$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json) Hash identifier: 7AA42B2MBmLI8DhaQLpWvr6+gY7dsa3Ys4w1ISId7ys= Subject key identifier: FA:F9:15:93:16:40:BD:82:B5:B0:CE:F8:22:28:5C:4B:A6:49:6F:B7 Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Certificate serial: 047D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft Manifest number: 0473 Signing time: Thu 21 Aug 2025 00:16:51 +0000 Manifest this update: Thu 21 Aug 2025 00:16:51 +0000 Manifest next update: Thu 28 Aug 2025 00:16:51 +0000 Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: zJlc3SIlpWGOdnZseUHsH9pe5BLkde7jKEHhB01h4e4=) 2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: etY8R8Zkoq3Jr+o5iT0vM2/Uvx5KoKGB+//fjS6auO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Validity Not Before: Aug 21 00:16:51 2025 GMT Not After : Aug 28 00:16:51 2025 GMT Subject: CN=68a66573-6b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:60:8f:8e:0e:29:23:e2:a5:ba:5e:24:7b: 4f:65:1f:3b:25:21:17:8f:cb:67:78:5f:ca:83:67: f4:64:73:07:59:15:4d:79:43:07:57:f3:ec:1a:ce: 31:28:7b:48:bb:3c:a7:d8:de:95:0a:02:7b:b3:4f: 0e:79:4b:a8:e9:10:8f:56:29:70:d0:eb:ec:dd:9c: 37:91:8a:7a:b6:82:22:70:9a:e9:d5:68:f0:e8:ca: 2e:21:c5:64:f3:b2:27:02:98:76:d5:51:3d:09:18: 1e:c6:0b:eb:9f:7a:59:66:29:15:0d:76:db:26:b3: b5:d5:2c:11:60:e4:d6:92:c0:35:72:c1:a0:f8:5c: bc:ae:62:f2:6b:cd:a7:72:75:6d:97:e3:1e:6c:fb: 08:a9:e4:90:ee:f6:25:23:4f:c4:ab:ff:f9:0f:7c: 8f:7c:b9:8a:4b:0c:c6:38:78:f4:51:ae:a3:5c:ae: 42:30:fe:bf:1b:de:3b:f3:3f:15:64:f1:b9:86:f9: c2:14:d3:4d:e6:ee:35:ec:d3:c3:3a:22:e5:e2:51: 5b:51:19:2b:a1:83:af:38:5c:4f:a6:54:2c:d9:09: a1:60:c8:e7:96:7e:54:04:2b:26:4c:09:64:2b:cf: d1:4a:71:c1:f5:8c:4a:a9:84:4c:23:8c:fc:ef:3c: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F9:15:93:16:40:BD:82:B5:B0:CE:F8:22:28:5C:4B:A6:49:6F:B7 X509v3 Authority Key Identifier: keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:95:2d:b7:63:54:92:40:e2:ba:3b:55:fd:a1:b8:0b:8c:04: f8:8f:8a:49:7d:00:19:61:67:37:bb:96:1f:92:24:cd:1b:b6: 4f:3d:63:c5:9b:80:17:bd:e1:36:a6:6a:f2:bb:44:c7:eb:ba: 33:c5:cb:b8:1c:85:20:91:66:ff:c7:4b:9f:ea:12:2b:ef:5b: 93:95:3f:8b:3a:9f:e1:63:50:e5:2b:0f:97:66:4f:ec:41:8e: df:13:5d:9f:5a:89:32:06:6a:c2:0b:ef:fd:61:05:d1:16:8e: a5:41:2e:5c:7a:c6:91:26:f3:b8:4c:c1:92:76:02:6a:9c:b8: ee:23:3e:c2:b2:e6:3d:f3:b7:d7:8e:d5:6a:bc:16:47:c9:82: 52:d3:32:2f:60:8b:97:66:fe:ef:1e:97:fa:f4:72:29:3a:22: fc:15:06:f1:24:6b:9f:6d:53:eb:d6:09:4a:79:eb:e4:fd:71: 43:d3:a8:38:ce:71:f9:41:b0:92:99:d7:f4:f2:e4:25:00:a5: aa:de:ef:07:c1:09:1f:79:a4:c6:08:6b:4d:41:06:61:5c:1c: 4f:90:e0:3e:8e:1b:58:c5:06:7e:19:6b:fe:5a:79:1b:d7:ff: a9:42:4d:10:6c:8d:0c:cb:01:4b:da:b0:4d:19:6e:b5:df:69: c3:51:1c:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx RThDQTk0RTMwHhcNMjUwODIxMDAxNjUxWhcNMjUwODI4MDAxNjUxWjAYMRYwFAYD VQQDEw02OGE2NjU3My02YjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PBgj44OKSPipbpeJHtPZR87JSEXj8tneF/Kg2f0ZHMHWRVNeUMHV/PsGs4x KHtIuzyn2N6VCgJ7s08OeUuo6RCPVilw0Ovs3Zw3kYp6toIicJrp1Wjw6MouIcVk 87InAph21VE9CRgexgvrn3pZZikVDXbbJrO11SwRYOTWksA1csGg+Fy8rmLya82n cnVtl+MebPsIqeSQ7vYlI0/Eq//5D3yPfLmKSwzGOHj0Ua6jXK5CMP6/G9478z8V ZPG5hvnCFNNN5u417NPDOiLl4lFbURkroYOvOFxPplQs2QmhYMjnln5UBCsmTAlk K8/RSnHB9YxKqYRMI4z87zxMqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr5FZMW QL2CtbDO+CIoXEumSW+3MB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX R0ZHR1JULVdDeXdlaktsT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAflS23Y1SSQOK6O1X9obgLjAT4j4pJfQAZYWc3u5YfkiTNG7ZPPWPF m4AXveE2pmryu0TH67ozxcu4HIUgkWb/x0uf6hIr71uTlT+LOp/hY1DlKw+XZk/s QY7fE12fWokyBmrCC+/9YQXRFo6lQS5cesaRJvO4TMGSdgJqnLjuIz7CsuY987fX jtVqvBZHyYJS0zIvYIuXZv7vHpf69HIpOiL8FQbxJGufbVPr1glKeevk/XFD06g4 znH5QbCSmdf08uQlAKWq3u8HwQkfeaTGCGtNQQZhXBxPkOA+jhtYxQZ+GWv+Wnkb 1/+pQk0QbI0MywFL2rBNGW6132nDURx+ -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:14 2025 by rpki-client