$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json) Hash identifier: uMT2vDvGY0kPUu+V6D5VDePdZvvLXiFVX+BcDwx3OtI= Subject key identifier: 78:97:AF:EC:FB:6F:8A:B0:C4:76:A8:34:AD:C9:C5:75:6F:0C:0B:DF Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Certificate serial: 0DCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft Manifest number: 0DB6 Signing time: Sun 10 Aug 2025 17:54:44 +0000 Manifest this update: Sun 10 Aug 2025 17:54:43 +0000 Manifest next update: Sun 17 Aug 2025 17:54:43 +0000 Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: +A6EiROfyckS+R4JgBKI4y0OJLpEq2duoGVrGc9RY00=) 2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: qyDf++LPWxa+MkjWOgRr95EIpuQ2+myemcO9SD4YHEk=) 3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: 9F91+IUTL7h3rCEta0BAPCIgikPUjvwFDwgS+OoqM04=) 4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: UeNWqDuc6Ln+l4WWol/JGxPQ9/25U+hHn/L6mfBQ43Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3534 (0xdce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Validity Not Before: Aug 10 17:54:43 2025 GMT Not After : Aug 17 17:54:43 2025 GMT Subject: CN=6898dce3-64ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:4f:f7:4e:47:a7:e1:7b:14:bf:51:a4:fa: 1a:7b:19:7d:7a:06:88:39:b4:e1:74:f0:dc:89:a6: c7:d3:59:b6:ee:5f:84:fb:8e:8e:29:af:87:5d:07: 6f:be:86:60:de:f9:d3:f6:1d:f1:b9:e5:8e:a5:e4: 58:ff:06:72:ff:fb:3c:58:cd:1a:fa:8a:9b:3e:28: c2:bc:08:5a:85:ae:e5:27:a2:1a:69:fe:9d:87:24: 41:51:b9:75:76:3a:f5:3b:5e:d4:32:d3:ba:7f:25: 5c:91:4f:10:27:33:36:96:dd:35:3a:d6:4f:58:02: 16:69:59:e3:63:f5:e4:11:56:6f:60:cd:30:b4:5f: a3:d2:c3:d8:91:58:5e:09:6e:6b:5a:44:8f:50:2e: a3:7f:96:49:17:9b:2a:1b:ed:54:0a:4d:f5:b8:d7: 2e:b5:b7:f2:e9:20:1c:b5:ce:d7:a8:48:a0:2f:e1: e1:ea:81:8d:a1:64:45:eb:97:30:c8:40:1d:93:32: bc:6f:2a:5a:64:3f:65:dd:e9:4b:47:80:24:63:2d: f5:de:97:51:6a:ec:76:d9:a5:d9:30:59:51:80:23: 50:71:b7:b4:d1:fe:3a:46:cd:30:dc:6e:b2:88:a3: 65:5e:a8:4a:e0:2a:5c:93:ee:7b:f6:0f:8c:85:f7: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:97:AF:EC:FB:6F:8A:B0:C4:76:A8:34:AD:C9:C5:75:6F:0C:0B:DF X509v3 Authority Key Identifier: keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:8d:68:05:60:36:3a:b4:b3:52:34:b8:04:c9:d9:3a:a3:06: 9b:61:aa:6f:4b:08:04:4c:40:bc:27:69:ab:d8:25:d2:a5:82: 9e:e0:79:db:59:e4:bb:63:9f:68:c2:aa:35:a1:e6:d4:a9:c4: 5c:c4:41:a0:47:f5:df:b4:b2:74:1e:90:f8:05:6a:35:6c:8b: 1b:da:71:66:4c:8f:0d:52:75:f2:fc:12:dd:4b:bd:44:b3:e7: 3e:1f:f6:a3:ad:2e:98:e9:02:e3:31:a8:26:37:fe:c3:dd:b1: a6:63:99:74:be:e3:bc:6c:4a:2d:f4:14:44:44:c5:f9:56:ac: ab:f9:8b:07:a6:ca:66:8d:14:31:33:e5:04:e4:a6:77:39:5d: 5f:8d:de:48:38:53:a7:15:e6:c1:f9:2d:bb:a0:cf:72:a9:33: 5b:a8:46:31:61:cc:07:d6:d0:a5:08:10:00:0e:c4:d1:c9:be: 64:30:92:af:9c:3d:9f:96:11:66:d5:6c:59:8a:65:05:13:97: de:2d:f0:43:07:c0:5a:c1:c3:7b:cc:fa:62:f0:7b:82:0f:d2: 9f:23:b6:24:db:e9:11:03:6b:70:e4:30:6b:4c:00:f1:4a:1f: 30:17:ae:94:ec:93:b8:11:3d:33:81:cf:aa:1a:fd:89:62:d5: 9c:bc:0f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz NEVEQTlDNjMwHhcNMjUwODEwMTc1NDQzWhcNMjUwODE3MTc1NDQzWjAYMRYwFAYD VQQDEw02ODk4ZGNlMy02NGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl95P905Hp+F7FL9RpPoaexl9egaIObThdPDciabH01m27l+E+46OKa+HXQdv voZg3vnT9h3xueWOpeRY/wZy//s8WM0a+oqbPijCvAhaha7lJ6Iaaf6dhyRBUbl1 djr1O17UMtO6fyVckU8QJzM2lt01OtZPWAIWaVnjY/XkEVZvYM0wtF+j0sPYkVhe CW5rWkSPUC6jf5ZJF5sqG+1UCk31uNcutbfy6SActc7XqEigL+Hh6oGNoWRF65cw yEAdkzK8bypaZD9l3elLR4AkYy313pdRaux22aXZMFlRgCNQcbe00f46Rs0w3G6y iKNlXqhK4Cpck+579g+MhfeGHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiXr+z7 b4qwxHaoNK3JxXVvDAvfMB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDUyOS8yMENGMkUxNEMzNjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZi R2llajNUclZsV3MwN2FuR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJjWgFYDY6tLNSNLgEydk6owabYapvSwgETEC8J2mr2CXSpYKe4Hnb WeS7Y59owqo1oebUqcRcxEGgR/XftLJ0HpD4BWo1bIsb2nFmTI8NUnXy/BLdS71E s+c+H/ajrS6Y6QLjMagmN/7D3bGmY5l0vuO8bEot9BRERMX5Vqyr+YsHpspmjRQx M+UE5KZ3OV1fjd5IOFOnFebB+S27oM9yqTNbqEYxYcwH1tClCBAADsTRyb5kMJKv nD2flhFm1WxZimUFE5feLfBDB8BawcN7zPpi8HuCD9KfI7Yk2+kRA2tw5DBrTADx Sh8wF66U7JO4ET0zgc+qGv2JYtWcvA+F -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:18 2025 by rpki-client