$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft File: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json) Hash identifier: 7UbmCPcK7YnT5tfsUaXZ1NpCOZdUP25N/MVAmaLwemw= Subject key identifier: DF:7C:9A:04:22:0B:92:46:A6:6C:B5:9A:D7:E2:AC:30:E8:36:E5:56 Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 Certificate issuer: /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft Manifest number: 0226 Signing time: Thu 21 Aug 2025 02:06:23 +0000 Manifest this update: Thu 21 Aug 2025 02:06:22 +0000 Manifest next update: Thu 28 Aug 2025 02:06:22 +0000 Files and hashes: 1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: JNDblMp4OtPKsIevOeHAH7GjEofXvGMGedNyJjy0QCU=) 2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: IaOYa65tPNoGSKOth9OBnqEo5IgGVd7ufuneStp8ah8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8475, serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Validity Not Before: Aug 21 02:06:22 2025 GMT Not After : Aug 28 02:06:22 2025 GMT Subject: CN=68a67f1e-bfe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:13:95:f8:47:47:12:ac:4b:56:51:68:2b: 97:b2:83:f5:8f:06:1d:d5:2e:aa:09:c2:f9:8c:ee: a1:5e:8c:d2:04:87:f7:e5:e5:11:72:da:e7:1c:a1: 56:0f:5b:0e:95:d6:f7:3f:b6:af:22:c2:76:df:dc: c8:d9:17:78:33:9d:1b:44:24:03:43:a5:75:4b:62: 95:e9:9c:27:cc:7e:81:48:2b:39:2e:d8:80:26:6f: bb:7a:25:c2:f6:a9:0e:5a:78:ad:0a:6c:74:dc:1e: 79:1f:91:e0:9e:e3:6d:96:17:1d:15:c1:a3:09:f8: 64:ff:68:cd:7c:ea:bd:db:29:f9:29:1a:2e:ca:f7: 85:87:74:f0:5a:db:e4:15:31:4e:8b:28:af:94:07: f0:36:e3:7a:ea:26:94:c2:58:8f:e0:b8:ce:27:d9: 05:58:55:5a:7f:1a:02:b0:8a:25:76:15:a5:99:94: 6a:60:f3:20:cd:41:fe:3d:09:a2:5e:ae:76:63:ef: 01:9f:89:69:cc:1d:20:e6:27:a5:6b:23:11:4f:99: a6:16:ea:75:45:3d:2b:c6:15:76:91:79:6c:90:09: 01:10:e0:8c:81:e4:4a:8d:be:c4:37:de:8f:e7:ca: 87:24:cf:d2:f7:4a:71:17:21:c6:13:f2:da:4e:35: 28:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7C:9A:04:22:0B:92:46:A6:6C:B5:9A:D7:E2:AC:30:E8:36:E5:56 X509v3 Authority Key Identifier: keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:e6:6b:13:a7:9b:e3:b7:13:13:9f:2c:f7:c7:34:31:93:36: 8d:35:6f:90:82:64:f7:3b:fc:6c:d1:92:3f:bd:0a:7e:b6:1d: 48:fb:20:5d:a7:39:bb:4f:82:a7:5b:5f:02:9c:00:1f:7c:1a: 5d:0c:db:df:b0:26:68:b0:21:cd:ab:de:71:1e:55:be:51:7b: 87:c9:3d:e6:fe:2a:d9:82:5f:89:a6:7c:14:c5:fb:e5:7f:29: 7e:00:50:d7:be:8d:d5:c7:66:2b:11:18:e0:50:76:c6:c5:2e: 9c:71:86:6d:1b:e0:b8:36:f6:05:72:d6:a7:19:d0:9f:34:dc: ac:cf:fd:4c:d5:ca:6d:b4:f5:36:dc:11:05:7f:b8:68:3f:33: 69:bc:b9:2b:08:9f:61:4a:25:e9:af:cb:d7:93:2c:19:63:51: 0c:3b:a5:e0:db:11:59:78:1d:e4:68:15:fd:88:b5:c5:2b:bd: 9a:06:34:79:1d:86:2d:4a:56:0b:78:ca:a5:35:04:fe:e3:18: ea:3b:6a:bc:fa:22:97:6d:c5:9a:ca:fe:ca:19:66:39:e7:0b: 71:d1:6a:fc:1f:02:71:ef:24:ee:a6:ff:75:62:8c:60:a2:7b: ba:3f:5f:16:44:a0:3f:47:b1:91:b1:a2:b2:31:70:85:3c:01: b5:2e:96:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0NzUxMTAvBgNVBAUTKEE0OEM5QkQ0QTVEQjExOUUxNTQzMzI0MTM2RTAyRUVB NEJDQUFGMzgwHhcNMjUwODIxMDIwNjIyWhcNMjUwODI4MDIwNjIyWjAYMRYwFAYD VQQDEw02OGE2N2YxZS1iZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbsTlfhHRxKsS1ZRaCuXsoP1jwYd1S6qCcL5jO6hXozSBIf35eURctrnHKFW D1sOldb3P7avIsJ239zI2Rd4M50bRCQDQ6V1S2KV6ZwnzH6BSCs5LtiAJm+7eiXC 9qkOWnitCmx03B55H5HgnuNtlhcdFcGjCfhk/2jNfOq92yn5KRouyveFh3TwWtvk FTFOiyivlAfwNuN66iaUwliP4LjOJ9kFWFVafxoCsIoldhWlmZRqYPMgzUH+PQmi Xq52Y+8Bn4lpzB0g5ielayMRT5mmFup1RT0rxhV2kXlskAkBEOCMgeRKjb7EN96P 58qHJM/S90pxFyHGE/LaTjUoIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN98mgQi C5JGpmy1mtfirDDoNuVWMB8GA1UdIwQYMBaAFKSMm9Sl2xGeFUMyQTbgLupLyq84 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQ3NS82QjY1ODJGMjNF RjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVaNFZRekpCTnVBdTZrdkty emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJeWIxS1hiRVo0VlF6SkJOdUF1Nmt2S3J6Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQ3NS82QjY1ODJGMjNFRjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVa NFZRekpCTnVBdTZrdktyemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo5msTp5vjtxMTnyz3xzQxkzaNNW+QgmT3O/xs0ZI/vQp+th1I+yBd pzm7T4KnW18CnAAffBpdDNvfsCZosCHNq95xHlW+UXuHyT3m/irZgl+JpnwUxfvl fyl+AFDXvo3Vx2YrERjgUHbGxS6ccYZtG+C4NvYFctanGdCfNNysz/1M1cpttPU2 3BEFf7hoPzNpvLkrCJ9hSiXpr8vXkywZY1EMO6Xg2xFZeB3kaBX9iLXFK72aBjR5 HYYtSlYLeMqlNQT+4xjqO2q8+iKXbcWayv7KGWY55wtx0Wr8HwJx7yTupv91Yoxg onu6P18WRKA/R7GRsaKyMXCFPAG1LpY3 -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:36 2025 by rpki-client