$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json) Hash identifier: dq55f4fspXsqBv11V/CNGY4nw7al5gRYSldAdg+G120= Subject key identifier: 70:AF:00:A0:53:D2:53:D6:2D:D3:06:07:1D:C6:13:4C:75:27:62:71 Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft Manifest number: 0149 Signing time: Sat 09 Aug 2025 04:40:48 +0000 Manifest this update: Sat 09 Aug 2025 04:40:48 +0000 Manifest next update: Sat 16 Aug 2025 04:40:48 +0000 Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: 5yhFdiviy4R8dRXOr/sYBAxtO/lKpOGAGqTq376p4rY=) 2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: Si3a7BG/8OJeYXWshDKB1ssBaH31J9TWvH+Wp+wV/dA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Validity Not Before: Aug 9 04:40:48 2025 GMT Not After : Aug 16 04:40:48 2025 GMT Subject: CN=6896d150-da4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:20:65:2a:9e:a2:29:e0:e2:0c:68:e2:84: f8:d8:71:c6:7b:52:f3:88:5e:63:35:e9:27:08:4a: a9:8f:15:4f:6f:3a:a9:48:6e:6e:b6:3a:d0:b1:e8: dd:2f:f8:d5:27:f9:61:62:b0:9f:d4:1b:e2:f7:f6: 2f:31:dd:9d:a3:ed:fe:46:86:f8:5c:f8:1d:e3:7e: db:ec:e1:9a:ba:e6:a1:e2:71:76:77:09:3a:08:d1: 98:39:63:0e:fd:10:96:91:8e:36:c9:6b:43:e1:a7: 83:a3:89:e4:84:a8:1f:3c:8e:26:be:bb:b9:42:1e: ed:9a:98:4f:2e:ce:48:87:be:3f:9f:9a:a3:10:7a: e9:f2:05:4a:84:a2:f8:53:cc:a1:5f:38:98:32:68: 23:04:82:b9:ac:8e:39:79:5e:92:0d:13:fb:80:9a: 12:28:d0:d1:48:b1:f2:ca:65:1d:36:a8:68:8b:92: 90:e5:d7:4a:03:b6:f9:e7:2d:81:58:0b:bc:a5:19: c0:1a:b3:07:5a:8f:e0:ec:65:69:37:0a:10:27:03: 51:a0:f4:ac:0a:b3:f3:92:eb:a1:38:e6:85:d9:e5: f3:1d:1d:d7:9b:51:2d:e3:a4:41:56:6e:41:82:d5: 70:0b:89:90:7f:85:46:74:cf:54:f0:02:ef:58:4e: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AF:00:A0:53:D2:53:D6:2D:D3:06:07:1D:C6:13:4C:75:27:62:71 X509v3 Authority Key Identifier: keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:83:a1:2b:65:ff:a8:1e:ef:0a:36:21:e4:aa:f8:34:fd:40: d1:47:7f:cd:be:b7:8e:0c:40:ee:da:3b:28:a4:85:fc:e8:d8: ce:df:d5:bb:6e:17:6b:c3:38:ca:29:ed:de:b7:40:eb:e1:74: b3:d0:e3:99:5f:9a:e3:e2:fb:50:28:1c:07:86:fa:fd:a0:9f: 13:d8:7b:83:73:4f:62:a4:f5:bf:05:58:57:b9:9f:49:98:1f: 92:0b:52:d5:75:2a:45:e3:1e:31:da:4f:30:82:d6:ec:13:45: 8a:1d:1e:cd:67:b3:d5:a7:df:a5:c3:a9:b6:5a:40:f0:b5:e9: 50:a0:3e:67:fb:d6:54:d4:a0:3b:af:40:58:20:6c:90:52:10: 7d:9d:ed:ad:67:99:73:b1:76:fc:5c:50:2d:3b:18:55:8c:56: 5a:a8:91:bf:de:ff:44:23:3e:f9:e1:cf:45:6b:11:28:7a:99: 81:c6:fe:60:4d:9a:a7:9f:a3:0f:f7:c7:2a:1e:cb:5a:22:2f: ce:81:10:cb:30:ef:e8:90:18:ae:98:0d:a6:75:9b:5d:13:ff: f3:eb:13:da:84:e6:8d:59:ab:06:8a:f9:2f:9f:0e:db:a8:05: 23:ce:42:d4:e8:a2:f2:cd:ba:b1:ac:69:0d:eb:42:9b:1d:c4: c6:65:d3:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEQjMxMTAvBgNVBAUTKDYzQTI5QUJEODdGNEExRkU1NUNCRjJBMEY0MDk3NTBB QzM0QUMyMzUwHhcNMjUwODA5MDQ0MDQ4WhcNMjUwODE2MDQ0MDQ4WjAYMRYwFAYD VQQDEw02ODk2ZDE1MC1kYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnw4gZSqeoing4gxo4oT42HHGe1LziF5jNeknCEqpjxVPbzqpSG5utjrQsejd L/jVJ/lhYrCf1Bvi9/YvMd2do+3+Rob4XPgd437b7OGauuah4nF2dwk6CNGYOWMO /RCWkY42yWtD4aeDo4nkhKgfPI4mvru5Qh7tmphPLs5Ih74/n5qjEHrp8gVKhKL4 U8yhXziYMmgjBIK5rI45eV6SDRP7gJoSKNDRSLHyymUdNqhoi5KQ5ddKA7b55y2B WAu8pRnAGrMHWo/g7GVpNwoQJwNRoPSsCrPzkuuhOOaF2eXzHR3Xm1Et46RBVm5B gtVwC4mQf4VGdM9U8ALvWE6PFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCvAKBT 0lPWLdMGBx3GE0x1J2JxMB8GA1UdIwQYMBaAFGOimr2H9KH+VcvyoPQJdQrDSsI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0RCMy85MzA1RDJFMDgy QUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9mNVZ5X0tnOUFsMUNzTkt3 alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k2S2F2WWYwb2Y1VnlfS2c5QWwxQ3NOS3dqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0RCMy85MzA1RDJFMDgyQUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9m NVZ5X0tnOUFsMUNzTkt3alUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/g6ErZf+oHu8KNiHkqvg0/UDRR3/NvreODEDu2jsopIX86NjO39W7 bhdrwzjKKe3et0Dr4XSz0OOZX5rj4vtQKBwHhvr9oJ8T2HuDc09ipPW/BVhXuZ9J mB+SC1LVdSpF4x4x2k8wgtbsE0WKHR7NZ7PVp9+lw6m2WkDwtelQoD5n+9ZU1KA7 r0BYIGyQUhB9ne2tZ5lzsXb8XFAtOxhVjFZaqJG/3v9EIz754c9FaxEoepmBxv5g TZqnn6MP98cqHstaIi/OgRDLMO/okBiumA2mdZtdE//z6xPahOaNWasGivkvnw7b qAUjzkLU6KLyzbqxrGkN60KbHcTGZdNC -----END CERTIFICATE-----Generated at Sat Aug 9 14:26:19 2025 by rpki-client