$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: DvHUqv952CFgwQl0NCB3F5otL+eSfhl5sLgKVAh3MhY= Subject key identifier: E1:EE:EB:FB:09:83:5A:FA:A0:A8:0B:F8:B1:43:D9:B9:D6:26:8C:EF Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 02E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 02DD Signing time: Fri 19 Sep 2025 01:45:32 +0000 Manifest this update: Fri 19 Sep 2025 01:45:31 +0000 Manifest next update: Fri 26 Sep 2025 01:45:31 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: 14W4QrxjGMKc5cspZAmlX437vrJhnICFTlNJbbBm4yo=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: 9MRdrfgCzJPWi60WfDAHGFIjA+2Au5PPZv6A0PmrENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: Sep 19 01:45:31 2025 GMT Not After : Sep 26 01:45:31 2025 GMT Subject: CN=68ccb5bb-01ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:32:9a:42:14:16:d9:8b:fb:72:19:8b:8d:f9: 90:99:58:ad:f1:47:b2:80:42:76:16:09:90:dd:ae: d1:3d:c9:d2:9b:e0:59:ac:d5:47:68:71:2a:87:e7: 51:cd:f8:7c:8f:0c:d3:b1:50:ab:be:4b:08:83:6a: 3b:7a:43:1d:cd:1b:ee:ce:71:6c:5d:73:a8:ce:0f: 3f:cf:f1:0a:b0:bc:84:40:95:ad:bf:79:71:87:46: ae:a2:e4:ed:70:ce:b9:e3:56:f1:68:9c:fd:e4:5a: a7:3f:ba:51:dd:4d:b8:3b:aa:e1:da:0f:f1:15:c4: c1:40:69:cb:49:e3:3f:bd:2b:f9:7b:f9:79:0c:d6: 2e:ab:a5:fc:be:3d:d1:83:f3:c6:68:97:23:5e:75: 17:b9:80:5c:57:98:f4:53:76:06:67:ee:e4:55:2d: 40:2e:26:1b:cf:dc:1c:a0:71:4f:a4:c2:08:65:39: 56:83:1a:24:06:3f:3f:5a:78:86:3d:81:13:06:7e: a0:f2:76:7b:30:8a:21:25:83:66:3f:42:cb:f4:10: f2:c0:1c:af:02:d0:ac:be:a7:8a:a8:52:19:e7:08: 66:64:a7:a0:24:63:33:55:09:c4:8a:f9:3a:7f:88: 38:d0:4a:fd:64:88:37:4a:88:68:94:79:58:ec:6b: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EE:EB:FB:09:83:5A:FA:A0:A8:0B:F8:B1:43:D9:B9:D6:26:8C:EF X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:48:8e:4b:b2:ee:69:93:62:7c:f7:d5:b8:18:25:db:c8:4b: ec:78:1d:4c:76:66:55:93:35:db:ba:3d:8e:b9:a8:fc:7c:01: 55:65:84:fd:14:44:c3:3a:95:04:59:ee:4b:31:6b:e8:1c:42: 62:f5:03:13:71:90:d3:f5:06:9e:6b:4b:b8:9e:31:e6:57:60: 49:e1:47:2d:0c:db:5c:59:07:86:e5:32:23:d5:d6:6b:e1:ae: 3b:73:fc:10:f1:e5:cb:69:af:cb:04:b7:23:4d:11:c1:2d:87: 92:e8:ef:b4:5e:a4:e3:fb:34:cc:b9:bb:40:df:92:f4:81:e0: b0:a4:74:c9:bd:ed:a9:ff:78:5d:c0:19:78:84:b8:07:66:93: 2c:0f:d5:3a:3e:61:35:9e:ad:a6:82:c6:85:79:86:0c:27:10: 7b:b3:4e:b8:6e:c2:36:32:e1:3a:91:f7:39:c4:19:bf:b9:6f: e9:bf:de:78:f3:ec:cd:50:08:be:b5:f6:0d:86:21:35:d0:87: a6:fb:b5:0b:4b:a7:5b:09:5f:b6:c7:c8:0f:0c:f3:69:b2:a4: 3a:14:2d:6b:58:43:d8:f6:68:fd:55:87:25:93:30:82:fb:73: 3d:58:2c:31:d0:99:b9:0d:b3:98:0b:a0:8c:66:cf:0d:43:ec: 6d:c7:9d:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjUwOTE5MDE0NTMxWhcNMjUwOTI2MDE0NTMxWjAYMRYwFAYD VQQDEw02OGNjYjViYi0wMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjKaQhQW2Yv7chmLjfmQmVit8UeygEJ2FgmQ3a7RPcnSm+BZrNVHaHEqh+dR zfh8jwzTsVCrvksIg2o7ekMdzRvuznFsXXOozg8/z/EKsLyEQJWtv3lxh0auouTt cM6541bxaJz95FqnP7pR3U24O6rh2g/xFcTBQGnLSeM/vSv5e/l5DNYuq6X8vj3R g/PGaJcjXnUXuYBcV5j0U3YGZ+7kVS1ALiYbz9wcoHFPpMIIZTlWgxokBj8/WniG PYETBn6g8nZ7MIohJYNmP0LL9BDywByvAtCsvqeKqFIZ5whmZKegJGMzVQnEivk6 f4g40Er9ZIg3SoholHlY7GsZTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHu6/sJ g1r6oKgL+LFD2bnWJozvMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMSI5Lsu5pk2J899W4GCXbyEvseB1MdmZVkzXbuj2Ouaj8fAFVZYT9 FETDOpUEWe5LMWvoHEJi9QMTcZDT9Qaea0u4njHmV2BJ4UctDNtcWQeG5TIj1dZr 4a47c/wQ8eXLaa/LBLcjTRHBLYeS6O+0XqTj+zTMubtA35L0geCwpHTJve2p/3hd wBl4hLgHZpMsD9U6PmE1nq2mgsaFeYYMJxB7s064bsI2MuE6kfc5xBm/uW/pv954 8+zNUAi+tfYNhiE10Iem+7ULS6dbCV+2x8gPDPNpsqQ6FC1rWEPY9mj9VYclkzCC +3M9WCwx0Jm5DbOYC6CMZs8NQ+xtx52D -----END CERTIFICATE-----Generated at Fri Sep 19 05:36:45 2025 by rpki-client