$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft File: yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft (raw, json) Hash identifier: hxUVQPKlKjaQp+0lnEV0Qcc9hdDZ2Oku5aceuhBx7/0= Subject key identifier: E3:0A:98:C9:77:ED:6B:C7:0E:8C:66:FA:C0:00:20:6A:3F:88:54:C1 Authority key identifier: CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A Certificate issuer: /CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft Manifest number: 069D Signing time: Mon 08 Sep 2025 22:19:01 +0000 Manifest this update: Mon 08 Sep 2025 22:19:00 +0000 Manifest next update: Mon 15 Sep 2025 22:19:00 +0000 Files and hashes: 1: yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl (hash: VSXjJfJqOAMEa621s0JBSw64izLqygnzg5WORj0kOiA=) 2: 89283C80809211EB938F4016C4F9AE02.roa (hash: XR/AocxlHs3JH5B6YCwM4YFgAXn6/2T8ovPAbIrIeuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Validity Not Before: Sep 8 22:19:00 2025 GMT Not After : Sep 15 22:19:00 2025 GMT Subject: CN=68bf5654-599a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:b8:e6:2c:b4:8f:33:f1:52:60:31:9c:53: 30:f6:6d:26:cb:f4:9d:60:6b:ab:51:07:a1:4a:49: 57:56:1e:3f:a3:87:cf:67:1f:ab:f2:9a:3b:2a:84: f0:12:d7:21:3b:7a:c8:ba:03:5f:b3:2e:c6:ba:d3: 9d:e1:cd:ff:09:24:8c:18:63:9c:b2:a2:34:63:4c: 37:11:51:98:1e:82:a0:93:ef:64:b5:b8:0f:f7:f3: bf:03:17:c1:62:6b:c5:b5:9f:2e:0c:95:30:6d:0f: 22:d3:41:96:50:28:cf:25:64:41:93:61:a1:67:00: 58:42:0b:7a:77:8c:27:88:12:21:44:58:37:23:15: 6e:63:46:4e:0c:8b:5a:03:56:72:18:fb:f1:0d:e0: ad:61:a6:c0:d5:2f:42:5e:f1:b4:6a:ee:d1:17:26: c0:fc:cd:a5:7d:62:c9:5f:80:dc:42:8a:93:6f:7d: 67:2b:70:72:0d:fd:8f:14:47:17:f1:c4:64:1a:59: 15:77:9b:f3:5e:92:c1:f2:10:0d:49:e0:2e:eb:17: bc:bb:af:d7:b6:a6:f2:69:c7:11:a3:13:9c:80:41: e8:b3:66:2c:46:0e:c2:1c:87:16:9e:c4:d5:51:cd: 97:9b:6a:00:1f:92:60:49:4f:04:df:0d:4c:a4:5b: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0A:98:C9:77:ED:6B:C7:0E:8C:66:FA:C0:00:20:6A:3F:88:54:C1 X509v3 Authority Key Identifier: keyid:CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:00:79:25:93:de:64:fd:51:74:ff:5a:28:3c:e8:94:07:43: 4c:02:e3:6e:39:5f:35:1d:b1:0c:bf:75:a1:9a:70:f5:aa:b4: 0e:f5:93:ed:16:5b:cf:0f:a3:fd:cf:1f:46:af:56:38:7e:d1: a6:45:a7:4f:02:6b:0f:27:eb:cc:18:99:7f:a0:6c:e8:41:29: 30:8e:2c:8e:63:18:c9:60:e1:1b:14:7a:c2:9c:1c:21:5c:f3: 27:35:ae:2a:85:1d:e5:af:24:83:a1:92:38:ec:2d:11:35:b8: ba:00:b1:1f:eb:85:df:9e:ed:5d:97:9d:9c:63:03:89:ca:40: 5e:b2:37:8f:fd:28:7f:19:16:ea:6d:60:34:72:f4:95:3e:8a: ad:e8:ff:dc:c6:27:11:d6:ff:ea:54:6e:62:a9:57:6c:cb:83: 6d:74:84:b4:7b:3a:d3:4a:bf:35:54:25:d2:c7:6e:50:93:48: 61:8c:1a:9e:92:44:e5:2b:c0:66:e6:18:a7:6f:51:99:16:dc: 0c:b3:4a:cc:3c:38:65:0f:7e:49:83:b2:a8:12:5f:c8:1e:a9: 17:80:29:6f:cd:2c:2f:b6:1e:74:85:2a:6a:f4:3d:a6:02:25: 54:3c:ac:ea:9f:87:1d:8c:bc:e8:fe:26:70:d1:5f:c7:d3:49: 60:60:86:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKENBMzJENTExNDYyQUI0MjYxOEE4OERCQTA1ODY5QUZF QkVBMEU1MUEwHhcNMjUwOTA4MjIxOTAwWhcNMjUwOTE1MjIxOTAwWjAYMRYwFAYD VQQDEw02OGJmNTY1NC01OTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXK45iy0jzPxUmAxnFMw9m0my/SdYGurUQehSklXVh4/o4fPZx+r8po7KoTw EtchO3rIugNfsy7GutOd4c3/CSSMGGOcsqI0Y0w3EVGYHoKgk+9ktbgP9/O/AxfB YmvFtZ8uDJUwbQ8i00GWUCjPJWRBk2GhZwBYQgt6d4wniBIhRFg3IxVuY0ZODIta A1ZyGPvxDeCtYabA1S9CXvG0au7RFybA/M2lfWLJX4DcQoqTb31nK3ByDf2PFEcX 8cRkGlkVd5vzXpLB8hANSeAu6xe8u6/XtqbyaccRoxOcgEHos2YsRg7CHIcWnsTV Uc2Xm2oAH5JgSU8E3w1MpFvcMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMKmMl3 7WvHDoxm+sAAIGo/iFTBMB8GA1UdIwQYMBaAFMoy1RFGKrQmGKiNugWGmv6+oOUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8xM0VENjgwMjgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRDWVlxSTI2QllhYV9yNmc1 Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lqTFZFVVlxdENZWXFJMjZCWWFhX3I2ZzVSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8xM0VENjgwMjgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRD WVlxSTI2QllhYV9yNmc1Um8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxAHklk95k/VF0/1ooPOiUB0NMAuNuOV81HbEMv3WhmnD1qrQO9ZPt FlvPD6P9zx9Gr1Y4ftGmRadPAmsPJ+vMGJl/oGzoQSkwjiyOYxjJYOEbFHrCnBwh XPMnNa4qhR3lrySDoZI47C0RNbi6ALEf64Xfnu1dl52cYwOJykBesjeP/Sh/GRbq bWA0cvSVPoqt6P/cxicR1v/qVG5iqVdsy4NtdIS0ezrTSr81VCXSx25Qk0hhjBqe kkTlK8Bm5hinb1GZFtwMs0rMPDhlD35Jg7KoEl/IHqkXgClvzSwvth50hSpq9D2m AiVUPKzqn4cdjLzo/iZw0V/H00lgYIZ4 -----END CERTIFICATE-----Generated at Tue Sep 9 13:22:47 2025 by rpki-client