$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json) Hash identifier: WRZE2/v0NQ2ulpVc1P1k+08TVwhMt5cSNVGisD/b67g= Subject key identifier: F9:04:BA:9C:E8:C0:99:36:8E:BE:51:23:00:16:EA:2B:9A:71:96:57 Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Certificate serial: 03F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft Manifest number: 03EF Signing time: Sun 03 Aug 2025 01:03:30 +0000 Manifest this update: Sun 03 Aug 2025 01:03:29 +0000 Manifest next update: Sun 10 Aug 2025 01:03:29 +0000 Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: cuGt45nB+ixoK/x5x2ZBC8dn0TZ9fIMOHBG8F/qY93s=) 2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: 4ePFqqTPP+4ZfS7bacR18941px2N5kQ0emROx+NaWmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1012 (0x3f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Validity Not Before: Aug 3 01:03:29 2025 GMT Not After : Aug 10 01:03:29 2025 GMT Subject: CN=688eb561-9d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3a:b7:fd:d8:8b:f2:9c:7d:c8:be:9c:41:fb: 25:1a:7a:9d:6c:57:a1:ce:4c:25:01:39:9e:38:a8: 41:56:2b:91:64:2d:70:5c:48:80:08:21:8f:70:0d: c3:96:4e:a8:7f:c2:bf:18:83:3b:b4:99:ce:b2:99: e6:6c:93:89:53:a1:ed:f6:09:52:e8:5c:12:b5:cd: 2f:ce:28:fa:05:36:78:75:c7:f3:e3:f9:a4:f4:8e: fb:fe:07:fb:14:81:87:5c:8a:c6:b7:8b:2e:94:a9: f3:43:95:58:67:2e:c9:b4:5b:59:9b:98:38:52:36: 98:3b:28:f3:3c:45:11:5f:72:0c:e3:d1:8c:89:31: 48:43:b8:dc:91:2c:68:f8:3f:eb:08:b5:5c:0f:b3: b2:7e:b9:c2:7e:b1:ba:b2:c1:ca:dc:a3:b0:aa:d8: e4:b2:19:dc:da:49:5a:f9:11:54:1e:44:1b:55:bc: eb:00:d1:ae:bf:17:10:9f:e7:1a:70:46:64:77:56: 47:5d:5b:9b:b7:4d:e1:9a:a6:12:92:a7:f9:ff:6d: 64:dc:24:33:c9:ae:53:bf:6d:47:60:72:ec:8e:78: 3f:40:24:28:77:f3:ff:57:3c:98:7b:19:05:b6:d4: 0b:12:a5:e0:f1:e2:63:19:9a:f4:9c:b5:fb:15:a3: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:04:BA:9C:E8:C0:99:36:8E:BE:51:23:00:16:EA:2B:9A:71:96:57 X509v3 Authority Key Identifier: keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:88:3d:f2:db:38:51:1b:de:2c:e5:2e:60:b9:dc:81:7f:e2: d7:1b:fe:07:2c:ca:7a:f7:55:eb:64:59:7a:67:32:e0:0b:e8: 21:dc:09:25:8e:ab:63:13:5c:d1:25:16:eb:ae:ef:0f:7d:6e: ec:c0:ba:93:de:44:9c:82:46:3e:44:f8:83:a0:9c:21:86:de: f3:b9:c6:d1:8c:6e:82:98:77:22:da:ee:17:0d:21:93:0a:bd: ef:19:af:c9:5c:9a:9e:e9:03:cb:d9:4e:24:a0:c4:3c:e7:bd: 2a:66:4f:12:f1:ca:7c:ff:ee:f6:bb:70:73:da:b2:b9:b4:22: b0:30:45:50:fd:15:2e:4f:45:7e:62:5b:59:ae:4b:1c:7c:40: 6e:90:37:82:4e:79:72:3f:98:30:6a:5b:7e:0d:ad:69:d2:f7: 55:29:3b:07:29:5d:70:78:0c:dd:ab:8e:b4:33:84:14:bb:81: e4:ee:6c:19:c7:c3:28:eb:7c:24:dd:23:4d:a6:39:51:ce:e8: 22:a2:be:f4:22:3d:d8:be:e0:05:30:ef:5c:1b:12:69:88:68: 54:ac:34:3d:37:e7:30:fd:a9:cb:9b:59:e9:a2:f3:a5:8f:ee: fc:60:ce:bf:a3:f3:25:c2:9e:d3:ef:d1:dd:a3:bf:3e:1e:ab: 5b:d9:b7:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2 RkU2RDFGNTYwHhcNMjUwODAzMDEwMzI5WhcNMjUwODEwMDEwMzI5WjAYMRYwFAYD VQQDEw02ODhlYjU2MS05ZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jq3/diL8px9yL6cQfslGnqdbFehzkwlATmeOKhBViuRZC1wXEiACCGPcA3D lk6of8K/GIM7tJnOspnmbJOJU6Ht9glS6FwStc0vzij6BTZ4dcfz4/mk9I77/gf7 FIGHXIrGt4sulKnzQ5VYZy7JtFtZm5g4UjaYOyjzPEURX3IM49GMiTFIQ7jckSxo +D/rCLVcD7OyfrnCfrG6ssHK3KOwqtjkshnc2kla+RFUHkQbVbzrANGuvxcQn+ca cEZkd1ZHXVubt03hmqYSkqf5/21k3CQzya5Tv21HYHLsjng/QCQod/P/VzyYexkF ttQLEqXg8eJjGZr0nLX7FaNl9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkEupzo wJk2jr5RIwAW6iuacZZXMB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3 QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD YXBUT2FtbERJNDV2NXRIMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWiD3y2zhRG94s5S5gudyBf+LXG/4HLMp691XrZFl6ZzLgC+gh3Akl jqtjE1zRJRbrru8PfW7swLqT3kScgkY+RPiDoJwhht7zucbRjG6CmHci2u4XDSGT Cr3vGa/JXJqe6QPL2U4koMQ8570qZk8S8cp8/+72u3Bz2rK5tCKwMEVQ/RUuT0V+ YltZrkscfEBukDeCTnlyP5gwalt+Da1p0vdVKTsHKV1weAzdq460M4QUu4Hk7mwZ x8Mo63wk3SNNpjlRzugior70Ij3YvuAFMO9cGxJpiGhUrDQ9N+cw/anLm1npovOl j+78YM6/o/Mlwp7T79Hdo78+Hqtb2bd1 -----END CERTIFICATE-----Generated at Mon Aug 4 11:22:41 2025 by rpki-client