$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft File: YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json) Hash identifier: SQAGY1V6KV84EDNLqU18SIplEbtP741ilOkf96nhC8s= Subject key identifier: 03:63:0F:58:39:1B:E2:17:EA:22:64:8D:6B:3C:5F:82:5D:F4:26:41 Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B Certificate issuer: /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Certificate serial: 073A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft Manifest number: 072F Signing time: Fri 22 Aug 2025 21:56:22 +0000 Manifest this update: Fri 22 Aug 2025 21:56:22 +0000 Manifest next update: Fri 29 Aug 2025 21:56:22 +0000 Files and hashes: 1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: M2qfFS1wrGw43TJnutC7+/m/4iz2F2dNdg2YN33bxHU=) 2: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: zn3yB42jw2hzH+xn19p165uLAUG2n0kqHzuj3/mwn8o=) 3: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: HCayWNYMawI3TC+eVTwbN3SfHqs+Xl6h8HaND1yg0zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1850 (0x73a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A88D, serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Validity Not Before: Aug 22 21:56:22 2025 GMT Not After : Aug 29 21:56:22 2025 GMT Subject: CN=68a8e786-0e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:95:be:97:3e:4f:e3:fa:a5:58:2d:39:da: d7:e4:8d:40:13:4b:2a:22:47:44:57:a3:57:80:f3: 37:0e:c6:83:2b:74:66:9f:12:29:46:43:45:06:ab: 19:58:a6:6e:5b:9b:e2:d8:af:c6:cb:92:cb:d4:66: 23:da:e5:cc:49:86:59:4a:67:70:5b:25:b1:35:77: 0e:0b:59:52:ad:4f:7c:fc:e2:de:e8:4d:ea:ae:f8: 7e:11:27:4d:a2:75:11:7b:28:2a:7f:52:a6:6c:43: e9:30:ee:4d:44:f8:8b:fb:51:c0:31:1d:53:92:5e: 3c:bd:68:6e:0b:ca:e1:17:d5:fc:61:93:ea:05:7e: 5a:4b:b3:31:ca:e4:de:ea:9c:fa:3a:7a:e2:80:a0: ce:00:ea:fa:c3:2d:48:b7:0f:c9:29:a0:13:19:24: 27:d9:d6:f4:42:bd:09:76:57:ef:95:24:a3:73:28: 59:14:be:bb:bb:cc:30:6a:a4:a0:29:ff:37:77:6c: 08:09:08:41:cd:ad:c2:e5:a8:84:c3:6b:4b:d2:79: 49:75:88:af:99:fc:4f:51:90:f8:88:83:20:08:b5: 55:20:5b:f0:bb:2f:e9:e6:d9:13:fd:ff:61:26:b0: c5:68:d1:38:fd:3b:3e:6d:81:dc:9f:3d:f8:3c:1e: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:63:0F:58:39:1B:E2:17:EA:22:64:8D:6B:3C:5F:82:5D:F4:26:41 X509v3 Authority Key Identifier: keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0c:e5:0c:e9:86:d2:ed:57:4b:67:40:62:f1:60:59:bf:80: 8b:e7:c3:a0:f4:c3:49:ff:3c:84:2e:d5:63:36:c4:77:0d:e2: 1c:24:01:96:73:94:c5:f3:ae:36:2f:5b:01:18:26:02:c0:50: 61:93:65:3b:0e:00:df:50:4e:00:a3:71:e6:54:57:af:36:1e: e1:83:9d:a3:4e:55:10:e0:8b:b8:0a:db:e5:02:d8:fb:dd:e7: 7c:7b:c2:f1:7b:5f:d5:2b:20:a0:28:ee:15:84:7e:2b:6e:be: 04:ed:10:58:14:12:01:71:7b:8b:8f:dd:3d:63:73:09:f2:a1: 09:ef:3a:10:22:f0:d3:7d:a8:30:2a:e1:86:b9:7c:5d:f0:a8: c4:61:fe:05:20:8d:c4:e6:d6:a8:f5:1b:2a:89:a2:85:7a:39: f4:66:df:02:a3:7d:f2:5e:7b:3b:38:47:c2:aa:b9:85:8e:d5: a1:04:c4:57:91:36:40:b7:08:99:ea:9f:2d:2f:35:1a:5c:aa: 02:2b:ff:d2:5d:d1:37:76:15:1e:41:b5:aa:28:42:88:cc:57: 5c:58:b3:7f:b4:2c:e0:4b:f2:c1:c5:d6:e5:ef:f0:c6:81:b9: a1:8f:a0:a4:04:cb:41:d3:2c:36:44:a2:01:05:22:c9:75:b9: 7f:98:78:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4OEQxMTAvBgNVBAUTKDYwNkYzMzRCN0U4MDAzQTNDODIxRDBDOTg0MTlCMzE0 M0E5QTNFNEIwHhcNMjUwODIyMjE1NjIyWhcNMjUwODI5MjE1NjIyWjAYMRYwFAYD VQQDEw02OGE4ZTc4Ni0wZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMeVvpc+T+P6pVgtOdrX5I1AE0sqIkdEV6NXgPM3DsaDK3RmnxIpRkNFBqsZ WKZuW5vi2K/Gy5LL1GYj2uXMSYZZSmdwWyWxNXcOC1lSrU98/OLe6E3qrvh+ESdN onUReygqf1KmbEPpMO5NRPiL+1HAMR1Tkl48vWhuC8rhF9X8YZPqBX5aS7MxyuTe 6pz6OnrigKDOAOr6wy1Itw/JKaATGSQn2db0Qr0JdlfvlSSjcyhZFL67u8wwaqSg Kf83d2wICQhBza3C5aiEw2tL0nlJdYivmfxPUZD4iIMgCLVVIFvwuy/p5tkT/f9h JrDFaNE4/Ts+bYHcnz34PB5KFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANjD1g5 G+IX6iJkjWs8X4Jd9CZBMB8GA1UdIwQYMBaAFGBvM0t+gAOjyCHQyYQZsxQ6mj5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTg4RC9GMEYxOUYyMDQy OTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2UElJZERKaEJtekZEcWFQ a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHOHpTMzZBQTZQSUlkREpoQm16RkRxYVBrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTg4RC9GMEYxOUYyMDQyOTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2 UElJZERKaEJtekZEcWFQa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANDOUM6YbS7VdLZ0Bi8WBZv4CL58Og9MNJ/zyELtVjNsR3DeIcJAGW c5TF8642L1sBGCYCwFBhk2U7DgDfUE4Ao3HmVFevNh7hg52jTlUQ4Iu4CtvlAtj7 3ed8e8Lxe1/VKyCgKO4VhH4rbr4E7RBYFBIBcXuLj909Y3MJ8qEJ7zoQIvDTfagw KuGGuXxd8KjEYf4FII3E5tao9RsqiaKFejn0Zt8Co33yXns7OEfCqrmFjtWhBMRX kTZAtwiZ6p8tLzUaXKoCK//SXdE3dhUeQbWqKEKIzFdcWLN/tCzgS/LBxdbl7/DG gbmhj6CkBMtB0yw2RKIBBSLJdbl/mHi1 -----END CERTIFICATE-----Generated at Sat Aug 23 18:13:33 2025 by rpki-client