$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft File: YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json) Hash identifier: DyrQXtQzt/tyT0MFzGd+oWku4XX+bMQ/ZmdpsXVF37k= Subject key identifier: CF:A5:30:AF:6E:4D:12:30:06:7F:22:62:A3:1B:39:75:57:5E:C0:65 Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00 Certificate issuer: /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft Manifest number: A2 Signing time: Thu 21 Aug 2025 06:26:24 +0000 Manifest this update: Thu 21 Aug 2025 06:26:24 +0000 Manifest next update: Thu 28 Aug 2025 06:26:24 +0000 Files and hashes: 1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: ZnDUjY2Aor1q2V9JFFTWBTwk7mL5uXM/74zoedxdbv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=611E1C149528F17A0EC799C39D562619C9A15100 Validity Not Before: Aug 21 06:26:24 2025 GMT Not After : Aug 28 06:26:24 2025 GMT Subject: CN=68a6bc10-7e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:c2:b1:a1:26:3a:de:f2:d7:b1:8a:7e:f7: 12:6a:2d:2d:c9:23:21:8b:8d:ea:ba:d9:3b:43:c5: 0d:02:cc:a1:89:1e:a5:46:a7:50:8d:07:80:66:c6: 22:4e:85:27:3c:29:fa:b8:72:ea:b7:0b:87:f8:43: c7:e4:b3:da:00:9b:8b:ef:d6:3f:bf:94:7d:41:57: 8b:2b:1a:50:22:68:98:6d:ad:53:6b:1d:ee:6a:4f: 28:5f:e7:fd:f9:e1:26:48:4a:6b:aa:a7:fe:c4:90: 1c:92:80:90:86:61:68:5f:18:95:62:3e:86:5d:bc: aa:a4:8e:88:51:84:f1:63:66:a1:e3:44:45:25:b5: 26:20:b4:f1:06:09:d9:60:71:16:c8:3d:06:db:83: 7e:a9:f3:5a:f8:14:54:87:cc:bd:e0:bf:eb:c3:d9: 9d:c4:69:eb:7d:8d:83:fe:33:65:9b:96:0f:6f:b7: d7:ef:3f:b7:90:ac:f9:ab:54:57:72:bd:5b:0f:90: 92:41:2c:d3:c4:9a:bc:f3:51:de:b8:61:be:6e:ed: 84:87:fa:b4:92:68:eb:b7:c2:f3:e6:31:99:d5:ab: ca:b8:ab:d1:14:b3:7e:29:69:3d:17:1a:c2:b6:57: 4a:e0:d8:ed:ca:a2:5f:8b:6b:1e:17:13:73:67:41: e9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A5:30:AF:6E:4D:12:30:06:7F:22:62:A3:1B:39:75:57:5E:C0:65 X509v3 Authority Key Identifier: keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:66:fd:94:68:20:ae:9c:78:3e:78:7d:e7:3c:b6:1d:42:d9: fe:c0:0f:ad:1c:c4:26:42:2f:c8:cf:86:5d:a2:10:6e:85:73: 99:51:92:12:d7:42:d4:9e:40:f7:ff:e2:64:ca:a2:19:ec:e3: 78:95:c1:ef:62:17:06:cd:40:d6:11:18:53:0a:bc:9e:b4:c8: 48:de:17:fc:12:97:4e:a8:0c:78:50:d5:40:61:94:98:a5:19: 3d:4f:30:b1:29:3e:29:b6:15:ca:a7:c8:37:d8:d0:da:dc:92: 6a:e4:23:5b:98:0b:e4:d8:4f:e7:9d:a0:d6:1b:b0:78:b7:25: b8:f3:8e:58:de:aa:e2:ef:ae:ce:44:d6:c2:29:92:1e:1b:5d: 01:41:aa:b8:a4:33:56:f9:1b:7f:d6:01:41:21:d8:3d:74:39: 55:da:da:98:44:f8:6c:8b:58:30:ab:06:ba:49:39:e9:89:17: 39:73:0d:de:8f:ee:1a:34:fe:30:9c:87:6c:13:23:4b:b8:f3: 74:ed:10:e9:12:89:3c:98:f2:c7:c8:8c:d2:9d:16:3f:d6:2c: 53:e8:2e:17:0c:ce:22:95:05:0c:0b:9d:3c:91:f2:76:f8:05: 47:eb:32:a8:12:9a:d1:c7:a9:ef:cb:8f:48:60:39:3b:1f:a0: ed:cc:16:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDYxMUUxQzE0OTUyOEYxN0EwRUM3OTlDMzlENTYyNjE5 QzlBMTUxMDAwHhcNMjUwODIxMDYyNjI0WhcNMjUwODI4MDYyNjI0WjAYMRYwFAYD VQQDEw02OGE2YmMxMC03ZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsPCsaEmOt7y17GKfvcSai0tySMhi43qutk7Q8UNAsyhiR6lRqdQjQeAZsYi ToUnPCn6uHLqtwuH+EPH5LPaAJuL79Y/v5R9QVeLKxpQImiYba1Tax3uak8oX+f9 +eEmSEprqqf+xJAckoCQhmFoXxiVYj6GXbyqpI6IUYTxY2ah40RFJbUmILTxBgnZ YHEWyD0G24N+qfNa+BRUh8y94L/rw9mdxGnrfY2D/jNlm5YPb7fX7z+3kKz5q1RX cr1bD5CSQSzTxJq881HeuGG+bu2Eh/q0kmjrt8Lz5jGZ1avKuKvRFLN+KWk9FxrC tldK4NjtyqJfi2seFxNzZ0HpowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+lMK9u TRIwBn8iYqMbOXVXXsBlMB8GA1UdIwQYMBaAFGEeHBSVKPF6DseZw51WJhnJoVEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81RTA3MkFGRTg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhYb094NW5EblZZbUdjbWhV UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSNGNGSlVvOFhvT3g1bkRuVlltR2NtaFVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81RTA3MkFGRTg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhY b094NW5EblZZbUdjbWhVUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCZv2UaCCunHg+eH3nPLYdQtn+wA+tHMQmQi/Iz4ZdohBuhXOZUZIS 10LUnkD3/+JkyqIZ7ON4lcHvYhcGzUDWERhTCryetMhI3hf8EpdOqAx4UNVAYZSY pRk9TzCxKT4pthXKp8g32NDa3JJq5CNbmAvk2E/nnaDWG7B4tyW4845Y3qri767O RNbCKZIeG10BQaq4pDNW+Rt/1gFBIdg9dDlV2tqYRPhsi1gwqwa6STnpiRc5cw3e j+4aNP4wnIdsEyNLuPN07RDpEok8mPLHyIzSnRY/1ixT6C4XDM4ilQUMC508kfJ2 +AVH6zKoEprRx6nvy49IYDk7H6DtzBZz -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:04 2025 by rpki-client