$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: SSPPtcw2i8pO46doE1+sdL710kAxeTrORZHiPnzkbSE= Subject key identifier: AC:2E:73:F0:0E:E2:5D:80:90:47:8C:BA:40:C3:D6:12:B6:57:53:32 Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0BA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0B8E Signing time: Fri 22 Aug 2025 19:10:08 +0000 Manifest this update: Fri 22 Aug 2025 19:10:08 +0000 Manifest next update: Fri 29 Aug 2025 19:10:08 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: 1/WFQTa1eExjwPVy4PuPD4l4gp1EZG+gB4RcS6qle00=) 2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: 9VkEhYHF3f19k3ccapKOmWUnQN3qe0LKW0bGLzgAj2Q=) 3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: UVKRHigELp+/xtOJ9hxFUzKgCIBL/cBJ5XfcHMgTaRI=) 4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: qEnxbXTZjYArRGRzDWZrlZe2tR2ZHb8POdNuo8ieu30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2979 (0xba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Aug 22 19:10:08 2025 GMT Not After : Aug 29 19:10:08 2025 GMT Subject: CN=68a8c090-d2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ae:71:0b:3c:1d:07:25:fb:de:14:25:c1:02: c4:32:a6:d8:3a:fe:6e:9c:4f:5b:a2:eb:31:9b:d6: cf:23:24:f3:f4:bb:cd:42:3a:70:0a:86:56:fc:d5: 5f:14:fd:8b:94:42:9d:20:95:f2:e4:65:8a:b6:3c: dc:a6:7a:6f:52:d6:3c:f9:21:2f:e6:3c:0e:81:64: e8:8b:41:18:a9:7e:67:93:91:56:33:d3:ce:58:74: a6:7b:bd:19:6b:e4:82:eb:b8:51:23:31:18:92:0a: 95:a5:8e:d1:96:9c:68:b9:7f:0d:76:5e:38:bf:a7: 03:4a:07:16:3c:32:6d:39:b8:66:ba:2f:dd:c9:bd: 95:ac:f9:8c:5a:b5:fc:1d:27:e2:6a:04:42:b5:73: 78:c8:b3:fa:ce:3c:06:dc:80:ab:17:22:51:dc:64: f3:9f:47:63:41:76:31:50:d7:ea:49:78:9b:4e:39: 3f:d3:ba:49:c1:9d:dc:e5:81:a9:97:09:45:8b:a6: 3f:59:45:1c:fd:b0:eb:8c:f7:a6:6b:c6:e4:6d:6b: 4b:ba:d3:28:aa:6d:68:51:44:8f:a2:99:76:a1:5d: f6:ee:89:f1:d2:f2:d5:24:55:d6:7c:59:fa:26:54: 4c:99:a2:10:64:47:c8:ce:ff:56:05:7f:fa:94:4a: 63:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2E:73:F0:0E:E2:5D:80:90:47:8C:BA:40:C3:D6:12:B6:57:53:32 X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:40:35:28:2c:c0:2c:d3:8a:a3:3a:01:30:e0:02:7e:e4:b5: db:cb:de:ab:91:de:59:fc:ac:67:98:7b:f0:7c:16:94:19:31: 1d:0b:bc:98:4e:cc:03:82:31:13:a8:36:77:50:02:ea:88:a0: fd:95:07:86:34:24:7e:95:66:39:a7:4c:15:af:1c:f6:d2:08: ff:cb:fb:81:a2:dd:e1:e7:a8:3d:be:6e:c8:1d:33:00:78:67: 89:ef:ac:d6:39:e7:4c:85:5d:0a:15:97:c9:da:e4:c8:00:6d: 6b:e8:f4:bc:bd:fd:8e:72:2a:d1:f1:63:bc:a4:54:69:21:69: 40:80:4a:35:09:e7:ec:b8:bd:20:df:71:9b:61:33:3b:6f:67: 2f:dd:29:58:05:0e:9b:38:c2:61:10:82:8a:2c:33:c1:e8:d7: a7:33:8b:94:bc:d7:b7:17:0f:4a:65:30:03:75:a7:90:b3:94: ab:0e:e0:45:f4:ab:ac:02:22:31:9e:ef:58:cb:ed:d3:53:df: 41:b4:fe:03:d7:95:36:c9:29:26:fd:b7:97:df:1e:29:cf:79: e6:74:41:53:84:3e:ba:f1:15:71:24:44:f2:8d:6e:1a:11:43: 73:d9:9f:98:65:4d:9f:6f:32:a5:88:fa:a0:22:6a:5a:20:ac: ca:48:01:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjUwODIyMTkxMDA4WhcNMjUwODI5MTkxMDA4WjAYMRYwFAYD VQQDEw02OGE4YzA5MC1kMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA465xCzwdByX73hQlwQLEMqbYOv5unE9bousxm9bPIyTz9LvNQjpwCoZW/NVf FP2LlEKdIJXy5GWKtjzcpnpvUtY8+SEv5jwOgWToi0EYqX5nk5FWM9POWHSme70Z a+SC67hRIzEYkgqVpY7RlpxouX8Ndl44v6cDSgcWPDJtObhmui/dyb2VrPmMWrX8 HSfiagRCtXN4yLP6zjwG3ICrFyJR3GTzn0djQXYxUNfqSXibTjk/07pJwZ3c5YGp lwlFi6Y/WUUc/bDrjPema8bkbWtLutMoqm1oUUSPopl2oV327onx0vLVJFXWfFn6 JlRMmaIQZEfIzv9WBX/6lEpjVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwuc/AO 4l2AkEeMukDD1hK2V1MyMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNQDUoLMAs04qjOgEw4AJ+5LXby96rkd5Z/KxnmHvwfBaUGTEdC7yY TswDgjETqDZ3UALqiKD9lQeGNCR+lWY5p0wVrxz20gj/y/uBot3h56g9vm7IHTMA eGeJ76zWOedMhV0KFZfJ2uTIAG1r6PS8vf2OcirR8WO8pFRpIWlAgEo1CefsuL0g 33GbYTM7b2cv3SlYBQ6bOMJhEIKKLDPB6NenM4uUvNe3Fw9KZTADdaeQs5SrDuBF 9KusAiIxnu9Yy+3TU99BtP4D15U2ySkm/beX3x4pz3nmdEFThD668RVxJETyjW4a EUNz2Z+YZU2fbzKliPqgImpaIKzKSAG2 -----END CERTIFICATE-----Generated at Sun Aug 24 03:36:51 2025 by rpki-client