$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft File: YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json) Hash identifier: W/vqpsdDa2y+gDm5v4+NeO+L2ZPpwwaaLsv8Hg6xGb4= Subject key identifier: CA:A6:65:CB:D5:FA:68:40:C1:F1:2D:2F:52:3F:7F:E8:84:8E:70:B8 Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 Certificate issuer: /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft Manifest number: 20 Signing time: Sat 09 Aug 2025 08:23:39 +0000 Manifest this update: Sat 09 Aug 2025 08:23:39 +0000 Manifest next update: Sat 16 Aug 2025 08:23:39 +0000 Files and hashes: 1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: CnEopnd8v7nyyieIMkSx+ELS5xxTWFw7Yv8POdrnVvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Validity Not Before: Aug 9 08:23:39 2025 GMT Not After : Aug 16 08:23:39 2025 GMT Subject: CN=6897058b-8cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:15:e8:19:18:a0:50:3a:26:5d:67:1b:25: 8a:9f:57:a7:f3:6d:52:12:bb:45:f7:78:50:d2:e9: 8c:f1:b2:b8:07:df:93:e3:d7:5b:31:28:3f:2c:bb: 15:a9:82:69:a7:75:1e:ed:ca:94:29:b2:81:55:c5: a3:9f:99:df:39:33:b0:94:bb:56:8a:a3:e4:9b:04: 49:ec:ce:f0:31:d9:6f:54:a4:31:05:e8:3e:df:50: b4:80:fe:60:01:d2:9e:52:9f:50:12:c1:bf:32:6a: 37:ee:62:6a:73:c4:80:97:f2:ed:79:e3:d0:49:d9: 06:ba:3b:ce:47:95:77:d6:b6:7a:64:57:7a:94:51: 81:bb:3a:f6:67:59:f9:71:a2:ae:6e:77:ae:61:15: f0:7b:04:92:ec:b8:eb:b1:aa:ad:03:5e:d8:91:74: b1:ed:87:cc:be:90:2f:d7:49:9d:b7:0b:7f:aa:5a: cb:e7:8c:be:55:44:81:1c:8e:6d:86:de:10:02:5e: b3:2c:91:fa:45:ad:4b:63:67:e6:5d:d3:db:22:d0: 49:76:c0:58:c3:71:1c:75:df:72:85:bc:88:b0:08: 34:04:24:0b:08:12:db:8c:e0:2b:85:4f:f1:1f:d0: e5:af:75:3d:86:4e:fc:17:8d:77:55:55:64:02:66: 4b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A6:65:CB:D5:FA:68:40:C1:F1:2D:2F:52:3F:7F:E8:84:8E:70:B8 X509v3 Authority Key Identifier: keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:76:4d:66:67:52:f6:7a:11:54:87:3e:bd:e3:21:54:a9:b9: 66:c6:67:fc:a7:2f:9a:54:67:2a:07:cd:6a:9f:ba:e8:de:df: ff:f5:42:f9:11:60:dc:3a:12:f6:ab:04:5e:b0:55:22:ff:5a: a0:ef:2f:cb:50:60:07:b9:73:d3:1e:89:50:aa:62:c3:ee:12: 10:ab:c5:dd:73:a6:ec:8f:b8:8a:f1:6b:b3:87:a0:3c:d2:9d: 4a:0b:47:4d:22:0f:b0:69:5e:75:cc:84:8d:21:d6:e4:ca:d5: 5f:79:7b:e1:ab:f0:12:0f:e1:4e:03:d8:d8:55:53:d3:9e:1d: e1:fc:a7:ad:b3:ca:b6:bc:bf:6e:b9:0c:0b:0c:df:84:0d:64: 6d:ad:d7:a7:0e:c6:d4:74:65:01:68:3f:67:3e:9c:2b:a8:f9: c0:98:59:ce:aa:81:a7:40:07:d3:00:47:12:ae:a8:94:fc:a1: cf:b1:d2:d0:02:12:bb:02:b5:ca:b5:40:bb:d0:78:12:8e:ad: 9b:a6:8f:63:60:f6:c1:87:d4:3e:90:4e:17:82:73:c6:56:ef: 8f:32:f1:5e:16:9a:9e:52:fc:4f:8e:77:cc:64:66:f0:3b:6f: b3:a5:ca:91:26:7c:4d:9d:1d:a5:7f:60:c6:88:52:6d:c9:cf: 01:06:35:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoNjFGNzJCNUU5M0U3OTM1REQ3OUUwNDM1QzgxOEY4RjlB NzEwRjY4OTAeFw0yNTA4MDkwODIzMzlaFw0yNTA4MTYwODIzMzlaMBgxFjAUBgNV BAMTDTY4OTcwNThiLThjZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG4BXoGRigUDomXWcbJYqfV6fzbVISu0X3eFDS6YzxsrgH35Pj11sxKD8suxWp gmmndR7typQpsoFVxaOfmd85M7CUu1aKo+SbBEnszvAx2W9UpDEF6D7fULSA/mAB 0p5Sn1ASwb8yajfuYmpzxICX8u1549BJ2Qa6O85HlXfWtnpkV3qUUYG7OvZnWflx oq5ud65hFfB7BJLsuOuxqq0DXtiRdLHth8y+kC/XSZ23C3+qWsvnjL5VRIEcjm2G 3hACXrMskfpFrUtjZ+Zd09si0El2wFjDcRx133KFvIiwCDQEJAsIEtuM4CuFT/Ef 0OWvdT2GTvwXjXdVVWQCZkvlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyqZly9X6 aEDB8S0vUj9/6ISOcLgwHwYDVR0jBBgwFoAUYfcrXpPnk13XngQ1yBj4+acQ9okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzJENDU3ODAwNDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEzWG5nUTF5Qmo0LWFjUTlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWZjclhwUG5rMTNYbmdRMXlCajQtYWNROW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzJENDU3ODAwNDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEz WG5nUTF5Qmo0LWFjUTlvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJt2TWZnUvZ6EVSHPr3jIVSpuWbGZ/ynL5pUZyoHzWqfuuje3//1QvkR YNw6EvarBF6wVSL/WqDvL8tQYAe5c9MeiVCqYsPuEhCrxd1zpuyPuIrxa7OHoDzS nUoLR00iD7BpXnXMhI0h1uTK1V95e+Gr8BIP4U4D2NhVU9OeHeH8p62zyra8v265 DAsM34QNZG2t16cOxtR0ZQFoP2c+nCuo+cCYWc6qgadAB9MARxKuqJT8oc+x0tAC ErsCtcq1QLvQeBKOrZumj2Ng9sGH1D6QTheCc8ZW748y8V4Wmp5S/E+Od8xkZvA7 b7OlypEmfE2dHaV/YMaIUm3JzwEGNUI= -----END CERTIFICATE-----Generated at Sun Aug 10 04:23:29 2025 by rpki-client