$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json) Hash identifier: sjiu+eWXg6OmN4GHyWJ/cRON8wE2lBXZQ8CIb6VSw6c= Subject key identifier: 82:74:B6:89:D3:06:8A:14:7A:42:EE:C3:4F:FD:07:E7:B6:5A:1B:D4 Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0C24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft Manifest number: 0C1A Signing time: Fri 22 Aug 2025 18:50:19 +0000 Manifest this update: Fri 22 Aug 2025 18:50:18 +0000 Manifest next update: Fri 29 Aug 2025 18:50:18 +0000 Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: kjwiSIsb0oElF82144vJSRAKpAcXCiLG3aOIFexUmeE=) 2: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: d+PNEJYkgwfN/EWh9YAvK3NrsnGHrIa0Ji1QGqGUhS8=) 3: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: 3gAyCRS9eTrSpT6uGMaC2W//L+1mB9VyFAfUFmHY1AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3108 (0xc24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Aug 22 18:50:18 2025 GMT Not After : Aug 29 18:50:18 2025 GMT Subject: CN=68a8bbeb-e870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:29:a9:ef:4c:27:9f:fc:79:8a:d9:72:e5:9c: e3:6e:a0:83:b7:a1:e7:f8:4a:7f:dc:b5:b9:a8:a2: b4:b9:b7:c6:99:af:b5:09:6a:09:e3:75:b9:ff:86: b0:53:74:b6:c3:0e:d4:3b:c5:90:bd:c8:8c:c3:fa: a0:64:9c:f7:d6:ba:69:06:f1:56:b3:cc:9b:3b:6e: 2c:b0:4b:60:e9:96:ab:e1:62:4f:a7:02:fe:0f:f7: 09:46:6c:c1:7f:78:83:bc:56:d8:85:eb:61:94:77: b1:6d:ae:70:db:9e:db:15:28:fc:00:f8:d9:a8:6e: 76:20:cf:59:5f:54:78:bd:92:af:2a:99:75:e7:48: c2:a3:c4:11:e8:73:b6:d5:4e:ef:0c:cc:30:51:cd: dd:2c:52:ad:e7:d4:d6:43:4b:32:5b:02:2d:2e:28: 35:c5:77:26:17:a8:b0:99:32:cb:e2:b9:0e:c2:c9: 3b:b3:76:81:68:23:c2:d5:3b:75:45:a9:2b:69:d2: 96:93:19:d8:ca:da:0e:bb:12:30:09:0f:63:cd:9d: f5:5b:e6:f9:5f:a9:46:32:70:18:b8:5a:cd:49:eb: 04:87:32:0e:83:61:5e:8a:bc:b6:95:46:c3:5c:7b: e4:c2:45:e0:75:00:65:ee:9d:75:99:53:0a:6e:b6: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:74:B6:89:D3:06:8A:14:7A:42:EE:C3:4F:FD:07:E7:B6:5A:1B:D4 X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4a:27:0e:94:08:15:b1:9f:bf:be:ab:95:bc:7e:ce:35:f7: bb:66:2b:6b:fa:61:4b:2f:2b:ae:ea:8d:ba:c7:32:b6:96:1b: 9a:18:b5:bd:d8:15:c8:4b:76:36:91:5e:97:08:9b:58:13:d8: dc:e3:54:35:d8:70:6b:4b:77:91:b1:59:c2:76:fd:ec:e0:81: f4:04:28:52:e9:79:85:64:33:87:84:93:63:93:8c:ca:c0:2e: 4b:32:60:54:33:0a:df:63:87:64:d1:27:87:77:80:94:50:03: 5b:1f:95:7c:8d:61:f4:a6:54:1b:16:7b:52:d3:b6:7c:83:b8: ed:75:c3:d3:00:59:0f:85:48:7f:d7:13:f8:dc:82:00:58:b7: 6d:d7:56:e4:ab:af:e9:c4:5e:33:13:f0:59:f9:2e:13:5a:fd: 88:d0:93:53:db:87:f4:1b:5c:1d:af:45:0d:90:90:ea:95:82: 82:0c:92:f1:df:97:f9:51:6f:e7:d7:60:d8:32:0b:80:4a:04: 91:77:f9:9e:bb:3e:6b:c8:4a:89:bf:b8:60:8a:87:4e:fa:bc: c5:96:b4:c4:c2:1f:34:bc:a8:8f:94:19:c4:ad:fd:44:3f:2c: 18:3a:a4:35:51:3a:61:3d:ed:26:7a:06:8e:39:66:d0:81:58: a7:98:4d:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjUwODIyMTg1MDE4WhcNMjUwODI5MTg1MDE4WjAYMRYwFAYD VQQDEw02OGE4YmJlYi1lODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlimp70wnn/x5itly5ZzjbqCDt6Hn+Ep/3LW5qKK0ubfGma+1CWoJ43W5/4aw U3S2ww7UO8WQvciMw/qgZJz31rppBvFWs8ybO24ssEtg6Zar4WJPpwL+D/cJRmzB f3iDvFbYhethlHexba5w257bFSj8APjZqG52IM9ZX1R4vZKvKpl150jCo8QR6HO2 1U7vDMwwUc3dLFKt59TWQ0syWwItLig1xXcmF6iwmTLL4rkOwsk7s3aBaCPC1Tt1 RakradKWkxnYytoOuxIwCQ9jzZ31W+b5X6lGMnAYuFrNSesEhzIOg2Feiry2lUbD XHvkwkXgdQBl7p11mVMKbrafVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ0tonT BooUekLuw0/9B+e2WhvUMB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP b1d0ckNvbE1kem9uM3FraG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOSicOlAgVsZ+/vquVvH7ONfe7Zitr+mFLLyuu6o26xzK2lhuaGLW9 2BXIS3Y2kV6XCJtYE9jc41Q12HBrS3eRsVnCdv3s4IH0BChS6XmFZDOHhJNjk4zK wC5LMmBUMwrfY4dk0SeHd4CUUANbH5V8jWH0plQbFntS07Z8g7jtdcPTAFkPhUh/ 1xP43IIAWLdt11bkq6/pxF4zE/BZ+S4TWv2I0JNT24f0G1wdr0UNkJDqlYKCDJLx 35f5UW/n12DYMguASgSRd/meuz5ryEqJv7hgiodO+rzFlrTEwh80vKiPlBnErf1E PywYOqQ1UTphPe0megaOOWbQgVinmE0V -----END CERTIFICATE-----Generated at Sat Aug 23 13:43:03 2025 by rpki-client