$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: U7Jl5XBh9csQ8Vvn8DprcfTrN62dLzyEx5sL6BXCkog= Subject key identifier: A0:AC:66:70:74:95:44:D1:EB:BA:05:52:4D:C1:69:38:08:4C:E8:51 Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: 016F Signing time: Sat 09 Aug 2025 04:13:39 +0000 Manifest this update: Sat 09 Aug 2025 04:13:39 +0000 Manifest next update: Sat 16 Aug 2025 04:13:39 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: ilo+EffnslGSbLEbEpY8rokmdjuR5BMmUqs341hxrEA=) 2: B78CCA4E4C5711EE9FE2EA35C4F9AE02.roa (hash: yOezlN4+53IwwnSsCKNCBTmWXo8aQEvNaQEYhS9yato=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Aug 9 04:13:39 2025 GMT Not After : Aug 16 04:13:39 2025 GMT Subject: CN=6896caf3-0cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:44:31:fd:32:25:e8:f8:71:8d:50:6a:7e: 97:27:76:c1:c6:0a:27:94:2c:ed:f2:24:e6:67:3c: 56:24:b3:87:c8:52:0c:a6:2d:81:d4:a4:c2:2b:a4: 80:08:70:73:7a:3d:ee:e5:09:07:ea:a6:90:0b:2f: 02:d8:2e:b1:da:97:97:6b:d5:d8:ea:65:fc:38:ec: c2:43:22:03:5e:2a:e1:9c:91:f9:85:da:08:29:fe: 4b:26:5d:ad:df:9e:99:28:c6:0d:e1:3d:04:f3:3e: 03:fd:65:7e:b1:f0:ef:7c:10:77:4d:90:92:cb:85: e0:26:cc:02:6d:07:4d:a9:f2:55:bd:90:ad:97:70: 82:78:a2:35:25:1b:f3:24:0f:66:01:18:1a:19:80: 4d:38:9a:6a:0e:f3:11:a0:ec:04:82:73:3a:de:af: f9:e1:fe:36:bc:ab:92:86:31:4a:e4:e5:0d:4d:5a: f0:eb:d9:27:66:73:67:56:28:be:e2:54:84:55:f9: 5f:ee:7e:61:f8:45:cb:e7:5b:80:1b:fd:fe:99:f9: d6:97:25:72:17:11:3a:17:69:21:80:a0:89:72:13: 02:4e:9f:16:54:66:64:8d:aa:61:a4:0a:53:8c:7a: 86:1e:1b:08:05:60:5a:e6:31:e0:db:cb:5a:41:a9: 84:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AC:66:70:74:95:44:D1:EB:BA:05:52:4D:C1:69:38:08:4C:E8:51 X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:cf:a1:ab:38:da:98:65:e7:f5:e6:8b:a6:a2:4b:a4:b7:85: 76:a7:22:34:a7:49:b1:b3:07:de:40:58:69:b7:e0:98:44:dd: f1:0c:c1:9f:ac:85:66:61:7b:8d:1c:69:38:34:04:71:17:c0: e6:8f:6d:3e:8d:37:0a:6d:2b:b0:30:a4:ec:9e:88:a6:ca:6c: 36:24:16:ed:7d:1d:b6:46:e9:b3:9d:53:97:90:15:9f:73:ca: 70:39:3b:d2:bc:da:66:ba:2f:de:fa:8a:94:63:43:50:4f:bd: 5b:39:11:e5:cf:6b:5e:5a:ae:ae:da:09:ed:e8:de:28:6a:01: 6a:89:12:7d:83:d8:9b:07:7b:5c:15:80:83:93:bd:1c:0b:a8: f7:6f:b0:30:ba:dd:37:31:62:78:82:b9:01:37:24:c8:b4:91: fc:25:88:4e:6a:ef:a1:f7:55:2b:bd:08:17:4b:a1:f8:14:36: 25:e7:15:48:2b:66:d3:82:da:5a:50:35:df:04:d7:e5:11:d2: 58:17:0c:d2:c7:84:0b:89:1a:25:c2:9c:54:e1:42:66:78:a2: b1:c9:ef:fe:16:bb:cd:10:1b:03:90:5e:41:61:8d:7d:0c:1b: 84:44:02:c3:26:8f:10:79:87:08:20:b8:18:0e:f1:3f:e2:7a: f5:03:70:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjUwODA5MDQxMzM5WhcNMjUwODE2MDQxMzM5WjAYMRYwFAYD VQQDEw02ODk2Y2FmMy0wY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZNEMf0yJej4cY1Qan6XJ3bBxgonlCzt8iTmZzxWJLOHyFIMpi2B1KTCK6SA CHBzej3u5QkH6qaQCy8C2C6x2peXa9XY6mX8OOzCQyIDXirhnJH5hdoIKf5LJl2t 356ZKMYN4T0E8z4D/WV+sfDvfBB3TZCSy4XgJswCbQdNqfJVvZCtl3CCeKI1JRvz JA9mARgaGYBNOJpqDvMRoOwEgnM63q/54f42vKuShjFK5OUNTVrw69knZnNnVii+ 4lSEVflf7n5h+EXL51uAG/3+mfnWlyVyFxE6F2khgKCJchMCTp8WVGZkjaphpApT jHqGHhsIBWBa5jHg28taQamEJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCsZnB0 lUTR67oFUk3BaTgITOhRMB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAz6GrONqYZef15oumokukt4V2pyI0p0mxswfeQFhpt+CYRN3xDMGf rIVmYXuNHGk4NARxF8Dmj20+jTcKbSuwMKTsnoimymw2JBbtfR22RumznVOXkBWf c8pwOTvSvNpmui/e+oqUY0NQT71bORHlz2teWq6u2gnt6N4oagFqiRJ9g9ibB3tc FYCDk70cC6j3b7Awut03MWJ4grkBNyTItJH8JYhOau+h91UrvQgXS6H4FDYl5xVI K2bTgtpaUDXfBNflEdJYFwzSx4QLiRolwpxU4UJmeKKxye/+FrvNEBsDkF5BYY19 DBuERALDJo8QeYcIILgYDvE/4nr1A3AR -----END CERTIFICATE-----Generated at Mon Aug 11 05:18:25 2025 by rpki-client