$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json) Hash identifier: Wb8V585msxoxgui/qMOr4SlvcNasUTpGI5KmHQmK2To= Subject key identifier: 6F:1C:89:6B:FE:72:7A:A3:9C:E4:6D:19:AD:AB:15:30:A4:55:D0:91 Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft Manifest number: 01FF Signing time: Sun 07 Sep 2025 02:42:57 +0000 Manifest this update: Sun 07 Sep 2025 02:42:57 +0000 Manifest next update: Sun 14 Sep 2025 02:42:57 +0000 Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: u874vGSsqt524UG4NUTffMK4nCekrWmQ3OVhVye70MU=) 2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: ADnEMa2Brj1gfAu5du2mdudMmrXS7wa9cPzXrkNiEN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Validity Not Before: Sep 7 02:42:57 2025 GMT Not After : Sep 14 02:42:57 2025 GMT Subject: CN=68bcf131-b2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:be:93:a8:36:d9:39:d8:12:55:5f:fc:b5:93: 73:37:eb:f9:fa:3a:1e:bd:90:f4:f3:49:67:cc:0b: 24:33:aa:53:c8:2a:e1:4c:35:dc:99:a7:d7:87:84: 33:b4:f2:d0:03:f9:0a:6f:b9:1e:31:b6:e2:98:f7: ef:30:20:cd:7f:4c:d0:0f:1a:73:c4:a5:df:8d:73: c4:c2:78:49:c2:94:02:3c:5f:b3:55:a2:8e:b1:9b: f1:df:10:93:ef:f7:a0:f3:c7:01:b9:66:7b:85:79: e2:b0:dc:1a:5a:18:d9:5e:95:ea:62:63:d9:0c:44: f6:e8:ec:5c:31:67:a1:19:4e:ff:15:f8:0a:19:98: 80:81:1f:02:01:ac:5e:6b:30:82:29:8f:e2:ed:aa: d2:d2:e5:35:68:eb:ee:4b:9f:54:e6:63:30:e2:5c: a3:d8:19:60:41:f3:0a:6e:fc:66:24:83:c6:13:47: ed:8b:bf:b4:46:ca:17:18:81:1a:a5:80:c7:8a:36: 4d:7e:88:8d:54:9d:c1:a6:9d:1b:d9:e8:20:05:c0: 14:af:de:97:33:d0:19:30:4a:a3:24:84:21:a8:eb: be:2d:a4:68:e6:06:92:4a:93:13:6f:20:ad:08:af: 09:57:69:54:4c:c8:6c:9f:9c:74:85:90:bf:6b:68: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1C:89:6B:FE:72:7A:A3:9C:E4:6D:19:AD:AB:15:30:A4:55:D0:91 X509v3 Authority Key Identifier: keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:77:e7:30:c9:19:e7:79:bc:70:95:e1:e0:a1:01:21:b8:dc: e4:6f:b9:65:f0:3b:74:21:21:31:2a:3b:1a:d3:a7:9b:91:df: d0:1d:bc:92:aa:ad:89:80:8d:45:e0:a1:6b:29:41:0d:02:95: f8:e2:b7:f9:ba:04:17:ad:7d:c6:e8:1b:e1:c8:cc:c1:e3:8e: 7d:e4:a9:80:57:14:6e:12:bb:b6:48:22:84:3a:bc:32:d5:cd: 7b:c9:78:f6:56:be:53:d9:dc:a2:c2:68:45:35:2f:9d:96:e1: 4d:c0:37:e6:6c:f7:92:c4:70:d5:ca:e5:58:86:b8:56:f7:84: 7e:20:6a:73:b1:3a:ab:a9:16:25:cc:3d:4f:2b:90:ee:22:d4: 55:4b:d4:2d:1a:eb:a6:c1:29:e6:cd:51:94:94:c7:98:14:e9: 4b:1f:48:1d:d4:d8:b4:2c:2c:45:13:28:be:09:bd:0d:eb:24: 06:f9:d0:b0:0d:67:3e:6e:d8:4d:0e:1a:31:9b:83:5b:a4:05: 94:21:8d:05:aa:f2:6c:59:d7:df:97:fa:44:74:cf:c1:0a:35: 87:48:2c:bd:e7:17:7e:63:49:59:10:58:54:50:08:9a:e3:76: 94:36:7d:2c:03:f8:95:79:96:46:be:9a:ec:bb:ed:d7:ac:fe: 74:68:df:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMzkxMTAvBgNVBAUTKENBQzM0REM1QjhEREQzM0IxN0VDNzU1Qzk1RDQ1RDBG NzYyNTBGQTgwHhcNMjUwOTA3MDI0MjU3WhcNMjUwOTE0MDI0MjU3WjAYMRYwFAYD VQQDEw02OGJjZjEzMS1iMmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA476TqDbZOdgSVV/8tZNzN+v5+joevZD080lnzAskM6pTyCrhTDXcmafXh4Qz tPLQA/kKb7keMbbimPfvMCDNf0zQDxpzxKXfjXPEwnhJwpQCPF+zVaKOsZvx3xCT 7/eg88cBuWZ7hXnisNwaWhjZXpXqYmPZDET26OxcMWehGU7/FfgKGZiAgR8CAaxe azCCKY/i7arS0uU1aOvuS59U5mMw4lyj2BlgQfMKbvxmJIPGE0fti7+0RsoXGIEa pYDHijZNfoiNVJ3Bpp0b2eggBcAUr96XM9AZMEqjJIQhqOu+LaRo5gaSSpMTbyCt CK8JV2lUTMhsn5x0hZC/a2iiYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8ciWv+ cnqjnORtGa2rFTCkVdCRMB8GA1UdIwQYMBaAFMrDTcW43dM7F+x1XJXUXQ92JQ+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzOS9CNjE1RDBCQzdC NUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6c1g3SFZjbGRSZEQzWWxE NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzTk54YmpkMHpzWDdIVmNsZFJkRDNZbEQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIzOS9CNjE1RDBCQzdCNUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6 c1g3SFZjbGRSZEQzWWxENmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhd+cwyRnnebxwleHgoQEhuNzkb7ll8Dt0ISExKjsa06ebkd/QHbyS qq2JgI1F4KFrKUENApX44rf5ugQXrX3G6BvhyMzB44595KmAVxRuEru2SCKEOrwy 1c17yXj2Vr5T2dyiwmhFNS+dluFNwDfmbPeSxHDVyuVYhrhW94R+IGpzsTqrqRYl zD1PK5DuItRVS9QtGuumwSnmzVGUlMeYFOlLH0gd1Ni0LCxFEyi+Cb0N6yQG+dCw DWc+bthNDhoxm4NbpAWUIY0FqvJsWdffl/pEdM/BCjWHSCy95xd+Y0lZEFhUUAia 43aUNn0sA/iVeZZGvprsu+3XrP50aN9C -----END CERTIFICATE-----Generated at Sun Sep 7 14:28:16 2025 by rpki-client