$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft File: Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft (raw, json) Hash identifier: PO9E6cdAjXxazBWKMNYTMW1Bv4Etb3Sh3FdHKl9lqz4= Subject key identifier: 68:99:6D:4C:9E:C3:7E:FE:7B:4A:3B:9F:E3:82:6B:66:EF:32:FC:64 Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C Certificate issuer: /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Certificate serial: 060E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft Manifest number: 0605 Signing time: Sun 10 Aug 2025 22:57:08 +0000 Manifest this update: Sun 10 Aug 2025 22:57:08 +0000 Manifest next update: Sun 17 Aug 2025 22:57:08 +0000 Files and hashes: 1: Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl (hash: X2ufFcCa84jHu5OI5aw5q5KXTYuWs4YqoGS6L8Vk4/w=) 2: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (hash: Ck3Q3b0m7wZfc35rCMLbisQ7sVgiMLOPm+0PDdt1xrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Validity Not Before: Aug 10 22:57:08 2025 GMT Not After : Aug 17 22:57:08 2025 GMT Subject: CN=689923c4-1eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b3:e1:56:2a:a0:de:f4:ab:86:26:6a:e5:90: 03:8a:c0:db:a7:bc:21:14:a1:c5:ce:50:be:1b:96: dc:0f:c5:c9:0f:cb:fe:dc:d6:40:47:d1:b9:f6:d8: 12:e6:56:8e:21:18:80:b0:c0:68:19:7e:d8:53:7b: ba:ad:94:6e:10:21:f6:dd:b6:d5:39:a3:d9:ae:80: 9c:31:1d:9d:26:8d:3e:89:c7:e1:bb:c6:44:33:6d: 8b:80:9a:ac:d5:e9:30:62:a7:38:47:d4:2e:31:96: 48:3b:6e:b5:fb:db:3a:d7:f3:e7:4e:96:3d:fa:43: dc:ad:b5:48:e8:07:f5:3a:b9:6c:c4:18:0b:95:90: 5f:42:06:09:11:02:f3:72:1f:21:8d:ab:76:ca:bd: bf:fb:2e:98:eb:9d:ea:35:0d:5e:e4:83:df:1d:c1: 18:bc:81:3d:31:b8:e7:7d:c0:ea:db:09:85:9e:9e: 1b:00:82:ec:2a:ec:20:b5:f6:36:22:52:f4:20:1f: 62:53:60:9e:9b:73:c3:e3:c1:51:f8:7d:bd:cf:2b: 76:6e:d0:0c:0b:c9:d2:43:a2:ba:5b:f7:5d:05:87: 99:74:7a:1f:3c:1b:31:87:22:9a:10:4e:39:0f:83: 29:39:cf:af:59:8e:28:da:f6:ec:51:b1:15:33:69: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:99:6D:4C:9E:C3:7E:FE:7B:4A:3B:9F:E3:82:6B:66:EF:32:FC:64 X509v3 Authority Key Identifier: keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:fa:40:76:28:33:ea:70:a6:17:42:bc:b2:5e:97:7b:43:05: e6:82:bb:5b:48:0c:cc:a7:5a:7f:0c:51:06:1a:16:29:b3:0f: 1e:85:1e:e9:55:60:39:b8:2c:23:f9:6c:00:19:96:01:cb:3b: 6c:3a:4d:63:c4:aa:87:71:14:e2:4a:f8:77:b2:8e:b7:e3:93: ee:de:d5:35:d6:b8:71:a0:db:f2:6d:b8:22:d5:57:b5:ec:94: d8:67:e7:6e:b9:18:96:71:9a:84:76:4e:e8:a9:99:e2:a5:f4: 30:c2:47:ac:29:06:56:cd:f0:6d:ed:f6:15:6d:d5:01:ec:8b: 2b:54:d9:99:5b:aa:14:8e:1f:22:0d:3a:af:cf:97:c6:f0:13: 81:b2:64:95:09:f6:f9:c3:32:9a:b2:78:62:1d:4e:e4:fc:67: 8c:05:93:4b:bf:df:82:dd:c2:a6:b8:e6:3d:3c:9c:59:80:ac: 29:e7:96:a0:fe:b0:b2:ee:f1:da:5c:d2:19:c6:d7:d2:2f:60: ae:50:07:e8:75:51:e9:bf:2b:2b:b9:3e:de:2c:96:4e:b2:15: 22:c9:5a:70:9d:1a:42:7a:42:01:c8:1f:c7:8d:88:8b:c9:10: 9b:60:46:84:ac:2e:2d:ec:86:7e:d3:23:c2:9c:87:a3:ca:ec: e7:9c:e7:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE1RjIxMTAvBgNVBAUTKDYzODJCNTEzMzQ4MzE1RDVBRjNGMTMwRUM1NEMxREE4 NjcyODhDMkMwHhcNMjUwODEwMjI1NzA4WhcNMjUwODE3MjI1NzA4WjAYMRYwFAYD VQQDEw02ODk5MjNjNC0xZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87PhViqg3vSrhiZq5ZADisDbp7whFKHFzlC+G5bcD8XJD8v+3NZAR9G59tgS 5laOIRiAsMBoGX7YU3u6rZRuECH23bbVOaPZroCcMR2dJo0+icfhu8ZEM22LgJqs 1ekwYqc4R9QuMZZIO261+9s61/PnTpY9+kPcrbVI6Af1OrlsxBgLlZBfQgYJEQLz ch8hjat2yr2/+y6Y653qNQ1e5IPfHcEYvIE9MbjnfcDq2wmFnp4bAILsKuwgtfY2 IlL0IB9iU2Cem3PD48FR+H29zyt2btAMC8nSQ6K6W/ddBYeZdHofPBsxhyKaEE45 D4MpOc+vWY4o2vbsUbEVM2nu6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiZbUye w37+e0o7n+OCa2bvMvxkMB8GA1UdIwQYMBaAFGOCtRM0gxXVrz8TDsVMHahnKIws MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTVGMi81NjMyMkQ5OEI4 OTgxMUVCQUQ2QzFENDhDNEY5QUUwMi9ZNEsxRXpTREZkV3ZQeE1PeFV3ZHFHY29q Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0SzFFelNERmRXdlB4TU94VXdkcUdjb2pDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTVGMi81NjMyMkQ5OEI4OTgxMUVCQUQ2QzFENDhDNEY5QUUwMi9ZNEsxRXpTREZk V3ZQeE1PeFV3ZHFHY29qQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI+kB2KDPqcKYXQryyXpd7QwXmgrtbSAzMp1p/DFEGGhYpsw8ehR7p VWA5uCwj+WwAGZYByztsOk1jxKqHcRTiSvh3so6345Pu3tU11rhxoNvybbgi1Ve1 7JTYZ+duuRiWcZqEdk7oqZnipfQwwkesKQZWzfBt7fYVbdUB7IsrVNmZW6oUjh8i DTqvz5fG8BOBsmSVCfb5wzKasnhiHU7k/GeMBZNLv9+C3cKmuOY9PJxZgKwp55ag /rCy7vHaXNIZxtfSL2CuUAfodVHpvysruT7eLJZOshUiyVpwnRpCekIByB/HjYiL yRCbYEaErC4t7IZ+0yPCnIejyuznnOeJ -----END CERTIFICATE-----Generated at Mon Aug 11 07:33:46 2025 by rpki-client