$ rpki-client -vvf rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft File: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft (raw, json) Hash identifier: CXqeysZVOrOQyR70rmqIMdaS/qgk60iIq9ROghVydtA= Subject key identifier: 1B:73:85:75:CE:93:E7:9B:DB:81:53:8B:BF:D2:B2:7B:25:2D:CE:24 Authority key identifier: E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 Certificate issuer: /CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft Manifest number: 03BC Signing time: Sat 23 Aug 2025 00:56:26 +0000 Manifest this update: Sat 23 Aug 2025 00:56:26 +0000 Manifest next update: Sat 30 Aug 2025 00:56:26 +0000 Files and hashes: 1: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl (hash: aVJwCeW9brJsP87kVeq1pf5qsaHze3CVPaudtQwlmag=) 2: 6664BEB29F8611ECBE806D30C4F9AE02.roa (hash: JfmyzR7WR8BiLmwxCtB0fOXl6mP+OqTxhoVtIYHhkY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170533, serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Validity Not Before: Aug 23 00:56:26 2025 GMT Not After : Aug 30 00:56:26 2025 GMT Subject: CN=68a911ba-410b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:c5:6d:90:2e:c2:26:15:77:f3:74:25:2a: 70:5c:5f:c2:dd:c4:66:5d:8f:be:f8:df:e1:65:ae: 92:85:fe:7d:3a:a4:cd:eb:28:64:48:7e:73:2e:cb: bc:86:f3:5d:9a:52:41:06:43:55:4a:b6:82:bc:8e: 2f:95:01:f4:6d:ab:0b:75:9c:10:a7:7b:b9:89:f7: ae:d2:1b:9d:46:d9:e9:28:0a:5c:ad:72:fd:bd:3f: d8:f3:06:94:32:fd:56:de:88:c2:37:63:82:31:7d: 8d:a3:68:2d:42:6f:85:02:0c:1d:37:a2:36:f2:fd: 69:2b:3d:b6:0a:64:b0:bc:ed:b2:90:1d:6e:78:0e: d7:fb:6b:90:bc:de:a2:ad:75:8b:da:19:65:f4:9b: 0a:ec:68:22:07:d2:4f:0b:30:fc:30:75:33:90:1b: f9:3b:69:56:e1:cc:21:0a:5e:a7:97:92:12:8a:2d: de:e9:30:0f:a7:eb:27:eb:7d:7a:a1:07:44:ef:14: 9f:81:bb:f4:4d:9d:55:5d:89:ea:8e:01:f3:d5:1c: fd:43:bd:ff:fe:61:cc:11:36:03:5e:73:c7:38:0b: 5a:5d:ff:6f:56:5c:02:46:6f:04:30:07:cd:cd:8f: 51:9a:8f:ed:db:a4:65:b2:b0:c4:70:2d:53:0f:a9: 45:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:73:85:75:CE:93:E7:9B:DB:81:53:8B:BF:D2:B2:7B:25:2D:CE:24 X509v3 Authority Key Identifier: keyid:E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:49:bc:9e:c6:ba:a5:ab:72:a6:f0:3c:65:2e:f3:9e:83:1c: 9f:f4:84:e7:62:1e:c4:27:fe:e0:a8:e3:d1:19:d6:03:c1:01: 2b:84:a8:48:a8:13:58:bc:5c:84:1b:1c:b2:07:e6:80:62:bb: b9:a6:1b:5a:fa:6f:4f:d9:75:fb:24:1f:77:50:f6:6f:b0:90: 5a:23:c6:ef:8a:ec:e9:27:89:09:85:25:7b:d7:c1:8b:df:40: 4a:eb:73:b6:62:4e:e9:c4:8e:e5:2a:8b:dd:dc:34:6a:eb:19: e4:d8:00:02:1a:b7:29:3b:3a:a5:14:12:21:87:23:b6:f1:33: de:11:3d:71:c9:6b:7a:da:ba:83:a2:27:4b:9e:81:80:13:b4: 91:70:d1:8e:9d:dc:d7:7e:04:73:28:3f:a9:dc:2e:2c:dc:75: 51:84:aa:cd:53:a3:cf:36:5b:4c:42:a4:b1:a5:82:2d:ae:ee: 4c:e6:e3:7e:67:21:97:b0:29:73:e5:6e:80:06:69:5e:08:99: 0d:e9:fe:71:d7:2f:88:91:b6:fb:d4:66:9e:53:1c:92:c1:de: a4:0d:9b:27:c6:46:68:3b:5f:c5:7b:34:f9:ce:5f:5e:99:ba: 26:5e:6c:68:3e:13:10:81:73:4a:57:fa:5c:c1:01:b6:47:be: c9:e9:f8:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1MzMxMTAvBgNVBAUTKEU1OEY5OEUzQzYxNDIxNDY1NDUzQUM0MjU1RjBBRkIw QUQ5NUQyNDYwHhcNMjUwODIzMDA1NjI2WhcNMjUwODMwMDA1NjI2WjAYMRYwFAYD VQQDEw02OGE5MTFiYS00MTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygnFbZAuwiYVd/N0JSpwXF/C3cRmXY+++N/hZa6Shf59OqTN6yhkSH5zLsu8 hvNdmlJBBkNVSraCvI4vlQH0basLdZwQp3u5ifeu0hudRtnpKApcrXL9vT/Y8waU Mv1W3ojCN2OCMX2No2gtQm+FAgwdN6I28v1pKz22CmSwvO2ykB1ueA7X+2uQvN6i rXWL2hll9JsK7GgiB9JPCzD8MHUzkBv5O2lW4cwhCl6nl5ISii3e6TAPp+sn6316 oQdE7xSfgbv0TZ1VXYnqjgHz1Rz9Q73//mHMETYDXnPHOAtaXf9vVlwCRm8EMAfN zY9Rmo/t26RlsrDEcC1TD6lF/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtzhXXO k+eb24FTi7/SsnslLc4kMB8GA1UdIwQYMBaAFOWPmOPGFCFGVFOsQlXwr7CtldJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDUzMy8yMkVEMkM5QTlG ODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlVWlVVNnhDVmZDdnNLMlYw a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZLVk0OFlVSVVaVVU2eENWZkN2c0syVjBrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDUzMy8yMkVEMkM5QTlGODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlV WlVVNnhDVmZDdnNLMlYwa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHSbyexrqlq3Km8DxlLvOegxyf9ITnYh7EJ/7gqOPRGdYDwQErhKhI qBNYvFyEGxyyB+aAYru5phta+m9P2XX7JB93UPZvsJBaI8bviuzpJ4kJhSV718GL 30BK63O2Yk7pxI7lKovd3DRq6xnk2AACGrcpOzqlFBIhhyO28TPeET1xyWt62rqD oidLnoGAE7SRcNGOndzXfgRzKD+p3C4s3HVRhKrNU6PPNltMQqSxpYItru5M5uN+ ZyGXsClz5W6ABmleCJkN6f5x1y+Ikbb71GaeUxySwd6kDZsnxkZoO1/FezT5zl9e mbomXmxoPhMQgXNKV/pcwQG2R77J6fj4 -----END CERTIFICATE-----Generated at Sun Aug 24 03:15:14 2025 by rpki-client