$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: MM+Ry4yCkoDSw6umcSahZUvctBfTDX3aDCVmLRi2m+M= Subject key identifier: 1A:30:7F:EE:FC:43:9C:04:F9:35:09:61:0B:53:F3:26:9E:5C:9A:7B Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 0369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 0363 Signing time: Tue 09 Sep 2025 01:01:31 +0000 Manifest this update: Tue 09 Sep 2025 01:01:30 +0000 Manifest next update: Tue 16 Sep 2025 01:01:30 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: ZHhKmFMIz81ed99y8t/hBoYLPiQdVUFz5a02l+hTTEU=) 2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: gYpqfZKhxCcGgy3HXhq4upY/4aTqMhzYgAIN8Unlk1w=) 3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: p51YofghFqe/P1BWUf3vy05r4fDl5jSux9C8jQxGEcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Sep 9 01:01:30 2025 GMT Not After : Sep 16 01:01:30 2025 GMT Subject: CN=68bf7c6b-2739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:4d:f0:0a:3f:06:15:e5:d9:21:1f:7b:61: 42:63:16:e4:4f:35:f4:6a:f0:39:28:2c:41:a8:2b: bb:c0:60:07:b6:e8:e9:d1:23:cf:04:01:50:2a:e1: 47:22:cf:29:4a:ef:9b:c2:c6:1a:f3:e7:95:5f:2e: 1a:5b:93:b6:eb:88:79:c1:da:b8:7e:23:1f:01:6f: 32:d1:83:6b:7c:94:66:60:04:d1:37:02:06:1f:9b: b7:54:e9:28:ae:93:87:55:8f:d0:e8:fc:62:ca:44: 73:eb:66:b2:53:d3:fc:68:4a:05:d5:27:c4:90:38: 1c:a6:70:17:59:93:92:9a:34:9c:6d:70:39:5f:20: b4:4b:49:9d:f9:d2:9a:1c:e8:12:4c:c5:b0:d0:9e: 60:ca:ab:bc:f3:55:dc:82:cd:fb:35:58:14:31:c2: 25:4d:35:37:0d:6a:eb:dd:5e:07:8a:aa:7a:0c:03: 55:22:69:ad:9d:6e:1d:80:7f:3c:4a:cd:24:11:74: 38:e6:93:ab:cf:39:07:9a:5e:5e:b4:7c:96:a5:c0: b4:59:de:33:8a:13:2d:83:e2:61:98:65:d0:89:91: 05:17:33:b1:58:d8:6e:56:f2:f0:46:7c:f3:dd:5b: ab:0a:9d:a0:04:44:57:fc:27:78:02:fa:94:cd:6f: e4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:30:7F:EE:FC:43:9C:04:F9:35:09:61:0B:53:F3:26:9E:5C:9A:7B X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:1b:79:a0:29:88:8e:d2:c3:33:b8:4d:07:67:7c:66:da:88: b2:55:54:12:4f:35:b6:21:fb:b1:d5:3e:87:a2:eb:14:8b:28: 03:69:d4:1f:e6:ad:17:19:0d:9f:83:28:3f:e4:1c:e4:9e:76: 40:17:fc:ff:6b:d3:39:2f:54:f6:02:63:e7:16:8d:b7:c2:b3: a2:1f:c8:cb:5a:f9:79:a2:80:97:39:d4:3b:61:b8:06:e7:00: 3e:e6:5c:9d:5f:f5:a3:4c:c6:97:45:08:38:34:bf:a5:82:58: 95:2b:15:70:99:32:2e:d8:be:f5:e0:28:66:08:1a:e3:c7:47: 09:b0:30:97:ec:f9:77:5a:8d:fd:85:52:bd:c2:2d:bf:5a:d2: 77:4c:35:88:17:e1:bb:69:a6:96:95:f3:d4:8e:39:e0:00:6d: e7:77:f9:8b:1e:15:ad:2f:46:8a:fa:de:dd:25:7a:5c:c6:fa: c7:cd:66:ec:20:57:75:b5:6a:dc:06:29:b9:02:f6:32:56:14: c6:7f:aa:e5:54:f3:ba:a2:68:5e:c4:07:90:79:0e:73:fd:ff: 51:b7:43:19:f1:48:fb:ce:cc:0a:04:82:96:7a:84:09:df:ea: a2:7b:bf:00:50:7b:ee:f9:12:8a:93:68:5a:b8:e8:d2:1a:b7: 8f:ac:ff:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjUwOTA5MDEwMTMwWhcNMjUwOTE2MDEwMTMwWjAYMRYwFAYD VQQDEw02OGJmN2M2Yi0yNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyNN8Ao/BhXl2SEfe2FCYxbkTzX0avA5KCxBqCu7wGAHtujp0SPPBAFQKuFH Is8pSu+bwsYa8+eVXy4aW5O264h5wdq4fiMfAW8y0YNrfJRmYATRNwIGH5u3VOko rpOHVY/Q6PxiykRz62ayU9P8aEoF1SfEkDgcpnAXWZOSmjScbXA5XyC0S0md+dKa HOgSTMWw0J5gyqu881Xcgs37NVgUMcIlTTU3DWrr3V4Hiqp6DANVImmtnW4dgH88 Ss0kEXQ45pOrzzkHml5etHyWpcC0Wd4zihMtg+JhmGXQiZEFFzOxWNhuVvLwRnzz 3VurCp2gBERX/Cd4AvqUzW/ksQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBowf+78 Q5wE+TUJYQtT8yaeXJp7MB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABG3mgKYiO0sMzuE0HZ3xm2oiyVVQSTzW2Ifux1T6HousUiygDadQf 5q0XGQ2fgyg/5BzknnZAF/z/a9M5L1T2AmPnFo23wrOiH8jLWvl5ooCXOdQ7YbgG 5wA+5lydX/WjTMaXRQg4NL+lgliVKxVwmTIu2L714ChmCBrjx0cJsDCX7Pl3Wo39 hVK9wi2/WtJ3TDWIF+G7aaaWlfPUjjngAG3nd/mLHhWtL0aK+t7dJXpcxvrHzWbs IFd1tWrcBim5AvYyVhTGf6rlVPO6omhexAeQeQ5z/f9Rt0MZ8Uj7zswKBIKWeoQJ 3+qie78AUHvu+RKKk2hauOjSGrePrP+U -----END CERTIFICATE-----Generated at Tue Sep 9 18:24:40 2025 by rpki-client