$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft File: y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json) Hash identifier: IKEIy+e9pcbhl79mS/9cyj+QzcncioSK7u8txQ4RVwM= Subject key identifier: 96:81:C7:4F:7C:9E:80:CC:D5:8F:77:0B:23:11:B3:E5:74:A8:5A:EF Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Certificate serial: 04FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft Manifest number: 04F8 Signing time: Fri 22 Aug 2025 23:53:27 +0000 Manifest this update: Fri 22 Aug 2025 23:53:26 +0000 Manifest next update: Fri 29 Aug 2025 23:53:26 +0000 Files and hashes: 1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: WYQzUhm2VG0pUhEP21vQ9oH/8+VYauC/WMJaDEboO9A=) 2: B0A2E01225C411EC88466E59C4F9AE02.roa (hash: 8z4FQ3P4ffexi4IqxjF16x9Xr0QlwFMb8TffrA8dnxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Validity Not Before: Aug 22 23:53:26 2025 GMT Not After : Aug 29 23:53:26 2025 GMT Subject: CN=68a902f6-9694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ae:2a:93:d0:b6:f5:aa:4f:51:2d:a3:ec:ba: 20:10:a3:10:00:e2:12:25:7a:26:d3:bb:87:e1:b2: a2:77:02:f5:4d:4c:f6:25:02:60:b0:f5:82:ab:19: f5:fb:ad:fb:4d:f7:e7:77:4e:40:14:c9:0f:51:6a: ab:b6:6a:e9:03:38:6c:48:d4:4b:a9:9a:b2:78:90: 9f:40:8a:91:54:7d:32:7b:bd:84:ff:75:ad:fd:23: 8e:34:be:59:3d:3f:14:0a:d2:c6:13:61:58:19:94: 28:21:32:c6:5c:c0:00:8b:ba:3d:93:b7:55:02:e7: a2:82:60:72:40:94:b3:2a:fb:46:43:dd:7c:99:40: 8d:14:a7:56:0a:a6:28:61:03:a2:c9:f1:52:1e:a1: bb:88:0d:5f:f3:49:47:1e:78:6d:d8:e4:c8:78:f1: ac:8c:f2:44:58:37:f7:d4:e0:1c:6d:19:08:82:22: 34:0e:13:fd:42:ae:4b:48:64:91:f9:1e:63:a4:60: dc:24:11:31:af:28:45:a3:72:9a:41:9a:f1:8b:e0: cd:31:51:cf:1d:5b:7a:76:2a:a1:dc:f3:19:56:5d: b2:3a:8e:bb:c6:b9:e4:44:b8:a7:f2:3c:14:a0:8d: b5:14:65:94:9b:ee:1c:ff:e0:85:61:90:62:4a:a7: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:81:C7:4F:7C:9E:80:CC:D5:8F:77:0B:23:11:B3:E5:74:A8:5A:EF X509v3 Authority Key Identifier: keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:8f:42:f2:d7:53:d3:2a:63:f5:b4:79:c3:31:67:4a:18:0a: 3d:b0:36:39:3f:d1:1a:c9:c1:34:1d:b1:90:4f:9f:3d:63:57: 0b:bf:f8:d4:94:5f:da:31:20:9e:5b:82:5b:e7:8f:59:09:ca: 52:ea:be:58:c0:8b:3b:35:b8:33:fe:1e:1c:c0:de:b9:1a:a5: 19:a9:a0:bd:39:48:ea:b9:51:fe:2f:28:1f:bc:3c:9c:d9:d7: d8:2f:75:91:77:d1:ba:12:9b:a9:54:cb:c2:89:a3:12:f4:bc: c1:d0:46:1e:c2:1e:bf:e3:6b:b1:fe:b1:e5:94:96:9a:98:e7: ff:07:8a:e9:13:32:4d:12:00:09:43:f0:e1:2e:f9:91:1d:95: ab:73:13:d8:3c:b5:22:1e:1b:3f:2b:30:1f:a9:f0:e4:a4:ac: 1c:2a:6d:ee:46:35:76:ff:7a:1b:66:17:51:e3:fb:ed:2d:d0: a7:c0:c9:22:68:8f:57:67:6a:d1:da:26:61:98:06:23:37:f1: 0d:1b:72:bf:f0:5c:a0:f4:d1:4b:d3:1f:33:c8:e0:cc:55:4c: 92:7b:5b:b4:46:10:16:60:f2:ef:5e:14:3b:31:47:c4:23:58: 86:d4:ca:08:de:65:12:e4:86:07:13:c2:47:a0:72:75:72:1b: 1b:89:04:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMwMzkxMTAvBgNVBAUTKENCNkM4NUU3NTJENTY5REZDRjFERTkwNEM5Q0JFNzFF NDgzRUY1RjIwHhcNMjUwODIyMjM1MzI2WhcNMjUwODI5MjM1MzI2WjAYMRYwFAYD VQQDEw02OGE5MDJmNi05Njk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8a4qk9C29apPUS2j7LogEKMQAOISJXom07uH4bKidwL1TUz2JQJgsPWCqxn1 +637Tffnd05AFMkPUWqrtmrpAzhsSNRLqZqyeJCfQIqRVH0ye72E/3Wt/SOONL5Z PT8UCtLGE2FYGZQoITLGXMAAi7o9k7dVAueigmByQJSzKvtGQ918mUCNFKdWCqYo YQOiyfFSHqG7iA1f80lHHnht2OTIePGsjPJEWDf31OAcbRkIgiI0DhP9Qq5LSGSR +R5jpGDcJBExryhFo3KaQZrxi+DNMVHPHVt6diqh3PMZVl2yOo67xrnkRLin8jwU oI21FGWUm+4c/+CFYZBiSqdNwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaBx098 noDM1Y93CyMRs+V0qFrvMB8GA1UdIwQYMBaAFMtshedS1Wnfzx3pBMnL5x5IPvXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS9CQjUzMjNFODI1 QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFkX1BIZWtFeWN2bkhrZy05 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kyeUY1MUxWYWRfUEhla0V5Y3ZuSGtnLTlmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzAzOS9CQjUzMjNFODI1QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFk X1BIZWtFeWN2bkhrZy05ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtj0Ly11PTKmP1tHnDMWdKGAo9sDY5P9EaycE0HbGQT589Y1cLv/jU lF/aMSCeW4Jb549ZCcpS6r5YwIs7Nbgz/h4cwN65GqUZqaC9OUjquVH+LygfvDyc 2dfYL3WRd9G6EpupVMvCiaMS9LzB0EYewh6/42ux/rHllJaamOf/B4rpEzJNEgAJ Q/DhLvmRHZWrcxPYPLUiHhs/KzAfqfDkpKwcKm3uRjV2/3obZhdR4/vtLdCnwMki aI9XZ2rR2iZhmAYjN/ENG3K/8Fyg9NFL0x8zyODMVUySe1u0RhAWYPLvXhQ7MUfE I1iG1MoI3mUS5IYHE8JHoHJ1chsbiQRn -----END CERTIFICATE-----Generated at Sun Aug 24 04:45:46 2025 by rpki-client