$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft File: yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json) Hash identifier: Lx5koM6174xSX9Gdr4tORLtBOxnWKJESAMjbo0QNXlM= Subject key identifier: 05:90:43:FF:EA:56:BE:CF:98:22:1F:8C:E2:80:BE:81:4C:D2:4B:0D Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 Certificate issuer: /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft Manifest number: 23 Signing time: Sat 09 Aug 2025 08:22:12 +0000 Manifest this update: Sat 09 Aug 2025 08:22:11 +0000 Manifest next update: Sat 16 Aug 2025 08:22:11 +0000 Files and hashes: 1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: Ww5GUouVSMGKnGSEp3HZaUqZOTtI5tjKiB7ytvB3Jt0=) 2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: wcclgPl4R6E/Zzr/USbPvSIER4uFng9U6618g1EWkBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Validity Not Before: Aug 9 08:22:11 2025 GMT Not After : Aug 16 08:22:11 2025 GMT Subject: CN=68970534-3368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:03:b3:57:b5:46:aa:d3:40:0b:26:09:3f:38: 8a:1b:df:32:3a:ae:c6:0e:0b:fe:ca:b2:c6:e7:0e: f1:44:dd:58:06:b3:a6:46:87:6b:4e:ab:12:18:6a: 55:ae:41:94:ce:08:55:4e:70:e1:36:b5:c4:a8:4f: 82:60:c1:78:6a:d5:e9:dd:f0:b3:34:12:a2:c2:58: 3e:44:42:95:36:ba:37:84:c0:11:ec:01:af:4d:e9: ca:78:d2:0b:f4:10:60:a6:cc:2f:9f:f8:17:08:f0: f3:9a:41:5c:3e:05:90:d9:fb:9e:8c:3f:84:03:ec: 30:c0:b1:d2:6f:f7:b8:66:77:f5:fa:d9:03:e6:d6: bd:df:10:17:72:5c:32:92:89:0a:6e:9b:25:f7:cd: 5d:0b:bf:33:d4:c3:28:1f:57:4e:5f:dc:e0:98:02: 2e:9e:36:8a:01:0b:88:4d:b1:3a:73:30:cb:57:c6: cb:1e:2e:0a:c8:c8:c7:53:7b:1c:c6:4d:47:17:53: dd:78:c1:43:d6:a7:13:05:e8:2e:85:8a:d6:5c:fc: 49:03:ba:87:8a:5e:80:da:39:30:f3:f2:bb:37:8d: 9e:46:e5:80:26:1d:a9:39:c2:69:6f:2e:fe:af:62: 12:de:6e:60:91:00:c2:20:a4:24:bd:49:3c:01:35: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:90:43:FF:EA:56:BE:CF:98:22:1F:8C:E2:80:BE:81:4C:D2:4B:0D X509v3 Authority Key Identifier: keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d2:28:99:a6:67:e3:af:2b:5e:66:85:95:48:7a:fd:db:b2: f3:22:9f:81:47:52:36:82:0d:7d:db:41:96:5f:f4:e1:ee:03: 7b:e2:32:b3:ba:0c:ce:9c:f6:8a:1c:0b:c8:5e:80:4f:6c:d2: 2c:b5:ea:09:56:c1:34:ed:3d:59:6b:98:11:f6:59:42:d0:28: be:6c:a0:de:7c:f6:ae:a5:d8:d4:0b:e2:ef:ea:0e:98:67:18: 6e:ed:04:fa:73:f1:1f:80:b2:60:c4:05:13:30:19:6e:e1:4e: a8:b8:ad:5e:b8:48:c3:97:f5:4a:7e:cd:c4:55:af:34:75:d0: 3b:e1:f5:ef:88:df:92:5c:3e:e7:ea:f1:9b:ce:48:72:ca:39: 27:2b:a5:67:65:f8:9b:20:bc:8b:ba:a8:e6:27:dd:57:8a:5a: e4:a0:0d:fd:40:ef:3e:d4:f2:db:a0:81:fa:45:cb:8f:3c:54: 4e:2a:3e:ac:32:43:29:97:71:b8:db:aa:9d:8b:a1:e9:4f:48: db:4b:00:10:fe:03:2b:f7:bc:c9:9e:32:34:3d:b9:b5:63:22: d9:01:41:ce:c3:f8:07:09:d0:ec:bd:a0:0b:56:ff:1e:2d:bc: 28:7a:13:b5:ec:3d:bf:89:70:80:ac:82:7b:c3:3a:5a:18:02: 4d:8e:d4:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoQzkxMkIwNTRDQTQzQTkzNEMxNzc1NzMzRDg0QkYxNkU0 ODU2QkVGMDAeFw0yNTA4MDkwODIyMTFaFw0yNTA4MTYwODIyMTFaMBgxFjAUBgNV BAMTDTY4OTcwNTM0LTMzNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNA7NXtUaq00ALJgk/OIob3zI6rsYOC/7KssbnDvFE3VgGs6ZGh2tOqxIYalWu QZTOCFVOcOE2tcSoT4JgwXhq1end8LM0EqLCWD5EQpU2ujeEwBHsAa9N6cp40gv0 EGCmzC+f+BcI8POaQVw+BZDZ+56MP4QD7DDAsdJv97hmd/X62QPm1r3fEBdyXDKS iQpumyX3zV0LvzPUwygfV05f3OCYAi6eNooBC4hNsTpzMMtXxsseLgrIyMdTexzG TUcXU914wUPWpxMF6C6FitZc/EkDuoeKXoDaOTDz8rs3jZ5G5YAmHak5wmlvLv6v YhLebmCRAMIgpCS9STwBNTEjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBZBD/+pW vs+YIh+M4oC+gUzSSw0wHwYDVR0jBBgwFoAUyRKwVMpDqTTBd1cz2EvxbkhWvvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBL0EyRDVFRTVFNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRUQmQxY3oyRXZ4YmtoV3Z2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVJLd1ZNcERxVFRCZDFjejJFdnhia2hXdnZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBL0EyRDVFRTVFNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRU QmQxY3oyRXZ4YmtoV3Z2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGvSKJmmZ+OvK15mhZVIev3bsvMin4FHUjaCDX3bQZZf9OHuA3viMrO6 DM6c9oocC8hegE9s0iy16glWwTTtPVlrmBH2WULQKL5soN589q6l2NQL4u/qDphn GG7tBPpz8R+AsmDEBRMwGW7hTqi4rV64SMOX9Up+zcRVrzR10Dvh9e+I35JcPufq 8ZvOSHLKOScrpWdl+JsgvIu6qOYn3VeKWuSgDf1A7z7U8tuggfpFy488VE4qPqwy QymXcbjbqp2LoelPSNtLABD+Ayv3vMmeMjQ9ubVjItkBQc7D+AcJ0Oy9oAtW/x4t vCh6E7XsPb+JcICsgnvDOloYAk2O1MY= -----END CERTIFICATE-----Generated at Mon Aug 11 06:15:47 2025 by rpki-client