$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft File: tY0p97gQfxWFtf_nDFAsbI9dMwI.mft (raw, json) Hash identifier: pRjz9uzmPs8W3BxY0cgUUlXmhnXX/G3fU2/HT1dV5rU= Subject key identifier: C6:BE:35:E9:40:FA:4D:B7:6D:6E:A9:A3:C4:51:22:DF:12:9E:C7:52 Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 Certificate issuer: /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Certificate serial: 0877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft Manifest number: 085D Signing time: Fri 18 Jul 2025 20:57:15 +0000 Manifest this update: Fri 18 Jul 2025 20:57:15 +0000 Manifest next update: Fri 25 Jul 2025 20:57:15 +0000 Files and hashes: 1: tY0p97gQfxWFtf_nDFAsbI9dMwI.crl (hash: xpDlIH9lu5NjMik+PZ9wRaV5IqtDU6J8Qg36IB8Jrv4=) 2: C33EB0EC7C4211EB933D233EC4F9AE02.roa (hash: V3s4r52s3OPKDLcYcdmKSn/0GHVPcogcj1iQaYzRFaU=) 3: F6F5BCCE53E711F084348F87C4F9AE02.roa (hash: eEq3ZG4qI8pUpOyGlAwoIW1Iq8bp1Jor6FtXouhYCXM=) 4: 3C3F21BAD6F011EE9B38B67DC4F9AE02.roa (hash: w/43LlQIYPABEvYlfxDIIPmu3emguiTlymMjfBLzQJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CA4, serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Validity Not Before: Jul 18 20:57:15 2025 GMT Not After : Jul 25 20:57:15 2025 GMT Subject: CN=687ab52b-84e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:70:20:a6:ef:df:1f:56:54:6f:4a:0b:e1: e7:74:b4:04:4a:df:e2:4a:8d:f5:35:9d:62:e6:5e: 96:a6:48:6c:61:5a:8c:06:07:98:81:d3:a3:68:55: 7d:4b:79:72:3e:1e:a8:b4:82:b5:fb:71:db:22:7e: 21:03:63:c0:02:c3:02:76:f0:81:c8:d2:09:4c:c2: 7d:d9:f5:09:22:3c:29:c1:6b:90:19:3c:85:c2:7f: 66:74:af:58:20:c1:0a:73:99:d1:22:d4:57:53:94: 35:7e:6b:7c:9a:40:d1:c6:db:a9:b6:74:14:40:76: 83:a8:b4:d5:14:4d:80:31:43:1e:35:c5:0a:4a:03: bf:98:0c:fa:c9:bc:19:0d:83:85:f6:58:d9:ed:ae: c7:8a:3e:40:d4:de:85:92:53:b8:2b:05:ec:97:50: 36:0b:08:89:9b:09:dd:38:a6:b2:c2:91:88:89:74: a0:6b:88:a2:e7:d9:76:d0:9e:15:7e:56:4b:04:38: cf:7e:d2:b1:c7:70:ab:a6:aa:d1:65:69:ef:27:ea: 87:eb:5e:56:ae:1a:17:d8:4d:24:0c:2f:ab:32:96: 02:39:60:a7:a0:db:8f:b5:05:d5:6b:90:80:cc:86: 76:d2:ea:29:5d:14:17:30:e1:65:b3:ef:0c:0e:64: 7d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BE:35:E9:40:FA:4D:B7:6D:6E:A9:A3:C4:51:22:DF:12:9E:C7:52 X509v3 Authority Key Identifier: keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a8:9e:12:c3:7e:8b:c7:bd:10:ce:7a:92:ac:24:bb:22:fa: 