$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft File: yyBKq8TrV0KH_ARSchxbAQqavzE.mft (raw, json) Hash identifier: m8ZyHV5Ozdiy/mepbV5vTooynOe/A/c5uSAajzDNpHA= Subject key identifier: 94:38:3A:DC:FC:1D:AD:63:C9:CA:F0:36:CD:FB:2E:D5:A1:EB:41:D3 Authority key identifier: CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31 Certificate issuer: /CN=A911082E/serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft Manifest number: 13 Signing time: Sat 23 Aug 2025 08:17:01 +0000 Manifest this update: Sat 23 Aug 2025 08:17:01 +0000 Manifest next update: Sat 30 Aug 2025 08:17:01 +0000 Files and hashes: 1: yyBKq8TrV0KH_ARSchxbAQqavzE.crl (hash: kGuC/WZZBm2VDQx8Vu4MmtGvcICAJvOuRpgwbC1F0co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911082E, serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31 Validity Not Before: Aug 23 08:17:01 2025 GMT Not After : Aug 30 08:17:01 2025 GMT Subject: CN=68a978fd-2510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:2e:81:7a:95:59:51:5a:77:6d:c0:67:ff: 53:40:3f:5f:19:da:62:c6:fa:d6:ac:46:67:50:4c: 5e:8a:87:38:96:2f:ce:fa:4f:2c:5a:0e:62:92:a8: cb:04:73:5e:0a:bb:94:61:7a:6d:5d:85:2a:72:90: 9b:d0:1b:03:ec:eb:f0:19:91:e3:f8:3f:87:ba:b4: ab:d8:6d:ea:2e:a4:69:e0:6d:e2:18:f6:93:ec:ac: d0:11:42:cf:d2:11:f8:1f:69:3f:c5:bf:50:22:08: 99:c6:4c:0f:fe:eb:6f:b5:0a:7f:2c:4a:a7:47:b3: 93:c7:a7:92:75:78:7e:e6:2e:f6:a8:ac:6a:39:3e: 64:2d:90:3d:7a:2e:10:fb:0b:ce:24:eb:f1:b6:f6: 57:10:56:26:7f:7e:58:84:8a:ac:99:f3:87:45:e6: 71:1d:a5:0d:92:17:09:ef:5b:25:15:f5:b7:6d:a9: c9:0e:73:96:9d:a2:17:d6:0c:e3:4c:14:39:e1:8a: 98:ea:cf:b3:3b:16:40:37:51:02:29:37:3d:8b:44: c5:14:05:8f:86:f6:a5:50:04:85:e5:cd:a1:fe:07: 54:40:3c:be:4e:60:86:f4:f2:e7:7c:13:59:28:4e: d3:a8:ef:8f:0e:eb:6a:66:56:34:8c:d1:d1:5c:e6: cd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:38:3A:DC:FC:1D:AD:63:C9:CA:F0:36:CD:FB:2E:D5:A1:EB:41:D3 X509v3 Authority Key Identifier: keyid:CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:db:2f:ec:3c:04:ed:73:70:ca:32:de:58:b8:d1:74:84:e5: 5b:0b:6a:7b:25:36:8d:c4:62:0c:c0:95:93:5a:fc:38:56:32: a8:65:b3:36:aa:8f:b6:01:b2:54:93:66:66:6d:aa:73:7d:f7: d2:45:55:04:6c:cb:7c:f3:44:35:ce:d8:1a:57:4b:83:59:9d: 56:9f:1a:af:52:1f:94:fd:bd:4a:1b:32:c1:65:b4:fc:2a:9f: 6b:ae:51:61:60:7e:ef:cf:7c:9b:cb:74:0d:4a:7a:11:9d:99: 23:f4:da:4f:91:42:ab:0c:e0:5b:f1:b9:a1:e8:99:2e:f8:51: f6:0d:c5:75:69:2f:08:8d:19:42:24:6a:2c:2f:e2:98:89:f5: a8:37:f1:48:38:aa:cd:74:65:49:ce:74:7f:e4:5a:9b:1f:2d: fd:b2:a6:9e:5d:a4:ff:62:34:ad:e9:88:b2:69:c4:3f:da:da: 6c:38:af:60:5b:83:6a:8a:4e:cd:0c:7c:e8:88:49:74:a0:9c: 22:d5:28:3f:40:d1:c3:b3:be:3d:9f:c8:2e:51:54:48:c6:c0: 77:2c:2b:14:9f:6e:e2:f8:04:67:24:22:5e:f5:bf:44:65:fb: d5:51:41:3f:0f:64:ea:b9:81:2e:a3:9a:ed:8a:75:35:89:dc: e4:1c:b1:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDgyRTExMC8GA1UEBRMoQ0IyMDRBQUJDNEVCNTc0Mjg3RkMwNDUyNzIxQzVCMDEw QTlBQkYzMTAeFw0yNTA4MjMwODE3MDFaFw0yNTA4MzAwODE3MDFaMBgxFjAUBgNV BAMTDTY4YTk3OGZkLTI1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFXi6BepVZUVp3bcBn/1NAP18Z2mLG+tasRmdQTF6KhziWL876TyxaDmKSqMsE c14Ku5Rhem1dhSpykJvQGwPs6/AZkeP4P4e6tKvYbeoupGngbeIY9pPsrNARQs/S EfgfaT/Fv1AiCJnGTA/+62+1Cn8sSqdHs5PHp5J1eH7mLvaorGo5PmQtkD16LhD7 C84k6/G29lcQViZ/fliEiqyZ84dF5nEdpQ2SFwnvWyUV9bdtqckOc5adohfWDONM FDnhipjqz7M7FkA3UQIpNz2LRMUUBY+G9qVQBIXlzaH+B1RAPL5OYIb08ud8E1ko TtOo748O62pmVjSM0dFc5s3LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlDg63Pwd rWPJyvA2zfsu1aHrQdMwHwYDVR0jBBgwFoAUyyBKq8TrV0KH/ARSchxbAQqavzEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwODJFLzhERkU2MzY2NjZF MjExRjBCRUFCRTkzRUM0RjlBRTAyL3l5QktxOFRyVjBLSF9BUlNjaHhiQVFxYXZ6 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXlCS3E4VHJWMEtIX0FSU2NoeGJBUXFhdnpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw ODJFLzhERkU2MzY2NjZFMjExRjBCRUFCRTkzRUM0RjlBRTAyL3l5QktxOFRyVjBL SF9BUlNjaHhiQVFxYXZ6RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALPbL+w8BO1zcMoy3li40XSE5VsLanslNo3EYgzAlZNa/DhWMqhlszaq j7YBslSTZmZtqnN999JFVQRsy3zzRDXO2BpXS4NZnVafGq9SH5T9vUobMsFltPwq n2uuUWFgfu/PfJvLdA1KehGdmSP02k+RQqsM4FvxuaHomS74UfYNxXVpLwiNGUIk aiwv4piJ9ag38Ug4qs10ZUnOdH/kWpsfLf2ypp5dpP9iNK3piLJpxD/a2mw4r2Bb g2qKTs0MfOiISXSgnCLVKD9A0cOzvj2fyC5RVEjGwHcsKxSfbuL4BGckIl71v0Rl +9VRQT8PZOq5gS6jmu2KdTWJ3OQcsQc= -----END CERTIFICATE-----Generated at Sat Aug 23 20:34:16 2025 by rpki-client