$ rpki-client -vvf rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft File: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft (raw, json) Hash identifier: I0J/IoY3eZ8fXJCdZAdgPRMw/rHT9vnVvqtr0DFFQlQ= Subject key identifier: 7D:55:56:4E:05:B3:AD:93:5D:80:35:B3:3D:05:23:3E:37:F4:1B:AA Authority key identifier: E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 Certificate issuer: /CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft Manifest number: 03B6 Signing time: Mon 11 Aug 2025 00:54:21 +0000 Manifest this update: Mon 11 Aug 2025 00:54:21 +0000 Manifest next update: Mon 18 Aug 2025 00:54:21 +0000 Files and hashes: 1: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl (hash: N6cDEcW41BJ2O/MUbEccsMfG6tHb+dB8SVl6ZzE/NH0=) 2: 6664BEB29F8611ECBE806D30C4F9AE02.roa (hash: JfmyzR7WR8BiLmwxCtB0fOXl6mP+OqTxhoVtIYHhkY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170533, serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Validity Not Before: Aug 11 00:54:21 2025 GMT Not After : Aug 18 00:54:21 2025 GMT Subject: CN=68993f3d-2bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:4c:56:f3:7d:11:98:4f:bd:bd:dc:28:ab: c0:28:06:0e:e1:6f:5a:80:9a:9f:16:1f:e9:b6:5f: 2c:eb:99:47:fa:35:9b:c8:88:a1:42:25:09:95:73: 96:a7:76:ee:87:82:03:5e:69:6c:23:f1:28:96:31: d5:6a:5a:13:e3:0d:7e:9b:d7:df:4f:3a:92:6b:e2: 13:74:08:b5:db:dd:88:cb:04:36:0b:9e:ea:a7:00: 55:b4:0f:11:64:7f:6b:2f:ba:34:aa:a1:eb:7b:48: 04:99:1d:ce:7b:92:6b:bb:57:45:52:bc:f8:2c:b2: a0:27:ee:9c:4e:63:9a:4e:c0:3b:55:ac:65:57:7a: d4:b2:f4:1c:a5:20:d5:c2:0d:1f:f5:0f:c0:7c:76: f0:3b:83:37:10:e8:07:34:a9:97:1b:e5:49:d9:b0: 39:f2:a6:74:89:6f:f0:0f:1d:bb:29:ac:59:2e:d0: 66:67:a8:a6:c7:88:8f:ac:7c:ce:f7:e3:fe:a7:7b: ce:62:52:61:ac:e0:90:43:46:69:96:fa:48:b2:97: e1:83:f5:a1:7d:d6:51:42:96:31:44:86:20:5e:7b: c0:76:b0:8a:b2:e6:a5:8e:30:ca:62:07:d7:4b:67: b0:43:d0:d5:ea:18:bd:5e:51:93:07:d8:74:8a:6e: da:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:55:56:4E:05:B3:AD:93:5D:80:35:B3:3D:05:23:3E:37:F4:1B:AA X509v3 Authority Key Identifier: keyid:E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:26:98:73:72:71:7d:9f:64:8f:c9:b6:5d:70:ac:9a:b4:d6: 8e:d5:13:38:ca:47:03:86:65:07:9a:31:47:0d:ff:e9:a7:90: d3:6d:3e:88:c8:d0:84:84:10:77:d6:66:bc:ae:6a:5e:f7:c9: 18:5f:e3:60:f5:2a:5c:22:4d:d5:69:9c:e5:32:3c:98:9e:bd: b3:2f:9e:bf:8f:e8:c6:2b:1a:76:25:26:e7:d6:b1:a4:e9:90: 88:f1:4c:1a:0f:62:ef:70:50:64:ac:30:b6:84:79:b9:3f:5c: 35:fc:4f:50:fc:80:31:02:06:26:a1:09:7e:5d:0f:2c:f2:ca: 30:0c:08:d7:c0:db:60:b1:c5:05:15:07:06:01:dc:a7:0c:b5: b3:40:5f:c5:be:3a:2d:54:f2:66:bb:67:7a:e0:ed:ef:ab:af: 2c:1d:0a:a9:6e:cf:55:7e:d9:f9:98:da:3d:4f:e6:ad:3a:8e: 34:7a:cb:1c:d9:c3:10:86:cf:32:6a:10:70:8f:fc:be:99:f3: 30:4d:d1:b4:f7:3e:4d:c9:4d:9e:59:95:1e:97:3e:95:e9:be: 44:17:78:f1:50:62:f5:5f:72:71:30:a9:5f:76:d0:af:02:09: c4:41:19:b4:7b:02:9e:2a:9c:7c:6f:13:f8:69:e0:70:c8:fd: 69:84:eb:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1MzMxMTAvBgNVBAUTKEU1OEY5OEUzQzYxNDIxNDY1NDUzQUM0MjU1RjBBRkIw QUQ5NUQyNDYwHhcNMjUwODExMDA1NDIxWhcNMjUwODE4MDA1NDIxWjAYMRYwFAYD VQQDEw02ODk5M2YzZC0yYmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUdMVvN9EZhPvb3cKKvAKAYO4W9agJqfFh/ptl8s65lH+jWbyIihQiUJlXOW p3buh4IDXmlsI/EoljHValoT4w1+m9ffTzqSa+ITdAi1292IywQ2C57qpwBVtA8R ZH9rL7o0qqHre0gEmR3Oe5Jru1dFUrz4LLKgJ+6cTmOaTsA7VaxlV3rUsvQcpSDV wg0f9Q/AfHbwO4M3EOgHNKmXG+VJ2bA58qZ0iW/wDx27KaxZLtBmZ6imx4iPrHzO 9+P+p3vOYlJhrOCQQ0ZplvpIspfhg/WhfdZRQpYxRIYgXnvAdrCKsualjjDKYgfX S2ewQ9DV6hi9XlGTB9h0im7aswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1VVk4F s62TXYA1sz0FIz439BuqMB8GA1UdIwQYMBaAFOWPmOPGFCFGVFOsQlXwr7CtldJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDUzMy8yMkVEMkM5QTlG ODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlVWlVVNnhDVmZDdnNLMlYw a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZLVk0OFlVSVVaVVU2eENWZkN2c0syVjBrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDUzMy8yMkVEMkM5QTlGODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlV WlVVNnhDVmZDdnNLMlYwa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+JphzcnF9n2SPybZdcKyatNaO1RM4ykcDhmUHmjFHDf/pp5DTbT6I yNCEhBB31ma8rmpe98kYX+Ng9SpcIk3VaZzlMjyYnr2zL56/j+jGKxp2JSbn1rGk 6ZCI8UwaD2LvcFBkrDC2hHm5P1w1/E9Q/IAxAgYmoQl+XQ8s8sowDAjXwNtgscUF FQcGAdynDLWzQF/FvjotVPJmu2d64O3vq68sHQqpbs9Vftn5mNo9T+atOo40essc 2cMQhs8yahBwj/y+mfMwTdG09z5NyU2eWZUelz6V6b5EF3jxUGL1X3JxMKlfdtCv AgnEQRm0ewKeKpx8bxP4aeBwyP1phOt7 -----END CERTIFICATE-----Generated at Mon Aug 11 07:25:57 2025 by rpki-client