$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft File: byPyfwkL70UxgCBy4drPIQ2dQjw.mft (raw, json) Hash identifier: D24TBCvEmieAZXdjhSr5ez495h7+WjoNi3yM62x3IAM= Subject key identifier: 2F:4D:F9:84:5F:BB:F4:5A:FA:8C:D3:6D:5A:16:69:15:7F:C7:86:BA Authority key identifier: 6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C Certificate issuer: /CN=A91AEB80/serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft Manifest number: 0415 Signing time: Tue 05 Aug 2025 00:54:38 +0000 Manifest this update: Tue 05 Aug 2025 00:54:37 +0000 Manifest next update: Tue 12 Aug 2025 00:54:37 +0000 Files and hashes: 1: byPyfwkL70UxgCBy4drPIQ2dQjw.crl (hash: VnYu0PG+Y+oTqORggdUg9eU2byHYhFKnisNFBcxURJM=) 2: 6759C60223C311ED9CF26A56C4F9AE02.roa (hash: hfhgYw3LQAm38USWum4YWAZ6gIly4M1LyEp15dh2XTA=) 3: EE8E0F3AA26711ECAFB48B53C4F9AE02.roa (hash: 3MDrKz+RefMI5j73wYkUuNy3Oa/4hoC/hS0v0G3eEHg=) 4: 6637CBD423C311ED9CF26A56C4F9AE02.roa (hash: DfRsMdJEDtch+C5Yk6n2+rHqExZkbfMsESmjI6z6r5c=) 5: EDE820B6A26711ECAFB48B53C4F9AE02.roa (hash: GJiUmX3/HTWKDyD6ZSjgX6IZE0JTW/U81xlvCFIWxoU=) 6: 6D7FBCBE129111ED81E82D3DC4F9AE02.roa (hash: D3Mr1RF7NLA+SlRnm9qkHlBkKJAhwvA5FpODqeYJRmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEB80, serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C Validity Not Before: Aug 5 00:54:37 2025 GMT Not After : Aug 12 00:54:37 2025 GMT Subject: CN=6891564e-c3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3d:f0:3a:74:f5:c3:57:71:f6:55:be:7d:d2: 86:50:e7:d0:0d:8b:c7:05:f0:e2:8f:1b:f2:44:f6: 1d:2e:69:92:ec:7e:27:ea:7e:b9:02:4f:69:99:8f: a6:89:14:62:75:81:07:ab:e3:15:1c:29:02:17:bd: 65:63:88:90:01:7a:fd:7d:46:12:11:51:4c:e7:a1: 3b:f7:05:12:51:de:46:48:6a:9d:b3:50:df:ce:8b: 2e:56:b4:c1:a1:2e:c8:d5:f9:53:18:39:b2:09:b1: db:2c:ea:99:d2:44:ce:04:bb:20:3b:6a:ae:3d:3a: 89:71:47:49:66:c0:da:b9:43:22:5e:b2:5b:a1:a5: 89:cf:fe:e1:72:fe:cb:18:4b:d3:bb:03:8a:2c:09: ce:20:1d:2b:37:85:fe:b3:42:99:45:40:f7:14:92: 9b:9e:3c:1c:29:c1:31:cf:c2:e3:67:c5:11:58:3a: 20:d1:f4:0d:ff:4e:f8:82:65:25:26:2e:cc:e5:b2: 4d:42:7b:c1:90:b2:3c:3f:8d:05:ca:f9:36:ab:bf: 1e:f2:b3:0b:f8:3c:56:6a:9a:2b:20:d3:e3:04:49: 78:eb:74:18:79:5d:34:84:10:8c:08:fb:70:78:3b: 29:20:f5:d7:e1:99:e2:a8:60:e5:c7:18:6d:cd:1e: c5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4D:F9:84:5F:BB:F4:5A:FA:8C:D3:6D:5A:16:69:15:7F:C7:86:BA X509v3 Authority Key Identifier: