$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json) Hash identifier: 2TVy/F304iwl5FATTlfnH8wBu4fmZiQi4FmXePgAJ+c= Subject key identifier: 35:B8:13:26:39:00:DE:56:56:F4:CD:6E:85:55:FE:86:BB:89:7F:21 Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Certificate serial: 1071 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft Manifest number: 1071 Signing time: Sun 10 Aug 2025 17:22:53 +0000 Manifest this update: Sun 10 Aug 2025 17:22:53 +0000 Manifest next update: Sun 17 Aug 2025 17:22:53 +0000 Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: bsSQxpNQNHNi73QWdh4/rG3VfIHSlNX24Td8e/hhpPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4209 (0x1071) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Validity Not Before: Aug 10 17:22:53 2025 GMT Not After : Aug 17 17:22:53 2025 GMT Subject: CN=6898d56d-8da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1f:17:5f:bf:cf:f5:0c:0d:fa:2a:77:fa:89: a3:11:64:fa:d6:f7:5f:63:c0:63:9f:4d:24:53:ec: 71:94:ed:6c:c9:5d:11:3c:ff:d6:e6:0e:3f:79:33: 68:91:20:76:01:59:54:32:9b:f2:fc:7d:eb:17:50: cb:b2:0c:73:9f:84:27:b9:5b:92:22:55:3c:38:1a: 1a:9e:9c:6b:13:4d:c2:dd:ea:b6:fc:da:c3:f3:f1: 50:48:15:8b:67:4a:5f:3c:3f:61:01:46:31:17:c8: 69:db:9f:4c:dd:e8:a3:f3:b5:fa:1d:3e:29:86:0a: 91:ae:ef:fc:53:67:0c:42:04:eb:77:06:d5:ff:74: 29:ac:fd:6a:11:ab:83:56:77:58:4e:19:ce:c5:06: 45:c3:9c:64:c8:e8:55:16:da:5b:8c:66:35:cb:87: 6c:8d:a5:b6:6c:78:ee:46:ba:75:16:ad:6a:d4:c7: ab:c9:88:d8:d1:bb:98:f2:b2:19:9e:06:4f:8c:70: 75:f6:3a:05:95:bc:3d:01:bd:10:dd:18:c8:bc:3b: cc:ad:57:42:0c:b7:83:e9:17:e4:1f:cb:28:eb:d5: ea:10:e7:66:2f:a9:30:4b:d3:f2:9e:74:c2:7e:8d: c7:26:f4:3f:d7:65:22:9f:bb:63:86:c4:da:07:68: 13:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B8:13:26:39:00:DE:56:56:F4:CD:6E:85:55:FE:86:BB:89:7F:21 X509v3 Authority Key Identifier: keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:20:5e:53:75:01:89:91:30:10:3a:a8:86:24:f4:cd:ac:4e: f0:21:b8:aa:4d:8a:16:58:e8:63:28:e0:54:91:4d:61:88:10: ab:d3:bc:e2:2a:ca:98:68:18:c6:55:25:0e:0b:4a:f2:10:3c: 96:2e:e8:39:a1:fd:3d:fc:dd:a0:08:14:ce:3b:83:ae:ac:c8: 10:ea:0a:29:4d:0a:72:06:3c:2e:46:f5:1b:43:7a:44:e0:01: b5:de:17:a8:2e:8f:67:0a:57:32:51:f1:94:8d:1c:b1:3d:9b: a1:e5:be:ca:4c:ff:7e:49:b3:85:dd:84:83:50:6a:1d:ff:3b: eb:13:aa:e2:52:bd:74:3b:93:b0:75:33:08:01:32:6d:fd:f0: 00:ef:ba:fa:01:a5:83:bd:a1:1a:16:52:f5:8c:e1:f9:08:e2: 2f:ba:f7:2c:4c:67:77:a1:9b:bd:6c:5f:3c:94:b1:90:c8:ad: 65:5e:b5:eb:63:ad:f5:98:47:39:25:e1:f6:00:8e:e3:b0:e6: 2c:6f:4c:f4:60:81:4b:1f:33:7c:9b:12:f1:68:4b:20:38:86: 1d:4f:f2:32:4c:cd:ef:9e:9f:04:87:a2:3f:bd:56:65:a1:c5: 9b:37:5d:08:b9:50:38:64:f5:38:9d:34:57:94:19:66:a1:3f: d6:fb:9c:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEM4REE2NDA5NjcxMzQ4MTA3RERCQzhCMTgzRjU1QUJG MjkzMTI1NTYwHhcNMjUwODEwMTcyMjUzWhcNMjUwODE3MTcyMjUzWjAYMRYwFAYD VQQDEw02ODk4ZDU2ZC04ZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7h8XX7/P9QwN+ip3+omjEWT61vdfY8Bjn00kU+xxlO1syV0RPP/W5g4/eTNo kSB2AVlUMpvy/H3rF1DLsgxzn4QnuVuSIlU8OBoanpxrE03C3eq2/NrD8/FQSBWL Z0pfPD9hAUYxF8hp259M3eij87X6HT4phgqRru/8U2cMQgTrdwbV/3QprP1qEauD VndYThnOxQZFw5xkyOhVFtpbjGY1y4dsjaW2bHjuRrp1Fq1q1MeryYjY0buY8rIZ ngZPjHB19joFlbw9Ab0Q3RjIvDvMrVdCDLeD6RfkH8so69XqEOdmL6kwS9PynnTC fo3HJvQ/12Uin7tjhsTaB2gTWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDW4EyY5 AN5WVvTNboVV/oa7iX8hMB8GA1UdIwQYMBaAFMjaZAlnE0gQfdvIsYP1Wr8pMSVW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9ENjc3RDMxQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNCQjkyOGl4Z19WYXZ5a3hK VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3lOcGtDV2NUU0JCOTI4aXhnX1ZhdnlreEpWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9ENjc3RDMxQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNC QjkyOGl4Z19WYXZ5a3hKVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrIF5TdQGJkTAQOqiGJPTNrE7wIbiqTYoWWOhjKOBUkU1hiBCr07zi KsqYaBjGVSUOC0ryEDyWLug5of09/N2gCBTOO4OurMgQ6gopTQpyBjwuRvUbQ3pE 4AG13heoLo9nClcyUfGUjRyxPZuh5b7KTP9+SbOF3YSDUGod/zvrE6riUr10O5Ow dTMIATJt/fAA77r6AaWDvaEaFlL1jOH5COIvuvcsTGd3oZu9bF88lLGQyK1lXrXr Y631mEc5JeH2AI7jsOYsb0z0YIFLHzN8mxLxaEsgOIYdT/IyTM3vnp8Eh6I/vVZl ocWbN10IuVA4ZPU4nTRXlBlmoT/W+5zQ -----END CERTIFICATE-----Generated at Mon Aug 11 12:51:48 2025 by rpki-client