$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json) Hash identifier: WpyMpj0PYYPQkreelvB7GoAL1dJat8ie3khe1necGQ0= Subject key identifier: 23:1D:AF:6C:1C:CF:6F:A3:29:E1:03:39:0A:07:00:88:52:D0:6E:17 Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft Manifest number: 01AD Signing time: Sat 23 Aug 2025 03:17:50 +0000 Manifest this update: Sat 23 Aug 2025 03:17:49 +0000 Manifest next update: Sat 30 Aug 2025 03:17:49 +0000 Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: QdTk4JzHLlwO05AypTPLpFJgG0mb7aBmQn7OcLDwMOc=) 2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: CWem0s7hf8kQnIdZUnWxTyisJw7AnKLcP2ANy+rIwcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: Aug 23 03:17:49 2025 GMT Not After : Aug 30 03:17:49 2025 GMT Subject: CN=68a932de-d768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:18:f5:d3:ed:cf:8e:a3:94:38:a8:98:23: 1c:9e:62:c2:5c:c1:26:3f:c3:4a:b0:b3:2f:9b:3e: ab:8a:dd:27:85:c1:5a:05:2a:43:54:0c:2a:dc:a2: c8:9a:51:c8:c6:7d:d2:60:66:5c:99:76:73:6d:08: 00:85:2c:3f:b9:d0:ef:4c:1d:1c:3e:2a:eb:11:76: 11:ef:47:8b:bc:62:02:3e:f1:96:47:11:65:cd:b5: 4c:e6:6b:59:cc:fe:1e:8d:43:ce:2c:4f:f8:fb:bf: df:c8:c3:a1:2c:37:65:7d:24:d8:3d:67:3d:1a:53: 6c:e7:7b:bc:8c:3e:e9:39:42:36:2f:60:b6:57:cb: 0b:b6:be:67:2b:25:1b:9e:e5:35:fc:59:bc:49:c9: fa:80:88:79:5c:38:37:9b:a8:02:9a:61:bd:c7:48: 57:ba:6a:df:aa:d1:8b:b1:a3:9c:cf:a7:09:ce:7a: 7c:6c:12:93:0f:3e:99:22:2a:67:27:9e:af:94:5e: 04:fa:2c:1a:57:d7:2a:ae:2a:ea:c4:9b:95:4a:72: 59:93:5c:a8:4f:fe:08:d3:de:d4:5e:85:ca:e8:c3: a4:86:4a:ef:53:ad:13:6e:f6:5f:97:14:98:4b:87: 84:06:e7:65:60:51:b5:ab:69:07:37:bb:3a:d3:3b: 8d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1D:AF:6C:1C:CF:6F:A3:29:E1:03:39:0A:07:00:88:52:D0:6E:17 X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0e:63:b1:28:6a:bd:eb:2a:9d:c6:30:63:06:ca:4a:91:07: a6:63:f0:83:a8:6d:ec:e2:80:b4:33:32:63:ce:aa:2a:9e:d5: b9:ce:da:ab:0f:a0:fb:32:69:a1:4d:c9:20:ff:23:43:00:4e: c4:46:db:23:52:c7:1b:65:a6:47:09:33:55:61:43:73:25:9a: ed:b4:aa:0f:8e:22:af:b3:27:c4:4d:2c:d1:7d:b4:56:0b:7e: f6:ad:49:ca:5b:8c:a4:31:2b:92:ee:87:8b:f3:a1:ad:49:9f: a9:8b:e8:76:75:c1:18:cf:aa:ce:45:f2:a5:e1:b7:84:3a:73: 54:b0:5f:dd:b6:8d:e9:ed:c4:e7:43:9d:67:63:e2:03:b8:81: 59:ce:6b:44:ea:33:f4:cc:c2:78:6b:fb:c8:b3:b6:d9:e2:cb: d3:5f:32:95:e9:71:f7:cb:23:53:3a:d1:db:e6:28:c7:13:bf: 70:16:5c:f1:78:43:da:ab:7f:63:a9:b4:58:ca:a8:c8:18:57: 7f:c4:22:d6:77:34:65:ab:16:f2:9e:78:44:86:7b:43:7b:62: ee:d7:f3:f9:59:33:b5:7b:1f:62:d1:8f:97:f3:4b:a2:06:50: cc:d4:42:4f:aa:02:19:f8:78:1b:27:28:ea:a1:a4:2a:d6:17: 6a:ce:86:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw ODNDNDkwQTYwHhcNMjUwODIzMDMxNzQ5WhcNMjUwODMwMDMxNzQ5WjAYMRYwFAYD VQQDEw02OGE5MzJkZS1kNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkAY9dPtz46jlDiomCMcnmLCXMEmP8NKsLMvmz6rit0nhcFaBSpDVAwq3KLI mlHIxn3SYGZcmXZzbQgAhSw/udDvTB0cPirrEXYR70eLvGICPvGWRxFlzbVM5mtZ zP4ejUPOLE/4+7/fyMOhLDdlfSTYPWc9GlNs53u8jD7pOUI2L2C2V8sLtr5nKyUb nuU1/Fm8Scn6gIh5XDg3m6gCmmG9x0hXumrfqtGLsaOcz6cJznp8bBKTDz6ZIipn J56vlF4E+iwaV9cqrirqxJuVSnJZk1yoT/4I097UXoXK6MOkhkrvU60TbvZflxSY S4eEBudlYFG1q2kHN7s60zuNtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMdr2wc z2+jKeEDOQoHAIhS0G4XMB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FM UzhhRjRwaUg0Z1VJUEVrS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9DmOxKGq96yqdxjBjBspKkQemY/CDqG3s4oC0MzJjzqoqntW5ztqr D6D7MmmhTckg/yNDAE7ERtsjUscbZaZHCTNVYUNzJZrttKoPjiKvsyfETSzRfbRW C372rUnKW4ykMSuS7oeL86GtSZ+pi+h2dcEYz6rORfKl4beEOnNUsF/dto3p7cTn Q51nY+IDuIFZzmtE6jP0zMJ4a/vIs7bZ4svTXzKV6XH3yyNTOtHb5ijHE79wFlzx eEPaq39jqbRYyqjIGFd/xCLWdzRlqxbynnhEhntDe2Lu1/P5WTO1ex9i0Y+X80ui BlDM1EJPqgIZ+HgbJyjqoaQq1hdqzoYK -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:27 2025 by rpki-client