keyid:6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:23:ef:23:38:84:80:f6:f2:11:f5:bd:9f:e8:99:06:25:7c: 15:11:da:3f:14:32:ad:9f:21:80:34:db:87:4b:eb:92:41:28: 18:c8:26:31:31:24:f2:7b:25:d5:c5:eb:ea:71:3e:4d:32:d5: 3a:40:16:59:c3:be:38:14:ab:1e:6e:71:76:5e:22:4e:08:70: 83:a5:22:1e:b4:d2:98:8f:db:4b:f1:87:0e:bf:f6:f4:21:63: c6:d1:38:2f:e3:4f:e8:c4:f4:e7:78:67:2d:a1:94:43:a2:b7: ee:c1:6d:6b:79:af:2a:69:a9:f1:9a:38:bb:38:79:37:90:f3: 16:d6:d0:19:a5:4a:70:66:de:d2:f3:63:cb:80:96:90:f0:2e: 5c:20:ca:7a:73:63:6d:41:4c:1b:3f:a2:20:74:fc:48:99:5e: 4c:53:6a:ce:09:8e:de:6b:d5:75:57:a9:a3:ae:97:5e:00:94: 35:52:ba:70:e4:aa:bd:13:93:7a:11:4a:46:be:7a:dc:77:b0: d1:c3:f9:38:78:df:31:ab:a8:6b:e6:78:09:11:c1:67:d7:5a: c4:c3:aa:55:85:13:4f:4a:fe:74:22:57:10:47:6d:f0:d1:ee: f1:cd:ea:8b:4e:e9:0f:cf:46:56:1c:b7:47:a6:2c:df:62:3e: 43:7a:f0:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCODAxMTAvBgNVBAUTKDZGMjNGMjdGMDkwQkVGNDUzMTgwMjA3MkUxREFDRjIx MEQ5RDQyM0MwHhcNMjUwODA1MDA1NDM3WhcNMjUwODEyMDA1NDM3WjAYMRYwFAYD VQQDEw02ODkxNTY0ZS1jM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5T3wOnT1w1dx9lW+fdKGUOfQDYvHBfDijxvyRPYdLmmS7H4n6n65Ak9pmY+m iRRidYEHq+MVHCkCF71lY4iQAXr9fUYSEVFM56E79wUSUd5GSGqds1DfzosuVrTB oS7I1flTGDmyCbHbLOqZ0kTOBLsgO2quPTqJcUdJZsDauUMiXrJboaWJz/7hcv7L GEvTuwOKLAnOIB0rN4X+s0KZRUD3FJKbnjwcKcExz8LjZ8URWDog0fQN/074gmUl Ji7M5bJNQnvBkLI8P40Fyvk2q78e8rML+DxWaporINPjBEl463QYeV00hBCMCPtw eDspIPXX4ZniqGDlxxhtzR7FMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9N+YRf u/Ra+ozTbVoWaRV/x4a6MB8GA1UdIwQYMBaAFG8j8n8JC+9FMYAgcuHazyENnUI8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUI4MC83NzYyRkM1QTdF NkMxMUVDODczRDY3ODNDNEY5QUUwMi9ieVB5ZndrTDcwVXhnQ0J5NGRyUElRMmRR ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5UHlmd2tMNzBVeGdDQnk0ZHJQSVEyZFFqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUI4MC83NzYyRkM1QTdFNkMxMUVDODczRDY3ODNDNEY5QUUwMi9ieVB5ZndrTDcw VXhnQ0J5NGRyUElRMmRRancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDI+8jOISA9vIR9b2f6JkGJXwVEdo/FDKtnyGANNuHS+uSQSgYyCYx MSTyeyXVxevqcT5NMtU6QBZZw744FKsebnF2XiJOCHCDpSIetNKYj9tL8YcOv/b0 IWPG0Tgv40/oxPTneGctoZRDorfuwW1rea8qaanxmji7OHk3kPMW1tAZpUpwZt7S 82PLgJaQ8C5cIMp6c2NtQUwbP6IgdPxImV5MU2rOCY7ea9V1V6mjrpdeAJQ1Urpw 5Kq9E5N6EUpGvnrcd7DRw/k4eN8xq6hr5ngJEcFn11rEw6pVhRNPSv50IlcQR23w 0e7xzeqLTukPz0ZWHLdHpizfYj5DevCW -----END CERTIFICATE-----Generated at Wed Aug 6 11:12:12 2025 by rpki-client