$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json) Hash identifier: ld98suyyw8iZCG9L7pSfv7nvZ8PVwWJ/vjWHZOsRZK0= Subject key identifier: C3:F2:A4:70:29:1B:5C:E9:84:F0:C8:58:D3:7C:62:27:15:8E:E5:B4 Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Certificate serial: 0EAA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft Manifest number: 0E99 Signing time: Wed 06 Aug 2025 17:49:56 +0000 Manifest this update: Wed 06 Aug 2025 17:49:55 +0000 Manifest next update: Wed 13 Aug 2025 17:49:55 +0000 Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: 8dJyJXXhwWL+RGKdOesMMHfAvBTPkolIbfU8JERuUL4=) 2: 5C154406988911E991B10838C4F9AE02.roa (hash: rlBKToBwc/S7CrTJwY8L3fa6c6H9ms0SKbG322SWU2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 17:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3754 (0xeaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Validity Not Before: Aug 6 17:49:55 2025 GMT Not After : Aug 13 17:49:55 2025 GMT Subject: CN=689395c4-7633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c5:95:e6:96:9f:b6:fa:3d:dd:62:dd:ce:6c: 93:a5:35:f7:73:53:24:8d:5e:29:ff:a8:39:54:cb: ca:ac:9c:47:30:95:62:93:f3:ba:0f:a5:8d:8a:29: 7f:6a:1d:3e:8e:bc:06:cf:bf:81:4a:28:95:4d:b1: 74:1f:16:c3:45:e3:12:4d:6d:bd:f4:a4:f3:c0:01: 90:a3:e6:c7:4b:23:a5:70:85:ba:4f:ad:5e:8e:25: 83:60:88:bf:e6:a2:5f:ae:26:d5:ba:64:fa:24:4d: b5:25:3e:22:a9:3f:45:7e:28:9d:d5:d9:d2:b3:0b: 8a:53:c5:3a:2a:36:c5:da:07:73:d7:3b:c3:90:4e: 30:32:6f:a2:91:7e:e8:ec:09:6e:12:bf:47:2f:e3: 2c:16:1a:88:62:75:93:2d:2c:37:23:02:07:5e:9e: 01:9e:ad:63:40:ff:24:73:60:52:f3:35:87:f2:49: 39:a5:da:64:31:e5:63:ed:a6:42:d3:0e:55:7b:b9: a8:f8:b4:60:72:53:a6:e7:8d:cd:6c:43:4c:91:18: 46:ad:f9:ac:8d:74:82:69:99:5c:56:7e:72:6f:0e: 82:46:7f:ee:37:53:6a:7c:cc:aa:8f:09:18:6a:ec: b9:ce:e4:6e:e3:b1:39:09:8d:92:db:8a:3d:de:4c: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F2:A4:70:29:1B:5C:E9:84:F0:C8:58:D3:7C:62:27:15:8E:E5:B4 X509v3 Authority Key Identifier: keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ce:5a:28:e2:67:b9:24:2c:91:41:80:e1:cd:5b:f9:97:94: b0:88:f7:1e:89:b3:cb:d3:7b:71:cd:d6:ef:92:94:61:c2:6f: 83:9e:1a:e3:fc:38:5f:c6:f2:84:16:0e:ac:fe:37:14:cd:45: 2a:b7:04:34:3a:20:aa:d5:10:53:ec:e0:c4:8e:6d:d4:d7:fa: e9:92:88:9e:b6:57:77:b1:2d:c0:e5:cb:3b:46:3e:65:32:24: 6e:ca:03:cd:0b:ba:2e:46:25:a2:b2:e1:d4:fd:c2:e9:55:9a: 50:6d:d0:ed:58:b3:50:74:db:71:79:25:5b:96:41:94:77:b9: 8c:84:ca:bb:c8:b3:7d:8c:7c:0a:d0:4c:9c:e8:8e:5f:aa:ce: 6d:2e:10:68:dc:df:97:e0:7e:9f:f4:11:73:d7:eb:1d:87:1d: 45:cc:42:ae:5c:1b:80:c7:3e:bb:f5:1e:f0:3b:1a:6b:75:be: 23:7a:b4:ff:59:a3:dc:2c:39:81:40:3e:4f:89:ad:ad:f6:09: a5:be:5c:b0:02:1c:4c:4f:7d:fa:6e:47:e5:9c:8d:fc:6d:04: 4e:4b:e5:68:7f:1a:2e:ea:7c:3f:b5:7f:f2:5d:66:a8:e1:96: 9c:c5:8b:61:1a:5f:ab:d3:30:60:a8:f2:ca:7d:d9:bd:07:24: 6e:0d:f4:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKDkzMkVDMkU2RTUyQjVBRjZDN0IwM0M0MTUwMjBFREUy NzJBQUExNDUwHhcNMjUwODA2MTc0OTU1WhcNMjUwODEzMTc0OTU1WjAYMRYwFAYD VQQDEw02ODkzOTVjNC03NjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMWV5paftvo93WLdzmyTpTX3c1MkjV4p/6g5VMvKrJxHMJVik/O6D6WNiil/ ah0+jrwGz7+BSiiVTbF0HxbDReMSTW299KTzwAGQo+bHSyOlcIW6T61ejiWDYIi/ 5qJfribVumT6JE21JT4iqT9Ffiid1dnSswuKU8U6KjbF2gdz1zvDkE4wMm+ikX7o 7AluEr9HL+MsFhqIYnWTLSw3IwIHXp4Bnq1jQP8kc2BS8zWH8kk5pdpkMeVj7aZC 0w5Ve7mo+LRgclOm543NbENMkRhGrfmsjXSCaZlcVn5ybw6CRn/uN1NqfMyqjwkY auy5zuRu47E5CY2S24o93kyAWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPypHAp G1zphPDIWNN8YicVjuW0MB8GA1UdIwQYMBaAFJMuwublK1r2x7A8QVAg7eJyqqFF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9DQjc0Q0Y2RTk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2YkhzRHhCVUNEdDRuS3Fv VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t5N0M1dVVyV3ZiSHNEeEJVQ0R0NG5LcW9VVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9DQjc0Q0Y2RTk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2 YkhzRHhCVUNEdDRuS3FvVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJzloo4me5JCyRQYDhzVv5l5SwiPceibPL03txzdbvkpRhwm+Dnhrj /DhfxvKEFg6s/jcUzUUqtwQ0OiCq1RBT7ODEjm3U1/rpkoietld3sS3A5cs7Rj5l MiRuygPNC7ouRiWisuHU/cLpVZpQbdDtWLNQdNtxeSVblkGUd7mMhMq7yLN9jHwK 0Eyc6I5fqs5tLhBo3N+X4H6f9BFz1+sdhx1FzEKuXBuAxz679R7wOxprdb4jerT/ WaPcLDmBQD5Pia2t9gmlvlywAhxMT336bkflnI38bQROS+Vofxou6nw/tX/yXWao 4ZacxYthGl+r0zBgqPLKfdm9ByRuDfRt -----END CERTIFICATE-----Generated at Fri Aug 8 12:58:37 2025 by rpki-client