$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft File: -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json) Hash identifier: JSDTUF7whJHnyBbfeU1CJb0+A1QQ87gvJLQOHMN9Lc0= Subject key identifier: EB:EC:8D:94:A9:B8:9A:D0:B7:05:87:71:36:5E:35:7B:21:80:8A:CE Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C Certificate issuer: /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Certificate serial: 0B19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft Manifest number: 0B12 Signing time: Fri 22 Aug 2025 19:26:59 +0000 Manifest this update: Fri 22 Aug 2025 19:26:59 +0000 Manifest next update: Fri 29 Aug 2025 19:26:59 +0000 Files and hashes: 1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: Wc/vUKMbHDlRqO7BlcZHwSG5rW1PzXP8cn3KHj7OhzA=) 2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: gMyJ+7eXQOz2lZ7oRn13QHvOh0RqD5UbZBYLXAXV9no=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2841 (0xb19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC44, serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Validity Not Before: Aug 22 19:26:59 2025 GMT Not After : Aug 29 19:26:59 2025 GMT Subject: CN=68a8c483-c98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:e0:56:9a:ef:53:23:73:9e:13:8f:0a:ce: 5f:e0:c0:91:80:f0:4b:5e:9a:46:c9:52:95:78:48: 12:0f:14:a5:f3:45:f1:fc:22:50:a5:29:85:80:c8: ea:1e:21:50:a7:89:62:74:72:2a:cc:f7:fd:3a:f1: 04:9d:4c:94:22:65:d9:a0:6c:e1:da:b6:0a:e4:e7: 51:ed:17:15:b1:21:8e:47:fb:c1:aa:b7:b6:e9:73: c0:8b:df:2d:d9:ce:87:c4:8a:cc:0c:aa:58:2b:ff: d1:27:c3:20:b7:c5:b7:40:6e:4a:5c:00:e5:e9:38: 28:eb:a6:d8:9f:13:b1:bd:b2:e1:0f:77:db:c5:ff: a0:fc:46:55:56:86:1f:db:6c:98:f6:f0:2e:d5:53: f7:b9:be:14:c0:a1:36:7c:7c:a5:85:10:6a:0c:28: b9:70:4b:f7:7d:9d:13:7f:98:df:e5:d1:d5:8a:0a: f2:81:bc:60:15:20:91:b7:b8:81:56:e4:f0:f1:e0: 99:18:c5:61:8f:41:7f:43:39:d0:30:30:e0:ed:02: 71:46:95:76:39:20:f0:2e:11:3b:82:98:ca:7e:73: 5b:f6:71:14:6e:e6:1d:8e:3e:c9:32:1b:40:af:a6: ee:c3:dc:4f:97:32:9b:a9:a9:27:3e:85:f6:dc:9f: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EC:8D:94:A9:B8:9A:D0:B7:05:87:71:36:5E:35:7B:21:80:8A:CE X509v3 Authority Key Identifier: keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:52:a2:6e:ea:bf:79:d3:5d:29:c0:f9:7f:7f:93:fd:65:21: f8:41:57:83:04:6f:36:5b:7c:0e:22:42:d9:64:f7:98:c0:c8: 51:6a:04:00:ec:da:e7:87:2c:b4:ac:ef:53:29:fc:76:0b:1e: 74:e4:ec:ef:69:a1:6d:e9:98:e8:9c:5f:ec:96:6d:f9:65:55: 6f:9e:90:d2:f6:3e:0e:d8:17:c4:1e:53:f9:47:cd:69:b9:16: 56:3b:6d:86:be:8e:75:e0:56:16:a3:5e:80:01:c3:5b:fb:4c: 8b:76:5e:a7:cd:fc:0d:7a:fe:47:cd:e9:2c:8d:1d:d5:ae:4e: 10:d7:1d:f8:eb:93:84:7f:bc:32:18:69:53:37:8c:8b:79:02: d6:ba:e7:6a:99:36:86:5e:c6:cc:26:07:c2:92:74:f1:c0:19: 51:c0:81:00:f6:1c:ec:a2:5a:52:25:af:64:a3:31:ca:d5:57: d2:b3:32:49:80:27:02:53:77:23:c7:15:79:a7:71:c0:1e:0e: 12:95:9b:c5:d4:eb:4c:4e:b2:e5:31:bc:28:53:e5:5d:46:de: b5:6b:b1:37:75:39:92:ef:8e:53:ec:48:e2:d1:d5:b9:ca:51: c5:fd:e3:83:06:c7:b0:f4:be:e5:d0:35:16:f2:9c:8d:44:cd: a1:3b:d6:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDNDQxMTAvBgNVBAUTKEY5OEVCRTIwNjkwRjJGMkIyMzRBMTU0ODdERDA5NTIx RjNENDc1M0MwHhcNMjUwODIyMTkyNjU5WhcNMjUwODI5MTkyNjU5WjAYMRYwFAYD VQQDEw02OGE4YzQ4My1jOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Z/gVprvUyNznhOPCs5f4MCRgPBLXppGyVKVeEgSDxSl80Xx/CJQpSmFgMjq HiFQp4lidHIqzPf9OvEEnUyUImXZoGzh2rYK5OdR7RcVsSGOR/vBqre26XPAi98t 2c6HxIrMDKpYK//RJ8Mgt8W3QG5KXADl6Tgo66bYnxOxvbLhD3fbxf+g/EZVVoYf 22yY9vAu1VP3ub4UwKE2fHylhRBqDCi5cEv3fZ0Tf5jf5dHVigrygbxgFSCRt7iB VuTw8eCZGMVhj0F/QznQMDDg7QJxRpV2OSDwLhE7gpjKfnNb9nEUbuYdjj7JMhtA r6buw9xPlzKbqaknPoX23J9mYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvsjZSp uJrQtwWHcTZeNXshgIrOMB8GA1UdIwQYMBaAFPmOviBpDy8rI0oVSH3QlSHz1HU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0M0NC9DMTYwRkNBQzQ4 MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5c2pTaFZJZmRDVklmUFVk VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZNi1JR2tQTHlzalNoVklmZENWSWZQVWRUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0M0NC9DMTYwRkNBQzQ4MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5 c2pTaFZJZmRDVklmUFVkVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvUqJu6r95010pwPl/f5P9ZSH4QVeDBG82W3wOIkLZZPeYwMhRagQA 7Nrnhyy0rO9TKfx2Cx505OzvaaFt6ZjonF/slm35ZVVvnpDS9j4O2BfEHlP5R81p uRZWO22Gvo514FYWo16AAcNb+0yLdl6nzfwNev5HzeksjR3Vrk4Q1x3465OEf7wy GGlTN4yLeQLWuudqmTaGXsbMJgfCknTxwBlRwIEA9hzsolpSJa9kozHK1VfSszJJ gCcCU3cjxxV5p3HAHg4SlZvF1OtMTrLlMbwoU+VdRt61a7E3dTmS745T7Eji0dW5 ylHF/eODBsew9L7l0DUW8pyNRM2hO9YT -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:18 2025 by rpki-client