$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: eUidYcbwcQd2RtDaT/OiKuevtW82Zakz4ce2PWfdpvg= Subject key identifier: 14:6A:BB:50:24:EF:B8:1B:C0:98:7A:C7:57:CC:C5:76:F6:1B:FA:87 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 82 Signing time: Sat 09 Aug 2025 07:11:26 +0000 Manifest this update: Sat 09 Aug 2025 07:11:26 +0000 Manifest next update: Sat 16 Aug 2025 07:11:26 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: rm41cX+4qQqwV7dxt3CZ8K/k3+N7QVlROee/s7J6sKk=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: Z9DYBfabGIxHjUBLevu5KvPw0ydtYOqQMGpRrWOIWpg=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: qXU62xBJEhF8s34iW9kLJHW6sq1BX3PHBxT3tX/weaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Aug 9 07:11:26 2025 GMT Not After : Aug 16 07:11:26 2025 GMT Subject: CN=6896f49e-68d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:d7:ea:c6:57:48:68:a2:c8:71:31:67:33: 20:ba:a8:10:94:92:73:a0:77:2c:4d:63:1e:1d:1e: f4:bb:8b:7e:2d:b7:c7:ad:42:75:31:b3:30:7f:90: 8d:67:91:4b:3b:f9:cb:b9:57:db:5e:ba:c2:50:c7: 77:ef:38:dc:bb:96:28:56:93:2b:fb:9c:df:e7:ed: bd:35:21:20:4b:c8:fc:a4:ea:ae:3d:ce:e5:c5:31: 93:34:8a:33:b0:0d:00:bd:af:80:b1:61:30:3b:29: 17:b8:69:11:aa:94:26:7d:3b:c2:47:ea:10:a9:77: 38:be:4e:54:2f:3a:72:ad:62:27:cf:ce:06:ef:fc: 43:8d:30:68:4b:cf:f8:db:92:29:84:7b:5b:14:11: a7:bb:14:dc:b0:cd:ba:1a:9d:e4:d1:a8:00:3c:9b: fb:dc:02:01:ba:68:be:22:d7:e2:72:39:66:8c:0a: 83:9e:c8:07:e3:b1:43:d9:21:8e:21:99:84:b4:ee: dd:0e:72:e4:6e:9c:ba:87:3f:2f:e7:c6:79:fe:8f: 75:16:a2:a3:41:97:f9:57:cf:98:0e:b2:c5:3a:0c: de:7a:d1:0e:c0:05:6e:26:01:82:75:11:0e:72:70: d5:5b:9b:a0:03:12:f5:8a:0c:c7:70:7b:1f:53:ca: 4d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6A:BB:50:24:EF:B8:1B:C0:98:7A:C7:57:CC:C5:76:F6:1B:FA:87 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:fc:d9:c2:ad:09:b8:f7:4d:b2:73:1d:3b:d9:61:17:94:a0: fa:f0:e5:62:5c:49:84:26:82:ca:e9:97:5b:07:70:60:f0:21: 3b:25:36:1c:62:11:c1:28:85:88:1c:bc:16:ba:37:a6:83:81: 28:ab:e4:05:ee:19:3d:21:cb:43:ae:4e:b8:bc:11:61:8a:fa: 76:bf:bb:2c:4e:75:45:a8:88:a5:87:e0:60:e6:76:26:1b:0a: 65:32:ab:fb:52:e7:32:1e:f5:b1:5e:32:51:88:bb:59:7d:b4: e5:3f:95:52:43:77:95:ec:40:fb:44:76:19:3c:f7:84:4a:09: 51:a8:b3:9e:02:8f:54:be:2b:eb:4b:50:fa:0e:37:34:e8:4d: a3:ad:a5:fd:51:2a:61:f5:52:78:7d:6c:7b:21:f8:fc:41:78: 89:a7:71:53:b1:2a:5e:bc:e7:f3:bf:dc:0d:09:1a:08:ad:59: 62:69:b8:a8:60:5b:3d:65:16:e7:92:6c:c3:57:99:d6:8b:8f: 62:46:cc:ea:71:34:09:2b:1c:f6:85:ca:e3:01:20:e5:f8:6f: 41:57:db:6f:43:dc:ed:5e:d9:64:86:e2:6c:d4:85:d2:6b:f5: b9:db:97:63:59:87:5f:2e:98:28:a4:a4:85:c2:83:17:10:4a: 1b:4d:8d:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjUwODA5MDcxMTI2WhcNMjUwODE2MDcxMTI2WjAYMRYwFAYD VQQDEw02ODk2ZjQ5ZS02OGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kjX6sZXSGiiyHExZzMguqgQlJJzoHcsTWMeHR70u4t+LbfHrUJ1MbMwf5CN Z5FLO/nLuVfbXrrCUMd37zjcu5YoVpMr+5zf5+29NSEgS8j8pOquPc7lxTGTNIoz sA0Ava+AsWEwOykXuGkRqpQmfTvCR+oQqXc4vk5ULzpyrWInz84G7/xDjTBoS8/4 25IphHtbFBGnuxTcsM26Gp3k0agAPJv73AIBumi+ItficjlmjAqDnsgH47FD2SGO IZmEtO7dDnLkbpy6hz8v58Z5/o91FqKjQZf5V8+YDrLFOgzeetEOwAVuJgGCdREO cnDVW5ugAxL1igzHcHsfU8pNZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRqu1Ak 77gbwJh6x1fMxXb2G/qHMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp/NnCrQm4902ycx072WEXlKD68OViXEmEJoLK6ZdbB3Bg8CE7JTYc YhHBKIWIHLwWujemg4Eoq+QF7hk9IctDrk64vBFhivp2v7ssTnVFqIilh+Bg5nYm GwplMqv7UucyHvWxXjJRiLtZfbTlP5VSQ3eV7ED7RHYZPPeESglRqLOeAo9Uvivr S1D6Djc06E2jraX9USph9VJ4fWx7Ifj8QXiJp3FTsSpevOfzv9wNCRoIrVliabio YFs9ZRbnkmzDV5nWi49iRszqcTQJKxz2hcrjASDl+G9BV9tvQ9ztXtlkhuJs1IXS a/W525djWYdfLpgopKSFwoMXEEobTY2n -----END CERTIFICATE-----Generated at Sun Aug 10 05:51:13 2025 by rpki-client