$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft File: byPyfwkL70UxgCBy4drPIQ2dQjw.mft (raw, json) Hash identifier: xjBlz6tNTixk3ea4+TIO9cR0DEKwsOA3yBK/iajuof8= Subject key identifier: 49:69:65:B4:DE:6A:8C:08:83:26:2C:A1:8D:B3:D5:15:A1:C0:EC:F0 Authority key identifier: 6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C Certificate issuer: /CN=A91AEB80/serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft Manifest number: 041E Signing time: Sat 23 Aug 2025 00:37:07 +0000 Manifest this update: Sat 23 Aug 2025 00:37:07 +0000 Manifest next update: Sat 30 Aug 2025 00:37:07 +0000 Files and hashes: 1: byPyfwkL70UxgCBy4drPIQ2dQjw.crl (hash: AUOtN632fCGEDMoZef+HGnLou96Q7yvG9LDtni7eebk=) 2: 6759C60223C311ED9CF26A56C4F9AE02.roa (hash: hfhgYw3LQAm38USWum4YWAZ6gIly4M1LyEp15dh2XTA=) 3: EE8E0F3AA26711ECAFB48B53C4F9AE02.roa (hash: 3MDrKz+RefMI5j73wYkUuNy3Oa/4hoC/hS0v0G3eEHg=) 4: 6637CBD423C311ED9CF26A56C4F9AE02.roa (hash: DfRsMdJEDtch+C5Yk6n2+rHqExZkbfMsESmjI6z6r5c=) 5: EDE820B6A26711ECAFB48B53C4F9AE02.roa (hash: GJiUmX3/HTWKDyD6ZSjgX6IZE0JTW/U81xlvCFIWxoU=) 6: 6D7FBCBE129111ED81E82D3DC4F9AE02.roa (hash: D3Mr1RF7NLA+SlRnm9qkHlBkKJAhwvA5FpODqeYJRmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEB80, serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C Validity Not Before: Aug 23 00:37:07 2025 GMT Not After : Aug 30 00:37:07 2025 GMT Subject: CN=68a90d33-a788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:cb:20:75:08:90:db:d1:93:78:5a:5e:5d: aa:8c:30:77:95:2d:44:3f:93:fa:a6:62:0b:bb:2a: 93:26:56:98:34:3f:36:a9:4d:f8:ab:66:b6:9f:01: fb:2d:c9:1f:9c:a4:c5:40:c8:60:39:79:21:ae:68: a6:7f:9d:ad:b7:05:71:49:92:4b:f6:14:04:ac:c0: 1c:2a:56:65:e2:08:0e:5b:88:37:0b:45:b6:35:d4: 6b:90:ab:05:4c:71:f0:af:f1:86:5b:41:63:2b:f8: 19:8f:eb:7e:dc:93:32:a0:48:38:81:f0:b4:94:6e: bb:90:c2:1c:33:b2:cb:82:19:cd:4b:15:a0:1b:9a: 42:53:35:6b:b9:33:a9:a8:9c:3d:25:67:90:77:74: 6f:80:d2:c9:bd:24:c0:27:68:b0:59:65:2f:96:ff: d0:30:a2:f6:0c:62:e7:73:ff:43:dd:c2:cf:53:46: e9:bc:0a:fc:ce:a1:0b:35:55:be:dc:58:1e:42:68: ba:33:6e:17:7c:56:53:3d:71:c7:5e:9d:85:1c:b5: f6:6f:55:f6:cd:fd:de:63:0d:91:e1:90:d5:d1:67: 92:bf:1d:d4:ce:03:d2:61:0c:08:83:7e:dc:e7:67: a8:fd:91:fc:75:43:10:58:a2:d6:20:f7:54:ea:12: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:69:65:B4:DE:6A:8C:08:83:26:2C:A1:8D:B3:D5:15:A1:C0:EC:F0 X509v3 Authority Key Identifier: