$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json) Hash identifier: O2uBUXQ1DTZUBkqGRmdNKsgtEnskQ3YR+4JEWeax7D0= Subject key identifier: 4C:D9:6A:28:62:1D:7A:AD:0E:B5:D4:CB:49:B7:93:59:5F:D1:67:B1 Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 0357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft Manifest number: 034D Signing time: Tue 09 Sep 2025 01:07:52 +0000 Manifest this update: Tue 09 Sep 2025 01:07:51 +0000 Manifest next update: Tue 16 Sep 2025 01:07:51 +0000 Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: DKY5PPiJqywPaCUn59uOlE9K4MB5BodhFwBxz5iiptY=) 2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 7/5fZwleDVzsoLoxdmlvx46DZvj38NfAJm5JPzwN8K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: Sep 9 01:07:51 2025 GMT Not After : Sep 16 01:07:51 2025 GMT Subject: CN=68bf7de8-a129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7c:a5:d0:e3:b3:68:86:a3:be:3f:f4:02:58: c9:2b:4a:92:b8:5a:c4:d4:8c:f1:eb:c1:81:51:05: 2f:58:b2:c7:c6:26:5d:be:8c:62:e6:36:84:cb:1d: 25:03:5e:76:93:79:54:36:72:ec:79:8a:76:04:2f: 34:ac:81:76:c8:a1:49:db:4c:ce:1d:74:c8:48:fd: bc:93:74:98:55:98:04:93:09:7c:d0:48:c7:23:f5: 66:27:dc:09:e6:9b:0e:1d:fa:c8:e3:68:bd:13:9e: 5b:c1:b8:df:db:c8:f5:f0:86:82:3e:44:52:a9:81: 0a:13:e1:b5:5f:bf:a4:dc:f9:75:dd:c2:3c:53:61: ea:7f:4f:15:70:fc:24:1b:bb:90:95:74:34:03:a3: 60:6d:df:85:9c:a3:a7:5a:f2:dd:83:d9:9b:23:ed: 30:2d:14:93:1a:f6:bf:33:ce:dc:07:c5:61:4c:d7: af:15:8e:4c:d3:a9:73:42:81:f6:19:e1:3b:8f:3b: 4a:ce:80:35:32:81:9a:7f:73:5e:3d:29:61:ee:6a: e9:64:8d:ca:d4:e8:5c:ec:aa:92:aa:e3:c4:6b:72: 14:74:cf:7d:e5:e8:a7:de:d0:68:a0:b8:b5:f5:dc: 42:79:77:dc:2f:a6:bc:94:81:fd:8e:66:19:4d:77: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D9:6A:28:62:1D:7A:AD:0E:B5:D4:CB:49:B7:93:59:5F:D1:67:B1 X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b0:12:9d:5a:32:a5:16:b1:2a:90:92:39:6c:4b:73:fa:0b: 53:70:b9:ae:65:1d:cd:72:b4:94:6d:f7:1a:9a:58:74:17:14: cd:26:15:92:5a:17:59:5b:48:07:ca:f1:35:79:4a:6c:59:d6: 41:1d:8c:c5:7d:c7:b1:ab:d8:e4:f7:d0:46:bb:4a:e9:ea:d5: 79:df:54:85:68:6b:78:38:b1:08:a9:9f:e7:86:df:7c:a7:fc: d9:37:8a:2e:73:29:2d:68:dc:3c:c5:b1:91:93:db:b7:66:ff: a6:4c:d5:fb:a9:0c:d6:8a:ab:c4:f6:ac:0d:d1:0c:34:40:b8: f7:ae:a0:82:b4:58:26:d0:c2:fb:34:86:1b:ac:7b:e5:85:66: 36:5d:fd:3e:0a:85:5d:8b:7c:c2:2a:92:8c:e3:45:36:d1:8b: 93:58:f4:94:51:98:79:9f:32:a6:38:14:ed:bf:bb:67:24:f7: 7c:89:d5:ed:70:8a:e3:0b:f7:74:cd:ff:c9:3a:4a:d9:f0:b5: 21:f9:42:13:b9:bf:9b:11:87:5e:24:7b:7f:8b:7b:7c:90:c7: d2:05:23:86:f1:d7:70:58:79:b0:e5:98:a9:a8:5c:32:f6:7b: c9:17:a2:48:d5:cc:db:4e:ae:c2:16:68:79:d3:35:d5:f7:ca: 2a:28:06:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjUwOTA5MDEwNzUxWhcNMjUwOTE2MDEwNzUxWjAYMRYwFAYD VQQDEw02OGJmN2RlOC1hMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43yl0OOzaIajvj/0AljJK0qSuFrE1Izx68GBUQUvWLLHxiZdvoxi5jaEyx0l A152k3lUNnLseYp2BC80rIF2yKFJ20zOHXTISP28k3SYVZgEkwl80EjHI/VmJ9wJ 5psOHfrI42i9E55bwbjf28j18IaCPkRSqYEKE+G1X7+k3Pl13cI8U2Hqf08VcPwk G7uQlXQ0A6Ngbd+FnKOnWvLdg9mbI+0wLRSTGva/M87cB8VhTNevFY5M06lzQoH2 GeE7jztKzoA1MoGaf3NePSlh7mrpZI3K1Ohc7KqSquPEa3IUdM995ein3tBooLi1 9dxCeXfcL6a8lIH9jmYZTXehdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzZaihi HXqtDrXUy0m3k1lf0WexMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0 LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMsBKdWjKlFrEqkJI5bEtz+gtTcLmuZR3NcrSUbfcamlh0FxTNJhWS WhdZW0gHyvE1eUpsWdZBHYzFfcexq9jk99BGu0rp6tV531SFaGt4OLEIqZ/nht98 p/zZN4oucyktaNw8xbGRk9u3Zv+mTNX7qQzWiqvE9qwN0Qw0QLj3rqCCtFgm0ML7 NIYbrHvlhWY2Xf0+CoVdi3zCKpKM40U20YuTWPSUUZh5nzKmOBTtv7tnJPd8idXt cIrjC/d0zf/JOkrZ8LUh+UITub+bEYdeJHt/i3t8kMfSBSOG8ddwWHmw5ZipqFwy 9nvJF6JI1czbTq7CFmh50zXV98oqKAYA -----END CERTIFICATE-----Generated at Thu Sep 11 00:26:57 2025 by rpki-client