$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json) Hash identifier: hJL+uFfsugPshy2LrdcbCFBKvn374UnOV8xwMO9+T6o= Subject key identifier: 9E:2C:F4:75:FE:DD:85:A7:53:6B:5B:75:4E:F1:CB:94:C9:B1:7C:CE Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Certificate serial: 06FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft Manifest number: 1691 Signing time: Thu 18 Sep 2025 17:41:41 +0000 Manifest this update: Thu 18 Sep 2025 17:41:41 +0000 Manifest next update: Thu 25 Sep 2025 17:41:41 +0000 Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: sgBebIRguR9J3Xaf2EdBAejXXV1MOE5FzkCZ7ulk4gA=) 2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: xyf+NgV/qzZzzx4oyqEQT3Z/16fLP6Y40HqsQl4nZiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1786 (0x6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Validity Not Before: Sep 18 17:41:41 2025 GMT Not After : Sep 25 17:41:41 2025 GMT Subject: CN=68cc4455-a8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:9b:a9:5a:0d:53:54:2d:54:06:f8:2f:6b: 79:a2:a6:d5:1a:60:7c:d3:5b:31:d6:b3:1e:14:c1: 85:86:be:1c:a7:59:9c:f0:67:37:80:4b:a9:b4:4d: 44:20:8d:de:c5:2f:01:a3:7b:df:9f:69:c1:73:c1: 10:6e:04:8b:0c:ae:36:ae:68:2d:3a:11:d2:5d:a6: f9:41:31:76:8e:29:18:25:6d:b6:7b:bc:81:b0:84: 1c:e7:2b:2f:b1:2d:1e:e0:b6:51:b5:70:52:0c:e2: 49:8c:8e:4a:81:fc:1a:47:fa:e5:1c:e4:52:bb:e2: 42:a3:e3:2d:d3:87:c7:a8:95:cd:2a:ea:77:45:50: 5c:ca:0b:8a:3c:67:8e:3c:d0:32:4b:4a:d2:b5:f8: 76:78:66:9e:65:d2:2f:ff:1f:60:77:dd:e9:b7:f4: 5c:0e:0e:e4:a6:8d:a7:6b:8a:86:a4:9e:75:c1:bf: b5:b0:6c:7b:a6:80:b7:e8:75:3c:85:73:a2:ff:f1: 81:e6:25:d1:dd:2d:1e:b2:5e:51:9d:10:1e:bd:b1: 72:b9:22:f9:5b:87:79:4a:b3:ea:e5:9c:4e:bb:0a: 81:14:33:77:72:98:8c:1e:48:1b:1f:bd:79:8e:6e: 60:5a:5c:f0:be:31:a3:62:ca:af:8b:16:d7:96:c9: 77:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2C:F4:75:FE:DD:85:A7:53:6B:5B:75:4E:F1:CB:94:C9:B1:7C:CE X509v3 Authority Key Identifier: keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:03:84:f3:21:70:67:35:a2:d8:40:74:fc:19:16:73:33:76: be:ca:c7:98:7e:33:04:df:ea:d0:65:86:7b:75:33:95:4b:12: 15:d4:77:27:99:7e:71:27:c3:69:c6:fe:68:eb:64:e6:aa:17: 71:5f:d7:62:4f:21:9a:64:2e:7f:fc:d3:30:d9:00:59:fa:34: ef:6e:fd:7f:fe:e1:01:52:d9:dc:b9:cf:48:04:7d:28:c6:b8: 29:83:49:72:63:68:02:47:31:a9:51:59:58:43:ff:e7:8b:09: 35:3e:18:62:34:69:9f:a7:63:c2:63:0d:e9:73:4b:e9:a0:9e: b1:32:c9:e4:59:a7:b2:24:ab:a7:4f:8d:57:63:c9:df:5c:c3: e9:8d:a4:4e:0c:a0:18:0f:66:4c:20:60:71:fd:5a:04:c9:86: f4:fa:df:6f:3e:2f:75:de:00:32:9d:cf:31:3e:e4:59:6e:49: f8:3a:2d:04:f5:60:df:93:1c:a8:c5:bb:47:63:fa:5f:cb:f3: 1c:0b:96:89:68:49:13:c4:b4:f4:c9:46:c5:a0:79:1b:98:92: 63:06:c3:4d:eb:6c:b6:0b:40:0d:a9:4a:d1:2e:00:28:d5:db: a0:64:9f:bb:58:ba:53:e9:fa:5a:61:47:88:ae:b0:be:de:74: 08:07:fd:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKEM5OTA1REU1MjQ4NkI5RUM0RUY4NzlBMDI2NDQ1Qzcw QjBGRDk1MDUwHhcNMjUwOTE4MTc0MTQxWhcNMjUwOTI1MTc0MTQxWjAYMRYwFAYD VQQDEw02OGNjNDQ1NS1hOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNmbqVoNU1QtVAb4L2t5oqbVGmB801sx1rMeFMGFhr4cp1mc8Gc3gEuptE1E II3exS8Bo3vfn2nBc8EQbgSLDK42rmgtOhHSXab5QTF2jikYJW22e7yBsIQc5ysv sS0e4LZRtXBSDOJJjI5KgfwaR/rlHORSu+JCo+Mt04fHqJXNKup3RVBcyguKPGeO PNAyS0rStfh2eGaeZdIv/x9gd93pt/RcDg7kpo2na4qGpJ51wb+1sGx7poC36HU8 hXOi//GB5iXR3S0esl5RnRAevbFyuSL5W4d5SrPq5ZxOuwqBFDN3cpiMHkgbH715 jm5gWlzwvjGjYsqvixbXlsl34wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4s9HX+ 3YWnU2tbdU7xy5TJsXzOMB8GA1UdIwQYMBaAFMmQXeUkhrnsTvh5oCZEXHCw/ZUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3VleE8tSG1nSmtSY2NMRDls UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laQmQ1U1NHdWV4Ty1IbWdKa1JjY0xEOWxRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3Vl eE8tSG1nSmtSY2NMRDlsUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5A4TzIXBnNaLYQHT8GRZzM3a+yseYfjME3+rQZYZ7dTOVSxIV1Hcn mX5xJ8Npxv5o62TmqhdxX9diTyGaZC5//NMw2QBZ+jTvbv1//uEBUtncuc9IBH0o xrgpg0lyY2gCRzGpUVlYQ//niwk1PhhiNGmfp2PCYw3pc0vpoJ6xMsnkWaeyJKun T41XY8nfXMPpjaRODKAYD2ZMIGBx/VoEyYb0+t9vPi913gAync8xPuRZbkn4Oi0E 9WDfkxyoxbtHY/pfy/McC5aJaEkTxLT0yUbFoHkbmJJjBsNN62y2C0ANqUrRLgAo 1dugZJ+7WLpT6fpaYUeIrrC+3nQIB/2k -----END CERTIFICATE-----Generated at Fri Sep 19 07:12:53 2025 by rpki-client