$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft File: C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json) Hash identifier: 0DbEiKl9xeL2PsTQQOQxRllGWrvvJie0x5tsYacTyN4= Subject key identifier: C8:6F:FA:F2:6A:1F:57:2E:37:C6:13:44:69:20:3D:34:9D:25:D0:CE Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft Manifest number: 01B0 Signing time: Sat 23 Aug 2025 03:14:40 +0000 Manifest this update: Sat 23 Aug 2025 03:14:39 +0000 Manifest next update: Sat 30 Aug 2025 03:14:39 +0000 Files and hashes: 1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: Ah9VCtPFprPZqt0GAkTDTwmET5m5W4on7Kb/7biqA2I=) 2: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: Gn3bl+JlcAfK7NlSkgTYoj+Bsl8m7KISn3HM2ix+w34=) 3: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: +iPaNHR0I7CGA19//oU6de8PSF7FBlMHBTXC8ZhTdUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Validity Not Before: Aug 23 03:14:39 2025 GMT Not After : Aug 30 03:14:39 2025 GMT Subject: CN=68a93220-36c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:24:75:7f:d6:7c:c5:ac:f0:1c:35:c6:f6:63: 2c:9e:9e:f6:7a:c8:60:1a:50:05:76:1d:b5:20:37: 93:ca:2d:c2:67:68:5a:16:aa:c4:07:92:08:5d:f2: 03:81:76:4b:b3:01:6b:53:d6:30:31:52:bf:1c:ad: 39:a3:ac:2a:c1:7b:6b:db:5c:d6:a1:61:a1:8d:00: 5d:ac:b1:7b:0f:03:bf:ed:06:24:d0:1c:33:57:86: ae:c6:f4:57:8b:40:35:80:6c:ad:3e:ce:1d:c9:a6: c5:a3:5f:4c:f7:07:27:64:23:2d:5a:e1:6a:59:df: b7:46:2c:18:c1:34:04:f6:a8:85:5e:57:e8:b6:da: 82:41:28:87:e1:81:20:32:74:75:e9:21:04:1c:7f: 43:5a:96:0d:fb:ab:a7:94:28:81:cd:11:75:1b:82: 08:42:64:87:4e:73:b2:3b:61:41:df:2e:ce:4a:2e: b6:24:57:57:d3:ba:1d:94:94:07:2c:e6:67:fb:62: 6c:04:f4:97:57:82:8b:57:bb:e1:59:20:2e:09:a2: f8:76:dc:ce:33:49:1a:c8:91:d0:a0:58:ef:b1:82: fd:f1:ef:03:12:b9:5f:8e:3b:43:c5:f2:0e:04:53: a8:71:c4:d3:3c:dd:38:61:de:25:ec:f7:3e:aa:7f: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6F:FA:F2:6A:1F:57:2E:37:C6:13:44:69:20:3D:34:9D:25:D0:CE X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b7:50:af:b5:31:1e:44:c7:8d:1c:76:2f:c2:3f:76:99:d8: fd:c7:17:7c:da:4a:07:e4:d0:89:c9:5a:0f:ef:ee:34:fa:d9: 81:03:e3:f1:21:c9:33:c2:70:83:6f:49:3d:ea:3c:30:05:66: be:75:4f:4d:23:b9:d9:e0:35:3b:bb:02:0b:19:73:5f:8d:66: bd:7d:2f:57:45:ca:fa:21:f6:42:ab:a0:22:32:19:15:98:48: 36:ee:47:38:2a:3d:7c:08:5a:e4:27:b8:6e:60:af:e1:61:d9: 0d:df:da:48:9f:45:67:73:fd:d1:e1:f8:bb:01:bf:e5:9c:18: ca:92:a3:e2:7e:cb:46:4c:13:54:61:36:2a:dc:6e:95:a3:9d: 4e:61:bc:5e:1f:39:3d:87:c0:30:27:48:b1:ae:fa:e1:e8:53: 84:50:76:4c:8b:a0:39:3c:d6:0c:b9:f0:84:51:f8:34:fa:ee: 5d:5f:fc:66:9b:81:0d:7d:18:25:cf:2a:4d:4d:11:e0:47:ed: f8:80:b8:22:f4:9d:91:cb:08:75:84:e7:1f:c2:35:1a:b0:3f: 1b:bf:08:72:ee:36:a7:d2:02:6d:52:2d:c2:f1:1c:d3:b8:92: 29:0a:d6:d9:4b:5b:10:b4:b7:f4:18:0b:a7:4b:2d:fd:48:ac: e4:bd:b5:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjUwODIzMDMxNDM5WhcNMjUwODMwMDMxNDM5WjAYMRYwFAYD VQQDEw02OGE5MzIyMC0zNmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCR1f9Z8xazwHDXG9mMsnp72eshgGlAFdh21IDeTyi3CZ2haFqrEB5IIXfID gXZLswFrU9YwMVK/HK05o6wqwXtr21zWoWGhjQBdrLF7DwO/7QYk0BwzV4auxvRX i0A1gGytPs4dyabFo19M9wcnZCMtWuFqWd+3RiwYwTQE9qiFXlfottqCQSiH4YEg MnR16SEEHH9DWpYN+6unlCiBzRF1G4IIQmSHTnOyO2FB3y7OSi62JFdX07odlJQH LOZn+2JsBPSXV4KLV7vhWSAuCaL4dtzOM0kayJHQoFjvsYL98e8DErlfjjtDxfIO BFOoccTTPN04Yd4l7Pc+qn9o5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhv+vJq H1cuN8YTRGkgPTSdJdDOMB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0My84OTI5REZERUVBMjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRs YVlqT1JVMzVQOEQ4cF9ZRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+t1CvtTEeRMeNHHYvwj92mdj9xxd82koH5NCJyVoP7+40+tmBA+Px IckzwnCDb0k96jwwBWa+dU9NI7nZ4DU7uwILGXNfjWa9fS9XRcr6IfZCq6AiMhkV mEg27kc4Kj18CFrkJ7huYK/hYdkN39pIn0Vnc/3R4fi7Ab/lnBjKkqPifstGTBNU YTYq3G6Vo51OYbxeHzk9h8AwJ0ixrvrh6FOEUHZMi6A5PNYMufCEUfg0+u5dX/xm m4ENfRglzypNTRHgR+34gLgi9J2Rywh1hOcfwjUasD8bvwhy7jan0gJtUi3C8RzT uJIpCtbZS1sQtLf0GAunSy39SKzkvbXw -----END CERTIFICATE-----Generated at Sat Aug 23 20:12:44 2025 by rpki-client