$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft File: u99YzWESke9boarLayzE7VCwEVc.mft (raw, json) Hash identifier: 4WY+Wz6kt9Cb+pulvPyKfNR6M7v3ZbskJOwdj4wDyq4= Subject key identifier: 68:6F:C0:9A:34:0A:68:F4:52:37:AB:86:B0:E5:14:22:CF:6F:C2:5A Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Certificate serial: 0453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft Manifest number: 043A Signing time: Tue 05 Aug 2025 00:50:35 +0000 Manifest this update: Tue 05 Aug 2025 00:50:35 +0000 Manifest next update: Tue 12 Aug 2025 00:50:35 +0000 Files and hashes: 1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: yev+pLKdJqwO/8KI0IuRnSsE1mJD5nJHg5RymGoGxlk=) 2: 08241A166B1111EE99759439C4F9AE02.roa (hash: ySASg3k7OY7oJkXL5Ws/83THPGLSCp+zucNat555hyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Validity Not Before: Aug 5 00:50:35 2025 GMT Not After : Aug 12 00:50:35 2025 GMT Subject: CN=6891555b-1188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:b1:88:f1:29:d5:dc:70:94:9d:93:d5:ab: 24:7a:cc:d0:1f:8a:e3:fa:db:09:4e:75:2b:48:cd: 30:fe:ea:23:aa:29:a7:d3:a9:3e:9b:ea:1b:e1:a5: 20:d9:53:44:52:26:2a:ae:27:71:46:3a:41:08:43: 1b:b1:5d:97:31:76:1f:4d:3e:9a:f5:f7:fe:33:5b: 7b:64:13:f9:47:e5:b4:8c:44:e9:eb:70:04:b8:fa: 27:3e:b3:52:1d:17:1b:05:9b:4c:f1:e0:52:d4:54: a6:9f:47:b4:40:97:de:4b:60:34:88:07:01:16:c2: 0a:9e:85:53:57:51:d0:71:1c:39:b5:de:78:ae:f9: c4:fe:4d:a7:d4:6d:35:b8:0f:21:79:44:c7:eb:c0: 9d:20:62:55:8e:28:41:2b:a6:e1:c5:c6:2a:f1:a1: b4:b0:00:58:d4:ac:ef:68:96:58:71:3f:6d:92:79: ed:2f:15:e9:5e:8c:bf:95:9b:66:70:b8:54:83:67: 70:73:8b:07:8c:57:22:0c:08:dd:36:e9:a1:c4:8c: 7b:bc:70:e0:07:a4:b1:4f:da:cd:d1:6b:15:a9:76: 88:28:d2:14:c9:02:37:95:0c:f3:a4:9c:ba:83:b7: af:88:d6:f3:41:e8:21:02:1f:f5:67:85:46:da:b0: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6F:C0:9A:34:0A:68:F4:52:37:AB:86:B0:E5:14:22:CF:6F:C2:5A X509v3 Authority Key Identifier: keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d7:21:59:e4:a1:68:9e:b3:5d:c2:cc:97:b6:aa:2b:8f:76: 2a:bd:52:3f:e0:ab:83:6d:75:4b:14:61:02:2a:58:f3:d1:c0: ab:52:e4:46:a7:22:f8:4b:66:df:f1:0c:28:97:3d:04:dc:00: 81:a0:de:58:e5:f6:80:48:4b:aa:f9:a5:ef:7a:a8:be:cd:09: 7f:5e:d4:88:c7:54:9e:0e:ea:19:d5:89:bd:a4:26:a5:c1:ec: 00:44:98:b7:52:18:3b:0e:3e:5a:45:d7:56:c4:75:a3:b0:72: a3:da:56:b2:10:fc:f1:97:f3:20:8d:81:52:e7:cd:a9:b0:c1: 4b:d2:36:fc:97:08:1c:4b:63:64:c2:64:61:4c:d5:05:91:ff: 07:23:6e:a5:58:07:47:62:52:07:53:ee:cc:11:8a:79:b6:37: 09:74:f9:c4:90:de:6c:59:f4:4b:d4:c2:7a:a2:78:49:76:a3: 61:58:e9:77:66:a5:6d:25:95:97:bd:14:87:f8:b2:f7:e0:ec: 44:6c:18:9d:b7:70:7c:7c:e6:82:c5:d6:65:81:f7:f3:a3:c8: 78:06:59:24:0c:01:f7:7a:0d:98:4c:8e:ee:f5:9a:78:cd:c7: ce:b0:23:46:e3:88:34:82:76:8e:d7:9c:ae:bd:9f:af:b1:ce: d1:44:ce:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2RkQxMTAvBgNVBAUTKEJCREY1OENENjExMjkxRUY1QkExQUFDQjZCMkNDNEVE NTBCMDExNTcwHhcNMjUwODA1MDA1MDM1WhcNMjUwODEyMDA1MDM1WjAYMRYwFAYD VQQDEw02ODkxNTU1Yi0xMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9exiPEp1dxwlJ2T1askeszQH4rj+tsJTnUrSM0w/uojqimn06k+m+ob4aUg 2VNEUiYqridxRjpBCEMbsV2XMXYfTT6a9ff+M1t7ZBP5R+W0jETp63AEuPonPrNS HRcbBZtM8eBS1FSmn0e0QJfeS2A0iAcBFsIKnoVTV1HQcRw5td54rvnE/k2n1G01 uA8heUTH68CdIGJVjihBK6bhxcYq8aG0sABY1KzvaJZYcT9tknntLxXpXoy/lZtm cLhUg2dwc4sHjFciDAjdNumhxIx7vHDgB6SxT9rN0WsVqXaIKNIUyQI3lQzzpJy6 g7eviNbzQeghAh/1Z4VG2rD6fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhvwJo0 Cmj0UjerhrDlFCLPb8JaMB8GA1UdIwQYMBaAFLvfWM1hEpHvW6Gqy2ssxO1QsBFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZGRC81OUJGMjE0RTc0 NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tlOWJvYXJMYXl6RTdWQ3dF VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5OVl6V0VTa2U5Ym9hckxheXpFN1ZDd0VWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZGRC81OUJGMjE0RTc0NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tl OWJvYXJMYXl6RTdWQ3dFVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk1yFZ5KFonrNdwsyXtqorj3YqvVI/4KuDbXVLFGECKljz0cCrUuRG pyL4S2bf8Qwolz0E3ACBoN5Y5faASEuq+aXveqi+zQl/XtSIx1SeDuoZ1Ym9pCal wewARJi3Uhg7Dj5aRddWxHWjsHKj2layEPzxl/MgjYFS582psMFL0jb8lwgcS2Nk wmRhTNUFkf8HI26lWAdHYlIHU+7MEYp5tjcJdPnEkN5sWfRL1MJ6onhJdqNhWOl3 ZqVtJZWXvRSH+LL34OxEbBidt3B8fOaCxdZlgffzo8h4BlkkDAH3eg2YTI7u9Zp4 zcfOsCNG44g0gnaO15yuvZ+vsc7RRM7K -----END CERTIFICATE-----Generated at Wed Aug 6 05:57:36 2025 by rpki-client