$ rpki-client -vvf rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft File: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft (raw, json) Hash identifier: /xjyyrg1qwwPkWYjVfCh/R1xKeXHXMNI4R4S4mlbOBc= Subject key identifier: 88:45:C3:65:8A:F1:DC:F2:A3:A8:D1:0C:35:0E:17:03:30:48:15:44 Authority key identifier: 62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C Certificate issuer: /CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft Manifest number: 34A7 Signing time: Wed 06 Aug 2025 14:43:18 +0000 Manifest this update: Wed 06 Aug 2025 14:43:17 +0000 Manifest next update: Wed 13 Aug 2025 14:43:17 +0000 Files and hashes: 1: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl (hash: DIpSQrobijQbTHa7xnkvjUdQcIoSGlUe33YpHmQs9Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 14:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915179D, serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C Validity Not Before: Aug 6 14:43:17 2025 GMT Not After : Aug 13 14:43:17 2025 GMT Subject: CN=68936a06-47c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:38:9f:ca:e5:b7:f5:f3:e4:81:e8:c8:d6:9d: 12:22:6a:83:86:bf:89:16:ee:36:29:51:76:66:f1: fd:34:96:6b:9b:47:71:86:a0:de:1c:25:52:a3:33: fb:ff:a1:57:6b:73:38:73:03:5d:25:02:73:e0:5d: 04:da:f1:40:30:95:55:5b:db:65:eb:79:52:ba:f4: 15:b2:c6:5e:24:5d:d0:dd:29:46:34:50:c3:22:31: 5b:23:af:5d:4a:4f:c5:c9:9c:95:63:16:4c:eb:75: 91:2e:32:c6:ae:0d:d6:e5:04:84:64:f4:c5:5f:3a: c5:31:d2:a6:75:da:fc:35:b7:27:f2:88:57:d0:6b: aa:c0:32:9a:63:7d:c7:3e:e0:e6:d4:6e:0b:03:94: 17:8a:b8:c0:49:07:2a:4e:1e:8c:5e:75:3f:80:92: b1:33:d0:a3:01:91:f8:cf:f7:4c:32:c8:35:4a:c8: 30:16:ac:60:b3:8a:4d:dc:a1:a2:bb:34:f9:b4:a9: 3d:83:fb:74:8b:c7:08:61:e8:f5:06:c3:99:48:8d: 56:fb:d8:fc:47:84:f0:50:da:22:88:72:3f:ac:c2: 28:3a:e6:d9:49:49:0f:ea:6a:5e:d5:70:20:ef:eb: ea:cb:50:94:fc:cb:b1:dd:02:ff:ee:59:11:f1:5f: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:45:C3:65:8A:F1:DC:F2:A3:A8:D1:0C:35:0E:17:03:30:48:15:44 X509v3 Authority Key Identifier: keyid:62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:56:de:73:fc:bf:21:92:c9:6f:87:6f:e3:b8:49:0c:d7:ff: 5b:79:48:d3:61:38:f6:83:06:c4:f8:d3:20:06:5f:c0:17:c4: 57:20:10:10:95:70:33:f4:62:48:77:b9:16:fd:ff:94:44:67: 38:4c:0f:32:38:79:14:dd:84:71:79:4e:48:08:e5:7e:a8:1e: e9:4c:be:39:b2:e8:ef:87:53:6d:03:2d:57:1e:c8:35:b8:c0: 76:01:87:e1:b5:91:a4:f6:25:ab:8b:67:6d:dc:4a:f2:c3:7a: df:19:cf:ba:8e:f5:d7:01:25:65:b7:b9:9a:37:5b:65:3e:64: 09:00:0d:2a:50:a1:e1:da:65:89:cb:2d:12:62:5e:57:48:76: ca:7d:1c:92:e0:7f:66:a2:e0:7a:67:0f:a6:9b:e2:5c:e5:a8: b9:1c:a3:e5:f7:1c:44:95:6c:1d:06:b2:6f:eb:08:2d:5c:d0: 12:c5:0b:91:0e:45:07:9e:98:f6:9d:74:24:ca:8f:a5:87:8b: 62:52:81:d5:a2:cd:02:11:39:5a:28:2c:60:c7:92:16:a5:eb: 17:d0:48:62:81:18:eb:90:53:77:4b:88:b7:22:16:5e:d5:72: 8c:d4:bf:30:d1:c6:67:c9:24:86:bc:f8:c7:61:b6:db:36:73: 6b:32:9d:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3OUQxMTAvBgNVBAUTKDYyQTZENUVEQzU4RDUzRUY5ODA4MDhCRUNFRDUxOUU4 MDVCMUU0MEMwHhcNMjUwODA2MTQ0MzE3WhcNMjUwODEzMTQ0MzE3WjAYMRYwFAYD VQQDEw02ODkzNmEwNi00N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DifyuW39fPkgejI1p0SImqDhr+JFu42KVF2ZvH9NJZrm0dxhqDeHCVSozP7 /6FXa3M4cwNdJQJz4F0E2vFAMJVVW9tl63lSuvQVssZeJF3Q3SlGNFDDIjFbI69d Sk/FyZyVYxZM63WRLjLGrg3W5QSEZPTFXzrFMdKmddr8Nbcn8ohX0GuqwDKaY33H PuDm1G4LA5QXirjASQcqTh6MXnU/gJKxM9CjAZH4z/dMMsg1SsgwFqxgs4pN3KGi uzT5tKk9g/t0i8cIYej1BsOZSI1W+9j8R4TwUNoiiHI/rMIoOubZSUkP6mpe1XAg 7+vqy1CU/Mux3QL/7lkR8V/kRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhFw2WK 8dzyo6jRDDUOFwMwSBVEMB8GA1UdIwQYMBaAFGKm1e3FjVPvmAgIvs7VGegFseQM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTc5RC9BQzZBMTY4QzFE OTAxMUUyQTM5MTk1RjAwOEIwMkNEMi9ZcWJWN2NXTlUtLVlDQWktenRVWjZBV3g1 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lxYlY3Y1dOVS0tWUNBaS16dFVaNkFXeDVBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTc5RC9BQzZBMTY4QzFEOTAxMUUyQTM5MTk1RjAwOEIwMkNEMi9ZcWJWN2NXTlUt LVlDQWktenRVWjZBV3g1QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcVt5z/L8hkslvh2/juEkM1/9beUjTYTj2gwbE+NMgBl/AF8RXIBAQ lXAz9GJId7kW/f+URGc4TA8yOHkU3YRxeU5ICOV+qB7pTL45sujvh1NtAy1XHsg1 uMB2AYfhtZGk9iWri2dt3Eryw3rfGc+6jvXXASVlt7maN1tlPmQJAA0qUKHh2mWJ yy0SYl5XSHbKfRyS4H9mouB6Zw+mm+Jc5ai5HKPl9xxElWwdBrJv6wgtXNASxQuR DkUHnpj2nXQkyo+lh4tiUoHVos0CETlaKCxgx5IWpesX0EhigRjrkFN3S4i3IhZe 1XKM1L8w0cZnySSGvPjHYbbbNnNrMp1k -----END CERTIFICATE-----Generated at Fri Aug 8 00:36:48 2025 by rpki-client