$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft File: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft (raw, json) Hash identifier: dTcl5GI02LTAoTR/M2xbl9Bkpz4tUO3RZBHtqUDoIUo= Subject key identifier: CD:5E:A9:81:F1:9E:7B:BB:03:62:4B:FA:BD:F2:0B:51:26:49:BE:1A Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74 Certificate issuer: /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft Manifest number: 0D Signing time: Wed 17 Sep 2025 08:49:59 +0000 Manifest this update: Wed 17 Sep 2025 08:49:59 +0000 Manifest next update: Wed 24 Sep 2025 08:49:59 +0000 Files and hashes: 1: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl (hash: XyzyaPM6HVXc19qay6szGGl+KZir4gQ67C1FHNpnOYE=) 2: C9BCEBBE836D11F080B9106BC4F9AE02.roa (hash: cBHJ8P4h257b9ER1avgQwPugIdQzEqvKOiFND3PjXQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74 Validity Not Before: Sep 17 08:49:59 2025 GMT Not After : Sep 24 08:49:59 2025 GMT Subject: CN=68ca7637-57bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:92:97:65:48:c8:b2:af:8a:d0:d8:71:11:25: e5:5b:02:cb:2c:45:0e:6e:cd:d9:5c:99:12:11:4d: 51:8e:c1:43:d6:50:c3:ee:80:a4:05:0c:96:dc:7d: 1c:7e:7e:af:3d:74:1e:d2:f5:b9:ff:3e:77:30:cb: 74:19:f6:0d:5d:be:cf:8b:86:4d:5f:ed:b6:29:b2: 4d:cc:09:c6:9f:c2:8c:21:31:90:73:b7:09:77:97: be:4a:d5:37:4f:d6:5f:a3:1b:b6:e7:e4:d4:dd:3b: f3:f8:db:ec:88:eb:6c:45:26:12:a6:0b:98:d1:bd: d9:be:90:66:e8:c4:54:3f:d2:a9:c2:51:43:58:9f: ea:e8:dc:c7:20:f5:f2:22:99:fa:2c:ee:13:cd:24: af:46:e2:08:57:1f:b1:c3:3f:58:50:8c:a9:f0:89: 55:b0:eb:0d:7a:26:71:1d:0b:c2:ce:f9:c4:82:22: 9a:9b:43:0e:26:5e:c5:d4:d7:55:21:20:74:68:54: 25:e4:a0:60:68:b9:40:f2:27:e5:83:e8:e8:14:a3: 80:2f:41:1c:e2:6e:0d:b1:99:75:92:a3:b2:5d:d7: 29:d2:94:ff:19:34:0c:eb:eb:7d:be:37:b2:1c:0e: 91:71:88:9e:a3:81:3c:a8:78:b6:e7:80:2c:a3:c6: 28:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:A9:81:F1:9E:7B:BB:03:62:4B:FA:BD:F2:0B:51:26:49:BE:1A X509v3 Authority Key Identifier: keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:3f:1f:d3:28:61:c2:c1:ee:a8:b2:a0:bc:48:a0:7c:fa:a8: 06:4c:79:aa:a4:61:49:0a:d8:6d:a8:d8:b1:b3:ef:91:1d:96: 2b:07:3b:3d:da:99:a2:a8:4b:6a:67:64:4b:b2:26:d7:26:9b: d4:8f:d7:c8:af:77:da:cd:08:f1:37:9f:a2:69:d4:e2:a8:b9: 0e:5a:d3:e7:d6:4e:65:b3:a0:af:8b:ba:10:9c:72:cb:fd:0f: e0:20:78:3a:1a:4a:fb:b1:de:af:d1:22:04:ef:99:16:0a:c5: 06:17:e2:e2:8f:ea:a6:d3:62:b7:d9:c0:44:f2:ea:27:c3:bb: 9a:f3:c1:85:88:92:8c:c1:51:63:69:1c:e4:1c:d3:9f:32:54: 56:ac:b7:78:6f:2c:b6:a6:26:c5:7d:52:bf:48:53:b8:ff:d8: f2:ce:75:91:3a:eb:0f:85:95:8f:88:e3:c0:cb:d4:f1:43:db: c7:36:1b:ad:1a:3c:02:53:fa:e8:ef:86:1e:52:e7:e6:8d:65: a6:a3:59:f7:6f:47:2c:42:71:ae:7d:a0:f9:11:33:ff:7e:ff: d4:1b:c5:33:77:97:87:05:fd:b6:66:ec:d2:07:e2:f7:f3:ac: ff:b2:41:34:05:d5:b6:a8:83:99:85:38:e5:ba:99:9c:f1:8a: 60:ee:eb:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RkQ0QzExMC8GA1UEBRMoNjM4MzNBMjQxRTNFNDk1OUVCQTE5QzcwMUQwNDg4N0RC NEIxRkM3NDAeFw0yNTA5MTcwODQ5NTlaFw0yNTA5MjQwODQ5NTlaMBgxFjAUBgNV BAMTDTY4Y2E3NjM3LTU3YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdkpdlSMiyr4rQ2HERJeVbAsssRQ5uzdlcmRIRTVGOwUPWUMPugKQFDJbcfRx+ fq89dB7S9bn/Pncwy3QZ9g1dvs+Lhk1f7bYpsk3MCcafwowhMZBztwl3l75K1TdP 1l+jG7bn5NTdO/P42+yI62xFJhKmC5jRvdm+kGboxFQ/0qnCUUNYn+ro3Mcg9fIi mfos7hPNJK9G4ghXH7HDP1hQjKnwiVWw6w16JnEdC8LO+cSCIpqbQw4mXsXU11Uh IHRoVCXkoGBouUDyJ+WD6OgUo4AvQRzibg2xmXWSo7Jd1ynSlP8ZNAzr632+N7Ic DpFxiJ6jgTyoeLbngCyjxij5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzV6pgfGe e7sDYkv6vfILUSZJvhowHwYDVR0jBBgwFoAUY4M6JB4+SVnroZxwHQSIfbSx/HQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGRDRDLzU2RUMzRDlDODM2 RDExRjA4ODE2MDA2QUM0RjlBRTAyL1k0TTZKQjQtU1Zucm9aeHdIUVNJZmJTeF9I US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTRNNkpCNC1TVm5yb1p4d0hRU0lmYlN4X0hRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG RDRDLzU2RUMzRDlDODM2RDExRjA4ODE2MDA2QUM0RjlBRTAyL1k0TTZKQjQtU1Zu cm9aeHdIUVNJZmJTeF9IUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHg/H9MoYcLB7qiyoLxIoHz6qAZMeaqkYUkK2G2o2LGz75EdlisHOz3a maKoS2pnZEuyJtcmm9SP18ivd9rNCPE3n6Jp1OKouQ5a0+fWTmWzoK+LuhCccsv9 D+AgeDoaSvux3q/RIgTvmRYKxQYX4uKP6qbTYrfZwETy6ifDu5rzwYWIkozBUWNp HOQc058yVFast3hvLLamJsV9Ur9IU7j/2PLOdZE66w+FlY+I48DL1PFD28c2G60a PAJT+ujvhh5S5+aNZaajWfdvRyxCca59oPkRM/9+/9QbxTN3l4cF/bZm7NIH4vfz rP+yQTQF1baog5mFOOW6mZzximDu62s= -----END CERTIFICATE-----Generated at Fri Sep 19 00:56:41 2025 by rpki-client