$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: uln35RxZI1A/48j/uLZhKSGOZFNKQjbogNswk4PT+oo= Subject key identifier: 43:8A:8A:90:B2:40:69:8D:52:C5:F7:BB:D1:E0:18:2A:69:53:4C:4B Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: 9F Signing time: Fri 05 Sep 2025 06:46:46 +0000 Manifest this update: Fri 05 Sep 2025 06:46:46 +0000 Manifest next update: Fri 12 Sep 2025 06:46:46 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: zKKq7VXVEPlVRBKrwN1tTmUEtgY5IsHH2tDQJ5YS8kE=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Sep 5 06:46:46 2025 GMT Not After : Sep 12 06:46:46 2025 GMT Subject: CN=68ba8756-ffdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:17:a2:39:58:c2:e9:23:9f:4f:9c:78:cb: 22:a9:1a:c3:bf:99:40:c7:70:fc:3e:64:5e:aa:da: 75:b1:ad:20:e1:d7:46:84:ab:03:50:a4:b2:7b:88: 78:7f:a9:6d:ee:84:4b:f6:4b:03:0c:14:df:f9:cf: 9c:9f:2b:ad:38:99:30:4d:5b:53:00:b2:60:c8:f3: 55:4f:20:1a:eb:c5:a5:25:0a:d8:62:c7:11:87:f2: 45:4f:3f:90:15:d8:44:98:ae:cd:b3:3b:e3:60:7b: 83:dc:62:f7:6c:cb:73:56:3d:62:9d:e1:62:ab:3f: 5c:9c:11:4e:c2:b3:a4:42:72:f9:49:2d:b8:e7:47: a5:23:54:83:d5:55:e0:ed:80:7f:25:eb:ac:93:47: be:01:cc:70:92:05:5d:20:89:f5:ce:a3:25:4a:1f: 25:d0:91:78:05:e4:9f:25:d7:53:6c:84:94:ea:d3: 03:02:a9:6a:e9:9b:d0:04:0f:4d:fe:fb:9d:23:60: db:d7:17:f4:80:64:d6:04:8a:5c:76:6f:75:16:4c: 22:57:d6:04:51:73:9f:7b:3a:0e:14:bf:c2:76:46: 87:36:6b:4b:98:79:58:47:53:3f:a2:d7:96:e0:b8: 33:2d:59:70:70:6e:51:c9:ec:d7:dc:29:d6:48:46: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8A:8A:90:B2:40:69:8D:52:C5:F7:BB:D1:E0:18:2A:69:53:4C:4B X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:8e:d4:22:e8:b0:93:c3:a8:54:b4:6c:1f:41:99:63:66:0a: a2:fe:1e:e2:9a:d0:ff:a8:9b:b8:26:51:86:04:99:68:32:66: ea:ca:da:13:f5:ad:eb:ea:17:04:18:be:59:d6:8e:76:26:ad: 91:35:86:15:f6:9b:4d:8b:01:90:7b:b1:f0:ad:6f:0d:33:7f: b7:3c:3a:fb:d8:04:62:12:89:56:c3:4c:de:24:0a:b6:c3:c5: db:34:b7:14:5c:07:47:89:5f:38:55:ab:88:8c:a5:fc:60:24: 4f:31:bb:da:41:d3:38:6a:8e:6d:6a:59:fd:52:ce:90:6f:98: 0a:c9:ff:3d:80:cc:8e:2b:9f:5d:e2:47:d2:1d:e4:c6:db:41: 14:85:75:f6:19:1d:1e:75:85:68:3c:8d:ed:f2:9b:f9:bd:bb: 4e:04:9c:c8:95:f1:d4:2e:2e:23:5d:19:b8:2f:81:9f:d2:fe: 62:42:e6:5d:ac:90:00:41:6d:4f:25:10:97:8c:c4:e1:44:a0: 5d:34:94:f7:99:86:91:f1:47:f2:30:43:e9:60:3e:f3:52:f0: c1:b4:3b:42:c9:36:ac:7f:05:5a:17:6e:11:4d:05:f7:b2:ab: aa:2e:44:ba:dc:53:f4:1e:29:1d:09:89:dc:63:9a:9e:52:59: 6a:20:76:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy NENERjVFNkIwHhcNMjUwOTA1MDY0NjQ2WhcNMjUwOTEyMDY0NjQ2WjAYMRYwFAYD VQQDEw02OGJhODc1Ni1mZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbsXojlYwukjn0+ceMsiqRrDv5lAx3D8PmReqtp1sa0g4ddGhKsDUKSye4h4 f6lt7oRL9ksDDBTf+c+cnyutOJkwTVtTALJgyPNVTyAa68WlJQrYYscRh/JFTz+Q FdhEmK7NszvjYHuD3GL3bMtzVj1ineFiqz9cnBFOwrOkQnL5SS2450elI1SD1VXg 7YB/Jeusk0e+AcxwkgVdIIn1zqMlSh8l0JF4BeSfJddTbISU6tMDAqlq6ZvQBA9N /vudI2Db1xf0gGTWBIpcdm91FkwiV9YEUXOfezoOFL/CdkaHNmtLmHlYR1M/oteW 4LgzLVlwcG5RyezX3CnWSEbu2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOKipCy QGmNUsX3u9HgGCppU0xLMB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5 QlJzb2FYS2JSbUVremZYbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQjtQi6LCTw6hUtGwfQZljZgqi/h7imtD/qJu4JlGGBJloMmbqytoT 9a3r6hcEGL5Z1o52Jq2RNYYV9ptNiwGQe7HwrW8NM3+3PDr72ARiEolWw0zeJAq2 w8XbNLcUXAdHiV84VauIjKX8YCRPMbvaQdM4ao5taln9Us6Qb5gKyf89gMyOK59d 4kfSHeTG20EUhXX2GR0edYVoPI3t8pv5vbtOBJzIlfHULi4jXRm4L4Gf0v5iQuZd rJAAQW1PJRCXjMThRKBdNJT3mYaR8UfyMEPpYD7zUvDBtDtCyTasfwVaF24RTQX3 squqLkS63FP0HikdCYncY5qeUllqIHby -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:10 2025 by rpki-client