$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json) Hash identifier: A0NhfJ/Z41E3xPoi+jiclYzVDJCyHTpz2Z8+Tj3p/Ns= Subject key identifier: 49:06:E9:4C:CE:60:B6:B8:5B:F1:56:7C:B5:23:8C:CF:02:24:DE:11 Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft Manifest number: 0112 Signing time: Thu 07 Aug 2025 05:27:32 +0000 Manifest this update: Thu 07 Aug 2025 05:27:31 +0000 Manifest next update: Thu 14 Aug 2025 05:27:31 +0000 Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: Zdq0D6/c9wx2ujtz3gLPWChesQzXQySREPhQ7Jwb3QM=) 2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: U37kWMCNqNpu+UU1MaVXsy3rFn8/VgyQ4MzDX4Ugs7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Validity Not Before: Aug 7 05:27:31 2025 GMT Not After : Aug 14 05:27:31 2025 GMT Subject: CN=68943943-c94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:e6:8f:0e:56:04:ed:b2:f7:1e:b6:a6:6a: 52:d3:97:37:8b:00:3a:ff:06:89:1a:ef:d0:b5:f2: 9d:4b:f1:a5:54:46:4c:65:4e:26:b5:9f:9b:f7:08: 95:cf:d7:c0:50:10:5a:7b:05:10:09:ce:57:1d:cf: e1:6d:a7:37:c0:ed:cb:49:ce:2a:2b:d3:86:3d:8b: 4f:e6:56:2f:06:4f:13:41:c6:00:01:cb:65:56:7d: 5d:f9:e5:b8:ec:33:14:c8:c2:62:95:c7:51:a4:9f: a3:c4:c0:b7:99:67:a6:d6:ee:ff:5f:f3:50:62:99: 10:d4:c9:7b:e0:09:72:a0:21:a7:fd:6d:b4:5e:7a: 21:1d:8a:f4:96:12:69:1e:12:9d:ba:07:d8:ab:57: 84:de:32:a3:e7:cb:c1:cb:9a:96:dc:14:85:94:b0: 38:17:4f:9a:d4:0e:e7:4f:67:73:7b:b2:5a:50:b6: 88:9d:9c:23:bf:34:1b:87:a9:04:8e:2c:be:b4:2c: 02:b0:bb:8f:86:ac:99:96:7c:79:c7:b1:0f:df:3d: 15:09:1e:43:42:3c:7c:17:0c:3d:a6:4a:6c:b7:0f: d7:04:5f:90:40:92:96:81:53:d0:4d:d7:0a:08:91: 48:83:19:28:44:16:0f:c6:07:e4:87:66:56:2c:11: d7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:06:E9:4C:CE:60:B6:B8:5B:F1:56:7C:B5:23:8C:CF:02:24:DE:11 X509v3 Authority Key Identifier: keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:22:c0:1c:c8:6a:85:e1:ed:d2:87:0c:ee:5b:c7:e3:09:ea: 0f:35:f7:35:ce:91:1f:eb:64:60:48:7c:2d:4a:98:18:60:e5: 6b:50:4a:ac:4a:4a:6b:49:42:37:2c:34:eb:d2:0b:d2:c1:79: 45:7a:bf:2c:97:1e:80:d8:d0:82:38:9a:03:4a:53:e8:ff:2a: 6f:57:3d:ca:6b:65:19:3b:65:c2:31:3c:87:08:0a:02:25:25: 11:80:77:b6:1c:f5:0f:6f:41:6a:b7:f9:12:fd:0b:f1:d0:b5: 75:e6:62:8b:0c:88:ca:84:4a:ab:00:d1:80:07:a9:aa:e8:d1: 4c:9e:30:cb:09:0d:e8:6c:e4:f6:19:cd:c9:36:79:cc:bd:70: 13:d6:d0:f4:25:f2:96:e0:08:cc:e7:c7:4d:2a:ed:d2:10:81: cd:5e:fb:0d:3a:e0:38:ff:54:8d:fb:cf:9b:26:0b:f1:90:66: 66:3c:7b:76:c7:c2:d3:57:ac:1a:11:42:fa:08:1a:af:a7:33: c1:56:21:03:12:af:56:99:96:f5:ba:79:3c:ba:da:a1:60:41: d6:55:72:84:fa:9f:2e:b0:ec:9c:81:0c:dc:ec:f0:48:63:da: 91:2b:d0:14:58:61:9a:74:e6:bd:77:b9:3b:a8:27:e9:0e:79: f2:47:5d:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4Q0MxMTAvBgNVBAUTKENCQzBBRDE5NjU4NTE2NDFGNjYxMTFFOEUyOTAyNjk4 QTlCOUVEODAwHhcNMjUwODA3MDUyNzMxWhcNMjUwODE0MDUyNzMxWjAYMRYwFAYD VQQDEw02ODk0Mzk0My1jOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2h3mjw5WBO2y9x62pmpS05c3iwA6/waJGu/QtfKdS/GlVEZMZU4mtZ+b9wiV z9fAUBBaewUQCc5XHc/hbac3wO3LSc4qK9OGPYtP5lYvBk8TQcYAActlVn1d+eW4 7DMUyMJilcdRpJ+jxMC3mWem1u7/X/NQYpkQ1Ml74AlyoCGn/W20XnohHYr0lhJp HhKdugfYq1eE3jKj58vBy5qW3BSFlLA4F0+a1A7nT2dze7JaULaInZwjvzQbh6kE jiy+tCwCsLuPhqyZlnx5x7EP3z0VCR5DQjx8Fww9pkpstw/XBF+QQJKWgVPQTdcK CJFIgxkoRBYPxgfkh2ZWLBHXTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkG6UzO YLa4W/FWfLUjjM8CJN4RMB8GA1UdIwQYMBaAFMvArRllhRZB9mER6OKQJpipue2A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzhDQy8zQUM1N0M4Q0Q1 RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZrSDJZUkhvNHBBbW1LbTU3 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzhDQy8zQUM1N0M4Q0Q1RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZr SDJZUkhvNHBBbW1LbTU3WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0IsAcyGqF4e3ShwzuW8fjCeoPNfc1zpEf62RgSHwtSpgYYOVrUEqs SkprSUI3LDTr0gvSwXlFer8slx6A2NCCOJoDSlPo/ypvVz3Ka2UZO2XCMTyHCAoC JSURgHe2HPUPb0Fqt/kS/Qvx0LV15mKLDIjKhEqrANGAB6mq6NFMnjDLCQ3obOT2 Gc3JNnnMvXAT1tD0JfKW4AjM58dNKu3SEIHNXvsNOuA4/1SN+8+bJgvxkGZmPHt2 x8LTV6waEUL6CBqvpzPBViEDEq9WmZb1unk8utqhYEHWVXKE+p8usOycgQzc7PBI Y9qRK9AUWGGadOa9d7k7qCfpDnnyR10y -----END CERTIFICATE-----Generated at Sat Aug 9 05:34:41 2025 by rpki-client