$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json) Hash identifier: bsgwO4S3HpzY/TjcAYstylMzaqa9EXCTEfC47r2MAIw= Subject key identifier: A1:5F:01:84:E3:FB:D8:8D:6F:BD:9D:73:61:49:AF:A3:41:F5:EB:CE Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0E29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft Manifest number: 0E21 Signing time: Fri 22 Aug 2025 17:55:56 +0000 Manifest this update: Fri 22 Aug 2025 17:55:56 +0000 Manifest next update: Fri 29 Aug 2025 17:55:56 +0000 Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: KIyb/byno3UZjdr+yeOWOK2Pk11zxIoCmyKea/LxNFw=) 2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: VAz7Q8OmwNVtqjw21t41eYyn3+glN8lqbyiXL2P+yek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3625 (0xe29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: Aug 22 17:55:56 2025 GMT Not After : Aug 29 17:55:56 2025 GMT Subject: CN=68a8af2c-7926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3f:61:d7:d7:29:a5:e9:66:80:bd:63:29:b7: bd:eb:bb:77:f5:1c:1f:87:8b:6e:1b:ae:16:36:1a: f3:2b:5d:68:45:e1:fc:22:90:5a:c3:90:54:78:dd: 00:f9:85:6b:44:60:cc:0f:e1:28:2f:f2:75:7b:d3: 0a:05:2d:62:51:14:72:85:2e:3f:29:b1:18:f8:e5: 06:ff:64:76:2a:79:41:11:9a:03:f1:22:6f:9e:43: 46:65:8e:cb:71:c7:43:92:0f:a3:b3:68:e1:46:f2: fc:7d:08:b0:db:93:fd:fe:e5:0a:e2:01:de:45:ad: ae:6e:01:58:ff:d1:79:24:c3:e7:09:a3:5c:ca:dc: 3e:22:c1:3a:53:37:2d:87:35:97:b1:a7:c0:68:f8: 51:34:b3:64:48:72:19:06:61:db:17:0f:57:88:11: ca:ea:93:75:b2:eb:87:26:6e:43:81:1e:80:dd:5c: 1a:27:42:97:d5:50:f4:ef:d6:86:77:ef:f3:1d:60: 50:a0:8b:7c:0f:30:98:d3:ed:78:2d:26:a1:82:e2: e6:cd:66:46:ae:48:4d:9a:4e:c1:2c:2a:32:62:03: 06:53:2f:1d:3f:36:a0:34:ca:09:fe:7e:36:d9:b1: ba:63:af:95:32:53:ee:d6:c7:dc:4f:ec:9b:b2:ee: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5F:01:84:E3:FB:D8:8D:6F:BD:9D:73:61:49:AF:A3:41:F5:EB:CE X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b8:67:36:ce:26:64:4b:95:75:78:12:54:cf:4b:6d:59:9a: 1c:4b:de:3f:65:02:7d:60:d1:ea:32:1e:3b:6d:2f:dc:99:73: c2:84:8c:29:e7:2b:d8:3d:90:8a:f6:07:a2:71:06:3b:f8:31: c6:8b:ad:10:d4:90:5b:21:7f:29:b5:d0:5e:9b:f3:ea:44:f4: 97:b3:e0:5a:82:86:b8:02:10:81:10:c3:d5:93:fd:c0:0c:29: ee:f1:a2:36:e9:a9:2f:95:25:1b:1e:47:b5:ea:c9:9d:4c:ec: bf:00:ca:f2:08:22:dc:bf:f0:78:70:bb:e1:09:64:eb:98:0a: 1e:61:7a:34:88:85:fe:c4:52:b8:9c:d7:67:87:04:e7:47:84: f1:8e:15:4b:6c:07:fc:a0:4b:d3:05:d4:ae:fd:03:eb:93:fa: f1:e0:40:e9:41:11:3e:b8:0e:68:5a:e2:f3:3a:91:fa:75:37: a3:f4:30:b6:44:17:4a:a7:50:aa:ca:65:f8:87:db:af:d2:ca: df:d9:12:fb:b5:25:cf:70:aa:0d:ca:1c:fd:df:08:c4:1a:f0: d7:34:de:56:f7:38:eb:55:43:11:d6:db:df:f8:b7:9d:92:8a: a3:be:a9:ed:fa:32:73:ae:7d:58:87:c7:1a:99:6e:d9:bd:1f: 46:7b:66:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjUwODIyMTc1NTU2WhcNMjUwODI5MTc1NTU2WjAYMRYwFAYD VQQDEw02OGE4YWYyYy03OTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6j9h19cppelmgL1jKbe967t39Rwfh4tuG64WNhrzK11oReH8IpBaw5BUeN0A +YVrRGDMD+EoL/J1e9MKBS1iURRyhS4/KbEY+OUG/2R2KnlBEZoD8SJvnkNGZY7L ccdDkg+js2jhRvL8fQiw25P9/uUK4gHeRa2ubgFY/9F5JMPnCaNcytw+IsE6Uzct hzWXsafAaPhRNLNkSHIZBmHbFw9XiBHK6pN1suuHJm5DgR6A3VwaJ0KX1VD079aG d+/zHWBQoIt8DzCY0+14LSahguLmzWZGrkhNmk7BLCoyYgMGUy8dPzagNMoJ/n42 2bG6Y6+VMlPu1sfcT+ybsu6wWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFfAYTj +9iNb72dc2FJr6NB9evOMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3 NEJvY08zZFFJY2pqNGllSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjuGc2ziZkS5V1eBJUz0ttWZocS94/ZQJ9YNHqMh47bS/cmXPChIwp 5yvYPZCK9geicQY7+DHGi60Q1JBbIX8ptdBem/PqRPSXs+Bagoa4AhCBEMPVk/3A DCnu8aI26akvlSUbHke16smdTOy/AMryCCLcv/B4cLvhCWTrmAoeYXo0iIX+xFK4 nNdnhwTnR4TxjhVLbAf8oEvTBdSu/QPrk/rx4EDpQRE+uA5oWuLzOpH6dTej9DC2 RBdKp1CqymX4h9uv0srf2RL7tSXPcKoNyhz93wjEGvDXNN5W9zjrVUMR1tvf+Led koqjvqnt+jJzrn1Yh8camW7ZvR9Ge2Zz -----END CERTIFICATE-----Generated at Sun Aug 24 02:26:16 2025 by rpki-client