$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft File: y36OVMh-Ac6Gec_lUPH-myNhCD4.mft (raw, json) Hash identifier: cv+5nPrbp06sPAVeMjrfq3ktz7/PKR2exSxOoPIpcOU= Subject key identifier: D6:37:87:24:62:47:75:6B:DE:25:2B:E4:E6:8F:23:88:1D:B6:84:1F Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E Certificate issuer: /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft Manifest number: 0142 Signing time: Sat 23 Aug 2025 04:36:23 +0000 Manifest this update: Sat 23 Aug 2025 04:36:22 +0000 Manifest next update: Sat 30 Aug 2025 04:36:22 +0000 Files and hashes: 1: y36OVMh-Ac6Gec_lUPH-myNhCD4.crl (hash: U1jM1cWxkxhS0cU4cmKtWsMqMTJkVeycp78xOmbBoE8=) 2: 1C977098A54911EEA5726C58C4F9AE02.roa (hash: nXtaThu3TIoFMtdBr1ku1oMROARCmy4V1hsNkYKjwTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE01, serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Validity Not Before: Aug 23 04:36:22 2025 GMT Not After : Aug 30 04:36:22 2025 GMT Subject: CN=68a94547-c608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:24:50:67:ab:9b:35:65:ea:0d:f7:02:63: a9:79:23:e5:ee:0f:25:58:55:ec:46:9d:09:0d:74: 29:83:26:9a:22:7b:2a:1a:a1:e9:20:ce:eb:23:65: 76:82:83:2d:7b:f2:61:a0:ef:88:38:31:e9:41:48: ad:01:62:91:24:03:42:35:5e:36:e2:ba:00:34:99: d6:6c:00:5d:a4:39:30:c7:2d:56:c8:68:96:0e:a5: 97:ac:7f:c5:a5:97:f4:14:d3:61:3c:50:7f:3e:b6: 02:70:2b:56:3e:9a:a7:5b:62:53:43:b8:16:c2:f6: 1a:34:3c:6d:4b:cb:53:bd:44:ac:87:cd:21:91:d2: 24:2b:c4:5f:e4:ba:f5:e1:81:8d:ef:96:47:d5:21: 98:b5:8b:4f:c7:4e:9a:53:7b:a3:b4:7e:b9:8c:05: e8:3a:40:61:52:69:7d:e2:bb:87:29:bb:33:49:4b: 29:9e:c8:b1:da:64:9f:ab:bb:f7:28:10:b1:ad:91: 3c:99:35:3f:83:7e:00:73:a0:1f:25:b7:2a:0d:60: d7:c7:c2:a6:4f:1b:60:8c:7b:87:f4:f7:56:30:40: dc:a9:b7:f8:fa:77:ab:de:ac:d3:a8:a6:7e:c9:8c: e2:91:58:95:04:9f:cc:f8:30:64:31:1a:cd:0d:d4: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:37:87:24:62:47:75:6B:DE:25:2B:E4:E6:8F:23:88:1D:B6:84:1F X509v3 Authority Key Identifier: keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:71:5a:41:71:40:1c:8e:17:55:42:a1:ca:e8:04:3f:1a:16: 32:3e:32:4c:3a:f4:70:c9:56:41:2e:ba:3d:3a:c9:af:4f:f9: d6:71:cd:02:df:9d:9d:59:78:45:d6:0e:14:94:16:fc:57:50: 5f:f4:6e:ab:fc:f5:53:8a:ad:83:d7:76:8e:b8:43:fa:c3:0a: 58:76:94:ec:4b:df:34:ef:e8:01:b1:30:25:99:53:e9:3f:82: d0:7a:d8:01:0b:a2:b5:b8:40:ff:70:6d:99:57:8d:43:8b:29: 1d:be:20:1e:2c:ce:5a:db:2f:54:5e:da:e9:ae:63:72:41:03: 65:61:87:ae:5f:a0:0a:a0:15:f9:84:c8:a7:f2:73:58:75:7f: 13:03:75:0e:f9:d9:d2:67:dc:40:b5:58:18:5c:34:14:b4:bf: 71:01:ec:7f:22:63:8e:31:ce:e3:e6:7d:fa:ba:2e:92:91:97: 92:0c:09:be:18:bd:07:49:7b:50:e5:ce:0f:52:aa:2b:82:70: e2:74:a0:c2:99:4d:0a:b0:6c:4e:65:6a:d5:f8:68:66:e8:99: bd:ab:2e:aa:f3:2f:70:0f:87:19:90:69:af:24:88:b7:d2:a3: d2:8a:ff:a2:94:a6:ac:62:78:06:6a:44:28:57:2e:59:d1:bb: 57:ea:5d:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFMDExMTAvBgNVBAUTKENCN0U4RTU0Qzg3RTAxQ0U4Njc5Q0ZFNTUwRjFGRTlC MjM2MTA4M0UwHhcNMjUwODIzMDQzNjIyWhcNMjUwODMwMDQzNjIyWjAYMRYwFAYD VQQDEw02OGE5NDU0Ny1jNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31kkUGermzVl6g33AmOpeSPl7g8lWFXsRp0JDXQpgyaaInsqGqHpIM7rI2V2 goMte/JhoO+IODHpQUitAWKRJANCNV424roANJnWbABdpDkwxy1WyGiWDqWXrH/F pZf0FNNhPFB/PrYCcCtWPpqnW2JTQ7gWwvYaNDxtS8tTvUSsh80hkdIkK8Rf5Lr1 4YGN75ZH1SGYtYtPx06aU3ujtH65jAXoOkBhUml94ruHKbszSUspnsix2mSfq7v3 KBCxrZE8mTU/g34Ac6AfJbcqDWDXx8KmTxtgjHuH9PdWMEDcqbf4+ner3qzTqKZ+ yYzikViVBJ/M+DBkMRrNDdQTTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNY3hyRi R3Vr3iUr5OaPI4gdtoQfMB8GA1UdIwQYMBaAFMt+jlTIfgHOhnnP5VDx/psjYQg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkUwMS9BNEY5Q0Q2NjlG NUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFjNkdlY19sVVBILW15TmhD RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzNk9WTWgtQWM2R2VjX2xVUEgtbXlOaENENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkUwMS9BNEY5Q0Q2NjlGNUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFj NkdlY19sVVBILW15TmhDRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAocVpBcUAcjhdVQqHK6AQ/GhYyPjJMOvRwyVZBLro9OsmvT/nWcc0C 352dWXhF1g4UlBb8V1Bf9G6r/PVTiq2D13aOuEP6wwpYdpTsS9807+gBsTAlmVPp P4LQetgBC6K1uED/cG2ZV41DiykdviAeLM5a2y9UXtrprmNyQQNlYYeuX6AKoBX5 hMin8nNYdX8TA3UO+dnSZ9xAtVgYXDQUtL9xAex/ImOOMc7j5n36ui6SkZeSDAm+ GL0HSXtQ5c4PUqorgnDidKDCmU0KsGxOZWrV+Ghm6Jm9qy6q8y9wD4cZkGmvJIi3 0qPSiv+ilKasYngGakQoVy5Z0btX6l0l -----END CERTIFICATE-----Generated at Sun Aug 24 21:46:24 2025 by rpki-client