$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: jbvtcG8U/w0rLlaHLxUGefGzjlHfu7k0BFF2MRZoKQ4= Subject key identifier: 5E:03:CB:33:D0:0B:2D:D4:AC:5F:DD:28:85:2D:F5:F3:4B:B0:53:6E Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0E5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 1FC0 Signing time: Sat 02 Aug 2025 17:22:39 +0000 Manifest this update: Sat 02 Aug 2025 17:22:39 +0000 Manifest next update: Sat 09 Aug 2025 17:22:39 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: MRVBkcJhIrUAhtZEDsD/I5EMZc2l88ZucG6XK8zyu1k=) 2: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: 2QTo+CsdRhAVYGY+SP4UeTuLXQh1z3BW1C7/XMRXisw=) 3: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: qTqcBFpr622OYkqG96eDnnoJ09wPpnvN7CHOU2zyZG0=) 4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: SV6dYe0/qbcbeBjCTRLSVOKAd3cmZlbo1prAD3jSVSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3674 (0xe5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Aug 2 17:22:39 2025 GMT Not After : Aug 9 17:22:39 2025 GMT Subject: CN=688e495f-44d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:4e:d7:cd:97:ee:39:56:94:97:48:41:15: 4d:56:a1:82:a5:60:29:d9:de:00:e5:04:17:ad:a7: aa:40:5c:c9:f0:8e:e2:76:f0:7b:44:90:6e:f2:5b: dd:54:bf:a3:23:b6:9b:da:f7:4f:81:7c:ee:02:d6: 88:61:a0:c9:9f:10:10:86:43:01:4e:4c:ae:46:ec: 2b:14:56:8c:93:3b:13:41:f9:0a:7e:eb:0c:9e:12: 44:7a:1a:62:c2:02:b7:37:b8:63:3e:ed:16:7f:82: 95:0b:31:34:49:fe:1f:96:76:51:ce:ab:6c:de:bc: 8d:5c:c9:7b:ab:cc:1f:11:a8:58:b8:7e:12:3b:8b: f7:06:d6:7d:d6:74:7d:32:13:19:5b:8a:0b:4f:d7: 37:f8:35:9f:24:bd:2e:8b:dd:86:b9:18:9e:ed:3f: ed:61:ed:bf:c4:cf:e2:f8:bf:78:51:db:0f:06:37: f7:e4:8b:4b:da:67:65:27:b8:80:1f:eb:96:99:76: 72:3f:c4:79:7e:dc:2b:2f:d7:26:3b:a9:07:d9:f6: 1f:ee:ce:56:62:f6:28:a9:19:4f:67:f5:5d:85:db: d6:4c:b0:71:a7:1b:47:6a:ac:1c:05:fd:aa:89:39: ef:b0:73:41:e2:6b:cb:b1:45:e3:c3:ab:a0:56:97: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:03:CB:33:D0:0B:2D:D4:AC:5F:DD:28:85:2D:F5:F3:4B:B0:53:6E X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:9b:7a:dc:36:44:5b:b4:0f:c3:33:f5:50:19:21:78:1d:1d: b9:8d:2c:6b:3e:7d:57:fb:64:b3:61:0b:c1:6f:70:87:57:79: 9d:9e:49:db:ae:48:77:ae:9f:a4:b4:63:ff:7e:74:21:22:92: 21:3e:94:c2:2f:87:98:24:b1:07:55:be:43:3a:73:5d:f2:f5: 67:27:31:66:dd:aa:fe:a0:e1:92:30:53:5d:76:4a:1e:7a:4c: 94:1b:8a:16:2c:30:0d:0a:3d:14:44:ff:96:08:11:68:18:60: 40:61:57:e8:53:51:09:9b:a1:4c:4f:c2:73:cb:25:dd:96:c1: de:c1:d8:f7:b2:e1:c5:60:29:11:b3:75:b8:b3:27:4c:89:48: 69:46:ca:88:62:7e:1a:f7:9a:36:6e:c3:09:d2:df:e3:75:70: 11:d2:27:05:7a:fa:3d:05:3b:f4:f1:b1:f7:52:6b:7a:51:eb: 62:89:81:30:76:e0:10:33:f0:5a:5b:0c:f4:2f:c4:50:60:14: e3:6f:be:7a:06:2a:22:f9:4c:6a:77:67:db:79:b2:56:27:77: ed:a2:6e:cf:08:13:72:61:0f:c0:1d:27:2b:8f:c6:99:7e:e5: 52:22:13:21:72:50:6d:9d:27:ac:73:ab:55:6b:7a:a9:86:4d: e9:0d:18:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjUwODAyMTcyMjM5WhcNMjUwODA5MTcyMjM5WjAYMRYwFAYD VQQDEw02ODhlNDk1Zi00NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEhO182X7jlWlJdIQRVNVqGCpWAp2d4A5QQXraeqQFzJ8I7idvB7RJBu8lvd VL+jI7ab2vdPgXzuAtaIYaDJnxAQhkMBTkyuRuwrFFaMkzsTQfkKfusMnhJEehpi wgK3N7hjPu0Wf4KVCzE0Sf4flnZRzqts3ryNXMl7q8wfEahYuH4SO4v3BtZ91nR9 MhMZW4oLT9c3+DWfJL0ui92GuRie7T/tYe2/xM/i+L94UdsPBjf35ItL2mdlJ7iA H+uWmXZyP8R5ftwrL9cmO6kH2fYf7s5WYvYoqRlPZ/VdhdvWTLBxpxtHaqwcBf2q iTnvsHNB4mvLsUXjw6ugVpf1qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4DyzPQ Cy3UrF/dKIUt9fNLsFNuMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHm3rcNkRbtA/DM/VQGSF4HR25jSxrPn1X+2SzYQvBb3CHV3mdnknb rkh3rp+ktGP/fnQhIpIhPpTCL4eYJLEHVb5DOnNd8vVnJzFm3ar+oOGSMFNddkoe ekyUG4oWLDANCj0URP+WCBFoGGBAYVfoU1EJm6FMT8JzyyXdlsHewdj3suHFYCkR s3W4sydMiUhpRsqIYn4a95o2bsMJ0t/jdXAR0icFevo9BTv08bH3Umt6UetiiYEw duAQM/BaWwz0L8RQYBTjb756Bioi+Uxqd2fbebJWJ3ftom7PCBNyYQ/AHScrj8aZ fuVSIhMhclBtnSesc6tVa3qphk3pDRjR -----END CERTIFICATE-----Generated at Mon Aug 4 11:22:13 2025 by rpki-client