$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft File: YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json) Hash identifier: gJIHH1bUmq8rvREP6EhWyxr/sKJxEuopAmkrRa3zq5k= Subject key identifier: D6:C7:BF:A8:82:4F:6D:90:4D:27:16:AF:E5:72:91:00:7F:EA:B5:3A Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC Certificate issuer: /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft Manifest number: 7A Signing time: Fri 05 Sep 2025 07:14:07 +0000 Manifest this update: Fri 05 Sep 2025 07:14:07 +0000 Manifest next update: Fri 12 Sep 2025 07:14:07 +0000 Files and hashes: 1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: LtA3SH2Qml9HpF5JXCX+jv7ciXWybvHGXY1nCRsWRLU=) 2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: RZ0QTKiTTNx8zLcCMyWL6kS10XE+JurXOmLszG1L2Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC Validity Not Before: Sep 5 07:14:07 2025 GMT Not After : Sep 12 07:14:07 2025 GMT Subject: CN=68ba8dbf-067e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:f2:66:6d:60:c1:2e:2d:10:40:79:86:d6: ef:ef:4b:88:29:a3:5e:57:cc:8b:c0:a5:47:b2:c5: 67:c3:57:46:0e:01:1e:76:96:b2:e4:21:62:b9:ff: df:7c:a8:92:c5:7d:f5:d2:79:3c:31:88:9a:a0:31: 1a:d3:ef:ab:12:5e:4f:48:3e:ac:66:c3:86:23:d7: 7b:06:4d:b9:dd:de:c4:18:fc:43:ff:78:02:7e:03: 03:78:9e:9e:c1:bd:3f:a9:00:43:f3:47:81:c7:37: 62:e5:d7:e0:6c:b7:e9:df:da:c3:eb:6e:4e:48:0e: fa:c6:cd:41:af:ce:eb:8d:89:90:0a:d2:e3:67:0f: 2d:43:56:a4:cd:0b:1e:df:cb:e5:9a:e4:0d:b7:15: f6:18:0c:6a:46:f0:e3:d3:49:e4:9b:10:aa:3a:3a: c4:4e:5c:41:4f:46:d5:44:b3:68:29:40:5b:53:aa: 43:d9:da:b4:f6:12:86:d1:45:9d:bf:99:49:ec:f8: eb:71:29:11:9d:26:70:38:37:14:31:c3:d5:77:fc: a5:1d:16:f4:bb:e7:17:32:82:64:cb:29:ed:ff:64: c8:4f:fd:3b:12:9f:91:6d:c2:d8:1a:5d:9d:5b:cf: ca:b6:99:9f:11:e3:40:46:1d:b2:13:07:2d:5b:bf: 2a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C7:BF:A8:82:4F:6D:90:4D:27:16:AF:E5:72:91:00:7F:EA:B5:3A X509v3 Authority Key Identifier: keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:df:b7:9a:e5:43:07:96:1a:54:b2:8b:ca:a7:eb:ff:95:b3: 10:fa:db:be:42:8b:b8:65:1d:b9:92:f1:7f:7f:b6:4c:d2:12: 10:8c:ef:98:93:a7:a9:00:9c:85:bb:b1:c5:f7:02:ee:9c:68: 9f:ca:63:06:b0:30:e8:41:c2:52:ef:55:b5:f7:26:43:9f:33: 27:3f:96:76:cf:39:d8:3c:cd:b7:2f:2a:39:53:03:21:36:53: ee:53:b8:44:c4:ac:8c:ce:d9:05:1f:77:40:4e:b6:4e:51:00: d9:63:b6:53:c5:22:45:7a:20:5f:8d:df:20:bc:79:d9:e8:a6: 8c:fe:49:80:da:0e:f3:49:b4:60:8d:9a:b9:7b:ed:d0:59:1e: 91:b4:bb:e7:1a:fb:52:6b:05:bb:f2:71:ac:48:30:76:5f:c2: 36:10:58:e1:89:00:3e:a5:9f:85:27:98:79:e3:c3:52:b9:07: 27:79:62:49:8c:11:0b:52:d9:48:5c:27:51:58:53:85:4c:84: 9b:bd:af:e6:ba:4b:6e:11:46:61:ef:c5:3c:db:d4:3c:e1:bb: e8:15:3c:99:2f:4c:2d:ee:da:72:35:dd:04:77:0b:40:78:ec: 9d:87:48:5f:9c:5c:a2:63:d2:b3:0a:03:e5:95:22:22:a3:71: bc:2d:76:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoNjE0N0EyQTZGMTA2REM1NjAxM0RDM0JDRkJBMEI0Qjc1 M0VDRDFCQzAeFw0yNTA5MDUwNzE0MDdaFw0yNTA5MTIwNzE0MDdaMBgxFjAUBgNV BAMTDTY4YmE4ZGJmLTA2N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3u/JmbWDBLi0QQHmG1u/vS4gpo15XzIvApUeyxWfDV0YOAR52lrLkIWK5/998 qJLFffXSeTwxiJqgMRrT76sSXk9IPqxmw4Yj13sGTbnd3sQY/EP/eAJ+AwN4np7B vT+pAEPzR4HHN2Ll1+Bst+nf2sPrbk5IDvrGzUGvzuuNiZAK0uNnDy1DVqTNCx7f y+Wa5A23FfYYDGpG8OPTSeSbEKo6OsROXEFPRtVEs2gpQFtTqkPZ2rT2EobRRZ2/ mUns+OtxKRGdJnA4NxQxw9V3/KUdFvS75xcygmTLKe3/ZMhP/TsSn5FtwtgaXZ1b z8q2mZ8R40BGHbITBy1bvyrTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1se/qIJP bZBNJxav5XKRAH/qtTowHwYDVR0jBBgwFoAUYUeipvEG3FYBPcO8+6C0t1Ps0bww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzFFRDQ1MkFDRDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL1lVZWlwdkVHM0ZZQlBjTzgtNkMwdDFQczBi dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWVVlaXB2RUczRllCUGNPOC02QzB0MVBzMGJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzFFRDQ1MkFDRDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL1lVZWlwdkVHM0ZZ QlBjTzgtNkMwdDFQczBidy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIDft5rlQweWGlSyi8qn6/+VsxD6275Ci7hlHbmS8X9/tkzSEhCM75iT p6kAnIW7scX3Au6caJ/KYwawMOhBwlLvVbX3JkOfMyc/lnbPOdg8zbcvKjlTAyE2 U+5TuETErIzO2QUfd0BOtk5RANljtlPFIkV6IF+N3yC8ednopoz+SYDaDvNJtGCN mrl77dBZHpG0u+ca+1JrBbvycaxIMHZfwjYQWOGJAD6ln4UnmHnjw1K5Byd5YkmM EQtS2UhcJ1FYU4VMhJu9r+a6S24RRmHvxTzb1Dzhu+gVPJkvTC3u2nI13QR3C0B4 7J2HSF+cXKJj0rMKA+WVIiKjcbwtdhs= -----END CERTIFICATE-----Generated at Sat Sep 6 21:41:22 2025 by rpki-client