$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json) Hash identifier: XVq8c50HWiZqul46jEUf2ghjQTPU/EB/5M9xOl6eyOI= Subject key identifier: D0:48:64:0C:03:19:5B:4F:45:DA:75:7F:EE:B4:B4:8B:45:EA:B4:36 Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft Manifest number: 01AC Signing time: Thu 21 Aug 2025 03:17:07 +0000 Manifest this update: Thu 21 Aug 2025 03:17:07 +0000 Manifest next update: Thu 28 Aug 2025 03:17:07 +0000 Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: GaDsnc0wcuWDFZFyxsmPz/WV9wdkpVA0wZSJHKfEinY=) 2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: CWem0s7hf8kQnIdZUnWxTyisJw7AnKLcP2ANy+rIwcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: Aug 21 03:17:07 2025 GMT Not After : Aug 28 03:17:07 2025 GMT Subject: CN=68a68fb3-cab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:34:61:9e:52:91:5b:97:4f:ad:b5:73:46: 70:c0:04:7c:a8:c2:c7:53:bd:89:19:dc:08:e4:93: 23:ab:78:5d:42:67:61:c9:5c:fb:eb:d2:c2:2d:c0: b2:4a:11:62:bf:ef:4d:26:75:62:10:cc:4d:91:d2: b0:8c:70:a8:7a:c1:f2:c7:ac:2a:36:50:10:15:b5: 4c:5b:3a:c8:5e:e5:01:de:4c:31:79:8a:b9:ef:47: 0b:fd:3c:ce:11:25:1f:87:86:79:a1:b8:9a:02:3e: 0b:d5:af:7c:00:d7:80:02:fe:37:58:d3:78:e8:58: 7a:66:d7:99:fd:97:a4:6c:a8:db:c7:54:f1:74:0c: ee:f0:a3:78:f3:2a:0c:cd:3f:ac:26:42:0f:c0:7f: f8:e8:c1:45:5e:d6:13:40:cd:cc:bd:11:74:66:3a: db:f1:20:b6:16:d1:fc:cf:82:91:05:3a:1d:8a:0b: 3c:00:c9:aa:20:c4:26:74:4b:a6:ed:3b:5e:4a:e7: 3f:08:9b:6d:c0:3b:dc:6b:ed:62:fb:6e:e6:c5:81: 2c:c6:8c:d8:ef:2c:26:72:4d:10:fe:a4:c1:2b:b2: ff:96:04:26:df:6b:b4:9c:c2:c7:d3:ed:22:b0:c0: 01:c4:9a:88:c8:9a:48:9d:91:08:1a:8c:f7:5c:33: 7d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:48:64:0C:03:19:5B:4F:45:DA:75:7F:EE:B4:B4:8B:45:EA:B4:36 X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:f0:14:90:0c:3f:d7:e8:b9:ac:e1:e8:4a:61:55:09:77:7d: 22:73:e1:6b:20:a2:41:c9:d8:66:fe:f8:e7:01:4e:6d:46:31: e0:fd:cb:c3:3b:58:2d:cf:8a:53:e8:64:b5:60:ce:68:ab:6b: 59:49:90:ac:da:e0:d8:62:98:78:b8:d0:a2:5f:e4:91:0d:4f: 54:be:77:5c:f6:8f:26:11:45:f8:1b:fe:21:ea:fa:0e:2d:b2: 41:1f:9d:78:dc:c0:f1:cf:6d:f9:9d:d9:6a:d2:6f:a7:61:8a: 21:93:93:a8:c0:6b:6b:28:83:25:f1:ab:28:75:e6:8d:87:e5: b1:02:4e:d9:38:c4:57:b9:e8:d6:6c:6e:35:d2:0b:84:1d:04: d2:e6:8e:6d:bc:77:7f:29:f4:05:f7:5e:3e:8f:db:a5:62:34: 9b:d0:31:47:aa:fb:a4:a8:49:5d:ab:d3:33:1c:80:ce:ff:5d: 41:2e:9d:cf:a6:ba:b7:d8:00:00:64:21:31:ae:ba:09:9d:5f: 69:02:a0:08:79:07:c7:27:98:e6:83:8d:b1:3f:45:3d:19:39: 85:9f:b6:07:d6:71:b4:fd:24:cf:61:0c:7a:4b:b9:94:25:cf: 2b:e6:f1:67:29:f0:84:45:d2:94:35:ac:99:50:b2:08:fa:62: c7:9a:51:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw ODNDNDkwQTYwHhcNMjUwODIxMDMxNzA3WhcNMjUwODI4MDMxNzA3WjAYMRYwFAYD VQQDEw02OGE2OGZiMy1jYWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRQ0YZ5SkVuXT621c0ZwwAR8qMLHU72JGdwI5JMjq3hdQmdhyVz769LCLcCy ShFiv+9NJnViEMxNkdKwjHCoesHyx6wqNlAQFbVMWzrIXuUB3kwxeYq570cL/TzO ESUfh4Z5obiaAj4L1a98ANeAAv43WNN46Fh6ZteZ/ZekbKjbx1TxdAzu8KN48yoM zT+sJkIPwH/46MFFXtYTQM3MvRF0Zjrb8SC2FtH8z4KRBTodigs8AMmqIMQmdEum 7TteSuc/CJttwDvca+1i+27mxYEsxozY7ywmck0Q/qTBK7L/lgQm32u0nMLH0+0i sMABxJqIyJpInZEIGoz3XDN9awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBIZAwD GVtPRdp1f+60tItF6rQ2MB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FM UzhhRjRwaUg0Z1VJUEVrS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS8BSQDD/X6Lms4ehKYVUJd30ic+FrIKJBydhm/vjnAU5tRjHg/cvD O1gtz4pT6GS1YM5oq2tZSZCs2uDYYph4uNCiX+SRDU9Uvndc9o8mEUX4G/4h6voO LbJBH5143MDxz235ndlq0m+nYYohk5OowGtrKIMl8asodeaNh+WxAk7ZOMRXuejW bG410guEHQTS5o5tvHd/KfQF914+j9ulYjSb0DFHqvukqEldq9MzHIDO/11BLp3P prq32AAAZCExrroJnV9pAqAIeQfHJ5jmg42xP0U9GTmFn7YH1nG0/STPYQx6S7mU Jc8r5vFnKfCERdKUNayZULII+mLHmlHP -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:15 2025 by rpki-client