$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: uAqU02/5g+GUlTSvagfml0i2TcmrX8RQiFtwfB7au0w= Subject key identifier: 9B:05:93:5B:EF:1D:A7:A9:A5:6E:C8:34:B2:DD:EB:B5:DC:77:D3:91 Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0BE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0BD9 Signing time: Fri 18 Jul 2025 19:01:43 +0000 Manifest this update: Fri 18 Jul 2025 19:01:42 +0000 Manifest next update: Fri 25 Jul 2025 19:01:42 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: f0lICtG6YUp+JvvUtQIbAgGZKYZ3jPwZyO2bdN0vSwo=) 2: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: EeQ1Nt52m1hyZ6VPZEPVHxza1Z77ig7QYE1EDDBnm08=) 3: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: TRjcmxyqZohfOlB4LLbzqsFvH4uXUeHEH5tCE+DExYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3043 (0xbe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Jul 18 19:01:42 2025 GMT Not After : Jul 25 19:01:42 2025 GMT Subject: CN=687a9a16-3ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:a6:f4:17:7f:75:92:1d:92:bd:f8:72:70: 7b:04:6a:a2:4d:c7:0d:98:80:6f:5b:72:73:fc:cd: 32:d9:8a:9d:dd:b1:2b:54:83:39:75:af:6d:ae:78: 2c:4e:c1:7e:37:88:97:42:80:50:0f:bc:29:d2:a0: 1d:36:f6:9b:cd:5d:01:c5:ad:e9:44:78:a0:9a:25: 6c:75:d1:ed:96:b0:ae:5b:2f:2f:06:2e:55:fe:e0: 87:ce:76:23:f5:1a:b6:69:d2:19:c5:30:68:d8:90: 19:32:8b:cc:d6:5f:61:b6:a5:c0:e6:ef:b1:ac:d5: e9:ed:67:c6:26:58:2a:a7:54:04:e1:eb:8b:f7:23: 54:b8:77:5d:88:c4:f3:a8:2a:b7:34:0b:a6:8c:c2: 84:71:c0:d9:de:b1:d8:ef:fe:c3:9b:d5:6d:a4:7b: 2c:01:0c:2e:b8:b2:09:22:27:c5:45:dc:e5:46:05: fe:64:0c:ec:3b:72:15:f6:87:85:5e:33:e3:5d:de: ce:7f:7b:d0:61:82:15:de:8a:52:b7:eb:55:36:5b: 8d:30:a1:2f:da:00:19:58:02:23:8b:c3:24:5f:1b: bd:ca:ff:35:10:a8:b0:00:23:a1:98:11:9f:df:61: 5a:a0:e4:fc:4f:0d:41:a3:00:c8:86:ff:c9:c9:7c: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:05:93:5B:EF:1D:A7:A9:A5:6E:C8:34:B2:DD:EB:B5:DC:77:D3:91 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:59:56:45:fe:84:e9:02:f0:55:03:03:74:16:2f:92:3a:3e: 51:8c:0c:d7:e6:a7:20:87:56:9d:10:b3:c1:60:54:74:33:2b: 2c:5e:8f:a8:81:14:66:62:20:99:b8:4f:be:63:98:ca:a7:a8: 3f:b5:a1:43:1f:9b:2a:64:58:e7:43:2b:ad:a4:de:f4:c9:0e: 9c:3f:1e:4b:52:aa:84:22:a9:04:b7:55:13:9f:7b:37:08:a4: 7c:f8:57:ef:ff:93:33:97:9f:14:5d:54:24:ca:58:95:09:08: 99:0e:c8:62:e9:0d:bf:f3:f0:4f:fe:91:20:49:3b:8a:bf:38: df:1b:2f:ce:2d:2b:61:8a:9c:e3:dd:3c:35:56:08:dc:82:76: 26:85:90:48:66:b5:f6:df:05:e4:11:49:b0:6c:ad:d9:89:f3: 28:6b:78:9d:24:d3:d6:8c:69:79:8c:16:b9:0f:6a:34:b0:cd: ce:1c:9e:6c:db:e7:91:1c:ec:7b:3d:63:6e:71:65:89:b5:e4: f1:67:d1:c7:da:b9:ad:55:87:1e:d3:aa:54:15:16:b9:65:21: 39:32:38:57:e9:fa:22:21:6a:bd:b7:ea:30:10:83:bc:f2:59: 77:09:5c:3d:5d:a0:0e:63:b4:65:ee:aa:1f:a6:30:28:68:22: cf:95:c6:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjUwNzE4MTkwMTQyWhcNMjUwNzI1MTkwMTQyWjAYMRYwFAYD VQQDEw02ODdhOWExNi0zZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOam9Bd/dZIdkr34cnB7BGqiTccNmIBvW3Jz/M0y2Yqd3bErVIM5da9trngs TsF+N4iXQoBQD7wp0qAdNvabzV0Bxa3pRHigmiVsddHtlrCuWy8vBi5V/uCHznYj 9Rq2adIZxTBo2JAZMovM1l9htqXA5u+xrNXp7WfGJlgqp1QE4euL9yNUuHddiMTz qCq3NAumjMKEccDZ3rHY7/7Dm9VtpHssAQwuuLIJIifFRdzlRgX+ZAzsO3IV9oeF XjPjXd7Of3vQYYIV3opSt+tVNluNMKEv2gAZWAIji8MkXxu9yv81EKiwACOhmBGf 32FaoOT8Tw1BowDIhv/JyXx4OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsFk1vv HaeppW7INLLd67Xcd9ORMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtWVZF/oTpAvBVAwN0Fi+SOj5RjAzX5qcgh1adELPBYFR0MyssXo+o gRRmYiCZuE++Y5jKp6g/taFDH5sqZFjnQyutpN70yQ6cPx5LUqqEIqkEt1UTn3s3 CKR8+Ffv/5Mzl58UXVQkyliVCQiZDshi6Q2/8/BP/pEgSTuKvzjfGy/OLSthipzj 3Tw1VgjcgnYmhZBIZrX23wXkEUmwbK3ZifMoa3idJNPWjGl5jBa5D2o0sM3OHJ5s 2+eRHOx7PWNucWWJteTxZ9HH2rmtVYce06pUFRa5ZSE5MjhX6foiIWq9t+owEIO8 8ll3CVw9XaAOY7Rl7qofpjAoaCLPlcZP -----END CERTIFICATE-----Generated at Sun Jul 20 03:39:53 2025 by rpki-client