4d:0b: cc:17:bf:cf:f1:48:e8:78:55:75:fd:cf:a2:5e:fd:8a:73:34: ae:3a:63:f8:2d:3d:73:3d:95:a8:53:57:90:f0:f8:d5:c8:ce: dd:4e:12:c7:77:77:e7:39:2b:f0:9c:9d:f4:06:86:94:3c:b5: f0:87:b1:7b:b1:70:85:e8:70:a2:f5:ff:f9:a4:18:f8:d0:25: 94:d7:36:1c:f4:4a:62:d6:3b:ed:e7:7f:c6:d7:69:61:9c:77: de:15:b6:e0:9b:93:45:7c:bc:08:c0:5d:ae:19:5f:f6:b1:d9: c9:da:85:ad:5e:b1:a1:7d:73:2c:6f:bb:d9:d0:24:b7:e3:92: 9c:be:22:c5:ff:f7:bb:6a:9d:d5:1f:3d:1b:4c:db:7f:e4:6a: 9c:3a:f9:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOTMxMTAvBgNVBAUTKDYwMkZGNEZBODBBMDAwQUM2MUU2RDRBQjJGNzJGQkQ5 NkE2MUY4ODIwHhcNMjUwOTE3MDIwNTM4WhcNMjUwOTI0MDIwNTM4WjAYMRYwFAYD VQQDEw02OGNhMTc3Mi0zMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMGRfX3lGU11+ofzR7/1pZZewtuQePZkYdKq9vBs3U4vwJQm3KaXE0svq4VG ejHTPQ0UHc9diCKM3sq0qJ3xr4Q/B1PtrFL4iarbKjyk1TAgnBX6GzM60leaIsy9 vJMuNmGny8DlJ51piGfz2yhJcbucGM7jrhgwd2eQ7ijxitOL3Qx8g4GpM22QFrak 8roJPTynjsH+XDV59B10MZJpJGCtbUxBTOUGz2nlu24u5LuXEfpMX5HQQu/oPS0j DWfJs+YV4YUswhHM6qB4Py5WAOsS5u4IxlRWZbCGEZv0GqzVMnP1DQyFbDgY8Zst 4TIb/JgRcdQPwkqQ/8Uk6iSZGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvuDAuj 8Zq4yjwt17k6/0DTQByQMB8GA1UdIwQYMBaAFGAv9PqAoACsYebUqy9y+9lqYfiC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5My9BOUEzOEJCRTE0 N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FLeGg1dFNyTDNMNzJXcGgt SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDXzAtb0NnQUt4aDV0U3JMM0w3MldwaC1JSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5My9BOUEzOEJCRTE0N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FL eGg1dFNyTDNMNzJXcGgtSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeJ45x09z1NPlL0WvIFJQmqp2+50X33RwsHWL/BOUF4kKztlTiigUn x71b7EuZdBKz2qlIhgwt8Gz0zbbvHdWYeZEuURWnRFkajOagwIrmvI1HX4olGGlI 0MzgcxRFbuo1ARqabTsP+UQyTQvMF7/P8UjoeFV1/c+iXv2KczSuOmP4LT1zPZWo U1eQ8PjVyM7dThLHd3fnOSvwnJ30BoaUPLXwh7F7sXCF6HCi9f/5pBj40CWU1zYc 9Epi1jvt53/G12lhnHfeFbbgm5NFfLwIwF2uGV/2sdnJ2oWtXrGhfXMsb7vZ0CS3 45KcviLF//e7ap3VHz0bTNt/5GqcOvko -----END CERTIFICATE-----Generated at Thu Sep 18 20:20:43 2025 by rpki-client