$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json) Hash identifier: I6PM8BcFd4ZqXWXSNYF+ngZCRGYLyyWSEqeXmssAzmY= Subject key identifier: 65:4C:93:AD:0B:19:81:63:F3:DC:86:C1:16:DC:8A:76:38:3D:C7:4B Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 0348 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft Manifest number: 033E Signing time: Mon 11 Aug 2025 01:18:13 +0000 Manifest this update: Mon 11 Aug 2025 01:18:12 +0000 Manifest next update: Mon 18 Aug 2025 01:18:12 +0000 Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: xwRg+TkwqQ/DN/OD0LXWdb7cg1VNyngEdxcNlpoBAU0=) 2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 7/5fZwleDVzsoLoxdmlvx46DZvj38NfAJm5JPzwN8K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: Aug 11 01:18:12 2025 GMT Not After : Aug 18 01:18:12 2025 GMT Subject: CN=689944d5-5b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:1c:87:86:dc:6a:0b:5a:22:73:60:d0:75: e8:ab:4a:61:77:68:e0:e4:10:7e:77:6d:24:94:16: 5f:36:3c:3a:89:f6:74:21:6d:27:01:32:78:60:a6: d7:1a:2d:00:26:da:33:6c:a8:30:48:13:32:e7:39: a5:79:90:9a:e8:22:b8:5d:75:b5:84:a6:de:50:20: bc:a5:eb:bb:8f:27:cb:78:e5:e5:0d:49:70:06:9c: ac:d3:8b:4e:11:8c:da:69:41:f1:bf:17:cf:f9:4e: 27:c9:c0:2c:cb:d0:b6:f8:c8:6b:c5:00:3b:1a:ed: f9:62:9a:fa:17:8d:a7:b8:d0:69:17:62:a2:fc:a0: a7:d4:80:e9:12:ac:47:e9:f0:ce:48:7e:fc:bf:3f: b4:58:f3:1c:48:80:fc:a8:02:84:19:f4:2e:72:c3: 65:f0:21:a2:fa:d2:7a:96:33:f2:b1:ec:73:51:ba: 54:01:09:96:a3:28:29:82:3c:08:b5:e3:a5:43:7e: 6a:21:f5:fa:89:ee:23:2e:63:64:1e:9b:76:93:f8: 81:95:89:ba:ab:72:9a:0a:6f:5c:a6:cf:90:87:c3: 05:8d:7f:32:2e:45:8c:b7:d3:d7:1e:ab:6c:2b:fd: 23:f3:6d:af:28:60:14:78:ba:c6:9b:eb:62:c4:ec: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:93:AD:0B:19:81:63:F3:DC:86:C1:16:DC:8A:76:38:3D:C7:4B X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:82:71:2f:56:5c:84:c3:ab:b5:a7:73:ba:66:20:4d:f9:e7: 8f:f9:c3:db:9d:a1:0a:d1:b0:08:b7:27:e8:11:69:6a:f9:25: f7:f8:a8:fe:3b:54:a0:b9:b9:66:2e:3f:48:8c:f8:53:6f:32: 3d:96:4a:5e:8c:d6:e5:fe:02:3b:5a:9b:37:41:70:ed:11:99: 86:37:af:95:6f:94:6b:ab:84:e3:2a:47:a5:7c:f0:a3:82:9b: 89:e0:b9:2b:bf:15:7e:4c:70:a6:c5:12:2a:c7:39:12:5d:c0: 46:ae:6e:b6:95:d5:f3:d6:5d:df:9d:60:1d:ac:13:32:0b:2a: 89:58:d7:3e:2e:bf:4c:35:48:24:a7:36:04:1b:3c:15:6d:c8: b5:c5:bb:4d:a0:ce:dd:be:b5:15:61:76:a2:e2:56:ba:38:c8: e1:3e:2c:6f:ad:81:dd:e7:32:d4:86:d9:e8:cb:bd:cb:04:ca: f3:a3:11:ce:17:86:24:bf:19:6a:6a:77:70:7a:8b:33:68:da: 9d:f0:49:e0:36:1c:92:92:00:1a:80:71:a5:ab:d2:b0:fc:ad: 53:67:39:89:21:93:6f:fd:01:e8:50:00:6c:d7:f6:b5:c6:de: 3a:aa:33:b1:92:c7:0c:1d:ab:5c:55:de:59:b4:9d:53:06:8b: 67:ac:6b:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjUwODExMDExODEyWhcNMjUwODE4MDExODEyWjAYMRYwFAYD VQQDEw02ODk5NDRkNS01YjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyoch4bcagtaInNg0HXoq0phd2jg5BB+d20klBZfNjw6ifZ0IW0nATJ4YKbX Gi0AJtozbKgwSBMy5zmleZCa6CK4XXW1hKbeUCC8peu7jyfLeOXlDUlwBpys04tO EYzaaUHxvxfP+U4nycAsy9C2+MhrxQA7Gu35Ypr6F42nuNBpF2Ki/KCn1IDpEqxH 6fDOSH78vz+0WPMcSID8qAKEGfQucsNl8CGi+tJ6ljPysexzUbpUAQmWoygpgjwI teOlQ35qIfX6ie4jLmNkHpt2k/iBlYm6q3KaCm9cps+Qh8MFjX8yLkWMt9PXHqts K/0j822vKGAUeLrGm+tixOyEmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVMk60L GYFj89yGwRbcinY4PcdLMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0 LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATgnEvVlyEw6u1p3O6ZiBN+eeP+cPbnaEK0bAItyfoEWlq+SX3+Kj+ O1SgublmLj9IjPhTbzI9lkpejNbl/gI7Wps3QXDtEZmGN6+Vb5Rrq4TjKkelfPCj gpuJ4LkrvxV+THCmxRIqxzkSXcBGrm62ldXz1l3fnWAdrBMyCyqJWNc+Lr9MNUgk pzYEGzwVbci1xbtNoM7dvrUVYXai4la6OMjhPixvrYHd5zLUhtnoy73LBMrzoxHO F4YkvxlqandweoszaNqd8EngNhySkgAagHGlq9Kw/K1TZzmJIZNv/QHoUABs1/a1 xt46qjOxkscMHatcVd5ZtJ1TBotnrGsG -----END CERTIFICATE-----Generated at Mon Aug 11 10:50:35 2025 by rpki-client