$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft File: YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json) Hash identifier: 5epPn+3CEr/0MSsY7hOUrjOJ1p0laCExVyTaIk+Fs+k= Subject key identifier: 97:D5:D4:8C:9A:6A:AB:D8:39:DC:30:36:2F:42:E5:C0:87:8E:D6:DD Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft Manifest number: 01DC Signing time: Wed 17 Sep 2025 03:16:51 +0000 Manifest this update: Wed 17 Sep 2025 03:16:50 +0000 Manifest next update: Wed 24 Sep 2025 03:16:50 +0000 Files and hashes: 1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: XvKQkdXh/LeJ8fz0/nSzDDj27xL2vcqfUdzELGPmG5I=) 2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: sz+mmIZs/29Io2xKT3w1Go850hnuQbV97uqO5OCD7zA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Validity Not Before: Sep 17 03:16:50 2025 GMT Not After : Sep 24 03:16:50 2025 GMT Subject: CN=68ca2823-91bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:e8:f6:7c:ee:0a:46:e2:6d:4a:bd:cc:0d: 19:99:1a:68:d3:7c:de:17:b5:04:50:c6:f3:b2:56: b8:d8:b4:c1:01:92:de:19:cf:e4:cd:21:d5:4a:a6: 8d:99:02:6b:a8:76:c3:a1:9b:00:6c:bd:29:10:78: 11:88:ed:24:7b:d1:24:15:23:a1:d9:3d:21:d3:f3: 0d:8f:2e:33:de:ed:36:8b:cc:2a:f3:5c:f5:29:8c: e4:c5:34:56:77:a9:a1:49:e2:e8:06:fe:db:66:0b: 44:2a:cf:44:6c:90:81:9a:2a:04:d5:2c:a6:44:fe: 81:d6:2d:ca:2f:a9:f8:81:d5:c7:52:20:91:5a:38: d6:1c:f7:57:a2:01:8e:0f:1d:95:81:31:73:28:02: b9:45:b9:5f:35:73:02:ac:a9:9e:84:bc:bc:72:ed: 2e:f1:27:dc:54:56:ac:a0:02:4d:4a:a3:4e:b2:d1: f2:cb:68:bc:b3:b4:2a:69:64:91:57:86:f6:88:6e: 43:73:4f:7f:e0:96:cd:22:b9:a4:05:46:b9:b6:ca: 94:09:1b:53:66:d0:7f:3c:0a:ac:67:ad:cb:e2:0b: 00:12:01:1d:f3:59:f7:05:ba:53:99:2b:f7:a1:f3: 40:2a:2a:50:68:9d:c3:20:6c:0d:54:49:3c:64:46: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D5:D4:8C:9A:6A:AB:D8:39:DC:30:36:2F:42:E5:C0:87:8E:D6:DD X509v3 Authority Key Identifier: keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3d:78:c9:cf:bb:61:3b:56:e9:8a:a5:a1:cc:76:ae:71:31: 85:11:2b:f9:07:bd:1e:42:44:c1:26:2c:bb:8f:47:57:9b:2e: ba:ef:fc:a4:11:e1:a0:d5:b0:a6:90:0f:1a:e4:30:97:4f:e7: 6b:7c:74:3b:27:c9:b5:8d:b8:43:8a:8e:d8:03:5b:4d:84:fa: 01:d8:5c:e7:17:ae:d8:50:c7:e6:d0:f2:1f:b0:f1:ad:bd:0b: 19:81:ea:92:55:7b:d6:ac:54:c7:c5:d4:52:bc:49:a4:90:e1: d2:12:d5:f9:b7:39:e3:98:ec:92:c5:38:b4:c4:92:5a:53:04: 32:ea:2c:d4:37:a9:9d:06:5e:63:be:85:9a:61:a5:01:96:31: fe:70:90:15:42:f8:72:63:58:ec:a6:02:83:bb:8c:54:cf:5c: 53:46:0d:a6:fe:a5:01:cc:45:5c:b0:1c:40:11:b4:b2:f9:83: f3:e5:69:06:34:6c:0c:95:4a:27:a0:c9:20:61:88:b6:f3:5a: ef:42:11:bf:b4:6d:e2:78:84:14:dc:be:5a:45:14:9b:53:02: c2:92:b4:72:06:0c:94:da:2f:27:8b:1b:f5:21:52:ed:e7:ac: 14:8f:36:18:ed:1c:ca:a3:48:da:0c:78:47:36:23:4d:ae:b3: 70:56:d5:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NkIxMTAvBgNVBAUTKDYyNjdDOTdFQjRBMERGMDFFREJENkY5RDQxQTg2QTg3 OUUwMjc5N0YwHhcNMjUwOTE3MDMxNjUwWhcNMjUwOTI0MDMxNjUwWjAYMRYwFAYD VQQDEw02OGNhMjgyMy05MWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi/o9nzuCkbibUq9zA0ZmRpo03zeF7UEUMbzsla42LTBAZLeGc/kzSHVSqaN mQJrqHbDoZsAbL0pEHgRiO0ke9EkFSOh2T0h0/MNjy4z3u02i8wq81z1KYzkxTRW d6mhSeLoBv7bZgtEKs9EbJCBmioE1SymRP6B1i3KL6n4gdXHUiCRWjjWHPdXogGO Dx2VgTFzKAK5RblfNXMCrKmehLy8cu0u8SfcVFasoAJNSqNOstHyy2i8s7QqaWSR V4b2iG5Dc09/4JbNIrmkBUa5tsqUCRtTZtB/PAqsZ63L4gsAEgEd81n3BbpTmSv3 ofNAKipQaJ3DIGwNVEk8ZEaYjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfV1Iya aqvYOdwwNi9C5cCHjtbdMB8GA1UdIwQYMBaAFGJnyX60oN8B7b1vnUGoaoeeAnl/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY2Qi8xNDJCQ0I5NkM0 RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3SHR2Vy1kUWFocWg1NENl WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltZkpmclNnM3dIdHZXLWRRYWhxaDU0Q2VYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY2Qi8xNDJCQ0I5NkM0RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3 SHR2Vy1kUWFocWg1NENlWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjPXjJz7thO1bpiqWhzHaucTGFESv5B70eQkTBJiy7j0dXmy667/yk EeGg1bCmkA8a5DCXT+drfHQ7J8m1jbhDio7YA1tNhPoB2FznF67YUMfm0PIfsPGt vQsZgeqSVXvWrFTHxdRSvEmkkOHSEtX5tznjmOySxTi0xJJaUwQy6izUN6mdBl5j voWaYaUBljH+cJAVQvhyY1jspgKDu4xUz1xTRg2m/qUBzEVcsBxAEbSy+YPz5WkG NGwMlUonoMkgYYi281rvQhG/tG3ieIQU3L5aRRSbUwLCkrRyBgyU2i8nixv1IVLt 56wUjzYY7RzKo0jaDHhHNiNNrrNwVtUJ -----END CERTIFICATE-----Generated at Fri Sep 19 02:49:54 2025 by rpki-client