$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft File: yq12WnMFvBUlSxWyW1vTm2Oow68.mft (raw, json) Hash identifier: 2ylOKwJxWhdB0gg1l5jaCDevXMqGtWBEAWtLd4k5Pr4= Subject key identifier: 61:CE:2E:2E:88:86:3F:CC:89:80:AC:D7:18:24:DC:3E:28:40:D1:A3 Authority key identifier: CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF Certificate issuer: /CN=A911082E/serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft Manifest number: 13 Signing time: Sat 23 Aug 2025 08:17:06 +0000 Manifest this update: Sat 23 Aug 2025 08:17:05 +0000 Manifest next update: Sat 30 Aug 2025 08:17:05 +0000 Files and hashes: 1: yq12WnMFvBUlSxWyW1vTm2Oow68.crl (hash: iTKmCMN7R3ZNa8lx2/NeMWdp/jb+nMpv6zxlIB8W0Ao=) 2: 2CD74E4E66E311F08F05EC49C4F9AE02.roa (hash: 8+dSzRSc1+OXhRbW6N90YyrDk4oOdvcvAyZdFxbaVw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911082E, serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF Validity Not Before: Aug 23 08:17:05 2025 GMT Not After : Aug 30 08:17:05 2025 GMT Subject: CN=68a97902-250c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:d2:1b:1b:fc:63:38:d3:0b:b6:5d:82:28: ce:7b:b9:53:a2:32:a8:c5:a2:d1:14:d7:d9:53:99: d6:6a:2b:fd:8e:eb:e2:5c:c4:05:21:98:96:2b:91: d1:24:18:b9:bf:6c:b2:ad:2b:a1:ff:55:f5:8d:80: 94:e5:40:e8:da:23:c1:a3:c9:91:b0:8a:18:f7:01: d5:65:b7:c4:97:e7:ba:60:ec:42:7d:8d:41:0a:06: 46:30:48:81:52:21:5c:ec:c5:bf:01:1b:4d:5c:41: 1e:72:0f:ca:27:03:32:ca:1e:a9:bb:a8:65:72:8c: a1:bc:83:f9:e0:01:fc:e1:66:17:0d:07:17:8d:40: a1:82:30:6d:79:d8:05:84:67:20:ae:77:40:b9:df: c3:c1:01:59:97:78:a8:dd:ab:62:14:9e:af:75:f3: 1c:13:68:80:ab:af:2c:4a:8b:a6:3d:69:32:2d:85: 07:2f:14:d5:b0:89:10:a0:87:91:4f:98:33:45:d3: be:ed:fb:f3:68:74:c8:10:37:61:20:11:24:c9:48: d3:ad:53:35:8f:9b:47:1d:a0:8a:a4:54:13:29:20: 52:fd:53:de:2a:9a:05:2e:d1:dc:fe:98:c5:2f:68: 38:45:0b:a4:3a:5d:55:bb:0b:35:51:4a:bf:f6:23: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CE:2E:2E:88:86:3F:CC:89:80:AC:D7:18:24:DC:3E:28:40:D1:A3 X509v3 Authority Key Identifier: keyid:CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:2c:f2:b4:84:89:d1:64:6b:52:63:2e:27:43:52:a6:65:d6: d8:d4:bd:15:cf:7e:83:3d:07:c1:ab:f4:05:17:9a:f2:14:50: 50:30:2b:a5:ca:d4:3a:35:e8:47:b5:ec:76:56:ed:65:b5:f1: 2e:15:f0:ad:e3:6a:79:9d:d7:c7:e7:63:2d:11:c1:16:75:01: f5:f2:25:18:47:d2:46:6a:b2:16:28:20:57:00:15:9a:fb:e7: 38:28:f8:c0:d3:94:12:57:dd:5a:21:09:60:61:0e:65:4c:4e: c0:24:ed:03:0e:72:99:cc:a3:e2:bf:1a:3b:da:fd:d5:89:0e: 0d:c9:af:9c:cd:e9:e5:df:22:14:2d:e7:a6:a8:e7:ea:35:5a: cb:4f:ae:07:58:9b:62:89:bf:85:cb:57:6a:90:49:2f:4f:bf: e0:64:59:fb:9c:23:5c:d2:00:46:70:c2:ac:8a:bd:58:12:53: 99:15:d0:8b:52:00:e3:ea:15:2f:57:f7:d6:8f:0d:46:c2:3c: 9b:8b:b8:dc:d7:3e:1a:4b:bf:c8:ad:d0:35:51:b5:c6:82:c9: b9:ad:9b:fe:65:ea:48:5f:a2:f4:ce:c8:61:10:90:16:39:78: 71:c7:a9:1d:69:c4:25:1a:70:4e:87:00:d0:53:fc:8e:71:49: f3:f6:ae:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDgyRTExMC8GA1UEBRMoQ0FBRDc2NUE3MzA1QkMxNTI1NEIxNUIyNUI1QkQzOUI2 M0E4QzNBRjAeFw0yNTA4MjMwODE3MDVaFw0yNTA4MzAwODE3MDVaMBgxFjAUBgNV BAMTDTY4YTk3OTAyLTI1MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLGNIbG/xjONMLtl2CKM57uVOiMqjFotEU19lTmdZqK/2O6+JcxAUhmJYrkdEk GLm/bLKtK6H/VfWNgJTlQOjaI8GjyZGwihj3AdVlt8SX57pg7EJ9jUEKBkYwSIFS IVzsxb8BG01cQR5yD8onAzLKHqm7qGVyjKG8g/ngAfzhZhcNBxeNQKGCMG152AWE ZyCud0C538PBAVmXeKjdq2IUnq918xwTaICrryxKi6Y9aTIthQcvFNWwiRCgh5FP mDNF077t+/NodMgQN2EgESTJSNOtUzWPm0cdoIqkVBMpIFL9U94qmgUu0dz+mMUv aDhFC6Q6XVW7CzVRSr/2Izi1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYc4uLoiG P8yJgKzXGCTcPihA0aMwHwYDVR0jBBgwFoAUyq12WnMFvBUlSxWyW1vTm2Oow68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwODJFLzg1M0ZEOTU4NjZF MjExRjBCRUFCRTkzRUM0RjlBRTAyL3lxMTJXbk1GdkJVbFN4V3lXMXZUbTJPb3c2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXExMlduTUZ2QlVsU3hXeVcxdlRtMk9vdzY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw ODJFLzg1M0ZEOTU4NjZFMjExRjBCRUFCRTkzRUM0RjlBRTAyL3lxMTJXbk1GdkJV bFN4V3lXMXZUbTJPb3c2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHQs8rSEidFka1JjLidDUqZl1tjUvRXPfoM9B8Gr9AUXmvIUUFAwK6XK 1Do16Ee17HZW7WW18S4V8K3janmd18fnYy0RwRZ1AfXyJRhH0kZqshYoIFcAFZr7 5zgo+MDTlBJX3VohCWBhDmVMTsAk7QMOcpnMo+K/Gjva/dWJDg3Jr5zN6eXfIhQt 56ao5+o1WstPrgdYm2KJv4XLV2qQSS9Pv+BkWfucI1zSAEZwwqyKvVgSU5kV0ItS AOPqFS9X99aPDUbCPJuLuNzXPhpLv8it0DVRtcaCybmtm/5l6khfovTOyGEQkBY5 eHHHqR1pxCUacE6HANBT/I5xSfP2rmo= -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:08 2025 by rpki-client