$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft File: 0yZ6-fuWkInDwSr-v9D96b2GdYE.mft (raw, json) Hash identifier: I2xx+uOPjVhvUlSHXykS9OxiPT9gZWu2tEv8lj/Wdig= Subject key identifier: 34:D0:DE:23:00:4D:8A:14:94:9E:33:BF:11:56:E5:50:01:E6:3A:AF Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 Certificate issuer: /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Certificate serial: 0826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft Manifest number: 0810 Signing time: Wed 20 Aug 2025 20:59:24 +0000 Manifest this update: Wed 20 Aug 2025 20:59:24 +0000 Manifest next update: Wed 27 Aug 2025 20:59:24 +0000 Files and hashes: 1: 0yZ6-fuWkInDwSr-v9D96b2GdYE.crl (hash: EEQ+XSHcE8U8UhX8Yt8P+KsrSR5vdzT3zCwHIjpzQvE=) 2: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (hash: vK7zDAtMwxZ46qmtLmdd+XyPCpBAd+F+Ur4M7PgRHvc=) 3: 40965650EA4311EEA09F786BC4F9AE02.roa (hash: ag0QXLN9VhtP4YSxCpypnephnV4TdElKmf1LeX8WRbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Validity Not Before: Aug 20 20:59:24 2025 GMT Not After : Aug 27 20:59:24 2025 GMT Subject: CN=68a6372c-eba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:0b:69:6d:a5:2c:de:2d:22:c3:79:1e:26: ee:58:29:ad:64:88:05:20:85:01:79:a1:df:3a:e3: e3:39:51:9b:60:2d:53:d6:c9:fd:ca:59:1f:0f:b6: 43:5b:04:73:46:59:6d:de:55:46:8a:9f:1e:6e:74: 2d:71:b5:e6:4b:fd:cf:b0:05:34:6b:f4:a9:e4:68: a5:a5:d2:00:58:11:ec:2b:24:e4:8e:da:01:9c:a2: 2d:0d:20:82:a0:ea:2b:c1:cc:8b:87:eb:f1:cc:23: af:0d:77:bf:3a:d8:a5:ab:7c:6c:1d:c7:81:22:17: c5:25:f0:5d:d1:7b:b8:73:e8:a5:ff:32:3c:5d:c2: 81:26:49:0c:9c:6c:cb:72:2b:4f:2a:f2:37:d9:6e: d5:ec:e3:4b:51:8f:25:8e:65:cb:88:95:95:ac:68: a0:fb:5c:1f:f7:c0:b2:b3:b0:80:03:37:20:00:08: fb:a5:8c:f4:df:18:a6:f1:70:b6:8a:b8:26:c8:2d: 28:7b:49:b5:2c:45:c9:5c:63:3c:77:fd:34:f5:38: d6:95:41:10:78:fe:52:e6:4c:61:d8:03:88:7e:cb: eb:6b:6f:8d:77:d3:72:71:e7:fe:9b:d3:83:b2:d2: 25:79:62:d5:c9:4d:ec:35:49:1c:c0:01:00:3a:62: a7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D0:DE:23:00:4D:8A:14:94:9E:33:BF:11:56:E5:50:01:E6:3A:AF X509v3 Authority Key Identifier: keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:62:b6:60:8c:32:7a:9a:14:87:a9:ee:57:21:66:01:c2:ad: a7:2e:76:7a:0e:90:70:4d:20:b8:a5:fc:a5:88:61:76:b0:b0: 7f:7d:a6:2b:ed:3c:c9:96:7e:9c:68:9e:94:a1:34:03:48:ba: 53:57:61:ee:39:2f:ba:b4:3f:c6:29:3f:22:cf:15:ee:92:12: 68:85:00:60:34:f5:ac:5c:39:13:1d:ee:60:4c:c9:c3:c8:f8: d2:4a:75:ec:7d:33:23:1b:16:06:52:c3:f3:39:8b:93:0c:c3: d0:31:1f:ac:be:7e:1a:40:93:0d:9c:d0:97:47:52:41:6e:bc: 7f:1a:f9:0b:dc:15:4d:6b:75:c4:5e:e1:6f:50:33:7f:e5:bd: 02:4a:7c:10:50:dd:a3:a6:dd:7c:dc:56:6e:3f:57:94:71:87: aa:92:43:4f:c3:07:fd:a9:0f:e0:b4:95:a8:e5:0a:df:44:a4: f3:a5:84:b1:8f:6f:43:13:24:25:fa:43:d9:88:a0:bf:6a:fd: 0d:e6:f3:3d:1d:17:97:b7:5b:8d:dc:b1:52:3d:74:39:bf:86: 36:47:ac:7c:20:09:29:af:3a:de:51:e8:a2:78:9d:0d:da:17: b4:ce:5b:37:70:57:63:22:be:12:01:92:85:37:4c:85:b1:61: 46:9a:d0:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGMzAxMTAvBgNVBAUTKEQzMjY3QUY5RkI5NjkwODlDM0MxMkFGRUJGRDBGREU5 QkQ4Njc1ODEwHhcNMjUwODIwMjA1OTI0WhcNMjUwODI3MjA1OTI0WjAYMRYwFAYD VQQDEw02OGE2MzcyYy1lYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzALaW2lLN4tIsN5HibuWCmtZIgFIIUBeaHfOuPjOVGbYC1T1sn9ylkfD7ZD WwRzRllt3lVGip8ebnQtcbXmS/3PsAU0a/Sp5GilpdIAWBHsKyTkjtoBnKItDSCC oOorwcyLh+vxzCOvDXe/Otilq3xsHceBIhfFJfBd0Xu4c+il/zI8XcKBJkkMnGzL citPKvI32W7V7ONLUY8ljmXLiJWVrGig+1wf98Cys7CAAzcgAAj7pYz03xim8XC2 irgmyC0oe0m1LEXJXGM8d/009TjWlUEQeP5S5kxh2AOIfsvra2+Nd9Nycef+m9OD stIleWLVyU3sNUkcwAEAOmKngQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTQ3iMA TYoUlJ4zvxFW5VAB5jqvMB8GA1UdIwQYMBaAFNMmevn7lpCJw8Eq/r/Q/em9hnWB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0YzMC8zQjkxMkYxMkYx ODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJbkR3U3ItdjlEOTZiMkdk WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5WjYtZnVXa0luRHdTci12OUQ5NmIyR2RZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0YzMC8zQjkxMkYxMkYxODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJ bkR3U3ItdjlEOTZiMkdkWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApYrZgjDJ6mhSHqe5XIWYBwq2nLnZ6DpBwTSC4pfyliGF2sLB/faYr 7TzJln6caJ6UoTQDSLpTV2HuOS+6tD/GKT8izxXukhJohQBgNPWsXDkTHe5gTMnD yPjSSnXsfTMjGxYGUsPzOYuTDMPQMR+svn4aQJMNnNCXR1JBbrx/GvkL3BVNa3XE XuFvUDN/5b0CSnwQUN2jpt183FZuP1eUcYeqkkNPwwf9qQ/gtJWo5QrfRKTzpYSx j29DEyQl+kPZiKC/av0N5vM9HReXt1uN3LFSPXQ5v4Y2R6x8IAkprzreUeiieJ0N 2he0zls3cFdjIr4SAZKFN0yFsWFGmtCQ -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:45 2025 by rpki-client