$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft File: -tyXZLIJ-Bz4KTMiagZpoypO3XI.mft (raw, json) Hash identifier: ukylGXz109k0+4RBjSRvMAQspKXOITUJPTlTpQDw9rQ= Subject key identifier: A6:79:3A:FD:AD:BB:AA:F3:B1:D5:C8:D6:1B:90:49:98:FE:3B:72:0C Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft Manifest number: 064D Signing time: Fri 18 Jul 2025 22:56:16 +0000 Manifest this update: Fri 18 Jul 2025 22:56:15 +0000 Manifest next update: Fri 25 Jul 2025 22:56:15 +0000 Files and hashes: 1: -tyXZLIJ-Bz4KTMiagZpoypO3XI.crl (hash: w/SKnIM5c5G6LASpJs0ddiOQGR8dGo8VvyHRtKGmKxY=) 2: 9DF5B38CE0D011ECAF88A30DC4F9AE02.roa (hash: mXA6CTErg0wxJdZBq3q6wmtLNI7KWR6GhtBTn2JOB3w=) 3: 03A57262CC8611EC8D238672C4F9AE02.roa (hash: QMrrsm2NHbY/NMrkR70NjsjJaabEX61v1rHn7d+lOEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53EC, serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Validity Not Before: Jul 18 22:56:15 2025 GMT Not After : Jul 25 22:56:15 2025 GMT Subject: CN=687ad110-7b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:ba:d9:83:df:2a:e9:94:76:61:f0:e5:a5: a8:c0:b3:ba:6c:22:f7:e5:f6:d3:11:6d:ad:1f:aa: 3b:73:f3:8d:cd:b5:49:e9:fc:de:84:4a:19:b0:9e: 34:17:9d:75:b3:03:3e:f5:df:0a:ec:26:45:4f:05: 3d:d5:d2:78:24:c7:e7:00:50:f1:d3:3d:f8:b5:15: 9a:96:27:b4:27:d6:96:4a:64:b6:f2:c4:90:91:a8: ac:88:c5:0a:5d:81:37:7b:17:27:e3:5e:e8:ce:f6: 18:99:87:14:4f:95:bd:55:f9:ef:b5:64:20:ab:d8: 7e:2a:b6:de:6f:d3:88:51:46:5f:8d:3a:71:53:e7: 32:fc:cf:ec:b7:26:86:b4:db:4d:84:dd:3f:3c:8b: 38:8b:27:0d:23:99:4b:fb:3c:12:f5:c4:92:82:3a: e5:1a:13:93:75:75:d6:05:96:e0:a9:a0:29:c0:d3: b1:40:11:c7:de:e5:5f:5f:ea:96:bd:6e:51:6a:6b: 04:53:6d:94:d8:78:20:27:de:38:c6:a8:49:36:fb: 77:36:78:3d:7c:41:04:7c:b7:1b:2c:54:d3:47:61: c6:bf:f2:b6:a3:af:f8:48:af:aa:ab:45:5c:02:02: 09:f0:96:70:af:a3:10:a6:0b:ad:32:e0:72:c7:04: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:79:3A:FD:AD:BB:AA:F3:B1:D5:C8:D6:1B:90:49:98:FE:3B:72:0C X509v3 Authority Key Identifier: keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ee:28:11:28:2a:9e:75:7f:b7:6e:1c:66:e2:1f:a9:4e:36: 72:a8:bc:19:d9:5b:10:d0:17:70:25:b5:05:9a:08:54:cc:2e: 10:19:ef:f0:c8:91:1f:bf:1c:14:b6:6c:ab:91:a0:9d:67:56: b7:47:28:1f:54:ed:5c:e3:c5:6e:49:3e:eb:48:8a:21:f8:eb: 29:99:3f:a4:9c:75:74:c1:04:96:55:7b:21:6c:83:c7:82:e2: 9d:06:3f:ed:41:a4:52:89:8f:a6:7e:7c:cb:18:3d:1b:c3:28: 8c:40:52:b9:75:d2:ef:3f:1c:d7:53:ed:c7:a4:3a:5e:d6:06: 3f:ac:b2:12:eb:af:ab:26:cb:2a:2d:63:da:38:bc:00:36:6d: 0c:a5:da:01:6a:9e:7b:f1:9b:de:b7:8c:31:5e:ca:cf:fe:48: 14:43:0b:23:fb:a7:90:d7:86:1a:75:5d:bd:bb:db:ba:72:40: dd:6a:b0:e2:53:bd:0a:42:2d:50:ca:74:20:e6:47:75:83:b4: b3:bc:35:86:6e:b6:99:e9:e6:09:60:30:fd:62:9b:5e:2a:04: eb:97:9a:a8:be:50:6e:04:2f:71:50:8d:ca:30:cb:85:b0:ba: 31:e8:93:04:24:73:22:92:82:b3:df:ab:ef:2a:90:53:d1:d6: b9:18:5b:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRUMxMTAvBgNVBAUTKEZBREM5NzY0QjIwOUY4MUNGODI5MzMyMjZBMDY2OUEz MkE0RURENzIwHhcNMjUwNzE4MjI1NjE1WhcNMjUwNzI1MjI1NjE1WjAYMRYwFAYD VQQDEw02ODdhZDExMC03YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg662YPfKumUdmHw5aWowLO6bCL35fbTEW2tH6o7c/ONzbVJ6fzehEoZsJ40 F511swM+9d8K7CZFTwU91dJ4JMfnAFDx0z34tRWalie0J9aWSmS28sSQkaisiMUK XYE3excn417ozvYYmYcUT5W9VfnvtWQgq9h+Krbeb9OIUUZfjTpxU+cy/M/styaG tNtNhN0/PIs4iycNI5lL+zwS9cSSgjrlGhOTdXXWBZbgqaApwNOxQBHH3uVfX+qW vW5RamsEU22U2HggJ944xqhJNvt3Nng9fEEEfLcbLFTTR2HGv/K2o6/4SK+qq0Vc AgIJ8JZwr6MQpgutMuByxwQGXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ5Ov2t u6rzsdXI1huQSZj+O3IMMB8GA1UdIwQYMBaAFPrcl2SyCfgc+CkzImoGaaMqTt1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNFQy8yMDNDQkI2NDk2 ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1CejRLVE1pYWdacG95cE8z WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eVhaTElKLUJ6NEtUTWlhZ1pwb3lwTzNYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNFQy8yMDNDQkI2NDk2ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1C ejRLVE1pYWdacG95cE8zWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA87igRKCqedX+3bhxm4h+pTjZyqLwZ2VsQ0BdwJbUFmghUzC4QGe/w yJEfvxwUtmyrkaCdZ1a3RygfVO1c48VuST7rSIoh+OspmT+knHV0wQSWVXshbIPH guKdBj/tQaRSiY+mfnzLGD0bwyiMQFK5ddLvPxzXU+3HpDpe1gY/rLIS66+rJssq LWPaOLwANm0MpdoBap578Zvet4wxXsrP/kgUQwsj+6eQ14YadV29u9u6ckDdarDi U70KQi1QynQg5kd1g7SzvDWGbraZ6eYJYDD9YpteKgTrl5qovlBuBC9xUI3KMMuF sLox6JMEJHMikoKz36vvKpBT0da5GFs1 -----END CERTIFICATE-----Generated at Sun Jul 20 15:14:12 2025 by rpki-client