keyid:6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ea:c1:b7:76:39:62:9f:75:60:49:36:f2:bd:fb:9e:03:a7: ce:69:52:40:a4:91:2a:a3:5e:56:72:4f:a3:57:32:27:33:20: 16:9a:fa:fd:16:88:83:39:be:c5:bc:a2:ce:25:64:c7:58:14: 10:9b:c1:cc:ed:64:41:19:a6:8d:b2:63:95:3b:bb:08:6e:0e: f5:d1:b0:a8:ef:31:60:30:f2:22:02:46:f0:38:13:5c:a1:b6: cd:91:c3:04:7d:b7:42:94:71:cf:f4:25:06:ae:c8:b0:25:f6: 05:2e:e5:85:e6:7e:77:f7:5d:43:13:08:72:12:9f:4c:7e:06: c6:49:34:de:65:67:d7:a3:17:94:7d:28:22:77:50:f0:b5:b6: 74:25:65:53:10:74:61:4e:93:d8:c4:06:42:ff:7f:db:4c:b0: f8:82:d4:b4:4d:a4:24:97:47:8c:be:dd:f7:0e:fe:88:3d:bf: 38:cf:66:82:24:4c:b4:23:66:b4:e9:2b:ec:e0:a4:e9:6c:7b: 74:22:d5:6c:51:b2:9f:f7:76:38:9f:9c:13:a6:95:26:bf:f2: 93:df:b0:5f:9e:2a:c3:c9:a5:65:e3:0b:a8:56:45:6e:23:8f: 72:ce:2d:09:e7:83:58:c2:50:3d:4c:7f:8b:ae:b5:87:b9:e6: 3f:0a:bf:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCODAxMTAvBgNVBAUTKDZGMjNGMjdGMDkwQkVGNDUzMTgwMjA3MkUxREFDRjIx MEQ5RDQyM0MwHhcNMjUwODIzMDAzNzA3WhcNMjUwODMwMDAzNzA3WjAYMRYwFAYD VQQDEw02OGE5MGQzMy1hNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18zLIHUIkNvRk3haXl2qjDB3lS1EP5P6pmILuyqTJlaYND82qU34q2a2nwH7 LckfnKTFQMhgOXkhrmimf52ttwVxSZJL9hQErMAcKlZl4ggOW4g3C0W2NdRrkKsF THHwr/GGW0FjK/gZj+t+3JMyoEg4gfC0lG67kMIcM7LLghnNSxWgG5pCUzVruTOp qJw9JWeQd3RvgNLJvSTAJ2iwWWUvlv/QMKL2DGLnc/9D3cLPU0bpvAr8zqELNVW+ 3FgeQmi6M24XfFZTPXHHXp2FHLX2b1X2zf3eYw2R4ZDV0WeSvx3UzgPSYQwIg37c 52eo/ZH8dUMQWKLWIPdU6hLZ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElpZbTe aowIgyYsoY2z1RWhwOzwMB8GA1UdIwQYMBaAFG8j8n8JC+9FMYAgcuHazyENnUI8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUI4MC83NzYyRkM1QTdF NkMxMUVDODczRDY3ODNDNEY5QUUwMi9ieVB5ZndrTDcwVXhnQ0J5NGRyUElRMmRR ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5UHlmd2tMNzBVeGdDQnk0ZHJQSVEyZFFqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUI4MC83NzYyRkM1QTdFNkMxMUVDODczRDY3ODNDNEY5QUUwMi9ieVB5ZndrTDcw VXhnQ0J5NGRyUElRMmRRancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp6sG3djlin3VgSTbyvfueA6fOaVJApJEqo15Wck+jVzInMyAWmvr9 FoiDOb7FvKLOJWTHWBQQm8HM7WRBGaaNsmOVO7sIbg710bCo7zFgMPIiAkbwOBNc obbNkcMEfbdClHHP9CUGrsiwJfYFLuWF5n53911DEwhyEp9MfgbGSTTeZWfXoxeU fSgid1DwtbZ0JWVTEHRhTpPYxAZC/3/bTLD4gtS0TaQkl0eMvt33Dv6IPb84z2aC JEy0I2a06Svs4KTpbHt0ItVsUbKf93Y4n5wTppUmv/KT37BfnirDyaVl4wuoVkVu I49yzi0J54NYwlA9TH+LrrWHueY/Cr/z -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:59 2025 by rpki-client