$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft File: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft (raw, json) Hash identifier: W/WlrZEc4Jjezr7NIxVk5ak4zAgOyVHr4XkJT8pwC7k= Subject key identifier: 35:A8:91:25:37:05:26:DD:00:68:A3:7F:52:DB:4A:B5:16:04:0D:64 Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC Certificate issuer: /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft Manifest number: 0F Signing time: Sat 23 Aug 2025 08:19:35 +0000 Manifest this update: Sat 23 Aug 2025 08:19:34 +0000 Manifest next update: Sat 30 Aug 2025 08:19:34 +0000 Files and hashes: 1: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl (hash: Z8CaGXGgg1JpStzNAGUeXnlpKPhD4EWDOWMIjTLB2yg=) 2: 053416126DB211F0962DC55BC4F9AE02.roa (hash: x2PuVPfM9opRCGhS75prbzNf+RUMoFINYisW+YfHaDY=) 3: 39926F626DB211F0AC1D0420C4F9AE02.roa (hash: kEFMUW+00UAEsPjX4mZ1eO2YdFDM6+IhBX5a3Q9IDw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Validity Not Before: Aug 23 08:19:34 2025 GMT Not After : Aug 30 08:19:34 2025 GMT Subject: CN=68a97997-340e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:da:2a:73:d9:c4:9b:b3:bf:bf:a7:3d:a2: 8f:55:5a:47:92:1f:5a:77:42:fa:b3:df:86:0e:51: 63:c3:12:ad:55:75:c8:9a:1f:4b:a9:66:e7:b2:a9: 9b:d1:9e:ca:ce:02:e9:99:14:00:3f:24:13:fe:2f: ce:5a:4d:e0:61:eb:c7:1c:7b:27:fa:0b:0c:6a:2f: f2:e9:a0:f4:ed:41:e3:e9:ed:7e:5d:e8:a0:ed:9a: ec:c4:92:50:87:56:95:ff:2d:bb:6d:62:9c:32:13: 24:7d:28:94:1f:c7:64:3d:d9:87:4e:54:fc:99:90: 9d:ba:94:c7:52:6d:a8:68:d6:15:1f:f6:99:82:c7: 09:52:4d:3b:7f:8d:53:ed:90:dc:d0:45:99:09:a0: 04:57:c6:8d:39:e0:2f:61:94:eb:4b:d7:ac:92:57: 48:49:1c:e4:45:3d:89:df:e7:23:68:13:34:3c:dc: a4:2c:a9:8e:63:d8:12:38:07:d2:0c:da:b0:59:c7: ba:8f:fa:f2:21:3c:fb:00:32:fe:35:aa:0d:14:14: 14:08:42:5e:a8:56:a8:ba:cf:28:f2:09:f7:db:3d: 3d:ca:f2:f5:9a:e3:40:2f:dd:55:0f:fd:e9:17:a3: 58:6c:13:28:cb:82:3b:2a:01:51:af:bd:46:71:4c: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:91:25:37:05:26:DD:00:68:A3:7F:52:DB:4A:B5:16:04:0D:64 X509v3 Authority Key Identifier: keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:58:48:d8:ea:67:9f:bf:fc:d1:84:31:a0:d1:da:d5:76:3c: bb:10:a1:7b:ff:6c:9b:a8:7c:2f:c2:96:92:f1:9e:66:fd:46: ae:4a:12:1a:a3:b2:5c:fe:3b:fc:e4:2a:3c:d0:e9:c2:f1:64: 13:26:8e:3b:bd:32:68:cd:80:af:93:28:8a:cc:c4:7f:cb:16: 93:fe:7d:14:89:ee:f7:e2:eb:2a:51:d7:96:9c:2c:2a:a7:78: 93:73:d4:3e:b7:80:44:ea:90:9d:2a:29:79:27:17:f4:62:20: b2:94:98:39:97:2c:29:89:22:19:0f:38:c2:5a:47:a7:e2:cb: 52:24:16:38:17:6a:54:a1:9b:49:61:19:a4:44:f8:87:fe:d6: 9d:ff:64:4d:e9:07:78:cd:a3:02:c3:7c:5b:59:24:08:4b:e3: 37:01:cf:10:d6:f2:5f:3a:c2:0b:02:4d:b0:c0:46:72:fd:3d: 43:19:00:bb:f2:e4:af:45:25:f8:d0:05:1a:33:0a:df:a9:2b: 12:f0:93:ca:fe:78:de:32:4e:86:d2:30:b8:9b:9b:b8:1a:03: 9c:56:67:8c:fb:ba:40:17:5a:0a:2e:3b:20:fc:c1:16:bc:67: f2:96:80:07:f5:14:4b:d2:b9:8d:72:3b:b5:9e:42:7e:1b:7f: 86:74:4f:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDZBMDExMC8GA1UEBRMoRDE4RDQ0NUQyNjU3RUFGREQ0QTY2RTc1QjBGQkQ2MDMw M0YwMjVGQzAeFw0yNTA4MjMwODE5MzRaFw0yNTA4MzAwODE5MzRaMBgxFjAUBgNV BAMTDTY4YTk3OTk3LTM0MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEbtoqc9nEm7O/v6c9oo9VWkeSH1p3Qvqz34YOUWPDEq1VdciaH0upZueyqZvR nsrOAumZFAA/JBP+L85aTeBh68cceyf6CwxqL/LpoPTtQePp7X5d6KDtmuzEklCH VpX/LbttYpwyEyR9KJQfx2Q92YdOVPyZkJ26lMdSbaho1hUf9pmCxwlSTTt/jVPt kNzQRZkJoARXxo054C9hlOtL16ySV0hJHORFPYnf5yNoEzQ83KQsqY5j2BI4B9IM 2rBZx7qP+vIhPPsAMv41qg0UFBQIQl6oVqi6zyjyCffbPT3K8vWa40Av3VUP/ekX o1hsEyjLgjsqAVGvvUZxTHgnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNaiRJTcF Jt0AaKN/UttKtRYEDWQwHwYDVR0jBBgwFoAU0Y1EXSZX6v3Upm51sPvWAwPwJfww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENkEwLzc4REY2MDdDNkRC MTExRjBBRDRCNUU1QUM0RjlBRTAyLzBZMUVYU1pYNnYzVXBtNTFzUHZXQXdQd0pm dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFkxRVhTWlg2djNVcG01MXNQdldBd1B3SmZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NkEwLzc4REY2MDdDNkRCMTExRjBBRDRCNUU1QUM0RjlBRTAyLzBZMUVYU1pYNnYz VXBtNTFzUHZXQXdQd0pmdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKNYSNjqZ5+//NGEMaDR2tV2PLsQoXv/bJuofC/ClpLxnmb9Rq5KEhqj slz+O/zkKjzQ6cLxZBMmjju9MmjNgK+TKIrMxH/LFpP+fRSJ7vfi6ypR15acLCqn eJNz1D63gETqkJ0qKXknF/RiILKUmDmXLCmJIhkPOMJaR6fiy1IkFjgXalShm0lh GaRE+If+1p3/ZE3pB3jNowLDfFtZJAhL4zcBzxDW8l86wgsCTbDARnL9PUMZALvy 5K9FJfjQBRozCt+pKxLwk8r+eN4yTobSMLibm7gaA5xWZ4z7ukAXWgouOyD8wRa8 Z/KWgAf1FEvSuY1yO7WeQn4bf4Z0Twk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:43 2025 by rpki-client