$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: uXShkR2L5hg6HYY9eeuZnzZkBPTHvuKUYqbhaSmcX+A= Subject key identifier: A2:78:E4:FB:03:D1:3D:21:4B:DD:66:1F:59:50:B7:D4:94:0D:96:2A Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 0903 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 08FD Signing time: Fri 08 Aug 2025 20:41:28 +0000 Manifest this update: Fri 08 Aug 2025 20:41:27 +0000 Manifest next update: Fri 15 Aug 2025 20:41:27 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: jXzSPLbI/8zCDp6J75BZNsJ+GqaK7oOm3TXTkljA064=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: ZNkH5Sj7XHBs6ufHKPHidPlMntGP72EIG2BMLfQDnC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2307 (0x903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: Aug 8 20:41:27 2025 GMT Not After : Aug 15 20:41:27 2025 GMT Subject: CN=689660f7-e0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:45:a8:40:b5:8f:40:e3:6c:7f:ee:c5:64: 39:2d:ff:86:ba:60:84:16:92:83:11:92:7d:13:0a: a6:83:64:ac:99:fe:9b:71:2e:fc:8e:ef:aa:d9:6f: 1e:0f:90:e0:fc:b5:8b:c3:87:b8:29:cf:62:47:7c: 0c:21:3c:44:7d:55:88:c3:da:f4:d4:cb:ae:da:3f: 43:9e:2e:38:81:f7:c1:4a:74:e3:c9:6a:74:d0:2a: 44:a1:22:ae:f3:31:2e:ac:28:4e:42:f7:54:8e:38: 15:7a:fb:5d:9b:68:43:25:33:8f:5d:e1:ac:a7:a6: e9:2d:d6:a3:c4:72:43:d5:94:e9:56:6e:7d:ee:d8: 31:d1:f8:90:40:a5:e0:ff:14:c8:e5:e1:c9:2d:1f: 54:9e:2a:f5:a9:b9:d0:e7:1f:8e:2b:47:5f:20:2d: 14:c2:d9:61:d9:b1:b5:f7:6c:98:76:35:c5:0c:78: 20:73:85:cd:e3:1a:90:91:ef:bc:a3:01:ac:82:3a: 57:23:4b:14:ce:1d:4b:d1:1a:fe:a4:2a:2f:35:b2: 66:ff:3a:9d:68:48:67:ce:2d:38:a9:08:07:d4:80: 2f:a7:f8:cd:1e:00:75:ab:e3:25:a7:b7:a6:c7:a3: 55:23:2e:5f:72:36:fd:82:de:fa:9f:26:b8:dd:88: 4e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:78:E4:FB:03:D1:3D:21:4B:DD:66:1F:59:50:B7:D4:94:0D:96:2A X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1a:98:25:63:69:6d:d5:29:81:62:78:30:30:f9:d4:19:06: 10:0d:e6:62:26:85:c4:aa:37:39:a3:1e:20:3d:dd:e7:2c:d4: 7a:3b:18:5b:eb:01:9d:43:6c:b3:82:22:6d:f4:b6:78:26:64: a9:e0:c6:5d:8a:18:b7:8b:9d:c9:ee:62:93:47:12:92:2d:9d: d4:39:89:e2:87:5d:a4:df:e6:f8:45:c0:eb:d5:c4:0f:98:fc: 20:45:f6:72:23:24:e2:99:f2:e9:81:a6:24:57:dd:9a:5c:f9: 60:5a:6a:42:62:e8:55:20:c9:70:1c:c9:73:0e:96:c1:07:6e: 16:e9:d1:c6:11:46:3f:1a:57:7b:8b:d4:85:45:2c:a0:1c:d7: 6d:72:ae:79:ab:d1:5c:00:39:a5:ff:08:d7:05:c5:f8:5b:ef: 9d:ac:dd:45:ae:c1:1e:3a:74:d1:b7:06:de:0d:43:31:5f:98: 26:b9:36:2a:3a:a1:81:96:5f:49:74:c8:b9:6d:cc:1a:3a:7a: e3:23:e1:84:b7:c0:d9:ca:a5:17:c2:e1:2b:21:e2:02:79:02: 0c:b4:fe:8d:e4:06:f0:d2:9d:e5:14:03:1b:cf:98:3d:18:32: be:8f:95:84:af:03:3b:20:5c:0d:ef:63:6d:cf:91:fc:30:33: 3c:0a:da:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjUwODA4MjA0MTI3WhcNMjUwODE1MjA0MTI3WjAYMRYwFAYD VQQDEw02ODk2NjBmNy1lMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUpFqEC1j0DjbH/uxWQ5Lf+GumCEFpKDEZJ9Ewqmg2Ssmf6bcS78ju+q2W8e D5Dg/LWLw4e4Kc9iR3wMITxEfVWIw9r01Muu2j9Dni44gffBSnTjyWp00CpEoSKu 8zEurChOQvdUjjgVevtdm2hDJTOPXeGsp6bpLdajxHJD1ZTpVm597tgx0fiQQKXg /xTI5eHJLR9Unir1qbnQ5x+OK0dfIC0Uwtlh2bG192yYdjXFDHggc4XN4xqQke+8 owGsgjpXI0sUzh1L0Rr+pCovNbJm/zqdaEhnzi04qQgH1IAvp/jNHgB1q+Mlp7em x6NVIy5fcjb9gt76nya43YhO8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJ45PsD 0T0hS91mH1lQt9SUDZYqMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+GpglY2lt1SmBYngwMPnUGQYQDeZiJoXEqjc5ox4gPd3nLNR6Oxhb 6wGdQ2yzgiJt9LZ4JmSp4MZdihi3i53J7mKTRxKSLZ3UOYnih12k3+b4RcDr1cQP mPwgRfZyIyTimfLpgaYkV92aXPlgWmpCYuhVIMlwHMlzDpbBB24W6dHGEUY/Gld7 i9SFRSygHNdtcq55q9FcADml/wjXBcX4W++drN1FrsEeOnTRtwbeDUMxX5gmuTYq OqGBll9JdMi5bcwaOnrjI+GEt8DZyqUXwuErIeICeQIMtP6N5Abw0p3lFAMbz5g9 GDK+j5WErwM7IFwN72Ntz5H8MDM8CtqB -----END CERTIFICATE-----Generated at Sun Aug 10 05:33:55 2025 by rpki-client