$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: YwQ4lCqdlxZWkX3emdhsOM0U1hfGzNjWu9nHXUz1j9k= Subject key identifier: F8:77:3F:A1:06:0E:29:7F:01:D0:E2:B5:A9:FA:A8:7B:C2:97:3F:85 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0A8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 1198 Signing time: Wed 20 Aug 2025 19:38:09 +0000 Manifest this update: Wed 20 Aug 2025 19:38:09 +0000 Manifest next update: Wed 27 Aug 2025 19:38:08 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: WHunVTPreRKsEtzO5fVQV5naSiWjN1uOj7mxvF8HyJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2700 (0xa8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Aug 20 19:38:09 2025 GMT Not After : Aug 27 19:38:08 2025 GMT Subject: CN=68a62421-5abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:c3:5f:90:d2:6b:d1:5c:50:68:fe:de:ad: 7c:9f:40:a6:fe:33:3f:18:97:67:05:e8:ea:6e:ba: 97:44:1f:c2:eb:0a:3e:37:ea:a0:a4:da:a6:c8:89: 13:2a:7c:c2:10:31:c9:0f:24:14:ab:7c:cf:e4:cb: 61:c3:68:96:60:3f:9e:0f:47:c7:1d:90:be:54:95: f7:cb:b9:bb:2e:ae:be:10:e8:1d:ca:27:a4:3a:88: 8e:55:16:57:ae:e5:82:fc:9f:62:ef:da:68:c4:5e: 0b:43:6b:13:1e:bc:28:54:ae:12:80:d5:c9:7d:d3: 5c:58:bc:60:3b:89:bd:9b:8f:dd:2c:8d:94:8a:74: c6:b2:d0:80:72:b9:11:4d:ae:41:3b:b6:26:5a:b4: b6:f5:c9:89:4a:80:76:bc:71:53:fb:10:7d:52:6c: 22:01:7a:59:52:52:56:67:d5:7f:fa:9c:bf:c8:7d: 43:99:19:c1:ce:7a:ec:ad:7a:2b:29:09:a2:de:fd: c9:fb:4c:3d:05:32:17:6c:d4:9e:3b:1d:b7:5f:4e: 16:e8:85:9f:87:8e:f2:be:13:b6:c7:b9:54:fe:1e: 07:0f:dd:e8:58:46:2a:19:23:68:10:03:ec:5b:ea: 40:5e:c3:17:32:5f:3d:34:80:66:20:e5:47:97:85: 0e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:77:3F:A1:06:0E:29:7F:01:D0:E2:B5:A9:FA:A8:7B:C2:97:3F:85 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:03:a4:86:be:02:1e:a3:ae:98:c8:16:1a:d0:98:55:09:a9: 99:eb:d1:46:73:b1:86:bc:a1:7c:36:3e:cc:88:a8:b2:85:20: 2c:a6:d1:b6:c0:31:e7:22:66:0f:a1:d3:d1:cb:a1:f7:a3:42: 09:b1:35:46:ed:06:53:77:83:20:12:47:f1:ec:c4:1b:31:5c: 24:51:cc:dc:70:40:bc:1f:70:19:03:f7:36:0b:84:ba:10:83: 16:64:e2:01:d0:3c:7f:f2:ad:ae:a4:38:ef:46:4d:51:30:0a: 9e:72:0e:47:1b:16:bd:e7:b5:ee:6d:23:ca:43:96:47:cb:dd: c8:08:a2:68:09:68:50:86:1c:7c:17:6e:42:14:9a:03:fd:59: 40:69:06:2e:0a:48:4d:29:e4:03:55:7f:b4:3a:23:34:5d:dc: 9f:d3:e0:4a:79:cb:fe:c2:5f:8b:93:13:ec:dc:3b:bd:d9:d8: 08:37:96:21:2f:a1:34:e1:85:40:3f:15:04:41:97:09:07:a1: 88:50:05:a8:2c:b3:a6:70:dc:57:de:0a:c5:5c:65:47:1f:a3: df:8b:d2:1e:ab:33:e9:61:46:58:bc:79:fd:6e:63:c2:a1:6c: ce:9d:be:e1:a8:f2:1e:dd:84:36:bf:40:fb:1c:bc:56:41:30: 53:ad:4e:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUwODIwMTkzODA5WhcNMjUwODI3MTkzODA4WjAYMRYwFAYD VQQDEw02OGE2MjQyMS01YWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSXDX5DSa9FcUGj+3q18n0Cm/jM/GJdnBejqbrqXRB/C6wo+N+qgpNqmyIkT KnzCEDHJDyQUq3zP5Mthw2iWYD+eD0fHHZC+VJX3y7m7Lq6+EOgdyiekOoiOVRZX ruWC/J9i79poxF4LQ2sTHrwoVK4SgNXJfdNcWLxgO4m9m4/dLI2UinTGstCAcrkR Ta5BO7YmWrS29cmJSoB2vHFT+xB9UmwiAXpZUlJWZ9V/+py/yH1DmRnBznrsrXor KQmi3v3J+0w9BTIXbNSeOx23X04W6IWfh47yvhO2x7lU/h4HD93oWEYqGSNoEAPs W+pAXsMXMl89NIBmIOVHl4UOnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPh3P6EG Dil/AdDitan6qHvClz+FMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeA6SGvgIeo66YyBYa0JhVCamZ69FGc7GGvKF8Nj7MiKiyhSAsptG2 wDHnImYPodPRy6H3o0IJsTVG7QZTd4MgEkfx7MQbMVwkUczccEC8H3AZA/c2C4S6 EIMWZOIB0Dx/8q2upDjvRk1RMAqecg5HGxa957XubSPKQ5ZHy93ICKJoCWhQhhx8 F25CFJoD/VlAaQYuCkhNKeQDVX+0OiM0Xdyf0+BKecv+wl+LkxPs3Du92dgIN5Yh L6E04YVAPxUEQZcJB6GIUAWoLLOmcNxX3grFXGVHH6Pfi9IeqzPpYUZYvHn9bmPC oWzOnb7hqPIe3YQ2v0D7HLxWQTBTrU4g -----END CERTIFICATE-----Generated at Fri Aug 22 16:32:11 2025 by rpki-client