$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json) Hash identifier: b2ifO+xfzH7qULJCxRPyaUcTes/IQes0ZNAd3RKVdX0= Subject key identifier: 7D:68:27:24:B3:ED:DC:64:3C:EA:0E:51:72:F1:3D:37:60:BE:E6:4D Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft Manifest number: 027A Signing time: Sat 09 Aug 2025 02:15:56 +0000 Manifest this update: Sat 09 Aug 2025 02:15:56 +0000 Manifest next update: Sat 16 Aug 2025 02:15:56 +0000 Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: WJ9rca6QDhe8JqozIeqUShGuipVeOeApzGTZhsT7UXU=) 2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: SSzVNdfhJc5xjlACETmueaivBNOUX59PK+NBqYEOe30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Validity Not Before: Aug 9 02:15:56 2025 GMT Not After : Aug 16 02:15:56 2025 GMT Subject: CN=6896af5c-3841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:a8:97:b6:2e:ca:5f:fa:6b:c9:91:12:f6: 19:fa:2a:78:01:d9:99:c7:0b:41:d5:00:b2:09:59: 4c:6e:1c:44:cf:7d:85:9c:7d:7a:20:54:da:ca:6c: 8f:3f:15:ea:df:d4:f4:80:c9:fd:79:19:71:b3:bb: 12:df:d2:2a:5f:cc:32:d2:b3:23:57:99:50:fc:53: 0f:92:3e:47:ef:87:bc:33:df:c2:b7:81:68:4e:54: 66:d1:c8:af:39:a6:bd:2f:3e:91:81:43:15:4e:51: 35:4f:cc:aa:61:5d:38:e3:82:c5:19:b3:0f:9f:7a: 61:5d:5e:d7:72:f5:40:b8:2b:b9:d8:9d:1d:3e:72: 0b:c4:82:40:40:14:62:90:6e:a5:7d:3d:8d:e7:0f: 27:2a:2b:2e:84:57:10:c6:5d:7e:12:c3:3e:37:4a: e7:a5:42:53:82:e7:ba:c0:db:e3:dd:f6:57:6e:05: b7:9f:84:39:ca:22:73:ac:6d:03:f2:4b:a3:c6:bc: 62:a0:c7:9c:b6:77:cd:69:f4:85:49:64:dc:d3:ab: 42:29:3d:1d:18:cd:0e:52:40:cf:d1:a1:5f:63:94: 7f:58:47:26:be:88:3c:59:49:14:15:f5:36:87:d5: f2:28:b6:99:04:37:58:b5:9c:f7:ed:15:64:91:dd: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:68:27:24:B3:ED:DC:64:3C:EA:0E:51:72:F1:3D:37:60:BE:E6:4D X509v3 Authority Key Identifier: keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:84:be:19:e4:59:61:a9:04:39:b9:86:d3:c8:82:f7:86:ae: b7:0c:1a:f5:7a:2e:7e:7b:12:ef:4e:a8:c7:67:17:06:8a:14: 72:e4:0d:76:0f:d0:f8:fd:8d:f4:8b:a5:14:db:b4:b9:09:53: ad:82:52:fb:05:40:d3:1d:a0:55:a8:b9:ee:87:c5:85:ec:08: 3b:ac:1b:aa:48:94:46:2d:88:6e:3b:f0:6c:83:77:6b:fd:ef: 1c:48:ae:1b:75:85:5a:06:8c:0f:01:24:91:12:ca:4e:8e:24: 64:0f:d0:69:11:45:cb:d4:6c:57:42:50:07:3a:20:05:d1:2b: 7c:97:29:66:c4:24:5b:81:6c:09:0f:34:d5:67:90:4e:3f:50: 2d:0f:2d:7f:a6:3f:20:42:c4:47:ad:93:76:2b:ce:72:57:78: bf:2f:20:4d:8c:69:6c:ae:88:82:76:0a:b9:da:63:f4:b8:9a: 50:cf:e2:0b:db:bd:da:35:93:a1:7c:82:dd:fb:f4:1e:d8:9f: f2:a0:f6:77:fc:ec:06:68:51:e3:63:c5:93:6a:79:db:a9:88: d8:ee:aa:9b:94:01:c8:a0:c6:c6:f6:69:97:7a:b9:7f:08:48: 19:43:41:27:dd:59:60:dd:d0:59:ac:5a:5b:cf:ac:19:e2:3a: d0:de:32:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RDgxMTAvBgNVBAUTKDk1OEQ3MDk2RUEyRTZCMTZCQzI0QTFEMDQ1NzE5RDJF QzUxNDQ5N0UwHhcNMjUwODA5MDIxNTU2WhcNMjUwODE2MDIxNTU2WjAYMRYwFAYD VQQDEw02ODk2YWY1Yy0zODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqviol7Yuyl/6a8mREvYZ+ip4AdmZxwtB1QCyCVlMbhxEz32FnH16IFTaymyP PxXq39T0gMn9eRlxs7sS39IqX8wy0rMjV5lQ/FMPkj5H74e8M9/Ct4FoTlRm0civ Oaa9Lz6RgUMVTlE1T8yqYV0444LFGbMPn3phXV7XcvVAuCu52J0dPnILxIJAQBRi kG6lfT2N5w8nKisuhFcQxl1+EsM+N0rnpUJTgue6wNvj3fZXbgW3n4Q5yiJzrG0D 8kujxrxioMectnfNafSFSWTc06tCKT0dGM0OUkDP0aFfY5R/WEcmvog8WUkUFfU2 h9XyKLaZBDdYtZz37RVkkd3qTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1oJySz 7dxkPOoOUXLxPTdgvuZNMB8GA1UdIwQYMBaAFJWNcJbqLmsWvCSh0EVxnS7FFEl+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhEOC82QjI0QkNDMjFB QkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4YThKS0hRUlhHZExzVVVT WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZMXdsdW91YXhhOEpLSFFSWEdkTHNVVVNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhEOC82QjI0QkNDMjFBQkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4 YThKS0hRUlhHZExzVVVTWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8hL4Z5FlhqQQ5uYbTyIL3hq63DBr1ei5+exLvTqjHZxcGihRy5A12 D9D4/Y30i6UU27S5CVOtglL7BUDTHaBVqLnuh8WF7Ag7rBuqSJRGLYhuO/Bsg3dr /e8cSK4bdYVaBowPASSREspOjiRkD9BpEUXL1GxXQlAHOiAF0St8lylmxCRbgWwJ DzTVZ5BOP1AtDy1/pj8gQsRHrZN2K85yV3i/LyBNjGlsroiCdgq52mP0uJpQz+IL 273aNZOhfILd+/Qe2J/yoPZ3/OwGaFHjY8WTannbqYjY7qqblAHIoMbG9mmXerl/ CEgZQ0En3Vlg3dBZrFpbz6wZ4jrQ3jJL -----END CERTIFICATE-----Generated at Sun Aug 10 05:37:36 2025 by rpki-client