$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json) Hash identifier: jgI3HJ80SFYerz+0/6GoeFy59b5wVqCFFHHIgueP7tg= Subject key identifier: 22:80:7A:F8:8D:13:F6:03:35:CA:E9:CF:0D:0E:1D:2E:C5:55:0C:2A Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft Manifest number: 01A1 Signing time: Fri 19 Sep 2025 03:48:16 +0000 Manifest this update: Fri 19 Sep 2025 03:48:15 +0000 Manifest next update: Fri 26 Sep 2025 03:48:15 +0000 Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: NHuehJ4RZVfDPi9YOXYeTjREW5P/5pDg7tJAre/Y3wc=) 2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: hMyvfP3pCKZ5hw+noNo5cb+SEkfMSMRBf/skxrMhdJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Validity Not Before: Sep 19 03:48:15 2025 GMT Not After : Sep 26 03:48:15 2025 GMT Subject: CN=68ccd280-9d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:f5:9f:34:62:b1:8e:51:69:40:96:9b:28: 60:01:dd:d5:fc:33:16:2c:50:c1:41:dd:a0:d4:b5: 9b:ed:09:d9:5a:55:62:ca:d4:dc:1d:2c:31:ef:9e: 2c:f1:6e:4d:74:7c:80:4f:c2:2f:13:a0:43:8a:5e: c3:45:d0:bd:35:4c:df:d5:5e:6d:db:7b:6d:96:bf: cb:8d:c2:5a:23:5e:70:24:17:2b:25:ac:c4:33:46: 1e:7a:1a:9c:14:c1:b2:88:fa:98:69:75:73:e1:09: 25:d0:f7:81:38:26:4c:ca:48:7f:6a:37:53:02:e8: 9b:2f:17:eb:4b:33:70:8e:c9:30:69:73:7e:f7:96: 5f:9d:51:3f:d2:a3:5f:a5:5f:db:53:ba:2c:0d:13: d5:3e:0c:62:31:13:e7:2a:19:3f:e8:43:eb:2f:02: bc:15:dd:9a:1e:7b:14:81:d5:97:37:7c:5e:2f:bb: 7f:72:06:bc:4e:6f:80:c2:e0:72:4b:6f:6b:da:e1: b3:db:35:b1:c2:8a:b8:7f:3e:b0:51:a7:e5:15:d7: 39:56:d9:3f:53:b3:13:ef:c6:d8:aa:cc:da:a2:31: 27:b8:b7:55:97:af:d9:c5:09:ec:ad:de:7d:bd:f3: 99:76:10:58:27:37:8b:94:31:14:fa:14:e4:08:df: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:80:7A:F8:8D:13:F6:03:35:CA:E9:CF:0D:0E:1D:2E:C5:55:0C:2A X509v3 Authority Key Identifier: keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2d:4e:5f:e3:7f:f9:31:f5:a5:e2:1b:ed:e2:71:ce:f8:82: b4:f4:6e:0b:2e:c7:b6:94:72:b8:14:cd:21:c9:b8:e5:c8:61: e6:f0:a2:69:39:f3:07:d1:de:38:e1:b4:3f:79:3e:66:02:65: 25:2b:03:b6:2f:33:e4:8d:4e:ad:25:ce:86:c0:bf:28:d3:10: 01:b9:83:20:c2:b5:24:02:5a:75:7a:9a:03:e6:e9:f1:6c:2b: d6:f6:8f:71:b0:74:0d:4e:fd:29:92:5f:a7:65:9b:d3:6a:40: ab:03:20:52:2b:55:d7:ff:d0:04:d7:f4:e0:1a:71:78:41:cc: 5e:49:03:b9:de:1f:84:43:62:22:ea:e8:47:73:84:b2:6c:9a: 76:77:0a:a1:6e:2a:33:66:a4:4a:cd:73:f8:33:ba:43:30:ee: da:2e:15:f0:17:50:7d:6b:42:b0:53:99:2c:4a:f2:10:7b:25: 6d:45:95:6f:4d:c0:0c:17:54:92:46:fd:82:5c:e1:e8:a7:7d: 60:7e:db:39:7c:5d:ca:f5:0f:2f:ec:df:d4:c7:59:95:ee:b4: 99:70:4e:ed:85:42:ed:a7:da:15:82:d9:1b:2c:23:2d:43:26: b5:a4:96:78:67:bf:db:e9:02:ae:ec:ae:17:9c:38:0c:a6:94: 5b:78:82:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4M0IxMTAvBgNVBAUTKENBN0NFRUY5MTg4MDdFNjcxQjE2MjRFNjNBQjZGNjgx MDNERkQ1RTMwHhcNMjUwOTE5MDM0ODE1WhcNMjUwOTI2MDM0ODE1WjAYMRYwFAYD VQQDEw02OGNjZDI4MC05ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPn1nzRisY5RaUCWmyhgAd3V/DMWLFDBQd2g1LWb7QnZWlViytTcHSwx754s 8W5NdHyAT8IvE6BDil7DRdC9NUzf1V5t23ttlr/LjcJaI15wJBcrJazEM0Yeehqc FMGyiPqYaXVz4Qkl0PeBOCZMykh/ajdTAuibLxfrSzNwjskwaXN+95ZfnVE/0qNf pV/bU7osDRPVPgxiMRPnKhk/6EPrLwK8Fd2aHnsUgdWXN3xeL7t/cga8Tm+AwuBy S29r2uGz2zWxwoq4fz6wUaflFdc5Vtk/U7MT78bYqszaojEnuLdVl6/ZxQnsrd59 vfOZdhBYJzeLlDEU+hTkCN+lhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKAeviN E/YDNcrpzw0OHS7FVQwqMB8GA1UdIwQYMBaAFMp87vkYgH5nGxYk5jq29oED39Xj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgzQi81QUYwNDE5QzFC RTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZtY2JGaVRtT3JiMmdRUGYx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3luenUtUmlBZm1jYkZpVG1PcmIyZ1FQZjFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTgzQi81QUYwNDE5QzFCRTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZt Y2JGaVRtT3JiMmdRUGYxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7LU5f43/5MfWl4hvt4nHO+IK09G4LLse2lHK4FM0hybjlyGHm8KJp OfMH0d444bQ/eT5mAmUlKwO2LzPkjU6tJc6GwL8o0xABuYMgwrUkAlp1epoD5unx bCvW9o9xsHQNTv0pkl+nZZvTakCrAyBSK1XX/9AE1/TgGnF4QcxeSQO53h+EQ2Ii 6uhHc4SybJp2dwqhbiozZqRKzXP4M7pDMO7aLhXwF1B9a0KwU5ksSvIQeyVtRZVv TcAMF1SSRv2CXOHop31gfts5fF3K9Q8v7N/Ux1mV7rSZcE7thULtp9oVgtkbLCMt Qya1pJZ4Z7/b6QKu7K4XnDgMppRbeIJF -----END CERTIFICATE-----Generated at Fri Sep 19 05:26:09 2025 by rpki-client