$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft File: YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json) Hash identifier: unmzzsnntv/D5dr7nKAfWmDZ9O+ORNPApjdOJrSvVtE= Subject key identifier: 3E:6C:A2:CF:3E:7B:C2:7F:93:8B:F2:02:7A:24:3C:F5:E6:BA:78:73 Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C Certificate issuer: /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft Manifest number: 037C Signing time: Fri 22 Aug 2025 22:27:30 +0000 Manifest this update: Fri 22 Aug 2025 22:27:30 +0000 Manifest next update: Fri 29 Aug 2025 22:27:30 +0000 Files and hashes: 1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: V/Njmot0Zei3nFXLFlRUlugJ2ZRqyRg5heh7Zik2wz4=) 2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: Y6irjrKKHKY/zWiKAS27Fm2Vi8M6r+kieeDoyEvMRvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Validity Not Before: Aug 22 22:27:30 2025 GMT Not After : Aug 29 22:27:30 2025 GMT Subject: CN=68a8eed2-573a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2d:b9:15:45:a7:08:bb:09:7f:30:28:ac:32: 18:0a:ad:ee:1f:3f:9f:98:c0:c9:50:cd:ff:fe:c4: 04:9f:60:6a:6a:7a:c1:0e:2d:86:46:bc:92:69:7c: 43:3a:bd:fc:2d:0f:a1:cb:89:15:99:7a:4b:fa:10: b5:e9:69:af:35:2f:3c:bd:3c:5d:e2:83:65:9a:bd: 4c:49:ad:7d:6a:8e:0d:52:7c:c7:2f:5f:d4:60:69: a7:9f:5e:e9:3a:d5:15:54:b5:19:e3:df:2f:ba:ff: dd:e5:97:1c:7d:4a:1d:60:61:fe:e8:5d:db:fb:60: 62:f9:0b:0b:90:c6:42:5d:91:82:b0:39:90:17:58: 55:ad:44:8e:4b:be:28:43:7b:e7:63:ce:97:e1:27: 25:0a:be:7c:74:e0:f9:22:35:b7:ea:3a:fa:68:24: a2:a7:ff:25:94:25:13:95:01:08:a6:d6:41:c8:42: 68:3c:07:ce:06:56:af:ea:ad:72:3b:ec:5e:6c:50: 75:f8:fa:5a:8d:de:4a:fc:33:3f:e6:99:2c:ce:c1: 6b:0a:b9:86:58:ed:66:ba:e6:f4:3e:71:ac:9f:dd: f5:df:a3:e8:da:8e:95:e1:56:8e:1d:53:87:57:8f: 41:fd:ea:40:8d:e6:a3:ea:5c:be:bd:23:27:61:fa: bd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6C:A2:CF:3E:7B:C2:7F:93:8B:F2:02:7A:24:3C:F5:E6:BA:78:73 X509v3 Authority Key Identifier: keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:12:9b:f4:b6:cf:31:3d:47:12:91:5c:0a:19:c9:f0:5d:9b: 0d:e4:8e:64:18:29:28:de:fe:70:cd:1e:66:a2:c5:f4:f5:b5: a1:73:52:7d:a3:e5:a3:ce:f3:74:77:40:b6:fa:e3:79:e0:67: 3a:89:a2:49:f1:b1:38:16:2d:cf:b0:ae:89:0f:f0:d7:92:3c: 46:77:51:fc:2c:5c:7f:6c:2f:47:54:e7:e6:c4:d4:7c:92:41: 1d:da:fa:13:fd:ae:b0:36:19:32:af:13:ff:c6:38:5d:a2:c0: f8:75:b5:a9:15:d9:9c:b5:74:59:d2:f1:f9:aa:89:7a:77:06: 40:c5:4a:d5:0d:bd:4d:13:0a:d4:af:52:61:98:7c:01:8e:2a: 12:5e:3a:27:20:0c:e5:ea:05:28:7a:9b:21:28:e7:a5:c1:32: c7:47:af:51:76:b7:39:96:80:ee:eb:fd:b9:36:fe:77:59:27: d8:72:c8:02:55:20:28:6a:26:ef:cc:13:3c:12:9c:d2:8e:fa: 08:60:58:bf:63:7c:35:b1:7a:f9:94:c2:91:e9:4d:b8:b8:7a: 05:da:c4:90:00:9c:38:c5:e3:7b:83:57:af:16:37:b9:38:b4: 19:4b:d8:54:52:d4:31:c3:0f:d5:59:c8:da:ad:14:fa:88:7c: 2c:58:06:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDYyNjIwRDYwREJBODUyOEFFQTQyMTJDQ0VEQjcyOTYx M0E5OTE1NUMwHhcNMjUwODIyMjIyNzMwWhcNMjUwODI5MjIyNzMwWjAYMRYwFAYD VQQDEw02OGE4ZWVkMi01NzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5i25FUWnCLsJfzAorDIYCq3uHz+fmMDJUM3//sQEn2BqanrBDi2GRrySaXxD Or38LQ+hy4kVmXpL+hC16WmvNS88vTxd4oNlmr1MSa19ao4NUnzHL1/UYGmnn17p OtUVVLUZ498vuv/d5ZccfUodYGH+6F3b+2Bi+QsLkMZCXZGCsDmQF1hVrUSOS74o Q3vnY86X4SclCr58dOD5IjW36jr6aCSip/8llCUTlQEIptZByEJoPAfOBlav6q1y O+xebFB1+Ppajd5K/DM/5pkszsFrCrmGWO1muub0PnGsn93136Po2o6V4VaOHVOH V49B/epAjeaj6ly+vSMnYfq99QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5sos8+ e8J/k4vyAnokPPXmunhzMB8GA1UdIwQYMBaAFGJiDWDbqFKK6kISzO23KWE6mRVc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9CRjFFNzExOEJB QzcxMUVDOEU2Q0EyODdDNEY5QUUwMi9ZbUlOWU51b1VvcnFRaExNN2JjcFlUcVpG VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1ltSU5ZTnVvVW9ycVFoTE03YmNwWVRxWkZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9CRjFFNzExOEJBQzcxMUVDOEU2Q0EyODdDNEY5QUUwMi9ZbUlOWU51b1Vv cnFRaExNN2JjcFlUcVpGVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFEpv0ts8xPUcSkVwKGcnwXZsN5I5kGCko3v5wzR5mosX09bWhc1J9 o+WjzvN0d0C2+uN54Gc6iaJJ8bE4Fi3PsK6JD/DXkjxGd1H8LFx/bC9HVOfmxNR8 kkEd2voT/a6wNhkyrxP/xjhdosD4dbWpFdmctXRZ0vH5qol6dwZAxUrVDb1NEwrU r1JhmHwBjioSXjonIAzl6gUoepshKOelwTLHR69Rdrc5loDu6/25Nv53WSfYcsgC VSAoaibvzBM8EpzSjvoIYFi/Y3w1sXr5lMKR6U24uHoF2sSQAJw4xeN7g1evFje5 OLQZS9hUUtQxww/VWcjarRT6iHwsWAYT -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:22 2025 by rpki-client