$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft File: YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json) Hash identifier: qeD0m3XHAk7nxdtPSTIQS8UJiGl2CappdFiBuUz+7sc= Subject key identifier: 81:64:E2:39:AF:ED:D9:16:17:59:D0:79:C7:EF:E3:17:BA:C0:FC:61 Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft Manifest number: 0127 Signing time: Fri 05 Sep 2025 05:05:20 +0000 Manifest this update: Fri 05 Sep 2025 05:05:20 +0000 Manifest next update: Fri 12 Sep 2025 05:05:20 +0000 Files and hashes: 1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: 4CvJXJ4txBlnoVUJVAPcV+I4DP+CghQZJKK/GpGSptU=) 2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: QQ0CP8HHmI7PCShWjhNg26xSyERliRPL6u4e6U+9a/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Validity Not Before: Sep 5 05:05:20 2025 GMT Not After : Sep 12 05:05:20 2025 GMT Subject: CN=68ba6f90-d575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:b6:3c:06:a4:07:cc:87:b8:1e:57:7b:99: fa:8d:48:ec:49:df:ee:8b:4c:78:89:03:d5:0a:82: d0:25:6f:7d:85:90:cd:d0:ba:7f:d3:73:5f:57:98: ef:17:df:44:42:73:a7:b2:61:e8:fa:b9:73:1c:3a: 4d:3e:f8:0f:62:d5:81:7c:e8:e6:f7:1e:10:3b:7d: 1d:e1:55:eb:9a:06:39:bb:04:25:9a:55:e1:5d:9a: 13:d4:9b:d7:67:fd:b3:ab:42:c7:fe:a3:51:40:aa: 8a:dc:8c:2c:d6:90:c0:46:93:ef:e4:e3:06:b6:16: ce:46:26:88:c0:c5:85:53:5c:4f:71:8e:e5:c8:5d: 4c:58:b8:82:c0:26:9d:7d:51:b1:91:42:bf:b9:42: 55:9b:2c:21:14:e8:82:6d:76:eb:0a:64:db:f9:84: 8b:3b:7d:08:60:76:e4:95:47:32:66:64:fa:76:ac: 22:28:ec:f1:ba:1a:7e:35:1a:6f:b6:ce:c1:48:bc: dc:4a:67:54:bf:a4:07:13:12:1e:da:39:93:16:ce: 1b:55:14:25:80:c9:1a:4a:f7:71:2f:c9:53:35:0a: 7b:67:2d:9a:0e:8d:dd:5c:52:bc:92:37:45:f6:f2: 32:7e:41:9e:22:c7:e1:60:2b:1c:f8:f7:65:2b:b2: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:64:E2:39:AF:ED:D9:16:17:59:D0:79:C7:EF:E3:17:BA:C0:FC:61 X509v3 Authority Key Identifier: keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c0:a3:4e:3a:f6:1b:56:a2:46:df:77:96:d2:3e:91:7a:c2: eb:29:aa:0e:0d:04:42:c8:77:7c:fa:47:5f:43:04:45:55:d7: 3c:1c:59:72:73:6d:0b:b9:fc:41:31:0e:b0:be:72:d7:53:7a: a9:b3:00:04:84:09:8d:34:b4:1b:3b:6c:1a:a8:52:0b:95:2a: 7a:e7:e3:d6:30:7a:cc:e5:bd:89:00:0f:71:a9:1e:19:89:34: 28:bc:76:8f:d3:4e:3a:f4:a0:6a:d8:28:37:b2:dd:d4:1e:02: 2a:09:9e:37:7f:7a:56:52:dd:7e:fb:4c:17:59:96:d3:d6:08: e9:1a:f2:9b:a2:24:44:49:fd:a4:30:86:37:27:5b:e3:f1:26: ec:10:21:32:e1:68:f1:49:b2:59:bc:52:aa:92:ea:2d:88:70: 13:4b:29:ce:b0:90:74:fa:c2:69:2d:a1:70:d3:1a:c4:83:62: e1:b3:0c:8f:a0:e5:3c:7e:75:bf:c9:1e:24:56:af:98:58:dd: d5:74:51:05:ac:af:e8:97:d5:a6:e7:f8:b4:8d:07:20:19:9b: bd:4e:37:3f:e5:0f:15:4b:57:a1:1b:07:d8:6d:7b:14:60:96: f2:60:43:c4:84:79:dd:ab:3a:68:c4:4f:05:f4:08:d7:bb:6b: c2:13:93:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCRUYxMTAvBgNVBAUTKDYxOTA0MEU4MzVCQUQzRENGNUMyMDEzOTZEODU3MTk5 NUE3QUNDNTAwHhcNMjUwOTA1MDUwNTIwWhcNMjUwOTEyMDUwNTIwWjAYMRYwFAYD VQQDEw02OGJhNmY5MC1kNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3+2PAakB8yHuB5Xe5n6jUjsSd/ui0x4iQPVCoLQJW99hZDN0Lp/03NfV5jv F99EQnOnsmHo+rlzHDpNPvgPYtWBfOjm9x4QO30d4VXrmgY5uwQlmlXhXZoT1JvX Z/2zq0LH/qNRQKqK3Iws1pDARpPv5OMGthbORiaIwMWFU1xPcY7lyF1MWLiCwCad fVGxkUK/uUJVmywhFOiCbXbrCmTb+YSLO30IYHbklUcyZmT6dqwiKOzxuhp+NRpv ts7BSLzcSmdUv6QHExIe2jmTFs4bVRQlgMkaSvdxL8lTNQp7Zy2aDo3dXFK8kjdF 9vIyfkGeIsfhYCsc+PdlK7IanQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFk4jmv 7dkWF1nQecfv4xe6wPxhMB8GA1UdIwQYMBaAFGGQQOg1utPc9cIBOW2FcZlaesxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DMDc2NDU3MkNC MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5ejF3Z0U1YllWeG1WcDZ6 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1laQkE2RFc2MDl6MXdnRTViWVZ4bVZwNnpGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUJFRi9DMDc2NDU3MkNCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5 ejF3Z0U1YllWeG1WcDZ6RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiwKNOOvYbVqJG33eW0j6ResLrKaoODQRCyHd8+kdfQwRFVdc8HFly c20LufxBMQ6wvnLXU3qpswAEhAmNNLQbO2waqFILlSp65+PWMHrM5b2JAA9xqR4Z iTQovHaP00469KBq2Cg3st3UHgIqCZ43f3pWUt1++0wXWZbT1gjpGvKboiRESf2k MIY3J1vj8SbsECEy4WjxSbJZvFKqkuotiHATSynOsJB0+sJpLaFw0xrEg2LhswyP oOU8fnW/yR4kVq+YWN3VdFEFrK/ol9Wm5/i0jQcgGZu9Tjc/5Q8VS1ehGwfYbXsU YJbyYEPEhHndqzpoxE8F9AjXu2vCE5Oa -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:07 2025 by rpki-client