$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json) Hash identifier: ysnuFozhLvKMMKqf+SJ6Xa/mS535jgLT5e8ofri7Gtk= Subject key identifier: 8B:8E:75:75:98:EE:DA:C7:27:D7:1E:52:CB:50:9C:84:46:8B:05:AA Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft Manifest number: 0474 Signing time: Sat 23 Aug 2025 00:22:14 +0000 Manifest this update: Sat 23 Aug 2025 00:22:14 +0000 Manifest next update: Sat 30 Aug 2025 00:22:14 +0000 Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: aEw9joAwD49tScs6ag2vCFMWY9LN+87QNEGcanSU1vA=) 2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: etY8R8Zkoq3Jr+o5iT0vM2/Uvx5KoKGB+//fjS6auO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Validity Not Before: Aug 23 00:22:14 2025 GMT Not After : Aug 30 00:22:14 2025 GMT Subject: CN=68a909b6-d37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:6e:aa:e3:e7:14:b4:81:c7:f6:32:45:0b: c2:eb:f2:3f:e3:b8:96:40:2c:0a:53:be:74:f6:60: 2e:dc:c4:ac:99:94:b2:83:d7:56:0d:91:a1:7c:ad: 52:d9:ac:dc:15:aa:b5:4e:a4:84:81:e1:83:a7:c1: a9:29:c3:9f:f8:a5:fd:2a:32:b8:18:52:e3:0a:68: 48:54:57:fb:c7:08:72:04:c8:b1:cd:4f:6b:f0:22: 33:8c:c0:c0:a6:7d:dd:b4:bd:44:f1:be:d0:b9:c1: 73:92:b7:8d:60:ef:5b:b9:31:2c:3c:61:38:5a:f3: c0:63:68:65:a3:99:8f:c1:ca:70:f1:f7:99:01:97: a1:66:91:45:2a:45:be:a3:f1:31:2a:92:48:ba:1d: 61:23:92:38:20:c8:4f:3f:98:53:66:f2:35:55:2e: 0d:ac:4f:33:1c:d9:1c:5e:2a:37:ea:76:b6:89:fe: 08:a5:ae:5c:80:fd:f4:8e:02:0b:b6:d6:f0:6e:ee: 69:a3:6b:2a:b0:45:b8:c1:d5:c9:30:bd:ae:74:bc: e0:3b:bb:5e:fb:5d:90:9d:99:d8:86:68:2f:ba:82: 48:1e:f7:43:f7:9d:06:25:cb:b9:9c:78:9a:7b:1a: 3a:78:19:83:4d:8c:4b:e7:4c:10:fa:4a:91:e6:2f: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8E:75:75:98:EE:DA:C7:27:D7:1E:52:CB:50:9C:84:46:8B:05:AA X509v3 Authority Key Identifier: keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ab:d8:f0:11:59:a7:c7:74:1c:db:bf:fd:27:25:d2:85:b1: ef:64:ee:28:19:05:f0:0f:f7:31:da:b2:b4:14:7b:b4:bc:ae: b5:ce:d2:8c:43:f7:61:42:81:c8:95:98:8e:11:e1:ab:b9:bc: 36:e3:ba:98:9b:8d:ce:d3:d8:7f:b1:98:e7:37:0e:17:0f:d3: 5d:6d:32:51:9b:a7:88:f0:8c:f0:63:e0:ec:c9:72:1f:cb:dd: 87:d0:4e:a7:d6:f5:cb:bb:e0:b0:04:af:78:c1:e7:61:19:79: 4c:4f:e3:18:23:70:81:44:61:a8:42:89:31:fb:2e:3d:cd:c0: d5:fe:14:41:10:c8:ff:a6:14:3b:6f:5a:fc:e4:7e:62:ac:3d: 7a:bd:9d:dd:4b:6b:b7:f2:5f:b8:f8:c0:fe:dc:17:88:9a:06: d6:e1:fc:0c:f1:8f:d5:20:52:6f:1b:ec:30:64:73:f7:4e:be: 11:72:f8:46:88:1c:79:be:1a:c8:c8:04:75:da:a9:02:3f:09: 37:5e:e4:89:20:1b:37:ad:6a:e8:71:91:f6:52:11:f6:42:c7: 96:91:99:29:67:67:8a:2a:1c:25:39:f0:b4:7c:77:22:01:6b: a4:19:20:ed:50:6e:3f:0b:9f:31:43:48:34:16:6b:69:0f:e0: 70:c0:03:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx RThDQTk0RTMwHhcNMjUwODIzMDAyMjE0WhcNMjUwODMwMDAyMjE0WjAYMRYwFAYD VQQDEw02OGE5MDliNi1kMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPduquPnFLSBx/YyRQvC6/I/47iWQCwKU7509mAu3MSsmZSyg9dWDZGhfK1S 2azcFaq1TqSEgeGDp8GpKcOf+KX9KjK4GFLjCmhIVFf7xwhyBMixzU9r8CIzjMDA pn3dtL1E8b7QucFzkreNYO9buTEsPGE4WvPAY2hlo5mPwcpw8feZAZehZpFFKkW+ o/ExKpJIuh1hI5I4IMhPP5hTZvI1VS4NrE8zHNkcXio36na2if4Ipa5cgP30jgIL ttbwbu5po2sqsEW4wdXJML2udLzgO7te+12QnZnYhmgvuoJIHvdD950GJcu5nHia exo6eBmDTYxL50wQ+kqR5i/CGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuOdXWY 7trHJ9ceUstQnIRGiwWqMB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX R0ZHR1JULVdDeXdlaktsT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwq9jwEVmnx3Qc27/9JyXShbHvZO4oGQXwD/cx2rK0FHu0vK61ztKM Q/dhQoHIlZiOEeGrubw247qYm43O09h/sZjnNw4XD9NdbTJRm6eI8IzwY+DsyXIf y92H0E6n1vXLu+CwBK94wedhGXlMT+MYI3CBRGGoQokx+y49zcDV/hRBEMj/phQ7 b1r85H5irD16vZ3dS2u38l+4+MD+3BeImgbW4fwM8Y/VIFJvG+wwZHP3Tr4RcvhG iBx5vhrIyAR12qkCPwk3XuSJIBs3rWrocZH2UhH2QseWkZkpZ2eKKhwlOfC0fHci AWukGSDtUG4/C58xQ0g0FmtpD+BwwANi -----END CERTIFICATE-----Generated at Sat Aug 23 17:44:27 2025 by rpki-client