$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft File: y4244fF7x3I0bdn_uyByz6j9plI.mft (raw, json) Hash identifier: TxJi0o9OZW4Nn1HTQvwUQQFJVKLAo9zf/zXI0GoOC88= Subject key identifier: 49:10:D9:12:70:C9:8B:77:C4:FB:5A:6F:51:4D:26:5C:18:DC:72:44 Authority key identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 Certificate issuer: /CN=A91DB7E9/serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft Manifest number: 0164 Signing time: Fri 05 Sep 2025 04:21:23 +0000 Manifest this update: Fri 05 Sep 2025 04:21:23 +0000 Manifest next update: Fri 12 Sep 2025 04:21:23 +0000 Files and hashes: 1: y4244fF7x3I0bdn_uyByz6j9plI.crl (hash: q1kpsZ5oasCoOBycZNzYnGIUH6JIhL9FM6KkJU7CNTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9, serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652 Validity Not Before: Sep 5 04:21:23 2025 GMT Not After : Sep 12 04:21:23 2025 GMT Subject: CN=68ba6543-9fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:0e:58:af:7c:b0:db:d2:b0:89:63:b7:c4: f3:39:89:3d:64:98:ce:4b:ce:b1:2a:f7:1b:6b:0d: 5e:af:8a:38:26:fa:9d:6f:52:6e:a8:a0:6a:73:81: 9c:b4:4a:e7:5b:76:62:52:6a:7b:ea:22:f1:c4:ba: ef:2b:20:76:55:7d:3f:b3:21:a7:94:bf:9a:58:c3: 2f:bb:ab:37:46:0c:de:0c:26:0c:91:e8:67:a9:ee: 41:ed:1e:7c:41:47:09:26:3c:ed:31:5b:75:b3:39: a5:ce:7b:03:52:2e:f8:1a:ac:61:c4:bd:ec:21:06: b9:bc:90:5c:f8:f9:91:fd:a3:11:1d:76:e7:49:d2: 0f:be:26:61:19:d7:b8:5c:4a:8f:08:f0:4a:49:5a: d8:3c:bd:c7:06:f4:02:2f:e8:ef:77:a1:fd:a3:71: b1:88:68:6a:c3:57:f5:51:b9:be:15:12:cd:2d:9d: cc:ef:22:df:2d:8d:c4:ed:75:f1:17:25:34:d6:8e: a4:74:9d:05:2b:22:8c:70:1a:91:c3:4b:37:98:aa: fc:f0:80:26:9e:e2:21:ba:2b:4a:95:bd:1a:73:da: e3:48:7f:45:3d:3f:81:ec:8f:ee:51:cf:86:cb:19: ca:e1:77:7e:bd:09:30:5d:bd:e6:5f:c6:d8:31:3d: 0e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:10:D9:12:70:C9:8B:77:C4:FB:5A:6F:51:4D:26:5C:18:DC:72:44 X509v3 Authority Key Identifier: keyid:CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:af:ce:0a:cc:6c:16:95:39:9c:38:64:c1:d7:fb:3b:43:88: b5:48:fc:e1:36:b7:49:71:1f:45:3f:88:f3:53:ed:f3:78:53: 31:f6:dd:34:61:30:26:e8:b1:e7:ca:4d:d8:18:e7:4b:50:47: e7:41:7e:ef:fd:48:f5:14:7b:33:98:15:ce:a0:76:68:73:3e: 6f:9a:fb:43:b0:ac:81:ab:0c:5c:99:7b:8c:57:dd:a9:fd:ac: 07:28:b5:c8:2c:46:55:0a:8b:35:34:be:14:cf:f6:af:73:cc: 8e:65:85:3b:0e:99:37:13:e1:16:98:2d:06:24:6e:72:4c:41: f2:26:8c:8a:f3:93:e0:c4:f2:6b:fa:df:c4:59:43:59:d7:78: da:b8:89:8e:04:17:87:17:f5:ac:f3:53:4d:c7:0e:ee:fc:00: f1:25:85:b9:c2:df:57:60:89:6e:17:e2:e1:9f:e7:82:1c:0c: 83:3d:dc:a9:30:1b:af:5f:76:01:81:cc:61:ec:cd:11:c6:f2: 38:4d:6d:13:ca:3e:15:7f:c8:c8:69:9b:ae:ce:ac:2e:a5:a4: c5:2d:98:3a:67:8a:b9:4b:ac:0b:7d:cb:57:90:ce:25:99:ac: 87:ff:bd:fc:0d:dc:d0:61:52:e5:99:c8:39:74:fb:74:db:46: f2:be:82:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3RTkxMTAvBgNVBAUTKENCOERCOEUxRjE3QkM3NzIzNDZERDlGRkJCMjA3MkNG QThGREE2NTIwHhcNMjUwOTA1MDQyMTIzWhcNMjUwOTEyMDQyMTIzWjAYMRYwFAYD VQQDEw02OGJhNjU0My05ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEwOWK98sNvSsIljt8TzOYk9ZJjOS86xKvcbaw1er4o4Jvqdb1JuqKBqc4Gc tErnW3ZiUmp76iLxxLrvKyB2VX0/syGnlL+aWMMvu6s3RgzeDCYMkehnqe5B7R58 QUcJJjztMVt1szmlznsDUi74GqxhxL3sIQa5vJBc+PmR/aMRHXbnSdIPviZhGde4 XEqPCPBKSVrYPL3HBvQCL+jvd6H9o3GxiGhqw1f1Ubm+FRLNLZ3M7yLfLY3E7XXx FyU01o6kdJ0FKyKMcBqRw0s3mKr88IAmnuIhuitKlb0ac9rjSH9FPT+B7I/uUc+G yxnK4Xd+vQkwXb3mX8bYMT0OWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkQ2RJw yYt3xPtab1FNJlwY3HJEMB8GA1UdIwQYMBaAFMuNuOHxe8dyNG3Z/7sgcs+o/aZS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FMEM0NjEzMDZF MkUxMUVFODVEOTJEMzJDNEY5QUUwMi95NDI0NGZGN3gzSTBiZG5fdXlCeXo2ajlw bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3k0MjQ0ZkY3eDNJMGJkbl91eUJ5ejZqOXBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdFOS9FMEM0NjEzMDZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi95NDI0NGZGN3gz STBiZG5fdXlCeXo2ajlwbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbr84KzGwWlTmcOGTB1/s7Q4i1SPzhNrdJcR9FP4jzU+3zeFMx9t00 YTAm6LHnyk3YGOdLUEfnQX7v/Uj1FHszmBXOoHZocz5vmvtDsKyBqwxcmXuMV92p /awHKLXILEZVCos1NL4Uz/avc8yOZYU7Dpk3E+EWmC0GJG5yTEHyJoyK85PgxPJr +t/EWUNZ13jauImOBBeHF/Ws81NNxw7u/ADxJYW5wt9XYIluF+Lhn+eCHAyDPdyp MBuvX3YBgcxh7M0RxvI4TW0Tyj4Vf8jIaZuuzqwupaTFLZg6Z4q5S6wLfctXkM4l mayH/738DdzQYVLlmcg5dPt020byvoIa -----END CERTIFICATE-----Generated at Sat Sep 6 15:21:33 2025 by rpki-client