$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json) Hash identifier: YnlBUsp1fQJp6l8ThANtFWB4bf3Um226eozCfoTpv+A= Subject key identifier: 1B:07:79:7B:69:A6:05:0C:6D:40:2F:73:E6:90:AD:B5:A3:EC:E2:D3 Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0E32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft Manifest number: 0E2A Signing time: Mon 08 Sep 2025 17:50:54 +0000 Manifest this update: Mon 08 Sep 2025 17:50:54 +0000 Manifest next update: Mon 15 Sep 2025 17:50:54 +0000 Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: qH0aCc+U4MkebJMluAcspPsnLbVuooZBfbmgOlRz74I=) 2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: VAz7Q8OmwNVtqjw21t41eYyn3+glN8lqbyiXL2P+yek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3634 (0xe32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: Sep 8 17:50:54 2025 GMT Not After : Sep 15 17:50:54 2025 GMT Subject: CN=68bf177e-35a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f5:0c:e9:39:bf:b4:b4:61:7f:19:5a:86:5a: 96:b3:01:8c:98:16:71:83:a9:e8:8c:c1:fa:3f:eb: a3:49:c1:c7:24:bd:4d:15:ee:9c:81:13:a9:63:6d: 5d:31:45:9e:54:80:b9:78:f6:fd:df:18:1d:f9:11: fa:3b:19:68:63:0e:f7:00:c9:07:40:68:38:00:00: 62:56:2b:02:51:bd:20:94:8e:07:00:92:77:4f:30: 9e:1a:53:52:d4:af:2c:4c:c1:f0:b7:82:35:b4:2e: f6:2e:38:72:8e:80:7b:bb:67:d4:42:bc:be:ac:28: e3:1d:6c:9d:e1:65:70:fd:f7:0a:44:83:66:f2:0b: d8:e3:c9:3d:e5:69:ec:7f:0b:13:13:48:46:01:87: 67:bf:bd:5a:39:73:40:d5:cc:fc:cd:fd:c4:f8:4a: 4a:cf:bc:db:27:5e:73:a4:f9:55:c6:2c:35:3c:94: 0a:8f:91:4b:e2:84:3d:29:40:43:50:0b:73:8b:a2: d4:09:de:fa:2e:10:c0:37:d6:5c:97:1e:1f:0f:55: 75:2c:1b:92:21:49:2d:ff:58:b9:87:38:95:3f:64: 8b:ec:df:d4:05:12:80:0a:41:c2:35:a1:bc:7a:0f: 34:e6:2e:39:81:c4:30:16:2c:b2:28:f6:9d:9a:6d: 9d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:07:79:7B:69:A6:05:0C:6D:40:2F:73:E6:90:AD:B5:A3:EC:E2:D3 X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ea:3b:01:7b:25:b2:66:fe:89:01:e7:a1:c6:b0:8e:df:86: 3f:91:07:ce:4f:f4:04:8f:37:fa:ae:5d:18:c0:d2:01:fc:52: f8:6f:ec:5f:12:2e:87:67:ed:52:50:fd:8c:08:0c:4a:8c:23: 92:aa:a8:43:6b:37:f5:d6:96:f4:12:01:d1:c9:bd:79:59:eb: 34:95:0e:32:8e:c3:a5:61:1d:16:52:3e:3b:85:61:87:03:1d: 61:c5:a8:f7:db:a5:0c:f3:7a:59:67:6b:77:67:32:8b:82:13: 95:26:12:ca:0e:ce:2f:53:d7:d1:27:ce:e1:f0:06:50:10:9d: 9d:0e:c4:0b:e3:0e:8e:30:b3:f9:24:ab:0c:5f:e4:d5:2e:65: ec:6d:97:bd:1d:e7:8a:ee:4a:f2:4f:ad:59:28:a6:73:65:2d: 04:81:58:16:3a:15:a5:e4:12:f0:0b:d9:81:38:fa:e0:0e:0c: c6:c0:04:9b:fa:a8:7d:4d:50:f8:41:2c:37:fd:7b:78:5a:9c: 2a:2c:a9:6d:10:1b:24:ca:e2:5d:e3:80:36:cc:9a:ba:f1:d4: 0a:cc:10:67:18:42:c2:7f:0f:ec:52:f0:67:cb:ce:82:56:b6: f5:a0:19:11:8f:69:de:f4:80:e0:dd:09:5a:06:8d:07:14:2a: 8c:b4:8b:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjUwOTA4MTc1MDU0WhcNMjUwOTE1MTc1MDU0WjAYMRYwFAYD VQQDEw02OGJmMTc3ZS0zNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PUM6Tm/tLRhfxlahlqWswGMmBZxg6nojMH6P+ujScHHJL1NFe6cgROpY21d MUWeVIC5ePb93xgd+RH6OxloYw73AMkHQGg4AABiVisCUb0glI4HAJJ3TzCeGlNS 1K8sTMHwt4I1tC72LjhyjoB7u2fUQry+rCjjHWyd4WVw/fcKRINm8gvY48k95Wns fwsTE0hGAYdnv71aOXNA1cz8zf3E+EpKz7zbJ15zpPlVxiw1PJQKj5FL4oQ9KUBD UAtzi6LUCd76LhDAN9Zclx4fD1V1LBuSIUkt/1i5hziVP2SL7N/UBRKACkHCNaG8 eg805i45gcQwFiyyKPadmm2d1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsHeXtp pgUMbUAvc+aQrbWj7OLTMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3 NEJvY08zZFFJY2pqNGllSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx6jsBeyWyZv6JAeehxrCO34Y/kQfOT/QEjzf6rl0YwNIB/FL4b+xf Ei6HZ+1SUP2MCAxKjCOSqqhDazf11pb0EgHRyb15Wes0lQ4yjsOlYR0WUj47hWGH Ax1hxaj326UM83pZZ2t3ZzKLghOVJhLKDs4vU9fRJ87h8AZQEJ2dDsQL4w6OMLP5 JKsMX+TVLmXsbZe9HeeK7kryT61ZKKZzZS0EgVgWOhWl5BLwC9mBOPrgDgzGwASb +qh9TVD4QSw3/Xt4WpwqLKltEBskyuJd44A2zJq68dQKzBBnGELCfw/sUvBny86C Vrb1oBkRj2ne9IDg3QlaBo0HFCqMtIt5 -----END CERTIFICATE-----Generated at Tue Sep 9 13:08:45 2025 by rpki-client