$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: wz/7lKIWMFdoyW9ZE2qDGNfEaU+7ycM2qOBkra6sx4c= Subject key identifier: 1F:D5:D2:D8:7F:A4:1E:CF:0D:6A:27:59:43:26:23:7B:C3:E7:35:3F Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: 0125 Signing time: Fri 05 Sep 2025 05:08:15 +0000 Manifest this update: Fri 05 Sep 2025 05:08:15 +0000 Manifest next update: Fri 12 Sep 2025 05:08:15 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: GC11pEqHaTi4QauLnzsjJEUv6Bw5huza79mzEXroU90=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: Sep 5 05:08:15 2025 GMT Not After : Sep 12 05:08:15 2025 GMT Subject: CN=68ba703f-9cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bf:4f:55:73:ab:f0:55:5b:73:34:c4:b1:5a: 15:35:4d:24:a0:3d:ea:7b:c2:a7:fa:95:44:88:d0: 72:a4:28:2e:3d:8b:be:b6:cf:09:e4:7b:ae:3b:dd: 3a:95:9c:f6:7c:44:35:88:ee:79:00:05:d2:34:0c: 33:5b:fb:9d:f7:b6:77:91:53:d3:cf:f1:07:88:f0: cc:d2:7b:55:88:84:37:cf:fc:40:fa:a9:12:33:a9: e1:c7:46:9a:3c:20:d8:1d:9a:56:be:e6:bd:5d:fd: 42:04:56:e1:42:6a:9c:60:bc:11:08:99:6f:31:a4: c8:cf:84:77:88:a7:ee:0b:60:b4:22:df:ba:34:98: 1c:f8:cc:8e:d3:7e:bd:14:5a:ec:09:65:0f:b1:38: 93:12:90:c7:d3:3b:7c:78:c5:e1:07:d5:63:0f:f4: e8:ee:46:cd:26:8f:68:81:b2:88:e6:97:83:40:08: ab:18:0b:91:60:37:53:39:3d:2c:52:d5:13:dc:4d: f9:d3:c8:03:29:d7:bf:a0:ba:b7:c9:d6:f8:ff:82: 83:9a:75:05:e2:d9:25:b6:19:9b:14:53:06:2a:28: 5c:d8:14:5b:eb:bc:36:1a:f5:3d:51:58:d7:4d:a5: 64:03:82:eb:17:65:b8:25:5c:1a:e9:b2:36:46:6d: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D5:D2:D8:7F:A4:1E:CF:0D:6A:27:59:43:26:23:7B:C3:E7:35:3F X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:58:e9:0b:0b:8a:ca:6c:b4:b9:90:30:69:2b:8f:7a:94:99: d8:c7:fc:28:92:81:b0:ab:0c:2a:54:6e:49:26:9d:3c:2c:f4: 28:04:4d:09:16:1f:ac:40:06:96:4c:70:4b:ed:1b:8b:9a:d3: 4b:e6:24:61:dd:d9:23:56:54:f2:7e:d9:49:a0:01:9a:aa:ab: b5:3e:c5:49:de:6f:c8:a2:4d:72:0b:e8:da:2c:75:ab:e1:6f: a5:6d:aa:2c:8a:b1:26:66:ce:f5:30:21:b0:1f:e1:e6:07:b2: 90:8b:ff:8d:b0:3c:b7:77:02:9e:f3:cf:71:53:57:ee:ea:8b: f1:04:54:be:2e:29:f6:4d:62:ca:30:12:c3:a9:ee:37:1f:32: 2e:01:97:a2:ef:8e:63:f2:51:67:ed:75:fe:9d:72:03:f7:38: e4:84:4e:a6:8f:ae:dd:f6:f8:5e:ed:63:c5:90:3c:ee:71:86: 43:c9:ac:c5:7f:2d:3e:91:d9:92:d8:94:12:6b:6c:26:84:fa: 95:c4:61:9a:e8:07:fa:f2:59:a5:3f:74:5f:d7:ae:ed:f9:65: 1f:45:32:ec:c8:bc:75:30:84:99:f3:ef:6d:05:9b:93:64:3f: 2f:fc:c4:01:53:29:8d:05:28:87:b5:99:48:3e:5d:f9:d0:10: b0:59:cf:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjUwOTA1MDUwODE1WhcNMjUwOTEyMDUwODE1WjAYMRYwFAYD VQQDEw02OGJhNzAzZi05Y2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3L9PVXOr8FVbczTEsVoVNU0koD3qe8Kn+pVEiNBypCguPYu+ts8J5HuuO906 lZz2fEQ1iO55AAXSNAwzW/ud97Z3kVPTz/EHiPDM0ntViIQ3z/xA+qkSM6nhx0aa PCDYHZpWvua9Xf1CBFbhQmqcYLwRCJlvMaTIz4R3iKfuC2C0It+6NJgc+MyO0369 FFrsCWUPsTiTEpDH0zt8eMXhB9VjD/To7kbNJo9ogbKI5peDQAirGAuRYDdTOT0s UtUT3E3508gDKde/oLq3ydb4/4KDmnUF4tklthmbFFMGKihc2BRb67w2GvU9UVjX TaVkA4LrF2W4JVwa6bI2Rm3IMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/V0th/ pB7PDWonWUMmI3vD5zU/MB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtWOkLC4rKbLS5kDBpK496lJnYx/wokoGwqwwqVG5JJp08LPQoBE0J Fh+sQAaWTHBL7RuLmtNL5iRh3dkjVlTyftlJoAGaqqu1PsVJ3m/Iok1yC+jaLHWr 4W+lbaosirEmZs71MCGwH+HmB7KQi/+NsDy3dwKe889xU1fu6ovxBFS+Lin2TWLK MBLDqe43HzIuAZei745j8lFn7XX+nXID9zjkhE6mj67d9vhe7WPFkDzucYZDyazF fy0+kdmS2JQSa2wmhPqVxGGa6Af68lmlP3Rf167t+WUfRTLsyLx1MISZ8+9tBZuT ZD8v/MQBUymNBSiHtZlIPl350BCwWc+b -----END CERTIFICATE-----Generated at Sat Sep 6 20:52:00 2025 by rpki-client