$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: IuKanTiMb+UlkHteP7IUxCLpMHvDa73rACpFgcplgb4= Subject key identifier: 8C:AF:7D:22:7D:A2:02:9D:CF:F8:1D:76:E5:A9:77:B3:50:2E:0A:38 Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 34C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 34BC Signing time: Sat 06 Sep 2025 15:05:10 +0000 Manifest this update: Sat 06 Sep 2025 15:05:10 +0000 Manifest next update: Sat 13 Sep 2025 15:05:10 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: BsRizuvnA+/YKWEXd34kwR/BVUTVv3LFYixgXSzwRi4=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: 3hsbI0PrBL5LI5VaCiCNQ0sMN2EIkZA6LenSvD9t9yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13505 (0x34c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: Sep 6 15:05:10 2025 GMT Not After : Sep 13 15:05:10 2025 GMT Subject: CN=68bc4da6-93ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:b7:63:23:ee:23:f0:56:d0:be:e5:eb:c0: da:9a:26:7e:52:2b:f4:8c:c4:c8:9a:65:66:88:f1: e4:8d:4b:af:9f:c6:98:b9:49:a2:b4:bd:57:fc:a2: 09:ca:5c:f7:9b:eb:44:a9:28:89:4b:e4:f2:c5:1a: 1b:d9:a4:7b:2c:41:4a:46:6b:ba:2d:40:b3:62:97: c3:2a:fa:ea:6f:15:fe:ba:eb:25:f7:66:16:c5:b6: 13:31:83:38:73:e5:a8:b5:75:86:77:3e:78:65:ae: 58:13:ed:1e:74:f9:b6:3f:ee:a4:f4:5f:87:c4:e7: 60:ee:03:2c:82:c4:3e:92:23:23:c2:ae:6f:93:a0: 23:d6:90:df:ab:8c:80:f9:7f:5f:2c:93:48:76:45: 53:de:b2:bb:93:3d:c3:df:34:f6:b3:a8:d3:2b:b6: 52:96:92:fc:aa:b7:0d:38:16:16:d6:13:d3:e0:09: 4c:31:fd:30:f1:18:41:d3:7f:67:1f:0f:af:25:40: 13:98:bd:2b:cd:b7:5f:f3:24:d4:19:f1:2f:6a:4f: dd:53:b5:a5:73:ad:f5:b3:56:58:b2:c3:9f:94:8f: 72:a7:00:b8:2b:10:8d:54:16:a8:21:bc:09:ec:2b: 6f:cc:04:c9:78:4e:8a:6c:47:7f:37:3c:26:0f:51: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AF:7D:22:7D:A2:02:9D:CF:F8:1D:76:E5:A9:77:B3:50:2E:0A:38 X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:86:77:fa:d4:01:b9:7c:ec:c2:89:53:66:8c:c5:f1:e4:a1: a4:71:ca:e5:bd:92:78:bc:18:3a:be:c2:60:66:3e:34:7c:e1: 38:43:27:39:4c:73:32:f9:9a:4f:0f:91:3f:48:7e:4a:ba:f3: 2d:74:10:e4:b7:ad:aa:6c:96:93:72:39:16:7c:68:3e:6e:3c: bd:66:12:d2:47:ac:9a:51:2d:d4:06:ec:f1:c1:f8:31:09:c9: f8:53:e6:5f:d2:e3:aa:db:66:1c:8c:a0:fc:0d:7b:b7:d9:a2: f3:4e:fa:9b:36:46:a2:32:fb:13:6b:9e:c1:ae:62:a5:16:78: cc:0e:23:db:f6:e2:43:4e:ef:e6:d0:ff:51:6f:44:3c:e7:86: ca:7d:7d:74:39:94:3c:a5:6f:37:30:06:36:23:55:f1:35:db: 5c:f1:c6:5d:b3:f5:8d:47:4d:04:39:1b:97:16:7c:f5:40:ee: 32:00:a0:8f:8b:5f:fa:73:fd:43:d6:72:4a:40:0b:98:13:b6: 84:ce:b4:de:10:3f:e6:05:fd:70:91:66:b7:83:3d:3d:76:a9: ea:e1:e2:59:7e:41:1a:07:4a:b4:2f:58:df:41:f6:75:59:1f: 50:53:ea:66:70:0a:a2:a3:73:5a:fd:e9:49:b8:a0:3a:a1:df: 79:cd:3d:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjUwOTA2MTUwNTEwWhcNMjUwOTEzMTUwNTEwWjAYMRYwFAYD VQQDEw02OGJjNGRhNi05M2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuom3YyPuI/BW0L7l68DamiZ+Uiv0jMTImmVmiPHkjUuvn8aYuUmitL1X/KIJ ylz3m+tEqSiJS+TyxRob2aR7LEFKRmu6LUCzYpfDKvrqbxX+uusl92YWxbYTMYM4 c+WotXWGdz54Za5YE+0edPm2P+6k9F+HxOdg7gMsgsQ+kiMjwq5vk6Aj1pDfq4yA +X9fLJNIdkVT3rK7kz3D3zT2s6jTK7ZSlpL8qrcNOBYW1hPT4AlMMf0w8RhB039n Hw+vJUATmL0rzbdf8yTUGfEvak/dU7Wlc631s1ZYssOflI9ypwC4KxCNVBaoIbwJ 7CtvzATJeE6KbEd/NzwmD1GvgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyvfSJ9 ogKdz/gdduWpd7NQLgo4MB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArhnf61AG5fOzCiVNmjMXx5KGkccrlvZJ4vBg6vsJgZj40fOE4Qyc5 THMy+ZpPD5E/SH5KuvMtdBDkt62qbJaTcjkWfGg+bjy9ZhLSR6yaUS3UBuzxwfgx Ccn4U+Zf0uOq22YcjKD8DXu32aLzTvqbNkaiMvsTa57BrmKlFnjMDiPb9uJDTu/m 0P9Rb0Q854bKfX10OZQ8pW83MAY2I1XxNdtc8cZds/WNR00EORuXFnz1QO4yAKCP i1/6c/1D1nJKQAuYE7aEzrTeED/mBf1wkWa3gz09dqnq4eJZfkEaB0q0L1jfQfZ1 WR9QU+pmcAqio3Na/elJuKA6od95zT2W -----END CERTIFICATE-----Generated at Sat Sep 6 21:38:31 2025 by rpki-client