$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: fe3r/vTtnMR0pQ5QFNR5Q5CV1K5uGXW66bNfhdNSHb0= Subject key identifier: FD:C5:28:75:B3:0C:33:17:8D:D9:A0:AE:38:2E:50:34:27:02:90:95 Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: 0117 Signing time: Sat 09 Aug 2025 05:19:27 +0000 Manifest this update: Sat 09 Aug 2025 05:19:27 +0000 Manifest next update: Sat 16 Aug 2025 05:19:27 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: Wma1s3WnDFZ0e7kLi+HrqybFmhE4AgnHlC3AQyJ2Qks=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: Aug 9 05:19:27 2025 GMT Not After : Aug 16 05:19:27 2025 GMT Subject: CN=6896da5f-f61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:a2:c9:e1:5b:93:74:2a:fb:42:1c:54:54: fb:04:20:ed:c0:24:68:7a:3a:f9:13:96:0c:d3:14: 9e:42:80:db:26:ef:78:2e:a9:2b:72:9a:2b:e4:72: 01:a8:b0:72:07:91:15:8d:60:6b:21:9e:d1:e7:37: 5e:cc:a4:d2:57:62:e3:d9:ca:91:2e:f0:c8:4d:95: f7:6b:d7:4c:48:c4:a0:57:28:15:3e:99:9c:76:a9: ec:0a:a7:95:f3:f9:6b:73:7a:32:33:5b:81:ca:8c: 0c:da:88:a5:66:1e:c0:6f:d5:27:e1:fa:d7:87:94: ce:59:fc:01:24:86:d6:19:cd:f0:41:98:96:02:62: 43:7c:30:9e:64:f0:ce:4d:ed:fb:7e:05:76:05:25: 51:57:13:b9:5e:3c:9d:45:56:4f:39:5e:cc:42:a4: e8:96:66:62:d4:16:87:89:92:bd:fc:ed:0e:03:7d: ab:e6:c1:bd:54:d1:d5:cc:ce:ec:e1:fe:a2:ff:12: 1b:ce:b2:a8:45:2c:7a:ca:c0:3d:91:18:4b:b4:68: 87:98:2a:52:80:ca:a6:5f:9c:5c:4d:cb:0b:0c:df: 03:b3:d1:75:69:30:ad:0a:36:55:66:71:08:08:dc: b6:b5:ec:fc:ce:c0:f8:52:42:a2:51:9b:bb:58:f7: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C5:28:75:B3:0C:33:17:8D:D9:A0:AE:38:2E:50:34:27:02:90:95 X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7f:f3:a5:14:22:a4:0d:33:b4:23:e9:64:4e:5f:9d:d6:bd: 58:c8:e8:5b:c1:39:63:f9:a7:15:40:02:58:2b:64:88:66:31: 31:67:9f:c8:af:fa:37:4c:59:58:c7:13:dd:36:53:01:90:47: 10:8e:d8:1d:34:10:79:ed:7c:99:eb:35:53:77:53:39:30:ed: 3c:4c:f1:5f:34:09:3b:2a:76:7e:91:c2:4e:d3:69:13:a4:83: 36:45:82:1a:6d:a5:de:7d:93:3c:86:78:c8:93:ac:ed:d5:af: 08:6f:9e:cd:f0:db:05:6d:5b:6d:cb:29:f6:52:69:21:06:b8: f9:3b:84:c6:40:f7:58:9c:ae:7c:63:e7:bd:88:0e:8a:43:f0: 20:68:05:a2:2a:71:26:95:31:b5:07:f2:48:6b:88:76:b0:f3: e4:50:a2:81:a7:c2:ee:30:4e:ff:40:74:13:7d:a0:ac:a1:fd: 20:23:54:09:f5:19:8f:3a:0d:12:f9:b2:f8:16:20:c5:e4:1a: 9c:69:66:f9:c6:1f:ad:49:9b:49:fd:69:30:c5:a7:26:b1:0c: d7:34:a0:c1:9a:29:0b:fa:5b:1d:65:b0:f2:90:f4:3e:fb:09: 49:55:ef:b2:0d:86:d1:49:27:78:24:6b:bc:0e:43:69:0e:9d: d9:e4:e5:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjUwODA5MDUxOTI3WhcNMjUwODE2MDUxOTI3WjAYMRYwFAYD VQQDEw02ODk2ZGE1Zi1mNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWqiyeFbk3Qq+0IcVFT7BCDtwCRoejr5E5YM0xSeQoDbJu94Lqkrcpor5HIB qLByB5EVjWBrIZ7R5zdezKTSV2Lj2cqRLvDITZX3a9dMSMSgVygVPpmcdqnsCqeV 8/lrc3oyM1uByowM2oilZh7Ab9Un4frXh5TOWfwBJIbWGc3wQZiWAmJDfDCeZPDO Te37fgV2BSVRVxO5XjydRVZPOV7MQqTolmZi1BaHiZK9/O0OA32r5sG9VNHVzM7s 4f6i/xIbzrKoRSx6ysA9kRhLtGiHmCpSgMqmX5xcTcsLDN8Ds9F1aTCtCjZVZnEI CNy2tez8zsD4UkKiUZu7WPfZbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3FKHWz DDMXjdmgrjguUDQnApCVMB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOf/OlFCKkDTO0I+lkTl+d1r1YyOhbwTlj+acVQAJYK2SIZjExZ5/I r/o3TFlYxxPdNlMBkEcQjtgdNBB57XyZ6zVTd1M5MO08TPFfNAk7KnZ+kcJO02kT pIM2RYIabaXefZM8hnjIk6zt1a8Ib57N8NsFbVttyyn2UmkhBrj5O4TGQPdYnK58 Y+e9iA6KQ/AgaAWiKnEmlTG1B/JIa4h2sPPkUKKBp8LuME7/QHQTfaCsof0gI1QJ 9RmPOg0S+bL4FiDF5BqcaWb5xh+tSZtJ/WkwxacmsQzXNKDBmikL+lsdZbDykPQ+ +wlJVe+yDYbRSSd4JGu8DkNpDp3Z5OW4 -----END CERTIFICATE-----Generated at Sat Aug 9 10:43:42 2025 by rpki-client