$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft File: YJezTWdAEygGKfiFypA_1pq5W-M.mft (raw, json) Hash identifier: mleXnNSbaLfNzY1AkOokgvcfBGZx99jHHGsT/Il/oUA= Subject key identifier: 8D:C9:8D:1B:7F:AA:27:FB:F9:02:64:82:DC:30:10:56:21:B2:10:41 Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 Certificate issuer: /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Certificate serial: 34CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft Manifest number: 34BB Signing time: Sun 10 Aug 2025 14:24:56 +0000 Manifest this update: Sun 10 Aug 2025 14:24:55 +0000 Manifest next update: Sun 17 Aug 2025 14:24:55 +0000 Files and hashes: 1: YJezTWdAEygGKfiFypA_1pq5W-M.crl (hash: q7pzLLk5wsEMPOesIxKs2lK/UNUBcUEQfh8x4EmetTo=) 2: 41DE51D0DF3E11EEBE02E04AC4F9AE02.roa (hash: u8VuvQLywySwcNuZG2wm75kmmpBCDtk/JuLndNmG558=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13518 (0x34ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E742, serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Validity Not Before: Aug 10 14:24:55 2025 GMT Not After : Aug 17 14:24:55 2025 GMT Subject: CN=6898abb8-4d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:54:dc:7d:db:6b:14:3a:1b:d3:e8:a0:03:74: fd:fa:05:ae:f3:9f:63:73:9c:d7:3a:51:94:64:a1: ec:11:16:b2:94:f4:14:74:77:13:06:f6:ae:5a:41: 56:fd:36:32:a9:b6:f7:04:7b:49:0b:0a:7d:0b:fa: fb:a7:65:a2:31:30:e8:65:ef:82:4f:85:73:ed:4e: 46:71:09:7f:41:c4:a4:29:82:50:ed:5f:63:ef:6d: 4a:a8:73:4b:5f:f9:52:8d:21:6b:a6:fc:4a:b2:21: 83:5c:7d:98:c3:cf:04:c2:ee:d3:68:2b:6c:6d:27: 4f:ef:ca:c5:ba:a5:7f:02:e8:1f:3a:74:0c:d8:e5: fb:b3:94:25:93:10:bd:2b:3f:51:f0:97:19:3d:41: e7:7b:9c:c6:5e:39:c7:07:f5:c9:18:b1:4a:a6:53: 38:f4:52:14:e9:e3:d4:01:f1:d0:4e:7d:76:e1:b2: a0:e4:58:13:e6:a7:90:14:bf:92:43:f2:41:8e:00: fa:72:b3:8e:04:67:f7:f3:7f:9e:84:ec:f8:c8:72: e1:8e:74:2a:4f:34:70:19:ee:75:94:51:4a:bc:f7: be:e5:5a:f2:9c:ac:cd:a7:24:00:46:95:a5:8e:82: a1:59:a1:7d:34:cd:ef:01:5d:e3:ed:24:8a:0f:50: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C9:8D:1B:7F:AA:27:FB:F9:02:64:82:DC:30:10:56:21:B2:10:41 X509v3 Authority Key Identifier: keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:50:3e:23:55:1f:f4:bb:0c:15:11:a3:b5:09:83:da:0e:d3: af:46:a2:20:59:3d:ff:e4:f1:0f:f9:c7:d4:f5:2e:bb:2c:4b: e8:de:5a:f1:53:47:4d:10:e7:ef:fa:70:1b:47:bb:80:2f:c0: d4:d1:a3:f5:f5:53:59:66:96:9f:31:c4:91:02:0b:e9:93:41: 36:83:71:75:65:28:ec:8a:37:41:45:63:2f:16:22:11:13:39: 12:8b:ca:31:62:04:f3:8e:66:e4:f9:9d:2b:8d:aa:6b:44:d3: 5f:45:89:94:6e:b7:20:ca:d6:5a:dc:cb:bb:35:a7:e5:99:b4: ca:a1:c5:3e:46:72:1e:0d:c2:ca:eb:b7:1b:50:4c:26:93:b9: fc:2c:62:9e:b8:56:aa:2c:b0:c3:7d:f9:b4:27:2f:83:c4:78: 2a:53:de:74:ad:a6:01:cb:f6:1b:3a:14:53:81:e2:e9:d5:16: 3e:57:6e:b7:a2:18:81:48:c2:1b:eb:f1:30:cd:47:e3:52:98: 0f:cc:0b:1f:09:65:44:a4:f0:3c:3a:85:56:ca:c1:e0:95:c7: 19:b6:42:dd:11:62:3d:f5:72:cc:11:16:f4:78:23:e7:a3:eb: 10:a2:b0:5c:6b:1c:bc:ff:b6:4a:12:e3:b5:8c:3f:50:5f:38: ef:c7:34:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NDIxMTAvBgNVBAUTKDYwOTdCMzRENjc0MDEzMjgwNjI5Rjg4NUNBOTAzRkQ2 OUFCOTVCRTMwHhcNMjUwODEwMTQyNDU1WhcNMjUwODE3MTQyNDU1WjAYMRYwFAYD VQQDEw02ODk4YWJiOC00ZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FTcfdtrFDob0+igA3T9+gWu859jc5zXOlGUZKHsERaylPQUdHcTBvauWkFW /TYyqbb3BHtJCwp9C/r7p2WiMTDoZe+CT4Vz7U5GcQl/QcSkKYJQ7V9j721KqHNL X/lSjSFrpvxKsiGDXH2Yw88Ewu7TaCtsbSdP78rFuqV/AugfOnQM2OX7s5QlkxC9 Kz9R8JcZPUHne5zGXjnHB/XJGLFKplM49FIU6ePUAfHQTn124bKg5FgT5qeQFL+S Q/JBjgD6crOOBGf383+ehOz4yHLhjnQqTzRwGe51lFFKvPe+5VrynKzNpyQARpWl joKhWaF9NM3vAV3j7SSKD1AvlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3JjRt/ qif7+QJkgtwwEFYhshBBMB8GA1UdIwQYMBaAFGCXs01nQBMoBin4hcqQP9aauVvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc0Mi8yRUQwRjVGQzFE ODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5Z0dLZmlGeXBBXzFwcTVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKZXpUV2RBRXlnR0tmaUZ5cEFfMXBxNVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc0Mi8yRUQwRjVGQzFEODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5 Z0dLZmlGeXBBXzFwcTVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgUD4jVR/0uwwVEaO1CYPaDtOvRqIgWT3/5PEP+cfU9S67LEvo3lrx U0dNEOfv+nAbR7uAL8DU0aP19VNZZpafMcSRAgvpk0E2g3F1ZSjsijdBRWMvFiIR EzkSi8oxYgTzjmbk+Z0rjaprRNNfRYmUbrcgytZa3Mu7NaflmbTKocU+RnIeDcLK 67cbUEwmk7n8LGKeuFaqLLDDffm0Jy+DxHgqU950raYBy/YbOhRTgeLp1RY+V263 ohiBSMIb6/EwzUfjUpgPzAsfCWVEpPA8OoVWysHglccZtkLdEWI99XLMERb0eCPn o+sQorBcaxy8/7ZKEuO1jD9QXzjvxzTp -----END CERTIFICATE-----Generated at Mon Aug 11 10:31:04 2025 by rpki-client