$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: 7GeRBzwuEOlqssC7e9/+4XOceWTpn+92nDPxcDCkekQ= Subject key identifier: FE:22:A1:12:45:F1:49:69:D3:4F:92:C4:EB:90:6D:33:6B:C1:5E:BB Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 0790 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 077F Signing time: Fri 08 Aug 2025 21:56:25 +0000 Manifest this update: Fri 08 Aug 2025 21:56:25 +0000 Manifest next update: Fri 15 Aug 2025 21:56:25 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: hMBcYFOBYSx13ClEQwJQ/sghtLZw+f3c3N7IkkiPIqs=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: 3i/bsnBVCwTkaRt5VNWAWhHJ6/+t7BMJDdGcwpMXiuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Aug 8 21:56:25 2025 GMT Not After : Aug 15 21:56:25 2025 GMT Subject: CN=68967289-5b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:19:07:03:d9:1d:5d:c6:36:dc:eb:2f:dd:b7: e6:c7:fb:d0:22:88:a9:3b:3b:2e:45:e8:46:5b:dc: 4b:ac:08:3c:f0:95:fc:81:69:9e:2b:3e:e6:06:c3: a9:16:09:8f:5d:2a:4c:4c:84:24:0c:ed:6b:b3:63: 47:68:53:87:19:e1:7b:4c:d2:cc:19:28:5e:02:bf: 01:df:a6:a1:88:20:41:c5:22:4a:06:37:df:3b:40: 7b:af:d6:ab:da:d1:ac:e6:d1:d3:ea:e0:bd:81:53: 62:eb:4e:79:f7:3e:e9:78:12:ce:5e:c6:45:c3:53: a3:01:4a:dd:02:22:db:cc:96:63:c0:a2:6c:c1:b3: 6e:5c:a0:a2:f4:06:5d:db:a0:0a:66:88:0e:02:72: 53:90:d2:32:45:fa:a6:b3:0b:39:6f:07:f4:ce:dc: 7d:96:ce:32:38:f9:25:52:ca:18:05:64:b7:82:a1: 6f:b3:81:d7:14:e0:e2:61:2d:21:51:e1:d9:37:56: f7:4a:99:fc:47:d5:1c:b8:a8:50:54:fd:da:12:38: e9:d9:dc:cc:72:4f:85:52:2c:d1:4d:b2:25:d9:51: b1:6f:17:4c:71:e8:e4:e2:aa:5d:5f:80:31:c3:b9: 5b:60:6a:f5:85:33:fe:0f:48:d2:01:b7:f6:af:33: 7e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:22:A1:12:45:F1:49:69:D3:4F:92:C4:EB:90:6D:33:6B:C1:5E:BB X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:0e:3b:d7:e0:1b:61:ee:b2:0b:2e:e5:ff:7c:c0:2a:0f:98: 49:c1:09:a4:8e:78:95:40:83:3c:c0:ea:ce:b1:54:20:6e:7e: 50:b0:4f:cd:29:82:52:a2:99:1d:93:87:b3:2b:63:cc:41:62: 0f:cc:1e:93:ed:49:9a:49:e5:0e:69:e3:3a:66:19:2f:06:2a: 12:c7:a9:a9:88:3b:5a:bb:f0:26:61:e0:1d:48:01:62:b1:3f: 62:c2:3d:68:7d:39:79:73:ec:2b:1a:b0:df:f3:1d:d2:7f:81: 3c:43:15:ca:fd:f7:7c:05:c7:2a:76:fb:8a:05:18:6a:0a:bd: 60:c7:14:21:b1:84:66:39:45:b2:29:c8:45:23:1e:3d:76:4b: 2e:3b:09:de:88:fd:44:cd:5d:01:46:c5:ec:10:73:35:44:94: e7:7c:d5:8b:37:ad:b5:c5:24:b1:f3:fb:67:32:7f:70:76:fc: 60:61:ee:7f:36:6c:ca:f1:27:81:2d:9e:fe:78:01:e5:20:43: f3:85:68:13:ee:91:01:bf:3b:c9:20:84:48:27:9e:11:72:2a: 7d:4d:8a:8f:72:ca:13:7e:22:9c:d7:af:55:55:4f:ba:1c:43: 51:96:fb:f5:74:b5:2e:07:5e:2d:5d:60:8a:81:47:a8:cf:18: ef:26:5d:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjUwODA4MjE1NjI1WhcNMjUwODE1MjE1NjI1WjAYMRYwFAYD VQQDEw02ODk2NzI4OS01YjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RkHA9kdXcY23Osv3bfmx/vQIoipOzsuRehGW9xLrAg88JX8gWmeKz7mBsOp FgmPXSpMTIQkDO1rs2NHaFOHGeF7TNLMGSheAr8B36ahiCBBxSJKBjffO0B7r9ar 2tGs5tHT6uC9gVNi60559z7peBLOXsZFw1OjAUrdAiLbzJZjwKJswbNuXKCi9AZd 26AKZogOAnJTkNIyRfqmsws5bwf0ztx9ls4yOPklUsoYBWS3gqFvs4HXFODiYS0h UeHZN1b3Spn8R9UcuKhQVP3aEjjp2dzMck+FUizRTbIl2VGxbxdMcejk4qpdX4Ax w7lbYGr1hTP+D0jSAbf2rzN+kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4ioRJF 8Ulp00+SxOuQbTNrwV67MB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJDjvX4Bth7rILLuX/fMAqD5hJwQmkjniVQIM8wOrOsVQgbn5QsE/N KYJSopkdk4ezK2PMQWIPzB6T7UmaSeUOaeM6ZhkvBioSx6mpiDtau/AmYeAdSAFi sT9iwj1ofTl5c+wrGrDf8x3Sf4E8QxXK/fd8BccqdvuKBRhqCr1gxxQhsYRmOUWy KchFIx49dksuOwneiP1EzV0BRsXsEHM1RJTnfNWLN621xSSx8/tnMn9wdvxgYe5/ NmzK8SeBLZ7+eAHlIEPzhWgT7pEBvzvJIIRIJ54Rcip9TYqPcsoTfiKc169VVU+6 HENRlvv1dLUuB14tXWCKgUeozxjvJl1u -----END CERTIFICATE-----Generated at Sun Aug 10 21:18:06 2025 by rpki-client