$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: hBDr8tBF1CedoxGHcXMZXsnSRynMIik7PV26ulwLvq4= Subject key identifier: D5:25:60:D8:BA:BD:84:1F:A0:A0:A8:46:37:3A:0C:3D:EE:B9:78:8F Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 03C2 Signing time: Sat 23 Aug 2025 00:53:57 +0000 Manifest this update: Sat 23 Aug 2025 00:53:56 +0000 Manifest next update: Sat 30 Aug 2025 00:53:56 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: ripqVIU+Mmty1L1wU6R9m8jEEShlDDR6a5IWmv3C5sg=) 2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: /k7UGLxYpMRjSXOkhilDp1PbyHK35jDBnjLpEab1SqY=) 3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: nXP2TkV2xaQf8NtZFSYlzBkdLiCf/hTO1Pti6MrwpUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Aug 23 00:53:56 2025 GMT Not After : Aug 30 00:53:56 2025 GMT Subject: CN=68a91125-eb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:ed:45:b2:70:22:a0:65:ff:87:fc:91:c0: 1f:04:4d:18:65:ee:48:a1:f3:bc:80:d1:32:d1:5f: 3e:89:f9:8d:45:d6:4a:0a:13:c4:6f:e3:2a:59:f6: 37:0c:ed:6f:2d:c3:8a:a6:f4:e8:00:2b:d8:e3:be: b0:68:6d:a6:ed:d2:30:c6:c3:d8:0a:49:31:93:f8: c3:1e:44:b8:5e:db:b2:3f:1c:68:51:a5:dc:f0:a2: 59:a1:78:ee:d6:5f:39:99:6e:e3:d7:46:68:d8:50: 36:32:86:56:b5:b8:17:01:9d:fe:ad:e1:58:ad:00: 21:f8:05:76:40:15:22:23:71:09:86:b1:9d:5c:bb: 46:57:4f:a4:19:a2:fb:e9:4f:fc:86:5d:c7:d7:30: 49:16:a0:26:44:b6:1f:87:01:2a:89:52:e6:2a:c3: 68:c2:09:d5:e8:6a:a4:ec:08:1e:e3:58:98:cc:53: d7:6a:c9:c0:98:01:70:d0:d6:79:66:b7:f0:bf:91: e8:bb:9b:e2:18:d6:4d:4d:38:09:c6:08:60:e5:25: 67:be:17:5c:7d:33:17:83:a0:25:b9:0a:28:b5:b7: 5d:f8:38:eb:cf:2d:52:a8:89:60:80:63:a1:49:00: 37:57:ea:1c:69:7a:17:c9:c3:b7:36:ff:69:58:81: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:25:60:D8:BA:BD:84:1F:A0:A0:A8:46:37:3A:0C:3D:EE:B9:78:8F X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:b7:4c:9a:14:7f:bc:5f:09:7d:1a:65:5b:17:fc:88:7c:5f: 7d:08:e0:2a:f4:a5:73:8a:c2:c7:0b:72:20:3d:54:d5:3d:fc: b3:7e:df:ca:05:bf:db:18:93:0a:cb:c9:4e:a6:90:10:6b:8f: 1e:bb:32:8b:09:f3:6b:ec:25:a0:16:bb:d3:2a:16:2c:63:0a: 46:83:a6:72:41:51:69:8b:f6:2e:d9:e3:70:d7:46:e8:8a:ff: bd:9b:79:21:ea:6c:c2:cd:15:23:a4:26:dd:66:88:5c:41:e6: 5b:cf:41:ee:bd:31:42:f2:aa:09:25:a7:e4:9e:7e:84:fe:90: cb:0b:0f:83:31:2d:46:f5:59:0a:97:fb:9e:2e:76:7d:42:14: 10:44:9a:a5:1f:dd:a6:7a:b0:48:ad:2a:13:39:ec:1a:24:53: 08:6c:90:8f:d9:f0:df:e3:ce:41:6d:8f:f7:c2:14:de:f6:75: 94:01:c8:56:f4:d2:1a:e4:04:15:16:ff:1d:5f:44:ce:16:32: d4:c7:a1:fd:9a:88:e9:cc:81:e7:bb:1b:1a:a7:25:96:d9:8d: 75:04:b9:e8:c5:d4:3a:a6:27:b4:b0:1c:78:09:20:10:4d:7d: 90:2a:75:8a:41:f1:2d:fb:ec:8e:36:66:19:80:a3:a5:9f:53: 0b:b7:18:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjUwODIzMDA1MzU2WhcNMjUwODMwMDA1MzU2WjAYMRYwFAYD VQQDEw02OGE5MTEyNS1lYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybntRbJwIqBl/4f8kcAfBE0YZe5IofO8gNEy0V8+ifmNRdZKChPEb+MqWfY3 DO1vLcOKpvToACvY476waG2m7dIwxsPYCkkxk/jDHkS4XtuyPxxoUaXc8KJZoXju 1l85mW7j10Zo2FA2MoZWtbgXAZ3+reFYrQAh+AV2QBUiI3EJhrGdXLtGV0+kGaL7 6U/8hl3H1zBJFqAmRLYfhwEqiVLmKsNowgnV6Gqk7Age41iYzFPXasnAmAFw0NZ5 Zrfwv5Hou5viGNZNTTgJxghg5SVnvhdcfTMXg6AluQootbdd+Djrzy1SqIlggGOh SQA3V+ocaXoXycO3Nv9pWIEpSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUlYNi6 vYQfoKCoRjc6DD3uuXiPMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4t0yaFH+8Xwl9GmVbF/yIfF99COAq9KVzisLHC3IgPVTVPfyzft/K Bb/bGJMKy8lOppAQa48euzKLCfNr7CWgFrvTKhYsYwpGg6ZyQVFpi/Yu2eNw10bo iv+9m3kh6mzCzRUjpCbdZohcQeZbz0HuvTFC8qoJJafknn6E/pDLCw+DMS1G9VkK l/ueLnZ9QhQQRJqlH92merBIrSoTOewaJFMIbJCP2fDf485BbY/3whTe9nWUAchW 9NIa5AQVFv8dX0TOFjLUx6H9mojpzIHnuxsapyWW2Y11BLnoxdQ6pie0sBx4CSAQ TX2QKnWKQfEt++yONmYZgKOln1MLtxgC -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:59 2025 by rpki-client