$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft File: ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft (raw, json) Hash identifier: Z9bAYbXaW0BJMpAqXBsT/aFbDr7Zi+eZBT/7UrGxTmc= Subject key identifier: 01:B4:AA:40:32:15:6E:10:8E:C7:94:D4:54:FA:E3:FB:4F:18:9A:6E Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8 Certificate issuer: /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8 Certificate serial: 08FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft Manifest number: 08E6 Signing time: Fri 22 Aug 2025 20:32:44 +0000 Manifest this update: Fri 22 Aug 2025 20:32:44 +0000 Manifest next update: Fri 29 Aug 2025 20:32:44 +0000 Files and hashes: 1: ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl (hash: Oly+1unJ8VRVrtIrP/MM1QFylgOxy9gZPI6GjYiGC6A=) 2: E43CFABEB67611ECACB17C42C4F9AE02.roa (hash: xFhwmyCR50XOerYq8iSgMgO+SIsbHjR9sIw6IGAYvWU=) 3: A778E94E598911EBA7B14777C4F9AE02.roa (hash: Z21NxB4s+kOX44LQC1mykWpLjv30/E11cYoVZ/qqS00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8 Validity Not Before: Aug 22 20:32:44 2025 GMT Not After : Aug 29 20:32:44 2025 GMT Subject: CN=68a8d3ec-f903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:8c:e8:62:b8:02:3a:bb:9f:30:94:f7:55: 64:84:09:71:3a:5e:60:e5:81:23:81:d5:21:68:27: ca:85:69:e8:8e:07:0c:ec:85:f2:44:67:03:91:5b: 6d:c0:96:bb:cc:cc:77:de:09:17:59:2d:16:98:6f: 3d:fe:1b:fa:a7:63:da:18:3d:aa:32:bf:a2:05:42: 14:bb:6d:98:24:42:0f:4b:db:62:7d:8e:e6:9e:39: c9:03:84:fa:e7:ae:30:91:eb:48:d9:27:b8:e4:05: 56:20:05:e4:58:ca:67:23:0a:b9:6b:9d:17:ed:39: 96:89:d8:95:21:2c:f9:79:49:88:5f:2c:f2:ac:eb: d9:e9:c3:3c:07:a7:5f:11:9a:85:88:51:12:2a:b3: 88:9d:f0:4d:81:05:ef:1a:8e:17:53:e3:1d:d2:a1: c9:22:07:59:39:71:30:fb:6a:6e:68:99:12:7f:35: f0:25:1b:30:b2:9d:92:a6:90:f4:78:d9:a0:7f:3e: 61:e9:be:be:41:6a:7f:47:10:15:34:fa:40:f6:77: e9:54:2e:51:61:f4:b3:75:68:5d:6e:ca:d1:05:53: 2f:c6:1d:25:1d:54:0e:e4:33:6f:16:89:0f:98:87: aa:4a:a6:4f:fe:7b:ec:9c:df:b3:28:db:0a:06:f8: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B4:AA:40:32:15:6E:10:8E:C7:94:D4:54:FA:E3:FB:4F:18:9A:6E X509v3 Authority Key Identifier: keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f2:0d:62:23:d5:72:e7:9a:d5:c2:93:a1:71:6b:f9:d2:59: ca:cf:42:e7:68:bd:b3:fe:8c:e3:7e:aa:0a:43:1d:19:43:a8: 73:c0:91:d0:e7:e7:c8:d4:89:f0:0f:98:5d:98:5f:54:8e:72: c4:b8:87:8d:cd:90:56:9a:2f:9a:11:66:c9:18:8a:e4:20:56: 0e:36:5d:e5:45:14:4b:b1:8d:07:30:0a:38:08:ed:21:81:95: e2:91:98:74:11:60:59:4a:52:4f:cc:0a:ae:49:7a:5d:65:0f: ba:f6:62:d1:44:2e:a2:ca:ee:0f:d4:a2:ce:d6:4e:f4:da:4d: a7:82:94:c4:09:73:80:44:3c:b6:18:0c:1d:3e:c3:d5:98:27: 5a:a2:7d:df:77:39:bb:4c:cf:1a:34:5e:bf:f2:96:0f:f3:ca: 66:17:ae:79:01:b2:1f:78:92:3c:36:52:ef:6e:26:a6:61:f4: 7a:d2:a3:29:25:d0:cf:87:0d:36:1f:30:7a:7a:c4:12:f6:91: 5c:ec:55:1e:be:31:30:0f:cf:6d:b0:a7:38:99:cd:03:0d:95: ab:80:77:4a:1b:5e:59:3e:2a:7f:d2:3b:34:dd:bf:8c:40:a0: 19:1d:f4:75:62:a0:a6:08:95:db:88:79:e8:05:80:3c:fe:d6: 18:6e:0b:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2ODMxMTAvBgNVBAUTKENBN0M4NkJFMDBEQjQxNDUwM0VENUVFNkMwQUY5MjhG MzRDNUM3RDgwHhcNMjUwODIyMjAzMjQ0WhcNMjUwODI5MjAzMjQ0WjAYMRYwFAYD VQQDEw02OGE4ZDNlYy1mOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMiM6GK4Ajq7nzCU91VkhAlxOl5g5YEjgdUhaCfKhWnojgcM7IXyRGcDkVtt wJa7zMx33gkXWS0WmG89/hv6p2PaGD2qMr+iBUIUu22YJEIPS9tifY7mnjnJA4T6 564wketI2Se45AVWIAXkWMpnIwq5a50X7TmWidiVISz5eUmIXyzyrOvZ6cM8B6df EZqFiFESKrOInfBNgQXvGo4XU+Md0qHJIgdZOXEw+2puaJkSfzXwJRswsp2SppD0 eNmgfz5h6b6+QWp/RxAVNPpA9nfpVC5RYfSzdWhdbsrRBVMvxh0lHVQO5DNvFokP mIeqSqZP/nvsnN+zKNsKBvjkrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAG0qkAy FW4QjseU1FT64/tPGJpuMB8GA1UdIwQYMBaAFMp8hr4A20FFA+1e5sCvko80xcfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY4My8zRjBCMzU2MkI3 OTMxMUVBQTRDNTRCMTRDNEY5QUUwMi95bnlHdmdEYlFVVUQ3Vjdtd0stU2p6VEZ4 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lueUd2Z0RiUVVVRDdWN213Sy1TanpURng5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY4My8zRjBCMzU2MkI3OTMxMUVBQTRDNTRCMTRDNEY5QUUwMi95bnlHdmdEYlFV VUQ3Vjdtd0stU2p6VEZ4OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB88g1iI9Vy55rVwpOhcWv50lnKz0LnaL2z/ozjfqoKQx0ZQ6hzwJHQ 5+fI1InwD5hdmF9UjnLEuIeNzZBWmi+aEWbJGIrkIFYONl3lRRRLsY0HMAo4CO0h gZXikZh0EWBZSlJPzAquSXpdZQ+69mLRRC6iyu4P1KLO1k702k2ngpTECXOARDy2 GAwdPsPVmCdaon3fdzm7TM8aNF6/8pYP88pmF655AbIfeJI8NlLvbiamYfR60qMp JdDPhw02HzB6esQS9pFc7FUevjEwD89tsKc4mc0DDZWrgHdKG15ZPip/0js03b+M QKAZHfR1YqCmCJXbiHnoBYA8/tYYbgto -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:42 2025 by rpki-client