$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: 8qszPsG4AjqP3GXLUos3iPCO2gGZel8h9J6yK4lO368= Subject key identifier: 49:E3:4F:3C:DB:39:F0:1C:4F:C4:11:3E:32:FB:32:17:FB:87:02:E7 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 89 Signing time: Sat 23 Aug 2025 06:52:08 +0000 Manifest this update: Sat 23 Aug 2025 06:52:08 +0000 Manifest next update: Sat 30 Aug 2025 06:52:08 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: bGpuuBM4+zwDYx6nBm/OdmU0T7Txm+H9UvtSyacJ94k=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: Z9DYBfabGIxHjUBLevu5KvPw0ydtYOqQMGpRrWOIWpg=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: qXU62xBJEhF8s34iW9kLJHW6sq1BX3PHBxT3tX/weaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Aug 23 06:52:08 2025 GMT Not After : Aug 30 06:52:08 2025 GMT Subject: CN=68a96518-2357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d4:36:a1:09:7d:85:24:66:da:88:b4:51:a2: bc:5b:bd:21:fe:c0:9c:a3:53:24:ee:5b:7b:5a:01: ab:5c:cd:7e:2b:72:0b:8d:16:6c:95:02:57:d9:ad: 69:f5:6f:e4:e8:88:3d:fb:56:bd:9e:5e:6c:c2:35: 67:7e:43:bb:c4:79:b4:ef:23:28:15:cb:42:64:3f: 5d:cc:26:4f:76:40:17:31:59:a8:b1:61:8a:e6:8a: 21:18:19:3f:a9:55:00:94:31:0e:60:32:a6:8e:27: e4:40:f7:e3:0b:32:10:b0:06:4c:75:a5:c8:25:a3: f6:f6:7c:2f:f4:68:a0:2c:ae:a2:68:cc:0c:2b:12: 17:60:7c:44:5a:0d:65:87:0c:54:f3:64:4f:02:85: c5:a0:7e:5e:70:ae:51:11:57:9c:ef:06:ed:dc:ea: bf:1a:3d:a8:42:b9:d8:04:55:3f:4c:d5:ff:3a:83: 4e:03:a6:02:97:64:11:58:26:5b:f3:15:c3:f4:78: 5d:91:b6:3e:45:0b:f4:1a:66:42:73:71:3a:7e:81: aa:61:b9:58:4f:1f:c5:04:a9:7d:92:30:48:37:14: c0:7f:0b:11:41:fe:48:85:95:6f:bd:7f:83:0c:cf: 42:51:0e:49:d2:32:05:dd:37:22:31:5e:d3:cd:b5: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E3:4F:3C:DB:39:F0:1C:4F:C4:11:3E:32:FB:32:17:FB:87:02:E7 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:36:04:ba:22:62:2b:2a:4b:97:65:4d:65:d6:02:20:2a:b5: a6:54:a0:08:3b:7c:86:78:bf:fe:76:95:f0:12:ea:d4:c5:c5: ea:35:37:25:d6:d0:44:6d:a0:61:a1:74:31:83:17:9b:ee:2e: 85:37:dd:6d:9b:fd:2e:37:f8:b1:07:81:ee:3b:1d:0e:64:cb: b5:f1:8b:2f:e5:04:2f:f7:35:69:47:ff:12:07:5e:be:5d:6b: fa:a7:91:0e:2d:0b:2c:46:85:11:52:2d:26:bd:b9:ff:7d:7f: 58:c4:6f:a0:6b:7e:34:23:36:65:eb:67:31:15:05:19:4f:b4: c2:52:b1:74:8c:b7:df:15:bb:09:43:49:7c:1d:bf:19:53:f9: 8e:22:e2:1e:9c:32:75:96:a0:2c:96:b7:9e:76:a6:95:68:ba: 28:0f:1b:68:52:d2:5c:13:36:8c:46:32:e4:36:da:73:4a:ee: 4c:b5:58:dd:40:ba:14:7a:a4:db:d7:39:66:82:e7:0f:e5:70: a0:70:1b:0b:86:de:fa:91:62:b2:24:a8:58:92:5a:2d:35:2d: bd:32:38:98:16:2f:b1:80:44:f1:cf:0c:1f:3a:2a:ad:d3:21: 0c:c5:2f:7c:a7:8f:d0:89:18:9c:1e:1f:da:db:ce:5b:b9:c4: 94:24:ea:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjUwODIzMDY1MjA4WhcNMjUwODMwMDY1MjA4WjAYMRYwFAYD VQQDEw02OGE5NjUxOC0yMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9tQ2oQl9hSRm2oi0UaK8W70h/sCco1Mk7lt7WgGrXM1+K3ILjRZslQJX2a1p 9W/k6Ig9+1a9nl5swjVnfkO7xHm07yMoFctCZD9dzCZPdkAXMVmosWGK5oohGBk/ qVUAlDEOYDKmjifkQPfjCzIQsAZMdaXIJaP29nwv9GigLK6iaMwMKxIXYHxEWg1l hwxU82RPAoXFoH5ecK5REVec7wbt3Oq/Gj2oQrnYBFU/TNX/OoNOA6YCl2QRWCZb 8xXD9HhdkbY+RQv0GmZCc3E6foGqYblYTx/FBKl9kjBINxTAfwsRQf5IhZVvvX+D DM9CUQ5J0jIF3TciMV7TzbWgbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnjTzzb OfAcT8QRPjL7Mhf7hwLnMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrNgS6ImIrKkuXZU1l1gIgKrWmVKAIO3yGeL/+dpXwEurUxcXqNTcl 1tBEbaBhoXQxgxeb7i6FN91tm/0uN/ixB4HuOx0OZMu18Ysv5QQv9zVpR/8SB16+ XWv6p5EOLQssRoURUi0mvbn/fX9YxG+ga340IzZl62cxFQUZT7TCUrF0jLffFbsJ Q0l8Hb8ZU/mOIuIenDJ1lqAslreedqaVaLooDxtoUtJcEzaMRjLkNtpzSu5MtVjd QLoUeqTb1zlmgucP5XCgcBsLht76kWKyJKhYklotNS29MjiYFi+xgETxzwwfOiqt 0yEMxS98p4/QiRicHh/a285bucSUJOop -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:38 2025 by rpki-client