$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft File: lYpO2dfWT6yHvRbsijZXHhovUIo.mft (raw, json) Hash identifier: IaiZlw4B2gcTZX2rqqFJOviqJTkNWR1pZzpzFuopivM= Subject key identifier: B4:54:70:AF:CF:7C:3D:5A:BA:30:77:47:8B:43:0B:1A:83:81:40:3A Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A Certificate issuer: /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Certificate serial: 0CD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft Manifest number: 0CBD Signing time: Wed 06 Aug 2025 18:23:04 +0000 Manifest this update: Wed 06 Aug 2025 18:23:03 +0000 Manifest next update: Wed 13 Aug 2025 18:23:03 +0000 Files and hashes: 1: lYpO2dfWT6yHvRbsijZXHhovUIo.crl (hash: gyQF9AnNQygXY4/QH4DrDSuWEBHctxo7rhAhkCTp2JI=) 2: C3667DBAE6A711EFA8D1A077C4F9AE02.roa (hash: kWiJy9rj9ZAvpP5XFFuWkRDE132pW+L/LUIvPA/tzW8=) 3: C2911C74E6A711EFA8D1A077C4F9AE02.roa (hash: g48jQH2Ndz+BJ2g+3DFqKTezsj/596L9PEbikDy8KVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 18:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160EEF, serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Validity Not Before: Aug 6 18:23:03 2025 GMT Not After : Aug 13 18:23:03 2025 GMT Subject: CN=68939d88-5715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:ad:c0:8f:c8:1f:99:6e:ef:93:74:d0:a6: d7:7f:94:57:4d:c5:fa:1f:58:c6:e4:d0:d0:de:dc: 80:85:ad:cb:84:0b:63:17:f2:39:1f:c6:3c:0e:1e: 18:5c:e1:8f:de:8c:bd:2f:1d:1a:d3:36:c9:b5:ee: 02:8b:ff:c9:ca:fc:76:cf:e5:9b:8c:98:26:e8:9b: 21:9d:05:67:67:a8:bb:b2:89:36:3a:8e:06:d7:19: 60:56:64:a2:a7:2c:e9:03:c4:f4:bd:8a:12:f5:f4: 4d:cf:4d:29:79:25:6b:53:01:72:06:fd:00:23:05: 7d:04:d0:8d:a9:4d:50:1e:ef:87:8b:00:1f:26:05: 55:40:c8:48:12:55:aa:9a:c9:ad:eb:b0:b2:52:42: 7a:41:c3:b1:7f:51:99:d4:45:92:ab:d5:52:f7:6c: f8:d3:2c:ea:46:c6:95:75:0c:a3:7f:87:69:dc:06: d8:c6:f1:77:a8:7a:32:09:5d:15:f5:fc:93:cf:13: 31:d9:ba:8d:d3:49:52:55:89:ec:d0:a6:1d:e0:d4: ea:78:5e:b5:b6:2c:8c:aa:97:c1:d1:5c:1d:53:42: 51:9b:f2:62:9e:5c:d7:78:ae:d4:53:4b:0f:7b:20: c9:63:c5:e1:d2:86:27:d1:4a:a9:26:29:aa:9d:75: ff:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:54:70:AF:CF:7C:3D:5A:BA:30:77:47:8B:43:0B:1A:83:81:40:3A X509v3 Authority Key Identifier: keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7a:a2:a8:85:e6:3a:c1:f9:b9:2a:46:f4:0d:5b:8a:2c:9b: 50:25:b4:dc:b3:b6:39:cc:f0:24:27:11:e4:2a:81:ea:57:58: 35:cf:1c:7e:1a:0e:96:11:b7:d8:a0:df:98:09:ad:b7:09:56: c6:59:f2:e1:ec:c8:70:d3:05:4b:f0:8d:1c:27:0f:05:ae:76: 8e:24:fa:7d:ce:9a:80:7a:c6:23:89:a8:76:42:0c:c4:8a:43: 54:6f:3e:ca:13:0f:cd:e3:0e:d3:63:64:23:ed:0f:52:03:52: 88:71:30:79:e4:c7:9d:f2:de:17:3e:7a:2d:c9:9a:13:98:38: ba:94:51:cf:29:ad:78:99:8f:05:5c:2a:f2:fb:a3:d6:f0:1f: 80:e2:be:7d:f8:de:8a:59:c5:a9:b8:4f:79:e4:d9:80:40:01: 9d:7c:5f:9e:6f:88:cf:2c:f5:df:82:a6:d7:92:2d:0a:77:79: 3e:ab:ad:66:36:99:fa:32:17:13:af:b9:03:19:ec:87:1c:8e: 5e:1b:69:cb:b2:41:c8:6e:3a:10:4b:51:f3:da:cd:a2:79:c7: 96:4e:ad:89:f7:0b:5e:7d:70:94:68:9e:e1:45:0b:af:d0:ee: cf:08:98:c2:cc:e2:e1:bd:41:e4:34:45:be:69:d3:7c:df:3a: 13:9e:a0:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBFRUYxMTAvBgNVBAUTKDk1OEE0RUQ5RDdENjRGQUM4N0JEMTZFQzhBMzY1NzFF MUEyRjUwOEEwHhcNMjUwODA2MTgyMzAzWhcNMjUwODEzMTgyMzAzWjAYMRYwFAYD VQQDEw02ODkzOWQ4OC01NzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3KtwI/IH5lu75N00KbXf5RXTcX6H1jG5NDQ3tyAha3LhAtjF/I5H8Y8Dh4Y XOGP3oy9Lx0a0zbJte4Ci//Jyvx2z+WbjJgm6JshnQVnZ6i7sok2Oo4G1xlgVmSi pyzpA8T0vYoS9fRNz00peSVrUwFyBv0AIwV9BNCNqU1QHu+HiwAfJgVVQMhIElWq msmt67CyUkJ6QcOxf1GZ1EWSq9VS92z40yzqRsaVdQyjf4dp3AbYxvF3qHoyCV0V 9fyTzxMx2bqN00lSVYns0KYd4NTqeF61tiyMqpfB0VwdU0JRm/JinlzXeK7UU0sP eyDJY8Xh0oYn0UqpJimqnXX/4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRUcK/P fD1aujB3R4tDCxqDgUA6MB8GA1UdIwQYMBaAFJWKTtnX1k+sh70W7Io2Vx4aL1CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEVFRi82QzRDRDY5MEY4 ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2eUh2UmJzaWpaWEhob3ZV SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZcE8yZGZXVDZ5SHZSYnNpalpYSGhvdlVJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEVFRi82QzRDRDY5MEY4ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2 eUh2UmJzaWpaWEhob3ZVSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCueqKoheY6wfm5Kkb0DVuKLJtQJbTcs7Y5zPAkJxHkKoHqV1g1zxx+ Gg6WEbfYoN+YCa23CVbGWfLh7Mhw0wVL8I0cJw8FrnaOJPp9zpqAesYjiah2QgzE ikNUbz7KEw/N4w7TY2Qj7Q9SA1KIcTB55Med8t4XPnotyZoTmDi6lFHPKa14mY8F XCry+6PW8B+A4r59+N6KWcWpuE955NmAQAGdfF+eb4jPLPXfgqbXki0Kd3k+q61m Npn6MhcTr7kDGeyHHI5eG2nLskHIbjoQS1Hz2s2ieceWTq2J9wtefXCUaJ7hRQuv 0O7PCJjCzOLhvUHkNEW+adN83zoTnqCh -----END CERTIFICATE-----Generated at Thu Aug 7 05:08:07 2025 by rpki-client