$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: BI9ja5xrgifIo2vQJh87QuXWGmGVz4spryblR0VPFPA= Subject key identifier: AB:CA:A5:62:DE:73:99:19:3F:C7:B0:DB:DB:B6:97:C3:F9:A6:85:86 Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: 0164 Signing time: Sat 19 Jul 2025 04:09:46 +0000 Manifest this update: Sat 19 Jul 2025 04:09:46 +0000 Manifest next update: Sat 26 Jul 2025 04:09:46 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: f1M05yhJ9bTziLb4KIpl7BEyODDkxtio4HFzAIFcYqE=) 2: B78CCA4E4C5711EE9FE2EA35C4F9AE02.roa (hash: yOezlN4+53IwwnSsCKNCBTmWXo8aQEvNaQEYhS9yato=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Jul 19 04:09:46 2025 GMT Not After : Jul 26 04:09:46 2025 GMT Subject: CN=687b1a8a-45ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:22:e9:57:7c:f5:0a:75:8e:c6:17:95:09: a6:d6:50:1d:96:af:9e:b5:e9:31:c0:da:fa:1c:90: fb:57:b9:b8:bd:d0:19:78:c2:3c:06:1c:09:51:b7: a4:84:e7:4e:d2:cd:c6:fc:e2:ba:8b:4b:f0:42:78: 3b:e3:fd:16:07:f2:b6:18:bd:56:0f:77:d1:10:9a: c2:09:a4:60:7a:76:cf:d6:22:34:3b:5e:cf:28:44: 8d:a5:76:72:70:87:b3:7c:31:65:7e:64:46:02:c7: d1:b8:e5:46:1c:a3:cf:8a:a5:08:0d:8f:d5:12:da: 45:eb:b0:f9:28:4a:4f:47:9c:7f:76:18:de:8c:95: ce:02:15:ab:1c:cb:35:57:6c:6d:a3:53:b3:11:44: ee:b4:79:9d:8b:ac:7a:e4:58:74:de:ec:af:a4:65: a2:a0:6c:36:50:df:6a:33:28:1d:f0:48:d4:ff:e5: 08:7c:66:5b:fe:b6:2d:49:cd:24:09:af:2f:63:43: bb:fc:26:12:97:ec:d9:58:54:01:6a:0b:6a:85:3d: 90:42:a1:7b:ba:0c:11:45:d9:bd:07:4b:cd:ac:01: fc:1a:31:b6:dd:d0:ee:f6:b5:45:50:a1:6e:42:ff: 75:61:b0:38:77:ef:64:48:6c:1f:d9:d7:98:8f:72: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CA:A5:62:DE:73:99:19:3F:C7:B0:DB:DB:B6:97:C3:F9:A6:85:86 X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:50:54:32:10:f0:f7:13:31:31:40:c8:5a:71:da:5b:38:ce: 1e:3d:34:60:fc:39:e6:73:60:40:63:d3:3b:4c:e2:bf:2a:c0: 1a:dc:a9:f3:08:d8:30:a7:b1:87:d6:b1:97:f9:cd:c3:d6:89: d8:ee:65:45:99:6d:bb:fb:11:f9:f6:9d:f0:60:00:ca:f5:c8: 68:82:d2:f4:3f:0e:d8:22:24:53:db:21:9b:4b:7e:91:1c:92: eb:32:db:ba:4e:a7:96:f3:2d:85:7d:c6:d1:5a:1d:39:46:e1: f1:47:66:f4:41:17:fe:65:61:1f:52:96:4a:d6:4a:c2:e3:5b: 76:4d:b1:33:6d:d8:17:cc:c9:d9:d5:d7:f4:a7:38:21:89:84: 2d:f6:f3:ec:ef:ee:49:98:89:8f:90:52:7e:fa:11:80:36:1b: 2b:c0:37:ac:b2:97:49:b3:7c:32:f2:99:1c:4d:bd:b7:67:bf: 97:78:38:0a:1d:d6:b0:da:60:5f:e6:85:98:d3:14:fd:1c:a2: d2:a3:1e:58:4d:81:d5:89:85:71:17:c3:30:bf:db:94:e6:80: f2:67:30:aa:e7:0e:c6:c9:b4:f1:19:a6:58:a9:c7:a3:53:06: 5e:6e:05:b1:5d:88:9c:68:dc:66:60:ac:f7:0e:0c:69:2d:56: af:84:b0:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjUwNzE5MDQwOTQ2WhcNMjUwNzI2MDQwOTQ2WjAYMRYwFAYD VQQDEw02ODdiMWE4YS00NWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMYi6Vd89Qp1jsYXlQmm1lAdlq+etekxwNr6HJD7V7m4vdAZeMI8BhwJUbek hOdO0s3G/OK6i0vwQng74/0WB/K2GL1WD3fREJrCCaRgenbP1iI0O17PKESNpXZy cIezfDFlfmRGAsfRuOVGHKPPiqUIDY/VEtpF67D5KEpPR5x/dhjejJXOAhWrHMs1 V2xto1OzEUTutHmdi6x65Fh03uyvpGWioGw2UN9qMygd8EjU/+UIfGZb/rYtSc0k Ca8vY0O7/CYSl+zZWFQBagtqhT2QQqF7ugwRRdm9B0vNrAH8GjG23dDu9rVFUKFu Qv91YbA4d+9kSGwf2deYj3KaoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvKpWLe c5kZP8ew29u2l8P5poWGMB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChUFQyEPD3EzExQMhacdpbOM4ePTRg/Dnmc2BAY9M7TOK/KsAa3Knz CNgwp7GH1rGX+c3D1onY7mVFmW27+xH59p3wYADK9chogtL0Pw7YIiRT2yGbS36R HJLrMtu6TqeW8y2FfcbRWh05RuHxR2b0QRf+ZWEfUpZK1krC41t2TbEzbdgXzMnZ 1df0pzghiYQt9vPs7+5JmImPkFJ++hGANhsrwDesspdJs3wy8pkcTb23Z7+XeDgK Hdaw2mBf5oWY0xT9HKLSox5YTYHViYVxF8Mwv9uU5oDyZzCq5w7GybTxGaZYqcej UwZebgWxXYicaNxmYKz3DgxpLVavhLAR -----END CERTIFICATE-----Generated at Sun Jul 20 03:10:24 2025 by rpki-client