$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft File: ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json) Hash identifier: G8ynh57Og0ekq8Z+wKDpO6GJ8wWgtt+tFjhBOFZUXYc= Subject key identifier: 74:D5:93:1F:DD:B3:52:7D:4D:0F:62:84:9D:55:D6:16:42:EA:BC:73 Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft Manifest number: 0C7B Signing time: Sat 06 Sep 2025 18:28:54 +0000 Manifest this update: Sat 06 Sep 2025 18:28:54 +0000 Manifest next update: Sat 13 Sep 2025 18:28:54 +0000 Files and hashes: 1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: Pf7gPfKQg0ClusZTnRseldC7ykUw9d2PmpmJlLBvnTI=) 2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: QXDdzYa6iyzovy5Z9ik5QXaJEcfXc3NGsSzn/V3Ryt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Validity Not Before: Sep 6 18:28:54 2025 GMT Not After : Sep 13 18:28:54 2025 GMT Subject: CN=68bc7d66-bcf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f8:2f:96:f1:7e:f0:b1:92:24:95:ea:8d:c1: 27:94:eb:48:7d:ef:3c:b0:b6:2b:79:bc:d2:23:39: 09:3d:8d:19:61:e9:70:41:28:35:1e:d5:4e:b3:f2: b5:e4:15:92:41:21:7c:2d:1c:64:d6:d2:49:5e:72: af:49:21:a5:a4:53:fc:a5:ad:a1:54:18:67:29:11: d8:c9:94:de:38:83:85:47:8d:53:cf:53:67:96:19: d8:f4:cb:ca:f1:2b:7a:2d:fd:d4:c5:48:a3:b1:7e: 10:0e:6a:6a:45:a5:bc:ec:f1:d0:3c:d7:f8:aa:bf: ff:39:e7:30:24:08:10:83:bd:34:4d:dd:9c:8f:6c: cf:81:d7:16:3a:01:de:b8:d7:2e:19:65:2f:57:64: ea:85:9a:5e:24:0c:ab:7c:18:8a:aa:ac:98:54:bf: 7c:93:44:b1:4c:bd:f8:2b:b2:c4:3d:d0:51:f7:72: 5d:87:9c:6a:70:64:3c:38:01:20:4c:be:ef:c1:a4: 04:dc:10:de:da:1f:72:cf:e0:47:13:89:23:f8:58: c3:55:59:df:f6:73:66:c0:f6:c1:9e:8b:07:2c:ad: 10:ed:a9:5e:63:0f:15:85:f9:7f:8e:ba:e5:57:4c: 3b:25:72:29:18:da:19:19:14:a2:5f:b5:65:a4:29: e8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D5:93:1F:DD:B3:52:7D:4D:0F:62:84:9D:55:D6:16:42:EA:BC:73 X509v3 Authority Key Identifier: keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b9:35:fc:2a:f6:94:be:f2:1f:92:3c:b3:73:70:19:5e:0f: 69:f9:68:fb:da:e1:6d:b5:80:ee:fa:ac:a4:54:e6:4e:5b:df: cb:d8:76:3d:b7:d0:02:72:6a:99:83:75:20:4c:d3:ce:ec:63: 45:f0:d7:50:86:4c:9d:8f:be:85:a4:f7:86:60:aa:9b:96:dd: 27:0b:8e:ac:5c:8f:e4:cc:d8:0e:16:b3:7e:d6:eb:74:00:d9: de:3a:f0:2c:18:9f:34:70:d0:72:7a:d8:ea:29:6e:a1:6f:cd: 31:06:c7:c9:33:2e:c2:e8:a3:ee:e1:80:f0:61:3d:ed:df:ab: 4d:6e:69:09:db:f2:29:a0:88:4e:75:a3:97:e4:12:e3:66:7e: 74:e3:db:3d:8e:43:0f:7f:e3:6d:b4:3d:c8:d2:62:be:e0:b8: 27:61:2d:10:b2:18:91:eb:3c:72:87:6b:e3:da:fa:8e:e4:69: 9c:3d:6e:2a:a2:20:d3:37:1b:a9:d0:84:b2:e1:c6:3c:2e:54: 2c:55:36:08:1d:1f:35:ad:ee:3f:31:32:6b:eb:d7:82:d3:2d: 4e:b2:43:52:85:07:5f:59:a8:18:d2:b2:29:d5:75:02:7e:c4: 24:0e:d8:4c:7c:6e:03:99:7d:65:ed:55:b1:b3:1a:40:51:ff: 35:e3:34:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKEFGMkQ0NTNCRUJCRkRGNUYyOUI2M0FDMTY3NTRDNzhE MUIwRkNCODgwHhcNMjUwOTA2MTgyODU0WhcNMjUwOTEzMTgyODU0WjAYMRYwFAYD VQQDEw02OGJjN2Q2Ni1iY2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkvgvlvF+8LGSJJXqjcEnlOtIfe88sLYrebzSIzkJPY0ZYelwQSg1HtVOs/K1 5BWSQSF8LRxk1tJJXnKvSSGlpFP8pa2hVBhnKRHYyZTeOIOFR41Tz1NnlhnY9MvK 8St6Lf3UxUijsX4QDmpqRaW87PHQPNf4qr//OecwJAgQg700Td2cj2zPgdcWOgHe uNcuGWUvV2TqhZpeJAyrfBiKqqyYVL98k0SxTL34K7LEPdBR93Jdh5xqcGQ8OAEg TL7vwaQE3BDe2h9yz+BHE4kj+FjDVVnf9nNmwPbBnosHLK0Q7aleYw8Vhfl/jrrl V0w7JXIpGNoZGRSiX7VlpCnoXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTVkx/d s1J9TQ9ihJ1V1hZC6rxzMB8GA1UdIwQYMBaAFK8tRTvrv99fKbY6wWdUx40bD8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82ODEyREY5MjA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMxOHB0anJCWjFUSGpSc1B5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J5MUZPLXVfMzE4cHRqckJaMVRIalJzUHk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82ODEyREY5MjA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMx OHB0anJCWjFUSGpSc1B5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFuTX8KvaUvvIfkjyzc3AZXg9p+Wj72uFttYDu+qykVOZOW9/L2HY9 t9ACcmqZg3UgTNPO7GNF8NdQhkydj76FpPeGYKqblt0nC46sXI/kzNgOFrN+1ut0 ANneOvAsGJ80cNByetjqKW6hb80xBsfJMy7C6KPu4YDwYT3t36tNbmkJ2/IpoIhO daOX5BLjZn5049s9jkMPf+NttD3I0mK+4LgnYS0QshiR6zxyh2vj2vqO5GmcPW4q oiDTNxup0ISy4cY8LlQsVTYIHR81re4/MTJr69eC0y1OskNShQdfWagY0rIp1XUC fsQkDthMfG4DmX1l7VWxsxpAUf814zS8 -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:08 2025 by rpki-client