$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft File: u99YzWESke9boarLayzE7VCwEVc.mft (raw, json) Hash identifier: NBJxr64VV2k6w6xsoQojTzDqirJL/ZKT4mR9JrzvtFA= Subject key identifier: C9:76:FB:AA:15:BB:45:50:BE:EE:D6:23:F3:5A:75:D4:6B:24:B7:AC Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Certificate serial: 044A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft Manifest number: 0431 Signing time: Sat 19 Jul 2025 00:46:38 +0000 Manifest this update: Sat 19 Jul 2025 00:46:37 +0000 Manifest next update: Sat 26 Jul 2025 00:46:37 +0000 Files and hashes: 1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: QDZ0Obam5bYvHoz424xiiNjBqca7VuYnu7+2mDsj4u8=) 2: 08241A166B1111EE99759439C4F9AE02.roa (hash: ySASg3k7OY7oJkXL5Ws/83THPGLSCp+zucNat555hyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Validity Not Before: Jul 19 00:46:37 2025 GMT Not After : Jul 26 00:46:37 2025 GMT Subject: CN=687aeaee-4f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:39:7c:91:4f:b7:d3:82:86:7e:b9:b7:76: 01:f4:17:7b:78:d6:76:f4:f8:32:f9:8b:e7:27:da: da:2f:76:b6:8b:7e:6e:a8:bd:11:af:01:ee:ed:90: 01:04:95:b0:c3:c7:a0:06:16:61:46:6b:b6:5c:31: 18:5e:48:3c:d4:34:2f:d1:bd:39:07:b6:e6:74:87: ac:4f:4b:3d:c1:25:12:ff:4d:0e:30:aa:cc:48:b9: db:a6:47:e9:42:eb:1c:d3:87:93:52:66:0c:8f:48: ac:5b:f0:ba:69:5c:23:70:dc:0f:61:05:ca:f8:2e: 89:93:4b:1d:c1:94:f9:46:fb:7c:3b:27:c5:1a:ce: 5f:7a:96:23:f8:dd:7d:48:59:e5:22:21:1e:2b:74: 46:00:bd:33:97:35:63:f4:0e:26:50:b6:b0:4a:0e: 01:27:ed:cb:a0:d4:cd:0f:f2:fb:e9:7a:da:bb:8b: 24:fe:f3:fa:ba:24:e5:7b:b8:fb:57:3f:de:40:a1: c6:07:5b:73:39:33:4d:93:58:23:9c:82:f9:6c:4f: 63:27:54:ac:ef:6f:ba:66:e0:5b:fd:7b:dd:70:48: 01:0f:03:67:6f:b7:5b:11:1a:9e:58:ac:0e:fd:05: 26:a1:01:70:95:f3:be:e2:06:2e:32:4f:88:d8:39: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:76:FB:AA:15:BB:45:50:BE:EE:D6:23:F3:5A:75:D4:6B:24:B7:AC X509v3 Authority Key Identifier: keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:72:07:ab:d9:1a:2c:39:61:1c:f2:b2:00:d6:09:1a:51:9b: 02:2b:de:33:23:f8:8d:53:ce:f3:83:51:15:95:34:5a:0b:60: 2c:58:35:a2:a7:33:df:9c:84:f4:9f:9b:b1:5a:ec:63:53:59: 9d:bb:70:3f:60:3a:29:e2:82:b4:4e:4d:04:4b:51:3e:f8:72: 2c:ac:29:d8:30:73:af:a2:33:c1:48:1e:a1:fb:9b:4b:3e:0b: 00:8b:c4:89:b8:56:ff:22:38:77:5c:c4:e4:77:cd:f0:f7:3e: 44:b6:1e:53:eb:a1:44:2a:8f:0a:27:0d:60:93:21:d4:a0:0b: 56:d6:5b:c1:56:bf:a9:af:5b:87:c2:e3:6e:28:42:16:32:9b: 20:d0:38:62:3e:2e:9e:70:66:25:89:68:07:75:c6:4b:cc:19: 0b:ff:83:36:2b:47:52:59:2f:e6:9c:6f:67:39:d5:b0:d7:6c: 11:8b:16:a0:5e:c6:78:a9:61:66:a8:e9:a4:9e:27:cd:ae:ec: a3:db:c8:e4:f8:8f:af:52:3c:09:f8:2d:63:92:a6:38:18:c2: 34:b4:b6:7f:f9:24:d4:1e:71:24:2c:be:aa:4b:84:e9:30:b5: 6b:83:fc:86:da:2e:80:0e:36:c7:ac:2b:62:16:cc:bd:54:53: 3a:19:e0:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2RkQxMTAvBgNVBAUTKEJCREY1OENENjExMjkxRUY1QkExQUFDQjZCMkNDNEVE NTBCMDExNTcwHhcNMjUwNzE5MDA0NjM3WhcNMjUwNzI2MDA0NjM3WjAYMRYwFAYD VQQDEw02ODdhZWFlZS00ZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswU5fJFPt9OChn65t3YB9Bd7eNZ29Pgy+YvnJ9raL3a2i35uqL0RrwHu7ZAB BJWww8egBhZhRmu2XDEYXkg81DQv0b05B7bmdIesT0s9wSUS/00OMKrMSLnbpkfp Qusc04eTUmYMj0isW/C6aVwjcNwPYQXK+C6Jk0sdwZT5Rvt8OyfFGs5fepYj+N19 SFnlIiEeK3RGAL0zlzVj9A4mULawSg4BJ+3LoNTND/L76Xrau4sk/vP6uiTle7j7 Vz/eQKHGB1tzOTNNk1gjnIL5bE9jJ1Ss72+6ZuBb/XvdcEgBDwNnb7dbERqeWKwO /QUmoQFwlfO+4gYuMk+I2Dk4DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMl2+6oV u0VQvu7WI/NaddRrJLesMB8GA1UdIwQYMBaAFLvfWM1hEpHvW6Gqy2ssxO1QsBFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZGRC81OUJGMjE0RTc0 NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tlOWJvYXJMYXl6RTdWQ3dF VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5OVl6V0VTa2U5Ym9hckxheXpFN1ZDd0VWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZGRC81OUJGMjE0RTc0NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tl OWJvYXJMYXl6RTdWQ3dFVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPcger2RosOWEc8rIA1gkaUZsCK94zI/iNU87zg1EVlTRaC2AsWDWi pzPfnIT0n5uxWuxjU1mdu3A/YDop4oK0Tk0ES1E++HIsrCnYMHOvojPBSB6h+5tL PgsAi8SJuFb/Ijh3XMTkd83w9z5Eth5T66FEKo8KJw1gkyHUoAtW1lvBVr+pr1uH wuNuKEIWMpsg0DhiPi6ecGYliWgHdcZLzBkL/4M2K0dSWS/mnG9nOdWw12wRixag XsZ4qWFmqOmknifNruyj28jk+I+vUjwJ+C1jkqY4GMI0tLZ/+STUHnEkLL6qS4Tp MLVrg/yG2i6ADjbHrCtiFsy9VFM6GeAv -----END CERTIFICATE-----Generated at Sun Jul 20 20:19:31 2025 by rpki-client