$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft File: rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json) Hash identifier: /Twt8dxvzInUeSo0hcknhclhusx7Rh3wnM9COwZ5L04= Subject key identifier: D4:25:67:47:41:D5:B5:B0:66:FF:27:CB:A2:1A:8F:49:C8:C4:62:F0 Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 Certificate issuer: /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Certificate serial: 0B65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft Manifest number: 0B5A Signing time: Fri 08 Aug 2025 19:22:02 +0000 Manifest this update: Fri 08 Aug 2025 19:22:01 +0000 Manifest next update: Fri 15 Aug 2025 19:22:01 +0000 Files and hashes: 1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: cZ13oitWUtflhweXZ5ipIzFneUoSTeo44+EzqtzyLVc=) 2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: F4+ANWrgSV1BYAbYrEyoAC+HEYBZsl5dMdzlHwWIwy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2917 (0xb65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF8B6, serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Validity Not Before: Aug 8 19:22:01 2025 GMT Not After : Aug 15 19:22:01 2025 GMT Subject: CN=68964e5a-2cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:27:e8:86:27:0d:e3:90:c7:ae:85:5a:07: 70:f5:7d:3e:05:f5:b5:58:b6:39:c4:dd:06:1e:79: 20:48:f1:c5:2e:f6:8d:30:6e:2a:9a:8d:9d:c6:87: 38:88:01:2a:b0:1f:eb:8a:28:a8:9d:29:59:20:36: 39:14:be:3e:99:a4:87:00:fd:69:f2:a4:51:8f:4f: 5a:08:da:07:b2:29:65:ab:d2:e5:54:48:82:6f:a0: cb:42:aa:38:a1:f6:7c:51:a2:c0:88:07:3a:53:f1: 8a:4f:20:d4:c2:e9:8b:6b:dd:36:1e:32:25:36:23: 99:ee:de:90:2c:6e:21:97:29:10:eb:c9:1a:f3:d2: aa:c3:09:d9:55:3b:04:69:df:64:92:f3:f0:6d:8b: 60:f1:76:1d:36:a5:65:1d:62:64:7f:13:a0:bf:43: 10:5f:ee:1a:c6:b6:1b:3a:6c:97:e5:d1:53:56:9c: 0c:e5:0d:f5:96:2d:d3:aa:fc:93:e6:42:39:1c:06: f2:97:f0:4e:f5:e8:e3:17:1f:18:44:9c:34:b2:d9: cb:1c:1a:07:c1:1b:27:ea:a9:4b:96:da:65:37:68: 0b:29:c9:62:ec:49:e9:e7:b7:ef:a3:2a:31:0d:16: 09:52:2c:03:1c:cc:6d:c9:58:ea:91:f9:af:ea:13: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:25:67:47:41:D5:B5:B0:66:FF:27:CB:A2:1A:8F:49:C8:C4:62:F0 X509v3 Authority Key Identifier: keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:19:19:a0:27:87:c0:e1:62:38:6e:40:69:a8:1e:e1:91:12: b4:36:59:b1:25:ed:59:55:37:fe:d1:19:d6:72:6c:fa:b0:51: 7c:11:3c:bc:c8:51:d8:fc:4a:2f:06:b2:27:d6:86:66:b3:9b: 45:4f:36:ab:67:9b:e0:5d:ed:7b:d5:2d:3f:62:cb:2d:42:58: 8c:78:68:d0:a7:17:07:33:c9:4e:24:c8:ba:31:7d:74:60:74: 95:67:e9:5e:d9:97:d9:6b:8b:20:6f:a1:ab:38:29:04:23:53: 0c:c5:48:88:6c:49:29:9c:5f:c3:a9:7a:6a:f8:6f:74:5e:b6: 37:6f:d0:66:88:de:20:9e:60:15:83:89:8a:05:80:93:40:1a: 98:0c:d8:2d:01:e3:62:0a:0f:d3:bf:50:1b:0d:24:da:9e:72: 57:ca:8a:02:a1:59:08:aa:a4:84:5b:a2:9b:21:4e:3f:e1:51: 52:0f:4a:9b:d4:e0:bf:79:05:67:20:0f:8e:ea:16:74:d5:7a: fa:c9:0a:ad:27:80:b0:ae:7a:a6:fa:10:7b:54:d2:1c:66:86: a7:10:e5:84:fa:55:6a:8d:67:f3:cc:99:e9:82:1d:56:87:02: 2a:ca:f2:a3:2b:65:3c:72:59:ec:0a:0b:78:eb:e1:73:ec:7e: 72:59:b2:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY4QjYxMTAvBgNVBAUTKEFEODRGNEJDQkVCM0M5MzY1RjI4MjcxNTNCQTY5Q0VE MkE5OTEyRTIwHhcNMjUwODA4MTkyMjAxWhcNMjUwODE1MTkyMjAxWjAYMRYwFAYD VQQDEw02ODk2NGU1YS0yY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsggn6IYnDeOQx66FWgdw9X0+BfW1WLY5xN0GHnkgSPHFLvaNMG4qmo2dxoc4 iAEqsB/riiionSlZIDY5FL4+maSHAP1p8qRRj09aCNoHsillq9LlVEiCb6DLQqo4 ofZ8UaLAiAc6U/GKTyDUwumLa902HjIlNiOZ7t6QLG4hlykQ68ka89KqwwnZVTsE ad9kkvPwbYtg8XYdNqVlHWJkfxOgv0MQX+4axrYbOmyX5dFTVpwM5Q31li3TqvyT 5kI5HAbyl/BO9ejjFx8YRJw0stnLHBoHwRsn6qlLltplN2gLKcli7Enp57fvoyox DRYJUiwDHMxtyVjqkfmv6hOy5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQlZ0dB 1bWwZv8ny6Iaj0nIxGLwMB8GA1UdIwQYMBaAFK2E9Ly+s8k2XygnFTumnO0qmRLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhCNi80MEU3RkFCQTNB QTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlUWmZLQ2NWTzZhYzdTcVpF dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVDB2TDZ6eVRaZktDY1ZPNmFjN1NxWkV1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjhCNi80MEU3RkFCQTNBQTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlU WmZLQ2NWTzZhYzdTcVpFdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARGRmgJ4fA4WI4bkBpqB7hkRK0NlmxJe1ZVTf+0RnWcmz6sFF8ETy8 yFHY/EovBrIn1oZms5tFTzarZ5vgXe171S0/YsstQliMeGjQpxcHM8lOJMi6MX10 YHSVZ+le2ZfZa4sgb6GrOCkEI1MMxUiIbEkpnF/DqXpq+G90XrY3b9BmiN4gnmAV g4mKBYCTQBqYDNgtAeNiCg/Tv1AbDSTannJXyooCoVkIqqSEW6KbIU4/4VFSD0qb 1OC/eQVnIA+O6hZ01Xr6yQqtJ4Cwrnqm+hB7VNIcZoanEOWE+lVqjWfzzJnpgh1W hwIqyvKjK2U8clnsCgt46+Fz7H5yWbJ0 -----END CERTIFICATE-----Generated at Sat Aug 9 20:52:02 2025 by rpki-client