$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: mRnTOk1rItApn0PKJpg+cUBOfxtw4UKCKjoIWLJHDvg= Subject key identifier: 63:ED:87:E7:DD:3E:A6:FB:AA:39:DF:45:A7:4A:8F:CD:01:4D:10:47 Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0C52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0C4A Signing time: Tue 12 Aug 2025 18:42:41 +0000 Manifest this update: Tue 12 Aug 2025 18:42:41 +0000 Manifest next update: Tue 19 Aug 2025 18:42:41 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: caIhYz8FS2Pw0zMLUpS+sJLW1PtEYP9tKapT4/mPP3k=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Aug 12 18:42:41 2025 GMT Not After : Aug 19 18:42:41 2025 GMT Subject: CN=689b8b21-2f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:b5:f1:be:7a:6d:a9:ed:d0:48:09:e9:d8: 37:c5:86:ee:c1:2d:d1:b6:a5:f3:99:a7:13:e3:7c: 72:4a:bc:3d:2b:5d:23:15:5a:51:65:ed:c9:f7:14: 10:75:dc:04:0c:bf:ba:df:90:04:c9:4e:70:8e:f6: df:f2:87:d5:d7:10:6c:11:30:7d:60:d2:b3:da:bc: eb:c5:db:b8:14:6e:21:ac:53:40:cf:ed:58:e3:42: b3:a4:6e:0d:a5:30:56:38:98:e1:96:49:d0:b0:bf: 37:7f:ca:73:51:37:64:52:ab:30:56:ad:ba:b9:1f: 03:69:e5:1e:fb:a1:61:70:2d:5e:6b:6c:f4:4b:ef: 94:36:aa:35:e7:06:6a:89:d8:2c:eb:5a:ae:07:28: fa:ad:a7:9e:2a:f1:e7:f6:40:d8:f1:84:3c:47:13: e6:ef:e2:f9:5a:99:f7:16:35:7f:48:d6:37:fc:4b: 9e:b1:1c:e9:00:7b:2d:9f:d3:aa:15:bd:4d:60:00: a4:17:da:d5:8c:1c:1a:f2:c3:ac:44:be:41:7a:d8: ea:c7:01:c7:d8:bc:a7:2e:d4:4c:12:21:36:65:61: 36:0a:34:4f:7a:4d:ca:6a:72:e5:82:2e:9f:44:5e: c5:d5:f1:cc:de:6d:81:f5:08:be:df:bc:67:02:56: 04:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:ED:87:E7:DD:3E:A6:FB:AA:39:DF:45:A7:4A:8F:CD:01:4D:10:47 X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a5:3f:39:c7:c5:1d:c8:e4:d1:05:4e:3d:07:56:12:7d:d0: c2:73:e6:32:ee:9e:ab:f4:fb:bf:12:3b:9d:ed:7f:31:89:99: 28:6e:8f:b5:e9:0c:b4:c2:c3:bc:9e:cb:6c:9d:4e:16:74:53: 92:74:38:32:a7:89:b5:5f:d4:a5:63:86:fe:4a:fb:98:b7:35: 6c:6e:8f:cd:e8:e9:46:18:a5:20:36:a0:37:51:0e:43:79:c8: e4:1f:a1:13:ce:d5:63:d2:e8:82:cf:10:59:5c:1d:d9:28:66: 76:f8:3f:46:9a:a9:e3:13:97:f9:4c:92:84:d9:90:1f:21:b3: 80:44:91:22:ca:b8:98:39:d8:29:64:9b:f7:d5:9c:e0:0a:46: 9f:9e:9a:46:99:9d:bc:a8:26:3d:15:6a:83:7f:2a:2d:84:0c: dc:34:f7:e5:68:2c:a8:cc:50:22:07:b4:06:85:55:78:c8:79: cc:72:bb:8c:2a:a3:4f:f1:35:b4:66:e7:89:7d:6f:8c:6a:a2: d4:7b:75:56:b4:07:4a:06:82:73:ea:cb:14:eb:d8:ca:7c:70: f1:e8:4d:c4:21:a7:57:d1:77:96:7f:43:c7:8e:16:f7:27:c4: 5a:0b:6a:33:4c:5a:f3:7d:4a:d6:1d:eb:0c:b4:f5:92:f8:e1: a7:e8:0e:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjUwODEyMTg0MjQxWhcNMjUwODE5MTg0MjQxWjAYMRYwFAYD VQQDEw02ODliOGIyMS0yZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TC18b56bant0EgJ6dg3xYbuwS3RtqXzmacT43xySrw9K10jFVpRZe3J9xQQ ddwEDL+635AEyU5wjvbf8ofV1xBsETB9YNKz2rzrxdu4FG4hrFNAz+1Y40KzpG4N pTBWOJjhlknQsL83f8pzUTdkUqswVq26uR8DaeUe+6FhcC1ea2z0S++UNqo15wZq idgs61quByj6raeeKvHn9kDY8YQ8RxPm7+L5Wpn3FjV/SNY3/EuesRzpAHstn9Oq Fb1NYACkF9rVjBwa8sOsRL5BetjqxwHH2LynLtRMEiE2ZWE2CjRPek3KanLlgi6f RF7F1fHM3m2B9Qi+37xnAlYEzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPth+fd Pqb7qjnfRadKj80BTRBHMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3pT85x8UdyOTRBU49B1YSfdDCc+Yy7p6r9Pu/Ejud7X8xiZkobo+1 6Qy0wsO8nstsnU4WdFOSdDgyp4m1X9SlY4b+SvuYtzVsbo/N6OlGGKUgNqA3UQ5D ecjkH6ETztVj0uiCzxBZXB3ZKGZ2+D9GmqnjE5f5TJKE2ZAfIbOARJEiyriYOdgp ZJv31ZzgCkafnppGmZ28qCY9FWqDfyothAzcNPflaCyozFAiB7QGhVV4yHnMcruM KqNP8TW0ZueJfW+MaqLUe3VWtAdKBoJz6ssU69jKfHDx6E3EIadX0XeWf0PHjhb3 J8RaC2ozTFrzfUrWHesMtPWS+OGn6A4k -----END CERTIFICATE-----Generated at Wed Aug 13 02:44:16 2025 by rpki-client