$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json) Hash identifier: bp/WF+xO6rk0Yd+NFd4khGTQYlUCP2S5Hw4YUkYU+4c= Subject key identifier: CC:E5:3D:45:92:94:8A:81:BE:F8:D2:B9:B4:1C:AC:F3:8A:A3:2C:46 Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft Manifest number: 0C98 Signing time: Fri 22 Aug 2025 19:31:53 +0000 Manifest this update: Fri 22 Aug 2025 19:31:53 +0000 Manifest next update: Fri 29 Aug 2025 19:31:52 +0000 Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: PQooPAOaLtXJESXbpy5Iw3ci5biKSYvT34RMxP1g/fE=) 2: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: eILOAPk7hEfHA4Xc/eZDuicer6q0kZbC4fsjNG1XiFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Validity Not Before: Aug 22 19:31:53 2025 GMT Not After : Aug 29 19:31:52 2025 GMT Subject: CN=68a8c5a9-d4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:a9:9f:94:b4:70:4a:10:01:72:59:7a:af: d2:9f:70:a6:d6:50:5a:2f:55:3f:a3:f0:91:55:db: 03:0e:c1:9c:1b:2d:95:57:b6:a1:f0:20:d5:52:b9: 63:23:fb:7f:9a:5b:59:fb:2a:9f:e4:96:4f:54:db: 0a:fc:5b:a4:8b:8c:ea:dd:6b:24:56:9c:1a:65:2c: 23:60:40:b1:ee:76:fd:74:24:85:28:57:fe:11:b8: 44:de:03:d3:6f:47:92:01:b2:ce:73:f8:dc:65:e4: c8:a8:dc:f7:49:e2:69:73:65:02:d6:11:c4:3c:81: 84:3d:69:23:0a:57:4e:97:4f:58:9f:4b:51:3a:7a: 6e:fc:c5:48:ec:fa:55:6c:df:0d:50:11:01:57:e6: 72:2b:9f:a4:65:23:8a:33:04:f1:6d:c7:30:e4:53: 15:00:cc:8d:e9:5e:a8:ec:92:e5:a8:b9:1b:d2:5f: 4e:41:70:30:9f:95:42:49:06:a1:5c:65:16:16:e1: d9:6b:a7:53:76:c8:a2:a3:21:d6:78:fd:9a:d7:72: a5:1e:a4:b4:e9:88:55:11:42:03:bc:c5:56:41:4d: e3:ac:d2:bc:7f:6e:2c:61:28:a2:50:cd:16:31:1c: ec:87:c1:63:4a:9c:7d:4b:2e:9a:f5:36:da:33:7b: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E5:3D:45:92:94:8A:81:BE:F8:D2:B9:B4:1C:AC:F3:8A:A3:2C:46 X509v3 Authority Key Identifier: keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c7:37:8d:e8:1b:fe:20:ed:59:fc:60:f6:ab:62:ea:f8:01: b1:fc:4b:59:1d:0e:86:41:0b:6d:30:0a:00:34:58:7b:48:f3: 2c:49:1e:fa:33:24:85:d1:6f:3d:16:ba:ed:08:1f:27:03:41: 72:dc:c3:8e:1c:9a:ca:2c:af:b0:8b:68:33:d9:e6:7e:f0:dd: 01:7c:96:f4:fc:47:e4:84:46:41:1b:67:cd:52:38:31:a9:61: ce:39:e6:e7:b8:f0:b0:43:50:44:20:be:37:73:09:51:18:f9: 20:54:7b:2d:c0:70:a5:c7:42:ea:18:24:80:21:7d:34:37:24: 9c:67:e7:3c:3c:6d:08:a6:9f:73:fc:58:13:88:cd:a9:d3:91: 6f:43:e9:86:2a:a7:fd:9f:6a:b1:78:a5:ac:1d:34:3c:82:9b: 41:e1:0c:56:02:ed:40:fc:2e:dd:08:77:e2:32:1e:b7:97:8e: 42:4d:67:86:eb:13:4a:4a:cf:f9:85:c1:d3:7c:1f:5c:d2:f8: 5c:5f:56:cb:0a:f3:da:00:06:48:4c:2a:d2:54:c0:78:ba:cc: e3:d9:b5:01:67:36:ee:d0:a8:fe:bd:e3:2c:e2:82:e9:35:50: 7d:79:d0:8a:da:c4:0a:03:e7:73:4d:38:90:fe:0c:2b:c0:0a: b4:25:b0:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD NDMxQzU4MDIwHhcNMjUwODIyMTkzMTUzWhcNMjUwODI5MTkzMTUyWjAYMRYwFAYD VQQDEw02OGE4YzVhOS1kNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGWpn5S0cEoQAXJZeq/Sn3Cm1lBaL1U/o/CRVdsDDsGcGy2VV7ah8CDVUrlj I/t/mltZ+yqf5JZPVNsK/Fuki4zq3WskVpwaZSwjYECx7nb9dCSFKFf+EbhE3gPT b0eSAbLOc/jcZeTIqNz3SeJpc2UC1hHEPIGEPWkjCldOl09Yn0tROnpu/MVI7PpV bN8NUBEBV+ZyK5+kZSOKMwTxbccw5FMVAMyN6V6o7JLlqLkb0l9OQXAwn5VCSQah XGUWFuHZa6dTdsiioyHWeP2a13KlHqS06YhVEUIDvMVWQU3jrNK8f24sYSiiUM0W MRzsh8FjSpx9Sy6a9TbaM3tEDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzlPUWS lIqBvvjSubQcrPOKoyxGMB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3 ZDRteVE0cEk4aEhFTWNXQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoxzeN6Bv+IO1Z/GD2q2Lq+AGx/EtZHQ6GQQttMAoANFh7SPMsSR76 MySF0W89FrrtCB8nA0Fy3MOOHJrKLK+wi2gz2eZ+8N0BfJb0/EfkhEZBG2fNUjgx qWHOOebnuPCwQ1BEIL43cwlRGPkgVHstwHClx0LqGCSAIX00NyScZ+c8PG0Ipp9z /FgTiM2p05FvQ+mGKqf9n2qxeKWsHTQ8gptB4QxWAu1A/C7dCHfiMh63l45CTWeG 6xNKSs/5hcHTfB9c0vhcX1bLCvPaAAZITCrSVMB4uszj2bUBZzbu0Kj+veMs4oLp NVB9edCK2sQKA+dzTTiQ/gwrwAq0JbAf -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:52 2025 by rpki-client