$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: 96Xi1miEzRMrm4XdHsgKW4Y0N8tQNY6+RhWO6VPgbBU= Subject key identifier: F6:D1:2E:41:92:FE:7D:A0:0D:5C:93:B0:B3:F5:EF:DE:7A:BA:64:13 Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0BF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0BEB Signing time: Fri 22 Aug 2025 18:56:54 +0000 Manifest this update: Fri 22 Aug 2025 18:56:53 +0000 Manifest next update: Fri 29 Aug 2025 18:56:53 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: 8k87XFSJDDoxxtraMWHw0tPM8nIufGG1YKV0tjuuiLQ=) 2: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: EeQ1Nt52m1hyZ6VPZEPVHxza1Z77ig7QYE1EDDBnm08=) 3: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: TRjcmxyqZohfOlB4LLbzqsFvH4uXUeHEH5tCE+DExYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3061 (0xbf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Aug 22 18:56:53 2025 GMT Not After : Aug 29 18:56:53 2025 GMT Subject: CN=68a8bd76-b5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bb:f1:5b:14:ad:52:05:35:6c:a6:4c:20:6b: 39:78:a0:7d:f8:ba:ee:06:3f:d8:68:4d:90:81:fd: e2:10:0b:30:75:3b:0d:97:3c:47:33:7d:d3:6e:53: 14:29:3c:16:8e:c6:a6:97:4d:4f:35:11:2b:62:ea: c8:cb:1f:17:45:26:ab:00:88:3a:ee:da:87:d3:41: 71:af:24:a5:4e:70:81:9c:0e:f5:59:09:8c:ce:37: a6:1c:84:32:f3:18:87:48:35:5c:9a:56:ef:7f:6f: 77:79:e1:7d:cc:d6:02:2b:5a:c2:c1:69:53:2b:fc: 4e:1e:44:77:27:ea:e9:46:a6:61:4d:3d:a9:fd:47: 74:0a:11:e6:17:8d:c4:68:66:cd:54:38:45:cf:13: cc:a4:a4:b5:87:5b:73:48:e5:47:33:81:0c:56:0b: 00:a1:06:0a:bb:e2:43:df:a0:a2:4a:93:97:94:fb: c3:9d:54:ef:27:b2:d1:b8:44:71:b2:36:82:42:ce: 36:3f:6e:96:2d:4d:6f:fe:0f:04:b6:13:b8:f7:c0: f1:42:69:b3:2a:32:0c:7a:3f:b9:d1:d0:5f:5a:e7: 49:ed:4a:89:a0:ed:8e:75:b7:4e:17:05:09:61:fe: 0a:59:95:ca:20:59:5c:a9:b6:42:23:b0:4a:b4:72: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D1:2E:41:92:FE:7D:A0:0D:5C:93:B0:B3:F5:EF:DE:7A:BA:64:13 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:04:4f:49:da:b9:3e:ab:80:3a:6e:b3:b8:a4:90:07:9f:36: e5:0d:c6:1f:af:c9:0b:bc:8c:43:ac:b5:eb:b6:14:15:ee:55: 8a:d0:f3:a7:d3:8c:5b:b6:7a:33:c0:4a:bb:23:df:2e:f0:05: 52:7d:93:56:65:59:60:57:bc:84:c9:88:ae:85:87:cb:0e:18: 4f:5c:70:3a:6b:91:86:57:4f:c9:f7:c9:04:b0:79:62:be:fa: 40:f6:85:c6:f1:96:40:b2:d3:be:6f:6c:f1:fc:db:30:8f:d8: 39:68:a0:54:6d:18:ab:52:73:e2:28:23:9a:5c:d5:0d:75:1b: 17:b2:be:ab:5e:9e:59:11:d0:30:57:84:17:cc:02:66:ec:83: 58:4c:0d:a0:e1:64:1e:07:23:6d:6e:09:89:bb:c0:37:79:30: 55:f4:1c:f9:7c:4f:77:0e:76:84:70:9f:d7:50:12:48:38:66: 4b:96:19:31:f1:54:72:6c:ac:2a:c2:28:7e:26:e9:9d:71:b6: b1:4b:a3:b9:fd:5e:0d:b6:2f:85:4a:4c:4f:11:07:1f:ac:9a: 1b:8c:25:57:d3:14:26:62:b7:36:35:5d:5b:96:d0:fd:99:1b: a0:98:ae:3c:e9:82:6a:de:72:aa:fa:fa:11:77:b8:1f:0e:f1: a3:4b:54:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjUwODIyMTg1NjUzWhcNMjUwODI5MTg1NjUzWjAYMRYwFAYD VQQDEw02OGE4YmQ3Ni1iNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLvxWxStUgU1bKZMIGs5eKB9+LruBj/YaE2Qgf3iEAswdTsNlzxHM33TblMU KTwWjsaml01PNRErYurIyx8XRSarAIg67tqH00FxrySlTnCBnA71WQmMzjemHIQy 8xiHSDVcmlbvf293eeF9zNYCK1rCwWlTK/xOHkR3J+rpRqZhTT2p/Ud0ChHmF43E aGbNVDhFzxPMpKS1h1tzSOVHM4EMVgsAoQYKu+JD36CiSpOXlPvDnVTvJ7LRuERx sjaCQs42P26WLU1v/g8EthO498DxQmmzKjIMej+50dBfWudJ7UqJoO2OdbdOFwUJ Yf4KWZXKIFlcqbZCI7BKtHKobQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbRLkGS /n2gDVyTsLP17956umQTMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPBE9J2rk+q4A6brO4pJAHnzblDcYfr8kLvIxDrLXrthQV7lWK0POn 04xbtnozwEq7I98u8AVSfZNWZVlgV7yEyYiuhYfLDhhPXHA6a5GGV0/J98kEsHli vvpA9oXG8ZZAstO+b2zx/Nswj9g5aKBUbRirUnPiKCOaXNUNdRsXsr6rXp5ZEdAw V4QXzAJm7INYTA2g4WQeByNtbgmJu8A3eTBV9Bz5fE93DnaEcJ/XUBJIOGZLlhkx 8VRybKwqwih+JumdcbaxS6O5/V4Nti+FSkxPEQcfrJobjCVX0xQmYrc2NV1bltD9 mRugmK486YJq3nKq+voRd7gfDvGjS1Ri -----END CERTIFICATE-----Generated at Sun Aug 24 06:46:46 2025 by rpki-client