65:4b:4e:bd:7b:a7:35:69:6d:46:a3:19:d8:65:93:3e:bf:08: 14:7d:5a:56:4a:c9:dc:b7:d2:98:84:7d:e3:60:97:41:9c:21: 96:94:0f:cf:cf:ee:51:39:c0:e5:4d:0c:4c:63:78:ff:6a:f2: 4b:d5:50:64:e9:e3:a3:53:30:62:a6:f1:0b:17:82:82:e0:41: 64:64:b3:67:fd:af:dc:77:aa:e5:7d:99:00:c6:2d:07:5f:54: 35:3d:40:44:95:f2:56:19:c0:58:d4:70:28:e5:bd:da:86:98: c5:88:48:f2:5d:ad:75:aa:63:4c:aa:78:a1:7b:ef:74:aa:64: 04:0a:a9:70:64:ab:c5:49:a8:81:c2:70:98:7f:77:eb:85:34: aa:0a:a7:8d:71:23:d5:73:3a:99:0e:8c:f5:9b:0a:c2:17:58: 9e:be:04:30:0d:86:47:4c:66:09:80:bc:93:3e:5f:f0:62:7c: 4a:8a:f3:51:50:4b:44:82:b9:a9:8d:66:c2:53:b2:7c:f4:2f: 52:79:0e:a9:90:06:dc:d0:30:75:cf:22:1c:34:52:ac:0b:81: a4:d5:30:9a:3f:b7:81:2e:e4:0e:46:3b:c6:4f:62:ed:69:43: 91:53:df:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQTQxMTAvBgNVBAUTKEI1OEQyOUY3QjgxMDdGMTU4NUI1RkZFNzBDNTAyQzZD OEY1RDMzMDIwHhcNMjUwNzE4MjA1NzE1WhcNMjUwNzI1MjA1NzE1WjAYMRYwFAYD VQQDEw02ODdhYjUyYi04NGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvE5wIKbv3x9WVG9KC+HndLQESt/iSo31NZ1i5l6WpkhsYVqMBgeYgdOjaFV9 S3lyPh6otIK1+3HbIn4hA2PAAsMCdvCByNIJTMJ92fUJIjwpwWuQGTyFwn9mdK9Y IMEKc5nRItRXU5Q1fmt8mkDRxtuptnQUQHaDqLTVFE2AMUMeNcUKSgO/mAz6ybwZ DYOF9ljZ7a7Hij5A1N6FklO4KwXsl1A2CwiJmwndOKaywpGIiXSga4ii59l20J4V flZLBDjPftKxx3CrpqrRZWnvJ+qH615WrhoX2E0kDC+rMpYCOWCnoNuPtQXVa5CA zIZ20uopXRQXMOFls+8MDmR9BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMa+NelA +k23bW6po8RRIt8SnsdSMB8GA1UdIwQYMBaAFLWNKfe4EH8VhbX/5wxQLGyPXTMC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NBNC8xNUY2OEI1Q0NG MTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4V0Z0Zl9uREZBc2JJOWRN d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RZMHA5N2dRZnhXRnRmX25ERkFzYkk5ZE13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NBNC8xNUY2OEI1Q0NGMTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4 V0Z0Zl9uREZBc2JJOWRNd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIqJ4Sw36Lx70QznqSrCS7IvplS069e6c1aW1GoxnYZZM+vwgUfVpW Ssnct9KYhH3jYJdBnCGWlA/Pz+5ROcDlTQxMY3j/avJL1VBk6eOjUzBipvELF4KC 4EFkZLNn/a/cd6rlfZkAxi0HX1Q1PUBElfJWGcBY1HAo5b3ahpjFiEjyXa11qmNM qnihe+90qmQECqlwZKvFSaiBwnCYf3frhTSqCqeNcSPVczqZDoz1mwrCF1ievgQw DYZHTGYJgLyTPl/wYnxKivNRUEtEgrmpjWbCU7J89C9SeQ6pkAbc0DB1zyIcNFKs C4Gk1TCaP7eBLuQORjvGT2LtaUORU9+B -----END CERTIFICATE-----Generated at Sun Jul 20 07:01:53 2025 by rpki-client