$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json) Hash identifier: EVnwOhc2Rp9yE+l7uVtl65XCOelZRzmO2b9tz4+Ufkg= Subject key identifier: 1E:5C:7B:81:0D:6F:11:EE:72:AA:12:4E:0E:E8:0C:A3:67:20:22:F1 Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0F2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft Manifest number: 0F20 Signing time: Fri 22 Aug 2025 17:44:22 +0000 Manifest this update: Fri 22 Aug 2025 17:44:22 +0000 Manifest next update: Fri 29 Aug 2025 17:44:22 +0000 Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: KHnbbVbWe8FoMIHaUCFwDt+DCtrH4+C+aJd5vKoSeBs=) 2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: v5g7cjNReibtump5AZbTVG2Okqg2HIeG+osQENS8uAY=) 3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: e0d6vw79IEqP0AdvR6b4v7RskAnTjUKydxlFYiex0pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3885 (0xf2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: Aug 22 17:44:22 2025 GMT Not After : Aug 29 17:44:22 2025 GMT Subject: CN=68a8ac76-82c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5c:65:6a:f8:d8:91:b4:b3:96:ef:39:ee:d8: 8c:a1:9d:63:1b:6b:77:4d:ec:65:c5:c7:4b:ae:4c: 8f:0d:a6:ce:e1:7e:83:c6:04:47:be:c6:94:ef:9c: a3:f6:ed:c4:7c:15:86:93:c3:ce:fe:b6:a5:8b:7d: 1b:ac:6b:55:64:a8:b0:de:75:10:49:2c:12:6b:0a: 62:1b:b0:a3:9b:18:1c:4d:08:ee:34:09:71:7b:e7: f8:d1:fd:ac:9e:2f:d9:cc:f7:04:2e:95:73:17:9c: a0:73:a3:84:87:fb:59:42:62:2b:cb:67:c4:c1:06: 63:b4:df:86:ec:c6:ba:15:81:b9:81:bc:0a:62:e9: 8a:6e:91:10:f1:bf:ec:e9:d3:15:71:2e:0a:42:77: b9:89:99:b0:05:85:bb:0f:49:bc:10:72:c3:6c:05: 1b:88:a6:67:f2:b6:50:fe:ce:1d:c5:6d:b2:2f:c7: 10:a9:f5:a9:9d:a0:81:79:4e:3f:e0:2a:7a:a6:97: db:79:a5:f0:de:eb:66:4b:56:88:40:ce:46:85:6a: c1:0b:b2:1d:9d:48:2a:88:84:8b:7b:aa:63:8b:03: 49:00:f6:7d:a2:b2:db:68:08:aa:b8:ef:57:a3:fd: 1f:d1:58:35:18:56:51:56:96:e5:5f:e7:3a:e7:83: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5C:7B:81:0D:6F:11:EE:72:AA:12:4E:0E:E8:0C:A3:67:20:22:F1 X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:af:3a:a3:ba:89:87:a2:11:16:b7:00:82:90:9e:fa:56:bf: f4:c4:4d:39:90:8c:34:ba:a9:69:77:21:e3:3a:a9:7e:da:22: cb:e0:54:23:17:a6:f6:c6:ee:a4:53:53:d5:5e:93:41:b4:06: b8:aa:0f:5a:3d:69:4a:c0:02:5e:a2:30:2a:6a:aa:30:68:21: 95:c1:7f:fc:54:94:63:07:ed:d4:59:2e:64:84:e7:b6:59:31: 00:7f:21:0c:c8:a6:0f:12:82:bf:d8:7f:0c:26:33:fd:7b:8e: ee:84:97:a1:93:33:60:5e:65:9b:5f:bb:30:d6:7c:5b:cc:2c: a0:c2:fc:ac:5d:3b:22:9f:58:ba:d3:86:73:ce:12:cd:59:36: 5e:3e:34:fa:5c:5b:d7:ad:47:5b:b0:44:2f:d4:50:04:44:84: 4e:e6:5a:71:23:97:47:aa:4f:a8:f0:06:d6:df:d9:28:88:4f: 92:08:9c:c8:96:5d:a4:b7:4b:f4:6b:cc:18:c7:b5:24:f0:be: 7f:32:5f:23:4b:14:c9:7f:dd:fb:2f:87:6f:e9:dc:af:65:24: 02:a9:b8:73:43:71:8f:48:47:02:36:39:a9:09:63:00:dc:b2: e7:7d:34:a6:c6:1f:1b:af:a7:4c:f2:fc:f0:dd:9c:7e:c7:28: 6f:21:87:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjUwODIyMTc0NDIyWhcNMjUwODI5MTc0NDIyWjAYMRYwFAYD VQQDEw02OGE4YWM3Ni04MmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lxlavjYkbSzlu857tiMoZ1jG2t3TexlxcdLrkyPDabO4X6DxgRHvsaU75yj 9u3EfBWGk8PO/rali30brGtVZKiw3nUQSSwSawpiG7CjmxgcTQjuNAlxe+f40f2s ni/ZzPcELpVzF5ygc6OEh/tZQmIry2fEwQZjtN+G7Ma6FYG5gbwKYumKbpEQ8b/s 6dMVcS4KQne5iZmwBYW7D0m8EHLDbAUbiKZn8rZQ/s4dxW2yL8cQqfWpnaCBeU4/ 4Cp6ppfbeaXw3utmS1aIQM5GhWrBC7IdnUgqiISLe6pjiwNJAPZ9orLbaAiquO9X o/0f0Vg1GFZRVpblX+c654M7XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5ce4EN bxHucqoSTg7oDKNnICLxMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC MXc4NWNrc040c2NRRjBuMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlrzqjuomHohEWtwCCkJ76Vr/0xE05kIw0uqlpdyHjOql+2iLL4FQj F6b2xu6kU1PVXpNBtAa4qg9aPWlKwAJeojAqaqowaCGVwX/8VJRjB+3UWS5khOe2 WTEAfyEMyKYPEoK/2H8MJjP9e47uhJehkzNgXmWbX7sw1nxbzCygwvysXTsin1i6 04ZzzhLNWTZePjT6XFvXrUdbsEQv1FAERIRO5lpxI5dHqk+o8AbW39koiE+SCJzI ll2kt0v0a8wYx7Uk8L5/Ml8jSxTJf937L4dv6dyvZSQCqbhzQ3GPSEcCNjmpCWMA 3LLnfTSmxh8br6dM8vzw3Zx+xyhvIYcw -----END CERTIFICATE-----Generated at Sun Aug 24 04:46:30 2025 by rpki-client