$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json) Hash identifier: /uyg7RGeiyBRJvUB5UrajdTm6WVRela3xXi36v5YT/0= Subject key identifier: E8:72:D4:5D:9C:63:D8:5A:4B:EC:E7:84:E5:95:A0:29:8D:A8:33:F0 Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft Manifest number: 0452 Signing time: Sat 23 Aug 2025 00:31:14 +0000 Manifest this update: Sat 23 Aug 2025 00:31:13 +0000 Manifest next update: Sat 30 Aug 2025 00:31:13 +0000 Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: RuLHiDK7z7hZrfNMX7lyvlLH1Mf5gbiBbV9lc1m5IGU=) 2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: c6vlUnQWxWwAT8iWt17JqzfF6ipPIApaxLVylf4FJGg=) 3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: +f0SgnVqjTGf0Ix6OCOZmxBPZxff4HtF7xpjcxcn/GE=) 4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: kTJ8czPgPRYvRUYRTSuFaRzwT5mPZmvDIQm8YSYeRGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: Aug 23 00:31:13 2025 GMT Not After : Aug 30 00:31:13 2025 GMT Subject: CN=68a90bd2-78b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:54:1c:ca:00:1a:97:52:00:5b:52:0e:af: e3:15:b7:58:7a:23:bf:95:b4:27:44:68:9f:62:e7: 07:d2:d7:c3:bb:97:a8:f1:ff:43:3f:52:20:fb:a8: 54:d9:d3:ac:41:97:56:63:81:4d:b9:1a:4e:bf:8f: 89:07:ff:e7:9f:e1:0d:5a:6a:10:13:4c:aa:0f:44: 79:e7:04:15:be:08:b0:91:3e:64:4f:7a:51:60:b3: 2f:34:b4:9e:51:d2:b1:cb:42:9e:64:3b:6e:87:3f: b0:ac:e8:c4:9d:e6:51:40:8b:ff:3c:ac:fb:29:a3: ae:2a:4b:3c:d4:db:4e:ac:f4:bf:bf:19:6c:f8:d6: 05:d7:6a:6d:fd:3a:e6:c1:12:ec:51:e9:35:d7:35: 0b:d4:9e:14:e4:05:93:d8:3c:a9:59:44:e7:17:08: e4:c8:a3:b6:ed:f6:8a:08:f9:39:00:fe:0d:fa:c9: 56:d1:d5:da:90:ab:3c:ac:91:de:61:d2:5f:21:39: 91:ad:0d:3b:5e:ad:d8:40:e9:1b:d5:06:c7:e7:7a: 70:db:66:9b:35:b9:27:a6:60:78:d3:12:9f:af:65: 6c:27:bd:ee:86:29:76:a7:1e:e7:91:cf:f9:2a:2c: 95:8d:42:a9:ec:6e:11:f9:9a:2d:ad:88:48:52:20: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:72:D4:5D:9C:63:D8:5A:4B:EC:E7:84:E5:95:A0:29:8D:A8:33:F0 X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:da:c6:e4:1e:41:71:65:22:60:2f:4e:9f:18:06:86:cc:cf: 8a:35:13:33:05:b0:ef:4c:4e:37:14:a4:f4:ae:7f:38:10:ae: 65:4a:07:20:c0:9a:73:35:67:a8:39:ed:61:40:a3:78:b1:85: 82:76:2a:16:3f:26:78:cc:c4:3a:7f:18:15:e0:7f:e2:bb:b5: e9:29:94:c8:fc:7c:1b:03:0d:b4:11:98:d5:4e:af:89:d8:f5: 26:5c:f7:d8:37:9d:b5:5e:3a:b4:0c:8d:90:ec:21:ce:22:94: b0:78:a5:fd:09:24:a6:04:16:79:46:c4:59:7b:94:ab:e4:f3: 44:c6:b3:2f:6d:c3:c7:52:60:5e:0d:c5:f9:34:e8:69:ca:ee: a3:59:b9:7a:55:c8:d9:8f:5a:d7:7f:d1:30:b3:45:24:66:0d: fb:bf:49:06:56:bd:1a:8d:a3:29:6e:ef:04:59:ad:41:8a:f2: 11:5f:9d:fd:cb:c7:e1:a3:33:56:fd:2a:04:d6:2e:ba:bb:38: a9:51:d5:08:7b:ca:bb:0d:41:dd:d8:ad:01:3c:6c:d6:5b:59: b1:d2:c6:9c:7a:54:e0:eb:29:b8:52:e3:c1:bf:73:1c:06:b3: 53:6e:0b:7e:97:05:ea:30:5b:9e:78:52:1a:66:14:7e:4c:5b: 77:07:0b:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjUwODIzMDAzMTEzWhcNMjUwODMwMDAzMTEzWjAYMRYwFAYD VQQDEw02OGE5MGJkMi03OGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqlUHMoAGpdSAFtSDq/jFbdYeiO/lbQnRGifYucH0tfDu5eo8f9DP1Ig+6hU 2dOsQZdWY4FNuRpOv4+JB//nn+ENWmoQE0yqD0R55wQVvgiwkT5kT3pRYLMvNLSe UdKxy0KeZDtuhz+wrOjEneZRQIv/PKz7KaOuKks81NtOrPS/vxls+NYF12pt/Trm wRLsUek11zUL1J4U5AWT2DypWUTnFwjkyKO27faKCPk5AP4N+slW0dXakKs8rJHe YdJfITmRrQ07Xq3YQOkb1QbH53pw22abNbknpmB40xKfr2VsJ73uhil2px7nkc/5 KiyVjUKp7G4R+ZotrYhIUiAezQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhy1F2c Y9haS+znhOWVoCmNqDPwMB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0 YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo2sbkHkFxZSJgL06fGAaGzM+KNRMzBbDvTE43FKT0rn84EK5lSgcg wJpzNWeoOe1hQKN4sYWCdioWPyZ4zMQ6fxgV4H/iu7XpKZTI/HwbAw20EZjVTq+J 2PUmXPfYN521Xjq0DI2Q7CHOIpSweKX9CSSmBBZ5RsRZe5Sr5PNExrMvbcPHUmBe DcX5NOhpyu6jWbl6VcjZj1rXf9Ews0UkZg37v0kGVr0ajaMpbu8EWa1BivIRX539 y8fhozNW/SoE1i66uzipUdUIe8q7DUHd2K0BPGzWW1mx0sacelTg6ym4UuPBv3Mc BrNTbgt+lwXqMFueeFIaZhR+TFt3BwuP -----END CERTIFICATE-----Generated at Sat Aug 23 11:35:32 2025 by rpki-client