$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: TE5oZ4vmPWcjONRuM/zCypZiAWMCENTxY66dWT0mnWQ= Subject key identifier: B5:8F:BD:26:3B:4D:87:D1:E6:F5:F8:10:84:F5:F9:A2:12:97:A1:57 Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 078A Signing time: Fri 22 Aug 2025 21:40:27 +0000 Manifest this update: Fri 22 Aug 2025 21:40:27 +0000 Manifest next update: Fri 29 Aug 2025 21:40:27 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: 9OULNTQlWld2W+5e6GwNsrgcJmR12qO4zV3Jh0IE6sY=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: pfFLA6S00NJF9wnUh3eyO3xPwlEBQIG4Qg4AiW8MLVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Aug 22 21:40:27 2025 GMT Not After : Aug 29 21:40:27 2025 GMT Subject: CN=68a8e3cb-a05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:32:1f:fa:2f:6d:28:9f:68:ff:78:ed:2d:97: c1:f2:08:9b:58:3e:39:a0:7d:95:73:04:e5:2f:28: 40:73:81:a4:77:85:f4:df:29:ba:8e:52:34:85:e5: 51:9f:a8:cc:a8:95:75:7c:7c:f6:da:30:01:b5:97: 77:a7:41:9d:53:88:f8:d9:7e:1a:47:ca:59:13:86: 7d:52:9b:d3:13:d3:50:3b:21:3b:de:50:b0:f0:21: 32:4f:57:70:ef:3d:a7:68:df:c3:52:c8:91:8c:80: f3:14:8a:2f:3a:92:9e:6c:84:f0:77:a2:08:89:4b: a7:ed:36:8f:1d:7d:48:23:6c:e2:a5:ed:64:b5:87: 56:0f:ca:8a:67:11:1c:f1:51:71:4e:36:30:c3:7c: 98:ec:a6:83:ef:7a:fb:11:ee:92:3d:dc:57:c6:89: 51:dd:5b:01:c9:ba:1c:50:44:dd:ab:7c:8b:d4:5a: 5b:e4:a2:f8:57:85:4f:bf:6b:b4:c6:0f:01:59:d3: 41:09:33:06:4c:9e:3c:47:2d:bb:e6:f3:16:74:12: 6b:35:9f:a0:1c:65:c2:53:fc:7a:47:a0:db:6d:35: 9f:0f:fd:35:79:1e:ab:f9:cd:e5:d1:0f:f8:6f:3b: 1a:1c:62:50:84:1a:02:fc:7e:98:b7:ea:30:1a:a9: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8F:BD:26:3B:4D:87:D1:E6:F5:F8:10:84:F5:F9:A2:12:97:A1:57 X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b5:72:9a:ba:07:ec:f6:34:56:ca:b7:13:4f:77:c2:da:72: c9:84:01:8a:55:9d:68:fc:f6:d4:ea:d5:3a:cb:9d:76:9f:f1: 17:13:cc:d0:9e:e4:0d:8a:5f:cc:a3:a7:a6:a0:4d:da:39:31: 2c:f2:23:aa:d9:34:e6:7a:70:5e:cd:96:a9:e3:e9:d7:84:f1: f2:81:ea:f3:89:3d:52:80:05:7d:c6:5c:c8:4a:10:35:a5:90: a4:1c:35:9e:97:48:88:04:0d:4a:f9:62:be:40:d8:6b:6a:c2: 65:e5:b4:14:15:89:5e:29:26:1f:86:86:a3:f9:11:af:84:1b: 1f:24:e5:fc:c3:fd:aa:3c:5f:4f:58:df:37:ad:d6:9b:b6:7f: 2a:ad:ea:c4:8c:b5:a3:0e:e8:cc:55:99:dd:84:18:c7:e8:f7: b4:a3:64:f0:de:c9:97:f6:fe:81:b2:3a:47:60:0f:2a:98:4e: b4:9e:86:bc:56:bb:f3:fd:61:07:8b:e5:c1:e2:a6:a3:ee:ad: 21:ea:df:50:8b:6a:a5:9a:ef:35:78:83:19:09:05:3f:77:bc: a7:b4:84:f7:1e:00:db:17:8f:6d:00:1e:25:fb:44:f5:65:61: 65:9b:b2:08:14:b2:1c:df:f0:60:d8:1a:af:58:4f:c5:7d:10: 25:c7:a0:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjUwODIyMjE0MDI3WhcNMjUwODI5MjE0MDI3WjAYMRYwFAYD VQQDEw02OGE4ZTNjYi1hMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zIf+i9tKJ9o/3jtLZfB8gibWD45oH2VcwTlLyhAc4Gkd4X03ym6jlI0heVR n6jMqJV1fHz22jABtZd3p0GdU4j42X4aR8pZE4Z9UpvTE9NQOyE73lCw8CEyT1dw 7z2naN/DUsiRjIDzFIovOpKebITwd6IIiUun7TaPHX1II2zipe1ktYdWD8qKZxEc 8VFxTjYww3yY7KaD73r7Ee6SPdxXxolR3VsBybocUETdq3yL1Fpb5KL4V4VPv2u0 xg8BWdNBCTMGTJ48Ry275vMWdBJrNZ+gHGXCU/x6R6DbbTWfD/01eR6r+c3l0Q/4 bzsaHGJQhBoC/H6Yt+owGqmyNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWPvSY7 TYfR5vX4EIT1+aISl6FXMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZtXKaugfs9jRWyrcTT3fC2nLJhAGKVZ1o/PbU6tU6y512n/EXE8zQ nuQNil/Mo6emoE3aOTEs8iOq2TTmenBezZap4+nXhPHygerziT1SgAV9xlzIShA1 pZCkHDWel0iIBA1K+WK+QNhrasJl5bQUFYleKSYfhoaj+RGvhBsfJOX8w/2qPF9P WN83rdabtn8qrerEjLWjDujMVZndhBjH6Pe0o2Tw3smX9v6BsjpHYA8qmE60noa8 Vrvz/WEHi+XB4qaj7q0h6t9Qi2qlmu81eIMZCQU/d7yntIT3HgDbF49tAB4l+0T1 ZWFlm7IIFLIc3/Bg2BqvWE/FfRAlx6DU -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:39 2025 by rpki-client