$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json) Hash identifier: sukL+EWIasMFm2AIeXUuu9u510poSM8xqqTnKTS6rmw= Subject key identifier: 48:90:75:23:30:F7:11:6A:59:4C:F2:B9:91:B9:9F:6D:D1:5F:00:00 Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0F1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft Manifest number: 0F10 Signing time: Tue 22 Jul 2025 17:47:17 +0000 Manifest this update: Tue 22 Jul 2025 17:47:17 +0000 Manifest next update: Tue 29 Jul 2025 17:47:17 +0000 Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: xL9jxHvWyvxV3qpsJb0YaieF30MUkGQTbk+yr/xtVVI=) 2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: v5g7cjNReibtump5AZbTVG2Okqg2HIeG+osQENS8uAY=) 3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: e0d6vw79IEqP0AdvR6b4v7RskAnTjUKydxlFYiex0pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3869 (0xf1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: Jul 22 17:47:17 2025 GMT Not After : Jul 29 17:47:17 2025 GMT Subject: CN=687fcea5-a140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3e:20:88:1d:91:5e:57:11:da:be:f5:b8:65: 38:e1:ff:ca:71:e3:2c:a4:30:e7:cb:ae:b2:65:99: 9d:fe:74:e2:22:3b:5e:87:b8:d6:ec:88:4b:43:59: 0e:8c:69:1a:3b:0b:ab:94:c8:17:0e:14:6e:1a:60: b4:36:1f:02:92:43:34:77:e5:5d:2a:98:dc:4b:d4: 9f:af:9e:e0:52:14:c9:e3:e7:83:9f:9d:60:11:af: 97:9a:23:c1:c6:94:b7:e2:27:c0:11:27:32:f2:a7: fe:86:51:a1:de:eb:30:5b:29:c9:9d:2e:32:44:0c: 7a:c1:9f:00:72:c4:9d:2c:fa:48:32:2e:55:cb:e0: e1:74:5e:f4:e5:bc:13:f8:c4:a8:bc:8d:4b:93:31: 92:d5:36:4b:c4:09:3d:a8:45:08:88:a6:2c:be:40: 1b:6a:e9:da:c2:4b:8b:49:3d:b1:4b:8f:15:7f:6f: 0b:04:69:96:cd:f7:6b:1f:d6:eb:72:9e:06:00:00: af:c8:51:0a:73:b9:7d:0b:10:6f:d0:60:fe:81:f5: 53:0c:78:8e:a8:28:8c:73:74:ba:45:e6:e5:c3:9e: 0b:07:13:ac:a8:74:8d:95:09:9c:58:db:0f:fc:92: ce:48:d5:3d:6d:53:d0:73:fb:72:58:a5:00:08:f0: ca:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:90:75:23:30:F7:11:6A:59:4C:F2:B9:91:B9:9F:6D:D1:5F:00:00 X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f4:0e:2b:b0:07:49:ec:e9:4f:56:01:35:53:1c:67:2c:93: 47:b1:0e:ba:8b:8a:a5:26:5c:f9:25:41:6b:8a:2a:7f:3a:ad: c4:91:b5:87:b4:b7:0e:63:2e:28:b2:62:36:68:58:b7:97:4d: 82:5f:70:b2:7f:f3:52:6d:83:cc:81:7d:e4:fc:d9:f3:8e:da: 6e:f2:06:61:eb:4f:5b:de:fd:4f:60:04:0a:f9:2e:b2:46:2e: 85:06:e8:2e:7f:31:de:86:4b:09:48:9c:a1:b3:a1:fc:73:b5: 6d:9e:eb:9b:b6:17:af:ff:a7:c8:17:7f:fd:4a:88:fc:21:44: 6e:e4:af:07:b7:1f:ab:04:00:84:ff:1d:16:06:e3:83:6f:ad: 24:c8:0d:9c:cb:5d:46:3a:33:3b:13:f0:70:73:54:1e:0b:79: 57:ec:bd:ff:3d:9b:c8:cc:8c:85:1a:e6:7b:3b:04:cd:8b:46: 81:78:8f:80:84:0c:87:13:ad:c2:7b:91:66:7b:68:93:e4:75: 53:b7:4d:45:d8:5e:a7:5b:d1:1e:c5:ac:32:72:c6:0b:b0:21: e8:05:ef:f2:09:39:e8:46:a2:75:13:c0:af:0e:3a:5d:8f:bf: ba:90:cf:66:7f:2d:cd:a7:03:9d:d8:6a:48:07:cf:5d:da:b3: 51:fc:1a:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjUwNzIyMTc0NzE3WhcNMjUwNzI5MTc0NzE3WjAYMRYwFAYD VQQDEw02ODdmY2VhNS1hMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoD4giB2RXlcR2r71uGU44f/KceMspDDny66yZZmd/nTiIjteh7jW7IhLQ1kO jGkaOwurlMgXDhRuGmC0Nh8CkkM0d+VdKpjcS9Sfr57gUhTJ4+eDn51gEa+XmiPB xpS34ifAEScy8qf+hlGh3uswWynJnS4yRAx6wZ8AcsSdLPpIMi5Vy+DhdF705bwT +MSovI1LkzGS1TZLxAk9qEUIiKYsvkAbaunawkuLST2xS48Vf28LBGmWzfdrH9br cp4GAACvyFEKc7l9CxBv0GD+gfVTDHiOqCiMc3S6Reblw54LBxOsqHSNlQmcWNsP /JLOSNU9bVPQc/tyWKUACPDKTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiQdSMw 9xFqWUzyuZG5n23RXwAAMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC MXc4NWNrc040c2NRRjBuMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP9A4rsAdJ7OlPVgE1UxxnLJNHsQ66i4qlJlz5JUFriip/Oq3EkbWH tLcOYy4osmI2aFi3l02CX3Cyf/NSbYPMgX3k/Nnzjtpu8gZh609b3v1PYAQK+S6y Ri6FBugufzHehksJSJyhs6H8c7Vtnuubthev/6fIF3/9Soj8IURu5K8Htx+rBACE /x0WBuODb60kyA2cy11GOjM7E/Bwc1QeC3lX7L3/PZvIzIyFGuZ7OwTNi0aBeI+A hAyHE63Ce5Fme2iT5HVTt01F2F6nW9EexawycsYLsCHoBe/yCTnoRqJ1E8CvDjpd j7+6kM9mfy3NpwOd2GpIB89d2rNR/Bq8 -----END CERTIFICATE-----Generated at Wed Jul 23 12:20:51 2025 by rpki-client