$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft File: yyBKq8TrV0KH_ARSchxbAQqavzE.mft (raw, json) Hash identifier: JrBWaJTVpu+53wvm8gXWUjva/vsSM4uhkVJaBF2vjc8= Subject key identifier: 56:5E:5A:47:78:0A:A9:16:D5:A6:96:5F:D6:E8:F3:03:02:46:55:40 Authority key identifier: CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31 Certificate issuer: /CN=A911082E/serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft Manifest number: 0D Signing time: Mon 11 Aug 2025 08:24:47 +0000 Manifest this update: Mon 11 Aug 2025 08:24:47 +0000 Manifest next update: Mon 18 Aug 2025 08:24:47 +0000 Files and hashes: 1: yyBKq8TrV0KH_ARSchxbAQqavzE.crl (hash: LKWnXXrZjyidhKqJt/qcYrlYwnllikxfBVTklt1YmnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911082E, serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31 Validity Not Before: Aug 11 08:24:47 2025 GMT Not After : Aug 18 08:24:47 2025 GMT Subject: CN=6899a8cf-c0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:16:77:b3:88:e0:99:6f:ea:31:77:de:f2: c5:4d:a6:55:83:b7:ad:10:a2:1b:2a:d8:41:46:4f: 2c:b4:8d:73:91:61:6b:f8:e2:8f:ef:47:3e:79:f9: 8e:5d:73:69:df:ed:47:56:eb:73:bb:b2:03:3f:5e: f2:0f:fa:a8:ff:82:cc:ce:67:2c:15:4c:a0:a9:c3: f3:2a:43:37:b0:e0:93:e4:32:36:96:74:23:b0:0a: 27:58:e9:77:18:9f:d8:1b:51:ac:54:b5:bb:06:15: ef:59:27:1a:73:c0:af:b6:a1:de:8b:1d:86:bf:39: 0d:87:6a:4a:47:d8:93:8b:be:3f:95:c1:6c:e9:91: e4:b8:0f:a8:c1:07:ec:2e:37:f0:1a:4a:d7:a6:9b: 48:ce:70:b5:58:24:6c:03:75:da:b8:69:13:13:b0: 0a:d1:13:6e:4e:ee:cc:68:c9:93:5d:39:8c:34:b2: 40:0b:f0:3b:03:bb:34:cd:7f:5f:bc:e7:b2:60:cc: 4c:2b:27:70:77:bb:4c:ca:d2:1e:ee:8f:f0:98:7d: 82:43:3d:e6:9d:06:fe:05:ca:6a:45:e4:5a:58:52: 06:52:aa:72:86:24:a6:b4:7d:97:cf:53:5c:2b:6f: 30:70:73:68:be:22:e6:e3:30:be:9e:6b:16:49:4d: 3a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5E:5A:47:78:0A:A9:16:D5:A6:96:5F:D6:E8:F3:03:02:46:55:40 X509v3 Authority Key Identifier: keyid:CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:e7:41:96:b3:b4:9c:75:2f:cd:4d:89:45:9b:da:01:fc:d4: 7b:96:5a:b3:b6:e8:5a:5f:83:ee:8a:a8:92:d4:a8:92:4d:5a: 3b:71:7e:15:4a:7f:45:78:d2:52:1a:aa:ce:bd:64:4f:d1:bc: 1b:4d:cb:94:04:c3:6d:2e:88:5a:53:2b:c0:00:66:5b:db:1e: 64:7b:5b:5a:6a:f8:b6:da:e3:1e:96:27:87:ae:39:30:78:3e: 71:29:67:1a:45:29:fe:c1:cb:50:9c:da:a8:25:ff:b7:2b:dc: 78:2b:9a:c6:e8:dc:f9:b1:d6:44:44:eb:aa:2e:05:5a:5e:9e: 19:c4:29:fe:c2:5f:f3:c4:6c:46:fa:13:9a:13:a4:85:56:6d: df:87:87:97:0e:ad:ec:f5:bf:ac:70:49:0e:2e:e4:c7:73:9c: 7b:4b:a6:14:de:53:17:6a:02:94:29:7e:e7:58:c7:b1:08:a8: d9:f7:7d:40:ce:dd:e6:95:7b:b1:fa:d9:b1:89:81:70:56:69: 30:51:b4:e4:0b:b6:d0:bb:c0:30:75:04:07:84:01:9f:a3:5a: 06:6a:14:d7:1c:6b:54:b5:d3:f6:11:5b:84:fd:88:bf:0c:11: 8b:36:8b:e5:ff:54:4c:a4:52:1c:95:08:2f:f2:ef:92:4c:f5: 28:7d:cc:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDgyRTExMC8GA1UEBRMoQ0IyMDRBQUJDNEVCNTc0Mjg3RkMwNDUyNzIxQzVCMDEw QTlBQkYzMTAeFw0yNTA4MTEwODI0NDdaFw0yNTA4MTgwODI0NDdaMBgxFjAUBgNV BAMTDTY4OTlhOGNmLWMwZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxaxZ3s4jgmW/qMXfe8sVNplWDt60Qohsq2EFGTyy0jXORYWv44o/vRz55+Y5d c2nf7UdW63O7sgM/XvIP+qj/gszOZywVTKCpw/MqQzew4JPkMjaWdCOwCidY6XcY n9gbUaxUtbsGFe9ZJxpzwK+2od6LHYa/OQ2HakpH2JOLvj+VwWzpkeS4D6jBB+wu N/AaStemm0jOcLVYJGwDddq4aRMTsArRE25O7sxoyZNdOYw0skAL8DsDuzTNf1+8 57JgzEwrJ3B3u0zK0h7uj/CYfYJDPeadBv4FympF5FpYUgZSqnKGJKa0fZfPU1wr bzBwc2i+IubjML6eaxZJTTqfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVl5aR3gK qRbVppZf1ujzAwJGVUAwHwYDVR0jBBgwFoAUyyBKq8TrV0KH/ARSchxbAQqavzEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwODJFLzhERkU2MzY2NjZF MjExRjBCRUFCRTkzRUM0RjlBRTAyL3l5QktxOFRyVjBLSF9BUlNjaHhiQVFxYXZ6 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXlCS3E4VHJWMEtIX0FSU2NoeGJBUXFhdnpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw ODJFLzhERkU2MzY2NjZFMjExRjBCRUFCRTkzRUM0RjlBRTAyL3l5QktxOFRyVjBL SF9BUlNjaHhiQVFxYXZ6RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGDnQZaztJx1L81NiUWb2gH81HuWWrO26Fpfg+6KqJLUqJJNWjtxfhVK f0V40lIaqs69ZE/RvBtNy5QEw20uiFpTK8AAZlvbHmR7W1pq+Lba4x6WJ4euOTB4 PnEpZxpFKf7By1Cc2qgl/7cr3Hgrmsbo3Pmx1kRE66ouBVpenhnEKf7CX/PEbEb6 E5oTpIVWbd+Hh5cOrez1v6xwSQ4u5MdznHtLphTeUxdqApQpfudYx7EIqNn3fUDO 3eaVe7H62bGJgXBWaTBRtOQLttC7wDB1BAeEAZ+jWgZqFNcca1S10/YRW4T9iL8M EYs2i+X/VEykUhyVCC/y75JM9Sh9zME= -----END CERTIFICATE-----Generated at Mon Aug 11 12:56:41 2025 by rpki-client