$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json) Hash identifier: 7GvTusQQzdWsXQ2us6um827KK1jMEDmc1s3KKU5DPF8= Subject key identifier: 8B:9D:96:B3:6E:ED:E7:9B:C7:F9:E8:22:40:F5:D4:24:74:31:65:D3 Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0C1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft Manifest number: 0C11 Signing time: Mon 04 Aug 2025 18:57:04 +0000 Manifest this update: Mon 04 Aug 2025 18:57:03 +0000 Manifest next update: Mon 11 Aug 2025 18:57:03 +0000 Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: kDcaXxUr51dbgr0pyO82q/5pa+hNYgZQkMn6y0al7j8=) 2: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: d+PNEJYkgwfN/EWh9YAvK3NrsnGHrIa0Ji1QGqGUhS8=) 3: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: 3gAyCRS9eTrSpT6uGMaC2W//L+1mB9VyFAfUFmHY1AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3099 (0xc1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Aug 4 18:57:03 2025 GMT Not After : Aug 11 18:57:03 2025 GMT Subject: CN=68910280-2381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1d:ea:63:51:4c:44:00:04:6b:d1:0e:f4:2b: 9d:d4:e8:78:ac:83:5a:b3:b5:93:70:66:ad:22:d1: 23:7b:62:b2:f2:05:ea:ae:00:3d:78:00:52:af:68: cd:d1:c5:f4:8f:05:5e:f2:84:59:0b:d3:09:49:5a: aa:23:58:cb:36:58:36:c9:76:a6:c4:ab:3e:79:3f: 10:e4:09:3b:3a:3e:f5:ba:d9:96:d1:2a:6b:e9:89: 89:8f:3e:6e:9d:b8:53:cf:97:bc:56:54:31:1d:a7: 50:fc:c5:0b:06:b8:93:83:d9:43:a6:68:9f:a5:70: 21:f8:90:81:a0:34:bc:16:b2:e5:a2:d1:20:8d:d2: dc:62:98:40:28:40:f3:88:23:01:73:30:ac:aa:2a: ef:10:4a:8f:6b:79:b6:53:2c:80:63:8d:f2:94:ce: 7e:39:fe:44:6c:41:77:5d:ce:ac:ab:f8:c4:7a:36: 4a:8f:17:ec:29:eb:81:94:91:67:ba:58:9f:09:c7: 03:95:14:58:4d:17:ed:e7:ab:58:fe:6a:1c:02:cb: 0d:35:74:9f:18:23:6d:72:82:f0:66:ed:8a:80:eb: 6a:a8:51:90:ce:7d:0d:02:79:d1:f7:09:98:7e:f3: ea:ec:83:2d:fb:93:1d:8c:4a:2d:ff:59:f2:23:fd: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9D:96:B3:6E:ED:E7:9B:C7:F9:E8:22:40:F5:D4:24:74:31:65:D3 X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:67:0c:51:31:a3:d2:1e:31:42:14:da:8b:97:e4:56:5b:ae: 17:80:f4:e5:19:3c:05:28:6a:ba:f9:83:03:0e:3c:09:66:94: f8:8e:32:15:bd:b4:b6:36:c0:fb:0a:d3:ad:7f:4d:ac:e7:e5: 44:52:8e:db:1c:30:35:79:91:c0:ea:c6:df:2e:fe:1e:f5:26: a7:9a:38:d5:49:4d:85:a9:19:12:2a:06:0f:52:f3:ab:08:e7: 7c:7f:9d:f2:ef:93:e0:a5:91:bf:5c:39:56:a8:0c:da:a5:b7: 5d:c2:ce:5a:62:1c:f2:6c:81:58:f8:45:2b:c7:34:2b:fb:a5: 40:04:31:8f:57:4d:58:4e:cd:81:0e:0d:67:48:1f:3b:33:5d: cb:1d:ae:14:02:94:5c:32:04:44:fd:3c:8d:4e:01:f7:54:14: 3d:8a:1b:51:b3:0b:68:97:25:ed:63:a9:ae:46:9b:75:ee:c1: de:2a:29:fa:58:b7:0d:ef:64:9c:65:8b:8f:a4:4e:b1:89:32: 4c:f6:1b:24:53:98:fa:60:f2:63:67:e7:b5:c4:e0:1f:a5:5b: 34:99:9f:13:cf:c1:5f:d3:0a:65:ba:56:f0:77:17:e4:b7:11: e1:b3:87:0e:57:18:50:63:62:cf:01:17:ed:f7:4d:1a:96:3b: e1:c3:bc:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjUwODA0MTg1NzAzWhcNMjUwODExMTg1NzAzWjAYMRYwFAYD VQQDEw02ODkxMDI4MC0yMzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2B3qY1FMRAAEa9EO9Cud1Oh4rINas7WTcGatItEje2Ky8gXqrgA9eABSr2jN 0cX0jwVe8oRZC9MJSVqqI1jLNlg2yXamxKs+eT8Q5Ak7Oj71utmW0Spr6YmJjz5u nbhTz5e8VlQxHadQ/MULBriTg9lDpmifpXAh+JCBoDS8FrLlotEgjdLcYphAKEDz iCMBczCsqirvEEqPa3m2UyyAY43ylM5+Of5EbEF3Xc6sq/jEejZKjxfsKeuBlJFn ulifCccDlRRYTRft56tY/mocAssNNXSfGCNtcoLwZu2KgOtqqFGQzn0NAnnR9wmY fvPq7IMt+5MdjEot/1nyI/0kQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIudlrNu 7eebx/noIkD11CR0MWXTMB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP b1d0ckNvbE1kem9uM3FraG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdZwxRMaPSHjFCFNqLl+RWW64XgPTlGTwFKGq6+YMDDjwJZpT4jjIV vbS2NsD7CtOtf02s5+VEUo7bHDA1eZHA6sbfLv4e9SanmjjVSU2FqRkSKgYPUvOr COd8f53y75PgpZG/XDlWqAzapbddws5aYhzybIFY+EUrxzQr+6VABDGPV01YTs2B Dg1nSB87M13LHa4UApRcMgRE/TyNTgH3VBQ9ihtRswtolyXtY6muRpt17sHeKin6 WLcN72ScZYuPpE6xiTJM9hskU5j6YPJjZ+e1xOAfpVs0mZ8Tz8Ff0wplulbwdxfk txHhs4cOVxhQY2LPARft900aljvhw7za -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:26 2025 by rpki-client