$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json) Hash identifier: fc4PeHPOY+V42BuGFAQG6Ag03HpULgoUA5UUDyqWrD4= Subject key identifier: 3F:FD:A3:C2:76:A8:F0:9C:8A:8E:C2:E0:8E:1E:25:78:9D:53:94:C1 Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft Manifest number: 04DD Signing time: Sat 09 Aug 2025 00:15:12 +0000 Manifest this update: Sat 09 Aug 2025 00:15:12 +0000 Manifest next update: Sat 16 Aug 2025 00:15:12 +0000 Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: nr8cEwJgvskJE4Et7XOETvNVqIrRecE08mWSyysioJ0=) 2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ejQetAzLgqVtDolBJZWz4Zc5LEXRfg3VkvX111clMEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Validity Not Before: Aug 9 00:15:12 2025 GMT Not After : Aug 16 00:15:12 2025 GMT Subject: CN=68969310-4793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:69:27:ed:5b:6d:69:25:9a:2f:bc:2d:9d:d1: 9d:02:db:ec:7a:a7:aa:c8:73:3e:5e:09:e0:b0:8c: db:3d:87:6d:ef:fa:11:a0:c0:32:69:50:07:a6:62: 16:9c:a7:7b:97:89:08:27:97:59:9b:f9:59:1c:60: 93:69:26:f4:8c:ea:81:6e:97:bc:9a:91:9b:f2:41: ed:bc:34:96:79:29:cc:94:cc:2c:5b:c1:f8:f7:b7: 12:04:96:6b:77:dd:d4:9c:95:36:26:7c:34:30:24: 8e:71:4f:da:a1:a8:a8:bf:2f:12:03:7d:45:cb:66: ac:63:e0:b0:f8:5e:33:a2:08:4e:f2:31:b2:72:f5: 7b:33:6c:3d:c8:ac:a8:c2:f4:08:4c:eb:06:d9:82: 92:41:70:e3:95:76:ee:57:93:09:7d:03:e0:5b:c0: 5b:09:86:e0:24:ee:88:b8:25:e2:8d:07:8f:00:86: 0b:69:45:45:f9:cf:70:f2:48:9e:c2:03:65:25:d3: b1:66:46:f6:af:f5:e0:1b:81:11:5a:13:a8:b4:4b: 9c:d1:a7:c7:bd:98:b7:54:70:8e:20:7f:f4:0b:76: ba:ee:4e:f9:8e:98:bf:6f:c2:17:2e:ec:b3:0b:3e: ee:4f:0b:84:02:03:08:9d:46:08:da:47:da:fa:4a: 29:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FD:A3:C2:76:A8:F0:9C:8A:8E:C2:E0:8E:1E:25:78:9D:53:94:C1 X509v3 Authority Key Identifier: keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:17:80:f1:ac:0f:6b:57:6e:0f:44:e8:76:2d:b6:0c:8f:3f: f3:b3:a5:ff:77:3d:cc:0e:83:76:20:c2:1b:74:ac:5d:39:18: 7b:9e:34:02:c1:8a:70:12:d3:ef:44:4a:2d:b5:20:ac:07:e1: b7:f0:ca:3f:56:03:79:22:59:1e:7b:f3:71:4c:32:d3:dd:77: 13:8d:8b:ca:53:3b:3a:7a:75:69:ea:75:f3:3a:6c:3b:d8:56: c6:a8:65:2f:b8:1f:28:b6:97:ff:a6:85:74:00:d0:f3:2d:8f: 52:b1:0c:a5:b9:6d:b5:e2:56:4a:1b:b7:00:7b:00:1c:04:74: f3:e2:93:53:73:a4:fc:5d:33:b0:74:ae:09:34:cf:8d:1b:e5: 11:a5:95:33:90:21:6b:98:c2:d1:75:33:1c:e0:41:05:31:81: d5:2a:f7:22:e4:8c:ad:f3:2a:02:9a:31:72:70:e6:b6:4b:ed: af:c5:86:6c:a6:5e:1d:50:05:79:a3:1c:3d:fe:50:3b:2b:80: b0:89:01:8b:86:8f:b5:a7:e0:50:c1:e5:27:a2:ce:f7:07:44: 43:01:96:10:03:5a:67:86:78:a6:67:7d:9d:ba:20:77:d5:2b: 9e:78:12:80:c3:a0:93:e3:f0:8f:02:80:f1:8d:78:2b:15:fa: cd:c1:66:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4 NEMzRjI2MEIwHhcNMjUwODA5MDAxNTEyWhcNMjUwODE2MDAxNTEyWjAYMRYwFAYD VQQDEw02ODk2OTMxMC00NzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+mkn7VttaSWaL7wtndGdAtvseqeqyHM+XgngsIzbPYdt7/oRoMAyaVAHpmIW nKd7l4kIJ5dZm/lZHGCTaSb0jOqBbpe8mpGb8kHtvDSWeSnMlMwsW8H497cSBJZr d93UnJU2Jnw0MCSOcU/aoaiovy8SA31Fy2asY+Cw+F4zoghO8jGycvV7M2w9yKyo wvQITOsG2YKSQXDjlXbuV5MJfQPgW8BbCYbgJO6IuCXijQePAIYLaUVF+c9w8kie wgNlJdOxZkb2r/XgG4ERWhOotEuc0afHvZi3VHCOIH/0C3a67k75jpi/b8IXLuyz Cz7uTwuEAgMInUYI2kfa+kopAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/9o8J2 qPCcio7C4I4eJXidU5TBMB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL TlFEdHliUUtWR3FFd19KZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXF4DxrA9rV24PROh2LbYMjz/zs6X/dz3MDoN2IMIbdKxdORh7njQC wYpwEtPvREottSCsB+G38Mo/VgN5Ilkee/NxTDLT3XcTjYvKUzs6enVp6nXzOmw7 2FbGqGUvuB8otpf/poV0ANDzLY9SsQyluW214lZKG7cAewAcBHTz4pNTc6T8XTOw dK4JNM+NG+URpZUzkCFrmMLRdTMc4EEFMYHVKvci5Iyt8yoCmjFycOa2S+2vxYZs pl4dUAV5oxw9/lA7K4CwiQGLho+1p+BQweUnos73B0RDAZYQA1pnhnimZ32duiB3 1SueeBKAw6CT4/CPAoDxjXgrFfrNwWYZ -----END CERTIFICATE-----Generated at Sun Aug 10 18:15:34 2025 by rpki-client