$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft File: -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json) Hash identifier: iqhOnwGWxgXzbO2tYInUxY0ZHQA5GJ1zQxnl/6kLcKI= Subject key identifier: 67:93:88:16:3A:72:BC:06:C7:08:A4:63:A1:18:60:2A:20:81:75:35 Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C Certificate issuer: /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Certificate serial: 0B11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft Manifest number: 0B0A Signing time: Wed 06 Aug 2025 19:35:58 +0000 Manifest this update: Wed 06 Aug 2025 19:35:57 +0000 Manifest next update: Wed 13 Aug 2025 19:35:57 +0000 Files and hashes: 1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: Fegpjh7xgZ0CoYgvIzifnSXJdl8Ny+PnwhJYWN0Xt9s=) 2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: gMyJ+7eXQOz2lZ7oRn13QHvOh0RqD5UbZBYLXAXV9no=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2833 (0xb11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC44, serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Validity Not Before: Aug 6 19:35:57 2025 GMT Not After : Aug 13 19:35:57 2025 GMT Subject: CN=6893ae9d-a834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:e7:cf:57:45:e5:66:2f:2c:72:ba:d1:3f: 03:c8:05:42:a4:de:19:cf:95:3a:33:d0:bd:ef:4e: e9:57:d4:a3:0b:87:92:ee:65:48:34:ae:c6:f7:0e: 32:1b:73:52:ce:c3:cd:7e:53:10:62:f8:10:cb:93: e2:e3:af:3b:72:be:4b:13:41:38:bf:f3:c9:f4:8a: 40:bc:4d:de:52:d6:2c:7e:66:94:42:e2:97:11:97: 2b:5d:42:ec:a0:1f:08:d1:c1:9c:1e:b1:3c:7e:ad: 2e:14:bf:7d:90:42:63:3c:c6:29:1c:53:86:a7:df: 60:18:1a:86:c2:c5:7b:40:f5:69:19:d6:33:f5:f1: 6d:a3:80:46:a2:59:1a:24:27:35:83:08:4e:36:b5: 6b:b7:e3:9a:5c:58:6d:7b:f1:37:31:5e:92:01:c6: 88:5f:5a:53:7f:8d:4f:d0:e2:05:78:64:bc:be:05: 17:c7:69:2f:f4:a4:62:b3:44:40:ca:77:e1:fb:7f: 23:94:e9:ba:58:3f:23:40:37:ed:c1:01:8c:42:6a: 51:46:94:14:86:00:2e:65:40:82:80:1a:4b:fe:76: d0:dc:74:9c:6b:73:f0:15:1e:16:67:46:eb:88:23: 27:79:df:26:29:52:42:c0:af:0d:25:47:d5:6e:1e: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:93:88:16:3A:72:BC:06:C7:08:A4:63:A1:18:60:2A:20:81:75:35 X509v3 Authority Key Identifier: keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:47:40:73:f2:8d:55:23:5c:cd:c1:a6:18:6e:79:14:38:c6: 98:5c:87:77:f9:b4:78:48:9c:0d:90:9b:d0:f2:84:ea:08:fd: 4c:d5:8d:94:fc:27:f7:dd:f1:fe:68:e1:88:8b:f8:4e:2d:aa: c7:de:6d:ff:e3:36:eb:f4:78:45:8c:82:be:1a:67:3b:a9:cb: e0:3d:ed:84:93:7d:08:fd:61:f0:f8:72:32:77:7d:b6:43:7f: 4d:03:f5:d8:49:29:68:e7:eb:93:89:92:bc:99:af:36:ae:ca: 4f:49:f1:12:c4:1e:07:7e:08:76:cd:2c:11:e1:ae:00:7c:0c: d1:85:9a:15:43:80:27:29:81:f8:c1:bf:21:4b:3a:8e:37:c7: 53:c4:38:3f:5d:69:df:ef:6a:4e:a6:1a:8b:89:9a:46:50:06: 70:d8:e5:44:78:e4:82:0a:f6:0d:94:eb:ad:20:98:6d:14:57: 17:04:60:ad:20:83:61:91:c2:ed:e0:6a:c8:5c:01:a0:1c:98: a3:3c:6a:3c:15:37:ef:9c:67:70:49:86:ed:92:a7:6c:68:47: 82:08:d0:7e:be:43:7f:d6:33:b8:a5:28:a2:0d:36:d6:17:6d: d2:03:f6:86:be:e2:34:cc:d7:03:3a:a2:dd:20:bc:e7:27:fd: d1:4b:58:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDNDQxMTAvBgNVBAUTKEY5OEVCRTIwNjkwRjJGMkIyMzRBMTU0ODdERDA5NTIx RjNENDc1M0MwHhcNMjUwODA2MTkzNTU3WhcNMjUwODEzMTkzNTU3WjAYMRYwFAYD VQQDEw02ODkzYWU5ZC1hODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro7nz1dF5WYvLHK60T8DyAVCpN4Zz5U6M9C9707pV9SjC4eS7mVINK7G9w4y G3NSzsPNflMQYvgQy5Pi4687cr5LE0E4v/PJ9IpAvE3eUtYsfmaUQuKXEZcrXULs oB8I0cGcHrE8fq0uFL99kEJjPMYpHFOGp99gGBqGwsV7QPVpGdYz9fFto4BGolka JCc1gwhONrVrt+OaXFhte/E3MV6SAcaIX1pTf41P0OIFeGS8vgUXx2kv9KRis0RA ynfh+38jlOm6WD8jQDftwQGMQmpRRpQUhgAuZUCCgBpL/nbQ3HSca3PwFR4WZ0br iCMned8mKVJCwK8NJUfVbh6mJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeTiBY6 crwGxwikY6EYYCoggXU1MB8GA1UdIwQYMBaAFPmOviBpDy8rI0oVSH3QlSHz1HU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0M0NC9DMTYwRkNBQzQ4 MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5c2pTaFZJZmRDVklmUFVk VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZNi1JR2tQTHlzalNoVklmZENWSWZQVWRUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0M0NC9DMTYwRkNBQzQ4MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5 c2pTaFZJZmRDVklmUFVkVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUR0Bz8o1VI1zNwaYYbnkUOMaYXId3+bR4SJwNkJvQ8oTqCP1M1Y2U /Cf33fH+aOGIi/hOLarH3m3/4zbr9HhFjIK+Gmc7qcvgPe2Ek30I/WHw+HIyd322 Q39NA/XYSSlo5+uTiZK8ma82rspPSfESxB4Hfgh2zSwR4a4AfAzRhZoVQ4AnKYH4 wb8hSzqON8dTxDg/XWnf72pOphqLiZpGUAZw2OVEeOSCCvYNlOutIJhtFFcXBGCt IINhkcLt4GrIXAGgHJijPGo8FTfvnGdwSYbtkqdsaEeCCNB+vkN/1jO4pSiiDTbW F23SA/aGvuI0zNcDOqLdILznJ/3RS1hV -----END CERTIFICATE-----Generated at Thu Aug 7 14:51:22 2025 by rpki-client