$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json) Hash identifier: EmPRMo8oqK8YxiOigtE9uOC1U0/wQ7u50JXdqLmMiGI= Subject key identifier: 96:39:B8:B0:03:70:81:94:AA:B8:10:D5:41:E7:D4:B3:C7:76:6F:AF Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft Manifest number: 0431 Signing time: Sat 23 Aug 2025 00:43:55 +0000 Manifest this update: Sat 23 Aug 2025 00:43:55 +0000 Manifest next update: Sat 30 Aug 2025 00:43:55 +0000 Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: X4OD6Cja98O4irlYPg5HALeVHOV+UXcSy/ol0WNFneg=) 2: F83346DA410211F097F43F85C4F9AE02.roa (hash: EnqZyVfj3TKzoAvrOL6tNqUILt/NgCo/Yq0hgyekdPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Validity Not Before: Aug 23 00:43:55 2025 GMT Not After : Aug 30 00:43:55 2025 GMT Subject: CN=68a90ecb-8d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cb:4b:6d:79:16:05:79:95:60:6e:ef:40:80: 3e:30:cc:90:89:e3:d9:bd:91:36:67:3c:59:a1:16: b8:83:67:5b:ec:dc:32:3f:1e:30:74:20:77:81:63: c2:65:1a:9a:43:11:80:48:fb:00:20:1a:f3:16:1e: d2:21:0d:e6:9a:2f:d1:f4:d8:76:64:b1:b0:d4:a1: 9f:da:92:49:4c:04:71:68:54:d3:6b:ef:5a:56:ff: e0:bf:5e:3c:bd:31:b1:95:c3:51:08:ae:62:24:9b: 13:fa:dc:97:7b:85:69:74:6f:39:14:82:0f:4f:dc: b1:ea:b5:8b:37:91:e6:03:fb:92:cb:ed:ce:ec:c0: 55:43:e3:62:55:3f:fc:c6:63:15:ab:c8:fd:fa:ca: d3:45:95:a4:ea:05:bd:94:e4:49:b9:73:9d:e5:cd: 99:85:2e:fe:05:73:95:37:17:64:e2:a5:01:b9:fa: b1:06:88:36:8a:a7:d4:8d:d0:72:a9:29:c4:67:8e: 21:36:d5:7b:47:f0:43:28:23:0e:15:07:29:ad:fe: 44:f8:4f:11:ee:d3:d1:6a:7f:6b:3b:02:62:82:8e: 41:65:30:e0:b7:d5:6a:6a:f1:eb:d6:ef:c4:ef:61: 02:06:4a:28:8b:0d:64:01:ce:1b:8e:00:08:47:8d: 0f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:39:B8:B0:03:70:81:94:AA:B8:10:D5:41:E7:D4:B3:C7:76:6F:AF X509v3 Authority Key Identifier: keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:20:e0:48:12:4c:ae:8b:9d:9f:0f:8d:ee:31:de:49:4a:f6: 79:a3:1a:06:e7:12:0a:e8:8b:c7:c6:a4:95:49:be:23:a0:a8: 58:1c:cb:40:5d:13:39:c9:1d:d9:ea:a4:d7:7a:f7:35:54:b8: 5f:58:3b:6d:06:03:0e:59:4d:2b:e6:20:43:6a:aa:4a:b3:88: ac:26:75:b8:83:fb:68:45:73:67:91:c8:fb:8f:55:10:97:d4: 69:f0:ad:73:8b:b0:be:0b:35:cc:6c:4f:2f:8e:43:52:61:e6: ab:c7:73:e3:dc:94:75:b1:7e:63:38:a1:9c:c1:af:da:42:de: 33:59:ed:1c:b8:a6:98:2c:dc:a9:58:8a:bb:8c:fc:f1:74:94: ea:ac:18:0c:59:a7:91:25:67:ac:00:7a:af:1c:b4:7e:09:dd: 57:4a:48:7f:15:d1:0e:a5:4b:cb:76:79:4c:4c:06:1a:38:f4: a2:2b:dc:3c:0b:f0:f7:3c:61:3c:45:dc:b8:63:d8:f9:ca:ce: 76:53:99:0c:90:90:77:f1:da:4d:73:af:7c:d3:c2:39:9f:95: e5:f9:b1:6a:60:bc:8f:ad:11:3b:22:0b:60:70:8a:07:22:6b: 1c:91:80:2a:06:6a:d4:99:01:fb:5f:f3:68:7c:c0:7c:24:c0: 3a:88:76:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBBRjExMC8GA1UEBRMoNjNCNzAxQjcyNzA2RjMxOTBCRUY4QkZCRkEzNEZGQTMz RjRGNkJENjAeFw0yNTA4MjMwMDQzNTVaFw0yNTA4MzAwMDQzNTVaMBgxFjAUBgNV BAMTDTY4YTkwZWNiLThkOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWy0tteRYFeZVgbu9AgD4wzJCJ49m9kTZnPFmhFriDZ1vs3DI/HjB0IHeBY8Jl GppDEYBI+wAgGvMWHtIhDeaaL9H02HZksbDUoZ/akklMBHFoVNNr71pW/+C/Xjy9 MbGVw1EIrmIkmxP63Jd7hWl0bzkUgg9P3LHqtYs3keYD+5LL7c7swFVD42JVP/zG YxWryP36ytNFlaTqBb2U5Em5c53lzZmFLv4Fc5U3F2TipQG5+rEGiDaKp9SN0HKp KcRnjiE21XtH8EMoIw4VBymt/kT4TxHu09Fqf2s7AmKCjkFlMOC31Wpq8evW78Tv YQIGSiiLDWQBzhuOAAhHjQ/jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUljm4sANw gZSquBDVQefUs8d2b68wHwYDVR0jBBgwFoAUY7cBtycG8xkL74v7+jT/oz9Pa9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEFGLzFFMzM5QjM2ODhE RTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhrTDc0djctalRfb3o5UGE5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTdjQnR5Y0c4eGtMNzR2Ny1qVF9vejlQYTlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE MEFGLzFFMzM5QjM2ODhERTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhr TDc0djctalRfb3o5UGE5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ4g4EgSTK6LnZ8Pje4x3klK9nmjGgbnEgroi8fGpJVJviOgqFgcy0Bd EznJHdnqpNd69zVUuF9YO20GAw5ZTSvmIENqqkqziKwmdbiD+2hFc2eRyPuPVRCX 1GnwrXOLsL4LNcxsTy+OQ1Jh5qvHc+PclHWxfmM4oZzBr9pC3jNZ7Ry4ppgs3KlY iruM/PF0lOqsGAxZp5ElZ6wAeq8ctH4J3VdKSH8V0Q6lS8t2eUxMBho49KIr3DwL 8Pc8YTxF3Lhj2PnKznZTmQyQkHfx2k1zr3zTwjmfleX5sWpgvI+tETsiC2Bwigci axyRgCoGatSZAftf82h8wHwkwDqIdlM= -----END CERTIFICATE-----Generated at Sun Aug 24 00:03:33 2025 by rpki-client