$ rpki-client -vvf rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft File: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft (raw, json) Hash identifier: oItg2un8J+LsVBqOjMHV56zTZZfHsIsJtp8gmZHMef8= Subject key identifier: 1B:FA:D1:32:D9:1F:22:80:A7:86:B1:AE:A3:E3:81:7D:B5:83:93:A0 Authority key identifier: 46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A Certificate issuer: /CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft Manifest number: 0152 Signing time: Tue 09 Sep 2025 04:23:44 +0000 Manifest this update: Tue 09 Sep 2025 04:23:43 +0000 Manifest next update: Tue 16 Sep 2025 04:23:43 +0000 Files and hashes: 1: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl (hash: QagiCiRA8rn7P7yNYkBQrcWKccXyOkp7EBgSl+W1iok=) 2: 8BBDAB46651411EFBBCB6F31C4F9AE02.roa (hash: /I9CcLQXhCW4GEfreSLW1LTWj50i7vh8PtKD8gQU1UQ=) 3: 66D4A06E651411EF9F534031C4F9AE02.roa (hash: pW8SIPuT5kOD4eZTF7di+hTXS7DwDK8pm89HGFANye4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F006D, serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A Validity Not Before: Sep 9 04:23:43 2025 GMT Not After : Sep 16 04:23:43 2025 GMT Subject: CN=68bfabcf-4cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:e8:4f:df:58:27:ac:b9:eb:60:36:d4:de: d8:bd:06:08:2a:6d:67:4b:04:5c:56:d3:c3:b4:7d: 13:f0:a3:20:03:e5:4d:cd:f9:c6:12:c3:5e:4e:c5: 64:32:6f:87:64:af:dc:31:7e:d7:05:56:d3:84:89: e9:15:09:c4:76:5c:d5:b7:36:ae:79:aa:44:6b:14: be:bf:62:4a:3c:23:c4:06:07:e2:09:02:0b:a7:59: c6:04:7d:ed:ae:c0:a7:6c:ae:6e:83:e7:d7:82:71: 7f:f7:60:a5:34:34:06:69:48:a4:d6:05:f2:c8:1b: 03:b1:ee:7c:ce:ea:0b:75:58:ee:a1:42:5c:1f:8b: 24:63:4c:fb:b5:b6:9f:cd:07:ff:2b:82:f9:d5:53: 5d:39:dd:2e:83:7a:ef:8c:2c:86:a9:d8:91:da:0a: 72:21:03:f4:21:ed:9d:a0:72:03:f8:96:cc:18:59: 01:50:96:e8:bd:b9:a3:79:03:33:18:37:3d:9e:ab: fd:2c:a2:c8:fa:e2:f0:0f:50:27:a6:de:8a:db:cd: 1a:3d:f6:3d:fb:6c:94:1a:2e:0f:23:fa:ac:a0:84: 36:c9:1b:4d:60:0a:e2:15:71:f0:17:e4:d9:9a:1f: 67:f9:09:67:4b:ac:7d:ab:af:c2:76:d8:f2:6b:da: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FA:D1:32:D9:1F:22:80:A7:86:B1:AE:A3:E3:81:7D:B5:83:93:A0 X509v3 Authority Key Identifier: keyid:46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:49:bf:03:f6:d6:76:11:8a:f4:fd:a4:85:10:2f:1c:c9:79: 94:e4:24:3a:9e:51:6a:be:ca:ab:cd:96:8c:b0:f0:d4:ba:d5: 47:9a:44:93:5b:40:33:b5:76:de:ce:10:c9:a6:fe:f2:6a:0c: de:6e:b0:c6:45:f8:39:40:39:f8:a0:4f:98:70:79:d8:8d:40: 65:66:42:1b:b2:6d:8f:84:e7:67:9c:0c:54:0a:9d:af:a1:8d: db:2e:73:5b:c2:c5:e4:d2:51:8a:94:61:3c:e3:db:a7:13:c9: 3c:e4:d8:9a:9b:a7:36:11:62:24:81:a9:18:5c:9e:2c:67:2d: 7a:10:fe:cd:d7:16:1c:80:e9:9b:f4:cf:cd:5c:21:0d:ef:a1: 1b:72:43:3c:23:c2:31:ab:ff:0d:3c:ea:8c:15:23:d4:d0:2d: 53:db:83:e5:60:35:7e:3b:44:62:1a:63:9a:2e:77:31:84:3a: e8:15:b7:d5:e6:f8:f5:5c:65:12:5a:0b:db:95:d7:38:fc:54: 11:e8:35:9c:5b:12:cd:c3:d9:b6:aa:e5:d0:ee:4a:81:ed:e1: 31:03:a3:93:e3:03:08:f1:2f:77:37:b6:8d:1e:4e:0f:c1:43: d6:61:29:22:3b:49:d8:12:a4:9e:aa:5c:82:5f:ca:fc:c7:23: 7b:d7:3f:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwNkQxMTAvBgNVBAUTKDQ2Rjk3MkQ3QjgzRENBMDYxREI5REZBQUYwMTc3RjJE REYxRUU5MEEwHhcNMjUwOTA5MDQyMzQzWhcNMjUwOTE2MDQyMzQzWjAYMRYwFAYD VQQDEw02OGJmYWJjZi00Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxozoT99YJ6y562A21N7YvQYIKm1nSwRcVtPDtH0T8KMgA+VNzfnGEsNeTsVk Mm+HZK/cMX7XBVbThInpFQnEdlzVtzaueapEaxS+v2JKPCPEBgfiCQILp1nGBH3t rsCnbK5ug+fXgnF/92ClNDQGaUik1gXyyBsDse58zuoLdVjuoUJcH4skY0z7tbaf zQf/K4L51VNdOd0ug3rvjCyGqdiR2gpyIQP0Ie2doHID+JbMGFkBUJbovbmjeQMz GDc9nqv9LKLI+uLwD1Anpt6K280aPfY9+2yUGi4PI/qsoIQ2yRtNYAriFXHwF+TZ mh9n+QlnS6x9q6/Cdtjya9qHcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBv60TLZ HyKAp4axrqPjgX21g5OgMB8GA1UdIwQYMBaAFEb5cte4PcoGHbnfqvAXfy3fHukK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDA2RC8zQzEwMEM5Mjk4 QkUxMUVFQjFEREU4MzVDNEY5QUUwMi9Sdmx5MTdnOXlnWWR1ZC1xOEJkX0xkOGU2 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J2bHkxN2c5eWdZZHVkLXE4QmRfTGQ4ZTZRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDA2RC8zQzEwMEM5Mjk4QkUxMUVFQjFEREU4MzVDNEY5QUUwMi9Sdmx5MTdnOXln WWR1ZC1xOEJkX0xkOGU2UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChSb8D9tZ2EYr0/aSFEC8cyXmU5CQ6nlFqvsqrzZaMsPDUutVHmkST W0AztXbezhDJpv7yagzebrDGRfg5QDn4oE+YcHnYjUBlZkIbsm2PhOdnnAxUCp2v oY3bLnNbwsXk0lGKlGE849unE8k85Niam6c2EWIkgakYXJ4sZy16EP7N1xYcgOmb 9M/NXCEN76EbckM8I8Ixq/8NPOqMFSPU0C1T24PlYDV+O0RiGmOaLncxhDroFbfV 5vj1XGUSWgvbldc4/FQR6DWcWxLNw9m2quXQ7kqB7eExA6OT4wMI8S93N7aNHk4P wUPWYSkiO0nYEqSeqlyCX8r8xyN71z/U -----END CERTIFICATE-----Generated at Thu Sep 11 00:30:07 2025 by rpki-client