$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft File: -tyXZLIJ-Bz4KTMiagZpoypO3XI.mft (raw, json) Hash identifier: VmYk3I0ubU03qkXophfX2vNXJC2hBo/fcYnl/w06rkM= Subject key identifier: C8:35:6B:02:85:87:9C:CA:5A:A7:BC:36:E1:63:4E:BF:F9:A5:2F:96 Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft Manifest number: 065F Signing time: Fri 22 Aug 2025 22:44:43 +0000 Manifest this update: Fri 22 Aug 2025 22:44:42 +0000 Manifest next update: Fri 29 Aug 2025 22:44:42 +0000 Files and hashes: 1: -tyXZLIJ-Bz4KTMiagZpoypO3XI.crl (hash: YgDDM5D1toVgqAteeYvxAfrd3l7gg3C2Z0ifaeOBzgM=) 2: 9DF5B38CE0D011ECAF88A30DC4F9AE02.roa (hash: mXA6CTErg0wxJdZBq3q6wmtLNI7KWR6GhtBTn2JOB3w=) 3: 03A57262CC8611EC8D238672C4F9AE02.roa (hash: QMrrsm2NHbY/NMrkR70NjsjJaabEX61v1rHn7d+lOEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53EC, serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Validity Not Before: Aug 22 22:44:42 2025 GMT Not After : Aug 29 22:44:42 2025 GMT Subject: CN=68a8f2da-2308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:11:72:6e:94:c4:0b:3e:be:ff:3f:d3:a2: 1b:c7:fd:6a:3f:df:7b:bb:59:2f:32:af:8d:63:88: 6a:0d:4b:2e:d0:15:d2:1a:3b:a5:a2:1a:b9:dd:e1: 61:ce:32:58:18:a1:f3:93:3d:a7:e2:31:ee:ac:fb: 64:c0:7f:9e:93:f4:3b:61:eb:69:7a:a6:48:c3:24: bc:4f:13:08:c3:49:34:59:2c:37:70:cf:4d:e9:7a: 9a:2e:e7:81:2f:e2:83:ff:88:24:5b:db:4d:63:b8: 90:31:3a:d3:37:26:8c:50:76:8e:60:5c:6c:b4:0c: b1:1a:1c:68:e8:15:73:70:a4:73:de:c8:1e:af:1b: 07:9c:8c:9e:a3:a0:0b:82:ee:11:9a:d5:61:93:09: a7:5d:0d:92:31:99:15:c9:6a:c2:1a:ac:f2:8d:07: 81:85:d7:59:16:ae:dd:49:72:e8:75:7b:94:62:37: 9d:35:d0:0d:19:78:98:1c:f8:76:29:e6:2a:87:37: 57:ac:89:69:9d:a1:c5:c0:f5:93:1d:e6:e9:3e:e0: 55:ba:00:9e:32:e2:04:ad:bb:f1:2d:36:02:6b:db: c3:bb:8c:a0:a9:23:e7:ea:a1:58:de:5b:75:7a:3f: 75:d4:ff:d0:21:d6:2a:01:b2:6b:9b:6b:4f:b0:c5: f1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:35:6B:02:85:87:9C:CA:5A:A7:BC:36:E1:63:4E:BF:F9:A5:2F:96 X509v3 Authority Key Identifier: keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fa:93:93:9d:51:60:ec:47:51:38:eb:45:d8:7a:a9:a3:18: e2:a9:3c:a4:1c:89:77:0f:60:e8:67:16:f1:a6:46:2f:b6:a0: a7:c9:f4:4f:b7:da:fc:37:fc:48:f0:29:cf:4d:5b:98:43:99: 74:fd:f2:98:75:22:20:d3:fc:c6:2a:59:0e:35:ba:79:a0:5f: cc:b8:17:20:db:1c:e5:96:28:d4:bb:13:cd:77:b6:2a:17:b4: 9c:80:e0:45:af:59:50:bc:88:5a:33:39:af:19:a5:53:d9:2f: 5c:89:66:90:79:b5:c9:33:29:fd:da:10:60:ab:82:e2:c4:b3: 48:46:07:c1:3c:41:35:28:6e:de:c8:b3:c8:31:28:2c:62:42: 74:dd:ef:8b:23:65:52:0c:00:a2:45:8d:db:f9:90:31:f4:79: 2a:b0:23:53:11:91:a3:79:84:f5:57:a4:bd:be:1c:1d:69:0f: 49:41:17:85:cb:c7:f4:6d:78:3d:19:d5:c6:64:16:ef:63:d8: 59:66:83:9c:89:91:ac:67:38:23:15:28:92:58:d5:43:36:31: 30:f9:1e:1e:49:97:16:5b:00:52:98:6d:c4:58:73:68:0c:8c: 9b:79:b5:c5:de:04:a5:7f:a8:7d:aa:26:a1:df:f4:f8:f8:75: 9a:a0:04:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRUMxMTAvBgNVBAUTKEZBREM5NzY0QjIwOUY4MUNGODI5MzMyMjZBMDY2OUEz MkE0RURENzIwHhcNMjUwODIyMjI0NDQyWhcNMjUwODI5MjI0NDQyWjAYMRYwFAYD VQQDEw02OGE4ZjJkYS0yMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV4Rcm6UxAs+vv8/06Ibx/1qP997u1kvMq+NY4hqDUsu0BXSGjulohq53eFh zjJYGKHzkz2n4jHurPtkwH+ek/Q7YetpeqZIwyS8TxMIw0k0WSw3cM9N6XqaLueB L+KD/4gkW9tNY7iQMTrTNyaMUHaOYFxstAyxGhxo6BVzcKRz3sgerxsHnIyeo6AL gu4RmtVhkwmnXQ2SMZkVyWrCGqzyjQeBhddZFq7dSXLodXuUYjedNdANGXiYHPh2 KeYqhzdXrIlpnaHFwPWTHebpPuBVugCeMuIErbvxLTYCa9vDu4ygqSPn6qFY3lt1 ej911P/QIdYqAbJrm2tPsMXxUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMg1awKF h5zKWqe8NuFjTr/5pS+WMB8GA1UdIwQYMBaAFPrcl2SyCfgc+CkzImoGaaMqTt1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNFQy8yMDNDQkI2NDk2 ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1CejRLVE1pYWdacG95cE8z WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eVhaTElKLUJ6NEtUTWlhZ1pwb3lwTzNYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNFQy8yMDNDQkI2NDk2ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1C ejRLVE1pYWdacG95cE8zWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/+pOTnVFg7EdROOtF2HqpoxjiqTykHIl3D2DoZxbxpkYvtqCnyfRP t9r8N/xI8CnPTVuYQ5l0/fKYdSIg0/zGKlkONbp5oF/MuBcg2xzllijUuxPNd7Yq F7ScgOBFr1lQvIhaMzmvGaVT2S9ciWaQebXJMyn92hBgq4LixLNIRgfBPEE1KG7e yLPIMSgsYkJ03e+LI2VSDACiRY3b+ZAx9HkqsCNTEZGjeYT1V6S9vhwdaQ9JQReF y8f0bXg9GdXGZBbvY9hZZoOciZGsZzgjFSiSWNVDNjEw+R4eSZcWWwBSmG3EWHNo DIybebXF3gSlf6h9qiah3/T4+HWaoAQi -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:32 2025 by rpki-client