$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft File: FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json) Hash identifier: ipVEtqNP3T5mGZR7Z/hGap680daACv4+o3kcX5gsPJY= Subject key identifier: 58:B7:9A:5D:AD:A2:56:26:61:CF:8F:8D:C7:5C:B1:AC:4B:64:AD:24 Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft Manifest number: 0232 Signing time: Sat 23 Aug 2025 02:10:38 +0000 Manifest this update: Sat 23 Aug 2025 02:10:38 +0000 Manifest next update: Sat 30 Aug 2025 02:10:38 +0000 Files and hashes: 1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: YhxfyPUg8XYAEoHpgKJHkYiqxnWq5S3HB9yDN2S48bQ=) 2: 59A2E9D8A01411EF8E674221C4F9AE02.roa (hash: Awesdi3w1tMsyunxz0+auFNmXjcMcElIgsBpVsZJdUI=) 3: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: XHpwnOzWirhZDyC+O+dd8moXeBpb4e61IwD/RSr7i40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Validity Not Before: Aug 23 02:10:38 2025 GMT Not After : Aug 30 02:10:38 2025 GMT Subject: CN=68a9231e-407b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:74:13:5e:06:05:bd:0f:50:a2:ed:3d:26: 71:2a:32:ab:0b:b4:f7:63:55:e1:88:7a:63:05:3f: 99:ef:d2:8e:3e:f7:2b:69:8b:0a:e8:5b:62:73:00: 59:69:74:d0:61:1d:c8:4f:81:6b:7b:89:97:ce:d0: 00:e3:d3:ae:9c:f1:60:55:8a:16:78:34:76:87:26: 8d:9e:3c:a4:56:54:8e:44:5f:3a:5c:c8:ce:24:15: 17:58:f5:7b:7e:5b:07:9f:22:65:62:81:10:fb:d0: 52:45:e9:33:b3:ab:18:6e:c3:8a:61:92:07:b0:f1: 8e:a8:19:3a:7e:9d:87:4b:11:52:33:d8:7d:27:2d: 85:bb:f6:aa:58:6c:89:f6:f4:61:dc:3d:ba:4c:4a: 8a:8e:c7:bf:96:a9:87:c1:68:0a:b1:94:46:67:d5: ba:a7:ab:35:b0:8f:b1:ac:21:fe:4f:7f:24:0a:8a: 24:c9:ce:1c:af:e4:18:f1:3a:32:04:27:31:f1:e3: ae:c8:8a:f2:65:a3:49:7e:e7:3d:1e:c7:17:58:99: 5b:70:b8:d2:40:13:ac:51:dd:45:a5:a1:5e:ea:bb: 65:ac:b1:47:87:90:b4:42:ac:df:89:d9:be:87:5a: 53:6d:1f:f1:7e:ca:ec:28:20:66:ad:31:3a:86:d4: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B7:9A:5D:AD:A2:56:26:61:CF:8F:8D:C7:5C:B1:AC:4B:64:AD:24 X509v3 Authority Key Identifier: keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f9:c8:32:5f:6c:a5:8a:65:fc:8f:48:0a:81:6f:96:d6:c3: 7e:70:30:e9:c1:23:3f:9f:1a:59:4a:94:fa:82:7b:c2:4e:87: d7:7f:0d:98:15:c8:e4:0c:1b:ff:8f:fe:ce:4e:fe:24:d4:69: a9:8e:12:e6:1d:84:f7:e6:d4:91:c8:91:a6:97:e9:95:be:31: 54:8f:f8:b1:51:c4:31:57:6e:c4:36:e9:1e:19:e2:d1:5a:b5: b1:64:49:b8:9d:e4:29:77:f2:f0:17:6f:ae:9d:60:17:85:0f: ba:ff:0c:90:79:d1:9e:02:fd:10:37:c5:d5:e2:f1:02:46:ee: 4b:d0:1a:42:3e:3c:24:ab:18:c2:00:6e:a6:84:b8:05:1f:43: e4:e4:a6:3c:91:a5:5e:24:2b:96:df:67:fe:6d:d3:7f:48:95: e7:27:96:57:fb:20:56:06:a5:e6:bc:64:ea:05:b2:82:97:61: e9:0e:c5:23:d1:28:7c:b9:00:e1:47:3b:48:4a:db:85:77:13: f1:77:2e:8c:d4:3a:c7:6b:8c:10:09:3d:e5:37:00:5b:9a:61: 6b:ff:65:a5:2d:bb:79:15:63:a8:fb:96:51:75:3f:e9:0a:9e: c1:4e:25:bd:fb:df:3f:61:be:78:a9:89:c2:c5:7e:53:c3:25: a5:9a:e9:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA4RUUxMTAvBgNVBAUTKDE1OEI5NjY2NEZCMUM5QUVFRUIzRDI4NzA3Rjg3N0ZF MjM3QjAyREMwHhcNMjUwODIzMDIxMDM4WhcNMjUwODMwMDIxMDM4WjAYMRYwFAYD VQQDEw02OGE5MjMxZS00MDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAp0E14GBb0PUKLtPSZxKjKrC7T3Y1XhiHpjBT+Z79KOPvcraYsK6FticwBZ aXTQYR3IT4Fre4mXztAA49OunPFgVYoWeDR2hyaNnjykVlSORF86XMjOJBUXWPV7 flsHnyJlYoEQ+9BSRekzs6sYbsOKYZIHsPGOqBk6fp2HSxFSM9h9Jy2Fu/aqWGyJ 9vRh3D26TEqKjse/lqmHwWgKsZRGZ9W6p6s1sI+xrCH+T38kCookyc4cr+QY8Toy BCcx8eOuyIryZaNJfuc9HscXWJlbcLjSQBOsUd1FpaFe6rtlrLFHh5C0Qqzfidm+ h1pTbR/xfsrsKCBmrTE6htQOWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFi3ml2t olYmYc+PjcdcsaxLZK0kMB8GA1UdIwQYMBaAFBWLlmZPscmu7rPShwf4d/4jewLc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhFRS81M0M2NzhENjQz MDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlhN3VzOUtIQl9oM19pTjdB dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZdVdaay14eWE3dXM5S0hCX2gzX2lON0F0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDhFRS81M0M2NzhENjQzMDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlh N3VzOUtIQl9oM19pTjdBdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB+cgyX2ylimX8j0gKgW+W1sN+cDDpwSM/nxpZSpT6gnvCTofXfw2Y FcjkDBv/j/7OTv4k1GmpjhLmHYT35tSRyJGml+mVvjFUj/ixUcQxV27ENukeGeLR WrWxZEm4neQpd/LwF2+unWAXhQ+6/wyQedGeAv0QN8XV4vECRu5L0BpCPjwkqxjC AG6mhLgFH0Pk5KY8kaVeJCuW32f+bdN/SJXnJ5ZX+yBWBqXmvGTqBbKCl2HpDsUj 0Sh8uQDhRztIStuFdxPxdy6M1DrHa4wQCT3lNwBbmmFr/2WlLbt5FWOo+5ZRdT/p Cp7BTiW9+98/Yb54qYnCxX5TwyWlmuk2 -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:51 2025 by rpki-client