$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: axig7s2bvTOWVYtRGub+teFGz+T5VvnVprdA3I1Sdto= Subject key identifier: 5F:71:DD:68:F4:63:9A:D3:01:EA:30:FD:7A:84:51:68:58:5A:5D:E2 Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0C59 Signing time: Wed 10 Sep 2025 18:40:30 +0000 Manifest this update: Wed 10 Sep 2025 18:40:29 +0000 Manifest next update: Wed 17 Sep 2025 18:40:29 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: KPDWyLtrXULObO7kzDnNbBJRF7ce/d763swY2GvRRNk=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 18:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Sep 10 18:40:29 2025 GMT Not After : Sep 17 18:40:29 2025 GMT Subject: CN=68c1c61d-6e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:2b:a8:1f:26:11:51:b7:06:93:af:07:37: c1:e2:99:1a:ff:f6:3b:73:00:57:86:91:f4:6f:e9: d3:1b:f7:d2:69:2e:95:f8:06:7b:bd:26:55:5b:d8: 51:4b:e5:01:a7:09:b2:1d:86:38:8e:44:ab:d9:83: b0:23:ed:e4:a2:b7:b9:a9:b7:e4:50:99:15:d2:6b: 54:63:47:3b:32:d0:6f:a0:83:25:0b:dc:d4:5e:80: 44:30:f8:c7:a5:08:a4:5c:81:6e:95:1b:2b:42:29: fa:10:81:5c:bb:c9:df:d7:53:0f:83:1e:31:45:6d: fa:8a:ea:f3:8b:2b:9b:f9:1f:75:86:57:1d:d0:32: 1f:92:6d:84:66:8d:1f:57:fc:f7:21:9c:c6:ce:21: f2:c9:f0:1a:ab:e1:bc:c0:c0:7a:ae:b8:0b:9e:77: 04:3b:90:b9:79:07:ce:53:f6:e4:8c:2e:c3:64:c7: 36:c1:78:64:cc:6a:b5:f1:76:93:56:25:6f:cd:27: 34:f1:09:b8:e6:1e:6e:82:4a:ed:e9:a1:d5:8e:50: 85:36:71:50:c2:5b:bc:2a:27:f7:a5:54:7a:30:6a: 62:41:02:78:a3:d6:01:0d:e6:a4:c8:c7:ec:52:70: 00:ff:09:fd:db:2d:c8:57:1b:e3:35:86:4c:fa:58: 6a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:71:DD:68:F4:63:9A:D3:01:EA:30:FD:7A:84:51:68:58:5A:5D:E2 X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:8c:9a:32:61:65:dd:4f:f1:35:09:8a:0d:34:58:7c:09:37: 00:ef:96:1f:51:04:fa:e4:c0:db:2a:b4:4d:9d:97:d7:6d:7b: ff:25:5a:91:68:c9:83:ad:6c:74:f7:67:45:b4:57:a1:0f:5e: 53:72:db:82:34:b4:8c:24:b5:ef:bf:50:5b:89:e8:40:18:f2: d3:53:6d:b0:b8:3e:ba:51:86:f6:a9:38:c9:d7:fb:37:61:c9: 6f:49:ab:dc:23:82:b3:6a:15:d0:92:12:c4:cd:7e:a8:fd:f8: ce:aa:08:cf:62:9c:0c:e2:0c:0b:6a:b5:88:ff:8a:bf:1e:4c: 64:0c:b0:d3:9f:a4:db:54:b4:81:0b:d8:74:fe:08:bc:ca:bd: 77:2c:40:52:d6:db:26:08:98:a8:50:8c:aa:91:f6:df:a5:69: ff:61:47:ef:82:f4:39:33:87:47:b6:92:3b:96:d7:6d:44:d7: 76:5f:d5:b2:0b:74:70:62:a3:af:e8:27:3b:6a:7c:ff:bf:38: f8:ed:eb:a3:23:fd:b2:f3:3c:a2:2d:fa:27:3e:b5:2a:b2:ad: 77:bb:d6:fa:87:79:21:51:1c:ef:08:34:5b:8c:15:ef:6a:2e: 37:97:5c:3e:8d:a3:76:81:a5:a4:55:30:ba:e7:90:28:6d:ea: a2:85:93:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjUwOTEwMTg0MDI5WhcNMjUwOTE3MTg0MDI5WjAYMRYwFAYD VQQDEw02OGMxYzYxZC02ZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfArqB8mEVG3BpOvBzfB4pka//Y7cwBXhpH0b+nTG/fSaS6V+AZ7vSZVW9hR S+UBpwmyHYY4jkSr2YOwI+3kore5qbfkUJkV0mtUY0c7MtBvoIMlC9zUXoBEMPjH pQikXIFulRsrQin6EIFcu8nf11MPgx4xRW36iurziyub+R91hlcd0DIfkm2EZo0f V/z3IZzGziHyyfAaq+G8wMB6rrgLnncEO5C5eQfOU/bkjC7DZMc2wXhkzGq18XaT ViVvzSc08Qm45h5ugkrt6aHVjlCFNnFQwlu8Kif3pVR6MGpiQQJ4o9YBDeakyMfs UnAA/wn92y3IVxvjNYZM+lhqSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9x3Wj0 Y5rTAeow/XqEUWhYWl3iMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChjJoyYWXdT/E1CYoNNFh8CTcA75YfUQT65MDbKrRNnZfXbXv/JVqR aMmDrWx092dFtFehD15TctuCNLSMJLXvv1BbiehAGPLTU22wuD66UYb2qTjJ1/s3 YclvSavcI4KzahXQkhLEzX6o/fjOqgjPYpwM4gwLarWI/4q/HkxkDLDTn6TbVLSB C9h0/gi8yr13LEBS1tsmCJioUIyqkfbfpWn/YUfvgvQ5M4dHtpI7ltdtRNd2X9Wy C3RwYqOv6Cc7anz/vzj47eujI/2y8zyiLfonPrUqsq13u9b6h3khURzvCDRbjBXv ai43l1w+jaN2gaWkVTC655AobeqihZNx -----END CERTIFICATE-----Generated at Thu Sep 11 01:10:15 2025 by rpki-client