$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: BISW6cOYLua0V9bF4Hu5v0NBP5eRuBW4dNd2SJ6hN8I= Subject key identifier: 52:AC:20:D5:2C:BD:8D:F3:19:79:F1:32:82:9A:9A:45:D1:9B:0A:7F Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1B8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1B82 Signing time: Sun 10 Aug 2025 16:14:18 +0000 Manifest this update: Sun 10 Aug 2025 16:14:18 +0000 Manifest next update: Sun 17 Aug 2025 16:14:18 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: /BpHhZYjhTJdxEojKib6pHlsyZYD+/ZeuthnRkb6Ufo=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: CIx5a/KDORd4MxJLQ+psYC26naN8iQLI+AuxYnr9L/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 16:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7052 (0x1b8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: Aug 10 16:14:18 2025 GMT Not After : Aug 17 16:14:18 2025 GMT Subject: CN=6898c55a-aeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dc:ac:5e:16:70:52:60:55:13:3b:b4:bc:fd: e8:42:14:3d:ec:23:ee:fe:7f:8d:3f:21:e5:85:e5: f2:85:39:5f:e2:fd:5c:fe:dd:55:08:6a:56:55:20: f3:ec:82:c0:47:31:7d:b3:c4:14:f6:b0:05:9e:bf: d2:54:47:c1:a4:37:a5:b5:6d:f1:f3:57:d4:f9:5a: a9:86:f1:ec:da:60:06:4c:15:f0:07:42:3a:01:60: fa:bd:a6:aa:05:06:29:34:27:48:29:23:1f:08:d5: 75:44:54:15:f5:d2:ef:36:93:1b:a7:ea:48:0d:09: 4d:45:e4:f3:06:f1:54:60:7b:5a:fc:ab:58:22:91: 8c:bc:6d:85:89:f4:d2:1f:6a:97:f4:51:12:47:40: 49:32:22:39:d2:fb:91:e2:22:9f:1d:cd:b8:e7:53: b5:81:09:d8:bb:d6:c6:8d:e2:f3:79:d8:73:38:09: 0e:e4:dc:db:5c:dc:a7:98:11:af:6f:bb:25:cb:12: 63:1e:17:f4:f8:e0:ce:61:2b:6a:3f:2a:ce:33:56: 0d:3a:1d:69:7d:c2:ed:e1:94:ee:3d:8e:c3:da:0f: c8:a2:ed:7a:f4:50:64:62:1f:a9:8d:27:39:81:34: d3:d8:a5:5e:08:81:6a:31:25:0a:5f:91:78:eb:42: 05:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AC:20:D5:2C:BD:8D:F3:19:79:F1:32:82:9A:9A:45:D1:9B:0A:7F X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a0:ef:5d:87:11:23:a1:e7:f3:c3:46:59:f4:67:26:1c:11: d6:ea:7c:5d:04:ea:29:15:2a:c4:c8:c4:c2:75:a5:eb:7f:a9: ae:5a:bb:2e:eb:dc:f3:ed:79:de:c1:a7:cd:b0:00:41:a7:1f: 74:ea:2d:53:04:e4:37:3f:fe:28:0e:d9:b0:b2:0c:95:7f:78: be:9f:89:4d:77:ee:a2:b0:8a:a5:71:59:c5:97:6f:53:d6:3c: e8:8b:0e:9c:14:80:7a:03:fa:4b:c4:01:7d:6c:5e:6f:3f:72: 0d:4f:08:03:67:f9:01:02:54:10:49:6c:56:7e:01:de:86:7a: 44:e4:8c:a8:b0:1e:83:44:a6:2c:bc:c4:3f:be:f7:25:ee:fb: ba:1d:c0:c3:a5:0a:78:8f:57:4a:ac:aa:66:f7:78:e3:92:7e: a0:51:41:33:fe:e1:24:ed:9c:af:13:a0:13:99:09:5a:d0:21: e5:7e:d6:08:4c:2e:56:41:41:8b:a0:74:e2:20:70:33:75:94: 6c:a8:10:67:c9:fb:df:11:85:c9:88:b5:3f:51:a2:86:b3:8f: 03:33:d5:87:9a:35:0c:3f:3f:05:b0:07:23:b5:2b:89:4f:73: 48:54:4e:36:48:ec:ba:0c:72:b2:50:04:be:2e:33:c4:a9:bb: 4d:56:b4:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjUwODEwMTYxNDE4WhcNMjUwODE3MTYxNDE4WjAYMRYwFAYD VQQDEw02ODk4YzU1YS1hZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NysXhZwUmBVEzu0vP3oQhQ97CPu/n+NPyHlheXyhTlf4v1c/t1VCGpWVSDz 7ILARzF9s8QU9rAFnr/SVEfBpDeltW3x81fU+VqphvHs2mAGTBXwB0I6AWD6vaaq BQYpNCdIKSMfCNV1RFQV9dLvNpMbp+pIDQlNReTzBvFUYHta/KtYIpGMvG2FifTS H2qX9FESR0BJMiI50vuR4iKfHc2451O1gQnYu9bGjeLzedhzOAkO5NzbXNynmBGv b7slyxJjHhf0+ODOYStqPyrOM1YNOh1pfcLt4ZTuPY7D2g/Iou169FBkYh+pjSc5 gTTT2KVeCIFqMSUKX5F460IFqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKsINUs vY3zGXnxMoKamkXRmwp/MB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOoO9dhxEjoefzw0ZZ9GcmHBHW6nxdBOopFSrEyMTCdaXrf6muWrsu 69zz7XnewafNsABBpx906i1TBOQ3P/4oDtmwsgyVf3i+n4lNd+6isIqlcVnFl29T 1jzoiw6cFIB6A/pLxAF9bF5vP3INTwgDZ/kBAlQQSWxWfgHehnpE5IyosB6DRKYs vMQ/vvcl7vu6HcDDpQp4j1dKrKpm93jjkn6gUUEz/uEk7ZyvE6ATmQla0CHlftYI TC5WQUGLoHTiIHAzdZRsqBBnyfvfEYXJiLU/UaKGs48DM9WHmjUMPz8FsAcjtSuJ T3NIVE42SOy6DHKyUAS+LjPEqbtNVrQi -----END CERTIFICATE-----Generated at Tue Aug 12 14:49:06 2025 by rpki-client