$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: Iv5KuPY49rIfIJ6Z24FHWPLUc7jJgKxVBtPclCOBDAQ= Subject key identifier: 02:A1:C8:37:D2:5A:4C:98:65:2F:E9:BA:55:0B:93:08:A1:B9:62:A8 Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: 011E Signing time: Sat 23 Aug 2025 04:59:09 +0000 Manifest this update: Sat 23 Aug 2025 04:59:08 +0000 Manifest next update: Sat 30 Aug 2025 04:59:08 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: L7jopIu/YlrfZ6849hkICsbkdUujBFKbphm7kO0Kv1o=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: Aug 23 04:59:08 2025 GMT Not After : Aug 30 04:59:08 2025 GMT Subject: CN=68a94a9c-c6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8d:18:b1:cd:9f:46:ca:0f:65:3f:6b:c3:0e: 32:b5:2d:b9:f3:8d:cc:57:1f:f6:39:a5:e4:4d:b7: 28:12:72:f9:e1:c2:52:b7:1d:e3:e2:59:7d:ba:25: 6d:dd:bb:47:8d:0c:4d:66:ce:74:20:49:db:c1:78: b3:cb:b6:07:37:0c:21:16:9c:1b:0e:85:f3:7a:af: 8a:62:3b:2e:09:13:cb:73:37:bf:00:f7:45:18:95: 3e:e5:6d:eb:fd:17:96:c5:52:e1:de:4f:f4:44:6a: aa:6d:09:a1:43:09:c4:f5:e0:d8:f2:76:ca:ab:32: 43:38:11:87:ad:ba:15:9a:b8:a4:72:0c:60:d0:ad: d2:42:65:84:74:71:91:f7:e4:0f:31:b2:e8:ea:b6: 7d:1b:42:ae:9f:e3:64:82:6e:16:23:40:59:35:68: 87:fa:54:e0:19:12:c3:fc:95:05:5f:8a:49:d0:47: c5:43:01:3b:e1:0c:b2:5d:ce:9f:19:33:ba:96:8e: 82:0a:5f:7c:30:00:61:1e:05:74:b5:f8:6c:90:4d: 3f:16:ce:86:1a:c9:1c:e5:4b:84:50:76:5b:2d:fd: 5a:59:df:9e:bd:d3:8a:32:fc:f1:3a:de:c6:09:1f: f0:d8:7b:a5:67:e7:81:77:49:36:70:2d:5d:66:b5: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A1:C8:37:D2:5A:4C:98:65:2F:E9:BA:55:0B:93:08:A1:B9:62:A8 X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:72:94:d2:8e:6a:4e:3e:fb:91:af:7a:fa:52:87:e5:54:f8: 0e:97:78:e9:c3:79:1b:ad:da:db:c1:b1:18:70:96:56:51:1b: 75:c9:13:0a:6a:ca:d9:e6:9f:2f:ca:5f:14:e5:22:fc:80:2c: 17:67:6d:a0:50:89:44:26:77:0d:47:0b:35:50:0b:cd:e8:c1: b4:02:33:b1:f4:c6:e5:7e:2d:51:e4:fd:6f:c2:48:95:cc:21: d7:27:0e:4e:14:94:37:3b:03:36:62:00:a9:65:e0:29:02:7c: 04:d6:a0:7b:ce:35:57:43:89:4b:7d:03:0a:87:a7:cb:28:97: d8:f1:37:8e:b1:8d:24:a2:81:f5:95:fd:a7:2a:e4:0d:57:98: d6:b0:5f:74:45:0a:2a:67:a5:9e:11:2a:75:d4:34:f2:72:26: fd:ed:f1:c0:22:b3:ac:26:f6:13:a8:25:9c:ac:e3:e8:9b:e4: 4c:72:43:cf:a1:2a:ed:b8:41:8d:e8:68:a8:d0:9e:a9:b5:11: 90:65:f9:53:36:b2:d3:60:6e:a5:54:ab:f1:a3:c0:89:05:64: 49:e2:30:b5:ea:01:f5:4c:9c:16:ed:bb:c7:84:ff:a5:db:da: d2:fb:ec:67:68:f2:2d:36:ed:bd:2a:4c:68:e2:cc:89:2f:bc: c4:af:13:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjUwODIzMDQ1OTA4WhcNMjUwODMwMDQ1OTA4WjAYMRYwFAYD VQQDEw02OGE5NGE5Yy1jNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0I0Ysc2fRsoPZT9rww4ytS25843MVx/2OaXkTbcoEnL54cJStx3j4ll9uiVt 3btHjQxNZs50IEnbwXizy7YHNwwhFpwbDoXzeq+KYjsuCRPLcze/APdFGJU+5W3r /ReWxVLh3k/0RGqqbQmhQwnE9eDY8nbKqzJDOBGHrboVmrikcgxg0K3SQmWEdHGR 9+QPMbLo6rZ9G0Kun+Nkgm4WI0BZNWiH+lTgGRLD/JUFX4pJ0EfFQwE74QyyXc6f GTO6lo6CCl98MABhHgV0tfhskE0/Fs6GGskc5UuEUHZbLf1aWd+evdOKMvzxOt7G CR/w2HulZ+eBd0k2cC1dZrVrCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKhyDfS WkyYZS/pulULkwihuWKoMB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCacpTSjmpOPvuRr3r6UoflVPgOl3jpw3kbrdrbwbEYcJZWURt1yRMK asrZ5p8vyl8U5SL8gCwXZ22gUIlEJncNRws1UAvN6MG0AjOx9Mblfi1R5P1vwkiV zCHXJw5OFJQ3OwM2YgCpZeApAnwE1qB7zjVXQ4lLfQMKh6fLKJfY8TeOsY0kooH1 lf2nKuQNV5jWsF90RQoqZ6WeESp11DTycib97fHAIrOsJvYTqCWcrOPom+RMckPP oSrtuEGN6Gio0J6ptRGQZflTNrLTYG6lVKvxo8CJBWRJ4jC16gH1TJwW7bvHhP+l 29rS++xnaPItNu29Kkxo4syJL7zErxN9 -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:35 2025 by rpki-client