$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: Uc4vjLpUxakDdmyIHsMWU22y2jkYOR/5JQK2GFsFNr4= Subject key identifier: DD:79:DC:56:67:E4:CD:01:E2:4C:31:F7:12:55:AB:EE:7E:48:9D:89 Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 081E Signing time: Fri 08 Aug 2025 21:11:20 +0000 Manifest this update: Fri 08 Aug 2025 21:11:20 +0000 Manifest next update: Fri 15 Aug 2025 21:11:20 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: xVHrGDJWSpBd4xxD+QJ4gYqZqQWedLSULKUhtk/VHkU=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: EHew2Al89yfLEVdXGaRbj1T8KtGh2w0PUC3MBSskoUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: Aug 8 21:11:20 2025 GMT Not After : Aug 15 21:11:20 2025 GMT Subject: CN=689667f8-f80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:3b:ca:5b:0a:37:c8:62:5e:0d:03:a2:ce: 64:fa:6a:ab:4e:2e:c0:89:27:e4:8d:df:ec:8a:77: aa:41:5b:e2:2c:ff:03:34:fb:b3:1f:b8:40:98:eb: bd:f2:69:06:df:05:f8:07:94:fa:b1:8d:46:d4:8b: b2:24:a8:ba:24:fa:f3:1d:b5:01:90:19:cb:30:e6: d5:30:a4:57:79:b5:87:66:39:da:da:4f:9b:1f:3c: f7:12:1d:7c:80:e8:aa:83:dc:05:56:dc:40:c5:be: aa:18:cf:e8:08:24:eb:30:aa:1a:ea:0d:69:78:bf: 44:21:a1:81:f9:cc:43:7e:c0:57:ff:5e:19:1a:5b: 07:21:9c:7e:61:f6:98:f2:f6:9c:20:4a:a4:30:0d: f5:15:d1:7d:6d:1a:77:3f:53:c1:e1:aa:6e:bb:d1: f6:9c:17:9f:fc:16:b4:b0:a6:c8:52:86:5e:93:6c: d7:69:8b:ce:db:9c:fd:1c:b1:bf:0b:c0:2f:e2:95: 2f:f4:74:09:c3:01:bd:2f:e4:14:59:90:2d:1b:85: 24:d8:ca:91:1c:0b:f6:87:4d:d9:4c:e3:49:b9:66: 29:57:7a:39:64:91:76:55:67:61:59:0e:93:59:16: e4:27:41:82:12:63:72:61:d0:00:d0:d2:40:82:2b: 59:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:79:DC:56:67:E4:CD:01:E2:4C:31:F7:12:55:AB:EE:7E:48:9D:89 X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:f8:74:20:9e:a7:ee:a8:f2:02:73:d0:09:95:a7:75:2a:00: 7b:25:07:2c:60:c1:d8:6f:08:c5:db:21:c8:23:f2:4e:9f:9e: 28:54:8f:cf:01:f0:3e:00:1e:f1:64:73:35:74:85:8b:e6:f1: 48:03:ab:1b:9b:11:0f:80:31:e9:27:00:24:a0:e7:65:d6:f9: d3:69:3b:99:b7:67:3a:9c:b9:b9:b8:a6:5a:0e:5a:f8:ce:a3: e7:e5:35:06:58:1a:68:f5:ca:41:62:57:01:6d:a4:0b:e7:6d: 58:27:a9:80:75:5e:d6:09:44:0e:38:c5:4c:1f:01:2b:b9:fe: d7:1d:eb:b0:d3:24:ac:47:ab:0e:7b:68:82:4c:56:10:c6:13: b3:2e:d3:73:c7:3b:37:2f:37:e1:1d:f7:b9:2e:b7:6a:8e:38: 5a:5e:0f:3f:ef:61:ef:7d:ae:28:4a:47:85:92:d9:6e:86:e3: 25:13:08:36:c4:d3:ee:b4:40:9f:aa:dc:12:2f:48:ee:58:2c: 9a:71:ba:95:04:ee:af:67:e0:42:5d:84:46:00:85:3a:d9:c7: 48:0f:21:0f:a0:6f:64:e0:91:4a:38:22:4f:c7:63:b5:28:5e: de:a8:ed:c7:1e:05:91:6b:fd:bf:37:6c:48:f9:1e:f4:0f:b2: e4:f7:a6:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjUwODA4MjExMTIwWhcNMjUwODE1MjExMTIwWjAYMRYwFAYD VQQDEw02ODk2NjdmOC1mODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpQ7ylsKN8hiXg0Dos5k+mqrTi7AiSfkjd/sineqQVviLP8DNPuzH7hAmOu9 8mkG3wX4B5T6sY1G1IuyJKi6JPrzHbUBkBnLMObVMKRXebWHZjna2k+bHzz3Eh18 gOiqg9wFVtxAxb6qGM/oCCTrMKoa6g1peL9EIaGB+cxDfsBX/14ZGlsHIZx+YfaY 8vacIEqkMA31FdF9bRp3P1PB4apuu9H2nBef/Ba0sKbIUoZek2zXaYvO25z9HLG/ C8Av4pUv9HQJwwG9L+QUWZAtG4Uk2MqRHAv2h03ZTONJuWYpV3o5ZJF2VWdhWQ6T WRbkJ0GCEmNyYdAA0NJAgitZCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN153FZn 5M0B4kwx9xJVq+5+SJ2JMB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3+HQgnqfuqPICc9AJlad1KgB7JQcsYMHYbwjF2yHII/JOn54oVI/P AfA+AB7xZHM1dIWL5vFIA6sbmxEPgDHpJwAkoOdl1vnTaTuZt2c6nLm5uKZaDlr4 zqPn5TUGWBpo9cpBYlcBbaQL521YJ6mAdV7WCUQOOMVMHwEruf7XHeuw0ySsR6sO e2iCTFYQxhOzLtNzxzs3LzfhHfe5LrdqjjhaXg8/72Hvfa4oSkeFktluhuMlEwg2 xNPutECfqtwSL0juWCyacbqVBO6vZ+BCXYRGAIU62cdIDyEPoG9k4JFKOCJPx2O1 KF7eqO3HHgWRa/2/N2xI+R70D7Lk96bY -----END CERTIFICATE-----Generated at Sat Aug 9 02:45:12 2025 by rpki-client