$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft File: ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json) Hash identifier: rEaTwqOy/AaE03xL+PIxRfx+lKc8Ee0J2m0Tegegxgs= Subject key identifier: EF:EB:5A:F3:48:4E:39:DD:87:96:A5:C1:7B:C6:E6:F5:64:02:C6:4D Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft Manifest number: 0C60 Signing time: Sun 20 Jul 2025 18:24:21 +0000 Manifest this update: Sun 20 Jul 2025 18:24:21 +0000 Manifest next update: Sun 27 Jul 2025 18:24:21 +0000 Files and hashes: 1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: TZVILZXMyvxzro++tNzqeua+HVuebhcT1wN62oUJE9g=) 2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: JpCVaZ9JZD1Afq3DjPUJqYLTP1v40h6qnEBodBPkfj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Validity Not Before: Jul 20 18:24:21 2025 GMT Not After : Jul 27 18:24:21 2025 GMT Subject: CN=687d3455-26fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:e4:dc:d0:66:41:be:65:bb:70:b9:f3:57: a4:26:b8:a8:a6:66:73:2d:dd:d1:ad:99:44:f2:12: 69:1a:dd:88:84:27:ca:81:db:9f:c5:04:43:dc:cb: 40:1b:00:f3:c6:ef:ca:3c:51:99:a1:fc:c8:6b:5d: 44:86:86:68:9b:03:17:ab:4c:04:ea:99:e7:84:c5: c3:dd:72:c5:db:0d:62:71:c7:ca:8d:40:8c:b0:7c: 10:fd:df:ac:ad:0c:5c:58:d6:7c:37:da:1c:43:87: 2f:89:6f:5e:99:d6:51:26:cb:59:5d:b9:4b:97:9e: e4:6f:6f:84:6d:3a:22:40:56:6b:dc:5a:5c:4a:68: 47:3a:cb:37:0f:50:70:cb:c7:49:c1:22:a8:00:d5: f0:ca:58:5c:35:81:ee:66:95:f8:ca:67:27:57:a0: 0c:b2:12:8f:3f:7a:ad:6d:ed:8c:a5:e0:c2:33:ea: 1c:34:5a:14:d5:19:ba:8b:66:cb:e2:ff:cf:d0:65: 01:18:9f:5c:92:0c:a9:17:72:4d:df:93:51:dc:8a: c6:0d:43:35:de:f4:d7:23:fe:f9:3f:a6:cb:e2:88: 5e:31:64:8a:bc:2f:82:15:03:56:83:a9:92:a7:c1: 6a:e6:c0:f8:8a:8b:da:79:da:a2:02:4d:26:51:4d: 9f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EB:5A:F3:48:4E:39:DD:87:96:A5:C1:7B:C6:E6:F5:64:02:C6:4D X509v3 Authority Key Identifier: keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:8a:4d:d2:c5:5b:76:ee:bc:12:2e:84:66:9e:32:02:dc:b4: 29:03:84:76:2e:b9:15:02:a1:26:10:69:d2:82:09:9a:91:53: 4a:cc:94:33:3b:74:f5:28:93:77:be:5c:ef:fa:b9:b2:6c:19: 5f:90:d6:24:bf:f8:ee:9a:11:82:a1:cb:7c:b6:23:94:ae:48: 46:2e:22:79:3d:f1:7f:7e:14:93:e8:43:d6:8a:47:db:55:1f: 8d:7a:02:f5:b3:49:bf:9a:91:07:30:cc:99:8c:dd:91:55:bb: ab:d0:c6:1d:6c:d5:33:12:b5:b1:de:3f:8a:d6:95:4f:00:3d: 62:15:40:6e:ac:4c:88:2c:32:d6:17:a2:74:d2:1c:fa:dc:74: 15:d9:2f:1a:a7:4d:9c:59:52:ea:e9:b4:6f:e8:70:60:97:55: 9f:06:e0:88:16:b1:16:5c:4d:cf:5e:c9:93:d9:eb:9f:78:ef: ce:8c:54:58:88:ca:0b:5b:68:2a:cc:11:6b:16:c2:2e:17:17: 5f:b6:19:89:76:46:85:0c:cd:96:c3:5f:33:be:2f:80:a0:d1: 78:87:79:98:89:b9:9e:79:fc:20:25:32:57:37:cb:e9:d2:42: 75:c2:0d:9f:2f:47:0d:17:31:27:36:f0:93:92:1a:8f:ff:4c: 3d:b9:92:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKEFGMkQ0NTNCRUJCRkRGNUYyOUI2M0FDMTY3NTRDNzhE MUIwRkNCODgwHhcNMjUwNzIwMTgyNDIxWhcNMjUwNzI3MTgyNDIxWjAYMRYwFAYD VQQDEw02ODdkMzQ1NS0yNmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+Pk3NBmQb5lu3C581ekJriopmZzLd3RrZlE8hJpGt2IhCfKgdufxQRD3MtA GwDzxu/KPFGZofzIa11EhoZomwMXq0wE6pnnhMXD3XLF2w1iccfKjUCMsHwQ/d+s rQxcWNZ8N9ocQ4cviW9emdZRJstZXblLl57kb2+EbToiQFZr3FpcSmhHOss3D1Bw y8dJwSKoANXwylhcNYHuZpX4ymcnV6AMshKPP3qtbe2MpeDCM+ocNFoU1Rm6i2bL 4v/P0GUBGJ9ckgypF3JN35NR3IrGDUM13vTXI/75P6bL4oheMWSKvC+CFQNWg6mS p8Fq5sD4iovaedqiAk0mUU2f8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/rWvNI Tjndh5alwXvG5vVkAsZNMB8GA1UdIwQYMBaAFK8tRTvrv99fKbY6wWdUx40bD8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82ODEyREY5MjA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMxOHB0anJCWjFUSGpSc1B5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J5MUZPLXVfMzE4cHRqckJaMVRIalJzUHk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82ODEyREY5MjA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMx OHB0anJCWjFUSGpSc1B5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ik3SxVt27rwSLoRmnjIC3LQpA4R2LrkVAqEmEGnSggmakVNKzJQz O3T1KJN3vlzv+rmybBlfkNYkv/jumhGCoct8tiOUrkhGLiJ5PfF/fhST6EPWikfb VR+NegL1s0m/mpEHMMyZjN2RVbur0MYdbNUzErWx3j+K1pVPAD1iFUBurEyILDLW F6J00hz63HQV2S8ap02cWVLq6bRv6HBgl1WfBuCIFrEWXE3PXsmT2eufeO/OjFRY iMoLW2gqzBFrFsIuFxdfthmJdkaFDM2Ww18zvi+AoNF4h3mYibmeefwgJTJXN8vp 0kJ1wg2fL0cNFzEnNvCTkhqP/0w9uZLD -----END CERTIFICATE-----Generated at Mon Jul 21 13:14:57 2025 by rpki-client