$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json) Hash identifier: 80nHhwguFTwBkBhH80xzf4cpr+3rfHHcLJ8WvdqiE40= Subject key identifier: 58:42:6D:1B:10:5A:AE:C2:69:1A:57:96:F1:83:07:59:D1:DC:EF:0F Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft Manifest number: 01A4 Signing time: Tue 05 Aug 2025 03:43:25 +0000 Manifest this update: Tue 05 Aug 2025 03:43:24 +0000 Manifest next update: Tue 12 Aug 2025 03:43:24 +0000 Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: SuiXOJQup1jGSsW2BJTh2nmtDMdLmzKQiDb0Vbpvt68=) 2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: CWem0s7hf8kQnIdZUnWxTyisJw7AnKLcP2ANy+rIwcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: Aug 5 03:43:24 2025 GMT Not After : Aug 12 03:43:24 2025 GMT Subject: CN=68917ddc-3611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bc:db:c6:49:99:3b:c5:87:a4:ce:60:58:ed: 09:b1:c7:a6:93:01:7c:24:8a:82:93:37:94:84:fe: 93:5b:c0:72:34:65:6b:16:ee:59:61:39:42:4a:0a: d9:3d:91:88:61:4a:32:9c:a3:e2:8c:8c:60:be:0e: 76:bd:05:dd:68:8b:b7:70:25:b5:df:a1:dc:f7:af: fc:d9:97:99:bc:00:97:67:c5:3b:7e:08:83:2f:66: a3:65:6f:39:13:4d:fb:60:96:2d:50:1a:1d:2d:cc: 71:14:c4:13:25:6a:21:4e:9f:83:de:91:1a:8c:2b: c6:ea:a9:03:1c:8a:8b:69:60:21:fe:aa:bb:22:8c: 0a:41:e9:84:8b:d0:6a:6b:56:e1:67:fa:03:d8:39: 4c:6a:5f:44:28:b7:c9:9f:7c:08:b2:54:d2:2d:62: 4f:5f:99:95:a1:95:a9:30:38:a1:9a:a3:84:f8:be: 65:7a:d2:3a:3f:c3:16:47:dd:99:38:15:a7:fc:7d: 6e:24:c4:56:e3:1c:01:ab:a7:c9:94:99:90:43:13: ac:0c:5e:a9:5f:52:df:a1:6f:69:a3:39:03:90:d7: 52:5c:ad:1f:13:f5:43:cc:be:bb:5d:9b:63:ff:ba: 03:4b:e1:af:4f:6e:b7:3b:22:0f:fa:6b:c1:3f:70: b1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:42:6D:1B:10:5A:AE:C2:69:1A:57:96:F1:83:07:59:D1:DC:EF:0F X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:14:cb:41:a0:ba:e3:42:82:50:dc:7d:00:ab:29:7d:72:63: 1a:9b:2a:c4:a6:44:cb:ba:14:40:41:52:8e:11:e3:3e:6d:b5: 11:87:9a:3a:b5:f0:fa:cd:36:f2:77:fe:54:54:38:e6:9a:2c: 74:ff:3b:91:e4:30:a7:a2:8e:db:2d:2b:2f:0a:3f:d4:b6:c0: ba:5b:56:f5:09:ca:3c:9c:dc:c9:6c:d3:f6:0a:5a:b7:01:39: 84:ed:ec:52:af:59:4c:dc:03:f1:be:72:90:1b:71:28:fe:05: 27:9c:33:bd:ee:0a:9b:28:77:bb:3f:6c:e7:d3:f7:6c:33:f3: 12:2a:b3:9e:13:b9:66:76:a5:31:30:65:26:2b:a1:1b:af:40: 65:67:19:4a:ac:a9:c6:a1:43:c7:da:76:8a:93:18:7b:fe:26: 29:8e:76:20:40:93:55:ae:f6:50:b8:cb:c1:0a:70:5a:51:2a: 57:51:04:6a:a9:a4:1a:7a:7e:ed:65:99:44:dd:52:89:f8:4f: 70:03:cd:47:54:fe:6b:c8:2e:78:c4:af:05:b0:16:81:68:9a: 4a:76:eb:3b:b8:83:fe:1c:ad:fc:d5:9f:be:b5:42:af:54:5d: b8:27:4b:67:3e:01:b5:62:38:47:e1:61:7c:c4:62:78:4c:ce: af:11:fa:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw ODNDNDkwQTYwHhcNMjUwODA1MDM0MzI0WhcNMjUwODEyMDM0MzI0WjAYMRYwFAYD VQQDEw02ODkxN2RkYy0zNjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6LzbxkmZO8WHpM5gWO0JscemkwF8JIqCkzeUhP6TW8ByNGVrFu5ZYTlCSgrZ PZGIYUoynKPijIxgvg52vQXdaIu3cCW136Hc96/82ZeZvACXZ8U7fgiDL2ajZW85 E037YJYtUBodLcxxFMQTJWohTp+D3pEajCvG6qkDHIqLaWAh/qq7IowKQemEi9Bq a1bhZ/oD2DlMal9EKLfJn3wIslTSLWJPX5mVoZWpMDihmqOE+L5letI6P8MWR92Z OBWn/H1uJMRW4xwBq6fJlJmQQxOsDF6pX1LfoW9pozkDkNdSXK0fE/VDzL67XZtj /7oDS+GvT263OyIP+mvBP3Cx3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhCbRsQ Wq7CaRpXlvGDB1nR3O8PMB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FM UzhhRjRwaUg0Z1VJUEVrS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsFMtBoLrjQoJQ3H0Aqyl9cmMamyrEpkTLuhRAQVKOEeM+bbURh5o6 tfD6zTbyd/5UVDjmmix0/zuR5DCnoo7bLSsvCj/UtsC6W1b1Cco8nNzJbNP2Clq3 ATmE7exSr1lM3APxvnKQG3Eo/gUnnDO97gqbKHe7P2zn0/dsM/MSKrOeE7lmdqUx MGUmK6Ebr0BlZxlKrKnGoUPH2naKkxh7/iYpjnYgQJNVrvZQuMvBCnBaUSpXUQRq qaQaen7tZZlE3VKJ+E9wA81HVP5ryC54xK8FsBaBaJpKdus7uIP+HK381Z++tUKv VF24J0tnPgG1YjhH4WF8xGJ4TM6vEfrk -----END CERTIFICATE-----Generated at Wed Aug 6 11:09:07 2025 by rpki-client