$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json) Hash identifier: bC7FxQRix/kix7jGK00xfwtlqlXbo9jg52jdf2qu4js= Subject key identifier: 3C:EA:2B:73:E0:2C:E8:F2:D5:4C:34:B5:BC:36:09:BA:4D:4B:40:79 Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft Manifest number: 1F91 Signing time: Sun 10 Aug 2025 16:02:25 +0000 Manifest this update: Sun 10 Aug 2025 16:02:24 +0000 Manifest next update: Sun 17 Aug 2025 16:02:24 +0000 Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: LPria+AoSoiST1vR1vOKmvRgt9tTywGCtIcavzSdLWA=) 2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: oRm2blLyiJS/QAfKc6f3YExIUJkkRHUJrPUQp9W2Q+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: Aug 10 16:02:24 2025 GMT Not After : Aug 17 16:02:24 2025 GMT Subject: CN=6898c290-e3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:a1:5c:2c:ae:8c:89:d2:46:d9:60:4e:fe: 99:26:b7:03:19:85:18:3f:c8:74:b5:a3:e2:76:ba: 0b:ab:54:bd:e7:22:46:62:46:08:80:dc:54:6e:30: a5:e0:8f:d9:27:97:84:3b:b4:cc:8f:8b:c3:d0:0c: db:83:6a:09:9d:6f:eb:f0:0e:24:d9:af:d7:95:5a: 23:a2:90:bd:e5:bb:b1:fc:3e:96:2b:0f:84:75:07: 00:b8:a9:82:6d:55:4b:08:38:a5:49:a4:2c:df:9a: b0:c8:f7:d7:ae:69:c5:bd:d8:a3:9a:29:52:cb:f2: ad:3f:44:ad:e0:47:8a:c8:5b:98:96:c4:81:e2:73: ff:14:7c:c5:43:59:a6:88:9f:a9:b0:98:25:95:9a: 49:fd:5c:3e:66:1a:14:6a:fa:f1:cf:ab:ea:46:69: 24:2b:23:f6:b6:b1:68:61:a2:f6:f0:bf:1f:4e:3b: 04:93:b5:cd:b2:22:dc:96:bb:d5:f6:32:28:28:18: b5:7b:e1:76:31:07:04:3e:78:28:b4:94:56:9f:e7: 81:6c:3e:3b:42:5e:f4:d8:69:71:a5:c0:9c:80:47: d7:37:a6:44:3d:ea:1a:bc:a9:32:8f:e5:94:aa:09: fd:d3:a5:e1:bb:c8:55:ea:10:f6:88:22:49:f9:19: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:2B:73:E0:2C:E8:F2:D5:4C:34:B5:BC:36:09:BA:4D:4B:40:79 X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4b:51:5b:f4:55:66:e6:57:b8:b5:89:53:4c:62:91:26:41: aa:3a:95:ab:d4:83:4d:84:4e:4f:26:fb:49:7c:10:75:91:92: 74:6b:3d:a8:8d:4a:4d:b6:23:eb:7a:33:d9:c7:9c:d3:db:75: f2:21:ab:d8:81:98:c9:94:08:7c:8b:d4:77:10:cf:3e:dd:03: 72:5c:c0:18:87:85:5a:e9:0c:c5:9f:d3:d2:92:5f:78:4b:1a: 9b:3d:fd:a6:88:99:9c:f8:fe:7a:b2:7c:7d:ae:26:e0:ac:dd: 78:79:c9:21:41:34:de:64:cc:5d:7c:da:5b:85:c2:c1:a6:73: 9a:c0:c7:4a:f6:b6:98:84:4d:5d:4f:e2:56:0e:ef:08:61:ff: 30:b9:ae:b8:a4:d9:77:4d:b2:d6:d4:f1:7b:d7:ff:f6:3d:5d: 4e:b2:cb:9d:dc:7e:d7:89:4f:97:f8:bd:05:ba:d7:8d:04:c4: 20:ed:d8:d2:15:e7:25:e2:78:ea:68:80:fe:e5:e1:ad:1f:91: 2d:bd:57:ce:c1:17:ea:8f:e5:ed:ee:e2:00:bc:d4:7b:87:38: 33:83:f3:bd:dc:b4:20:ad:fe:74:41:fa:78:d8:82:e1:0c:72: 0b:7d:b4:23:a1:1f:18:b0:d9:97:80:28:21:e8:e9:57:8b:bf: 0e:ae:c4:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjUwODEwMTYwMjI0WhcNMjUwODE3MTYwMjI0WjAYMRYwFAYD VQQDEw02ODk4YzI5MC1lM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNyhXCyujInSRtlgTv6ZJrcDGYUYP8h0taPidroLq1S95yJGYkYIgNxUbjCl 4I/ZJ5eEO7TMj4vD0Azbg2oJnW/r8A4k2a/XlVojopC95bux/D6WKw+EdQcAuKmC bVVLCDilSaQs35qwyPfXrmnFvdijmilSy/KtP0St4EeKyFuYlsSB4nP/FHzFQ1mm iJ+psJgllZpJ/Vw+ZhoUavrxz6vqRmkkKyP2trFoYaL28L8fTjsEk7XNsiLclrvV 9jIoKBi1e+F2MQcEPngotJRWn+eBbD47Ql702GlxpcCcgEfXN6ZEPeoavKkyj+WU qgn906Xhu8hV6hD2iCJJ+RmPTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzqK3Pg LOjy1Uw0tbw2CbpNS0B5MB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNj Z3lqRkM2ME83dHpabnk1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiS1Fb9FVm5le4tYlTTGKRJkGqOpWr1INNhE5PJvtJfBB1kZJ0az2o jUpNtiPrejPZx5zT23XyIavYgZjJlAh8i9R3EM8+3QNyXMAYh4Va6QzFn9PSkl94 SxqbPf2miJmc+P56snx9ribgrN14eckhQTTeZMxdfNpbhcLBpnOawMdK9raYhE1d T+JWDu8IYf8wua64pNl3TbLW1PF71//2PV1Ossud3H7XiU+X+L0FuteNBMQg7djS Fecl4njqaID+5eGtH5EtvVfOwRfqj+Xt7uIAvNR7hzgzg/O93LQgrf50Qfp42ILh DHILfbQjoR8YsNmXgCgh6OlXi78OrsQs -----END CERTIFICATE-----Generated at Sun Aug 10 18:26:20 2025 by rpki-client