$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft File: yvC3hLE-FADutCJboi1vmDiCTsM.mft (raw, json) Hash identifier: dk03/7S0KRis7LcI9ZtLm9Sey6ib1T6of2J7SM5cuNc= Subject key identifier: FD:4B:41:93:F8:03:F1:76:93:D4:5C:EE:8A:D5:58:1E:E2:6B:22:DE Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3 Certificate issuer: /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3 Certificate serial: 157E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft Manifest number: 155C Signing time: Fri 22 Aug 2025 16:54:30 +0000 Manifest this update: Fri 22 Aug 2025 16:54:29 +0000 Manifest next update: Fri 29 Aug 2025 16:54:29 +0000 Files and hashes: 1: yvC3hLE-FADutCJboi1vmDiCTsM.crl (hash: Ol370kERtYwsHmdsfBRZtOkfiJU2/SaOY/DY4mlCssI=) 2: 4861945C599A11ED99A5B776C4F9AE02.roa (hash: WWunrSKNr/tHvzh6M3TsIN0SasCbbY/rUP6pCCee+Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5502 (0x157e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D99E, serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3 Validity Not Before: Aug 22 16:54:29 2025 GMT Not After : Aug 29 16:54:29 2025 GMT Subject: CN=68a8a0c5-4034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:0e:22:76:ac:e0:65:b9:92:81:a0:42:1f: d1:98:0a:ea:23:2b:a4:ea:df:c9:d4:74:ce:87:0f: d6:90:f6:c6:f5:42:75:02:fe:b0:2e:6a:3a:70:43: 64:43:e6:10:ca:48:c4:ca:05:74:51:4b:b0:53:83: 1c:24:8c:75:27:35:3a:dd:f4:00:ae:8e:7a:c1:80: 19:2b:19:db:93:d8:d7:95:fa:6d:de:fc:dc:a9:db: be:ab:e6:da:b1:07:1f:f4:57:a3:97:38:ee:04:bd: 75:66:9a:c2:5f:b8:14:16:1e:a9:34:da:e8:c9:47: 1f:c2:cb:dc:b9:e8:f5:34:66:64:15:f5:93:f6:c5: 1b:dd:2e:99:ed:77:5d:d1:4c:03:81:30:80:64:95: b8:4a:dd:91:96:c7:c4:72:eb:04:7c:a4:5a:57:71: 3c:17:44:3d:9d:0b:fb:87:b5:c6:df:98:41:b3:09: 8e:a8:66:f7:04:7d:75:7c:87:c9:95:16:10:8b:56: 68:fe:dc:7c:ac:98:08:5b:78:56:7e:da:f9:bf:58: c1:a9:05:4d:8b:4d:92:ef:4d:f3:b4:47:0f:16:35: 7f:92:43:df:a0:ef:05:2b:5f:27:5f:d5:95:df:15: 3b:c6:e1:c5:8c:e2:27:14:2c:48:67:4d:7b:f0:10: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4B:41:93:F8:03:F1:76:93:D4:5C:EE:8A:D5:58:1E:E2:6B:22:DE X509v3 Authority Key Identifier: keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1a:77:f5:0e:93:4e:fd:ee:ce:77:2f:47:f1:a0:3f:68:13: 11:c7:ca:4c:58:f5:39:5c:cc:8d:37:f9:35:1e:a0:f1:e8:af: c0:df:46:43:03:22:c4:6e:e2:03:64:05:42:61:e4:ea:02:1d: 9f:89:86:81:00:50:62:32:9b:e9:00:62:d5:fe:c3:fe:0b:f6: ec:d3:12:6f:0b:58:51:bc:4b:16:64:1c:d7:24:c1:21:de:79: f0:b6:d1:27:51:ff:f4:53:0a:60:68:a7:db:31:fc:a5:13:cd: b9:e6:73:30:2c:e8:12:d8:89:57:56:a1:d0:31:0c:79:3d:ff: c2:eb:54:99:cc:46:a1:9f:d3:db:78:ec:12:49:22:30:62:ad: 4c:54:53:eb:94:45:2d:ab:7c:86:30:0c:0d:c5:4a:54:01:cd: e5:a4:b4:f2:ad:37:76:52:f7:68:f0:56:0a:35:59:eb:e7:8a: ff:fd:86:8d:5c:b4:25:e3:0c:0e:08:a3:87:8f:2b:40:88:da: 4a:1f:cf:ed:4e:33:ea:91:24:ce:01:af:51:03:33:53:57:e8: 76:62:75:1f:e7:de:cd:45:96:3c:84:87:28:fb:07:78:1b:2c: c8:8d:9a:de:76:06:6e:b1:0e:64:04:fd:2e:f8:bf:f7:0d:fb: 08:01:e5:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5OUUxMTAvBgNVBAUTKENBRjBCNzg0QjEzRTE0MDBFRUI0MjI1QkEyMkQ2Rjk4 Mzg4MjRFQzMwHhcNMjUwODIyMTY1NDI5WhcNMjUwODI5MTY1NDI5WjAYMRYwFAYD VQQDEw02OGE4YTBjNS00MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/0OInas4GW5koGgQh/RmArqIyuk6t/J1HTOhw/WkPbG9UJ1Av6wLmo6cENk Q+YQykjEygV0UUuwU4McJIx1JzU63fQAro56wYAZKxnbk9jXlfpt3vzcqdu+q+ba sQcf9FejlzjuBL11ZprCX7gUFh6pNNroyUcfwsvcuej1NGZkFfWT9sUb3S6Z7Xdd 0UwDgTCAZJW4St2RlsfEcusEfKRaV3E8F0Q9nQv7h7XG35hBswmOqGb3BH11fIfJ lRYQi1Zo/tx8rJgIW3hWftr5v1jBqQVNi02S703ztEcPFjV/kkPfoO8FK18nX9WV 3xU7xuHFjOInFCxIZ0178BAKaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1LQZP4 A/F2k9Rc7orVWB7iayLeMB8GA1UdIwQYMBaAFMrwt4SxPhQA7rQiW6Itb5g4gk7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDk5RS80NjA0OEM3MDQ5 NzExMUU4QTdGOUE2NzJDNEY5QUUwMi95dkMzaExFLUZBRHV0Q0pib2kxdm1EaUNU c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2QzNoTEUtRkFEdXRDSmJvaTF2bURpQ1RzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDk5RS80NjA0OEM3MDQ5NzExMUU4QTdGOUE2NzJDNEY5QUUwMi95dkMzaExFLUZB RHV0Q0pib2kxdm1EaUNUc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSGnf1DpNO/e7Ody9H8aA/aBMRx8pMWPU5XMyNN/k1HqDx6K/A30ZD AyLEbuIDZAVCYeTqAh2fiYaBAFBiMpvpAGLV/sP+C/bs0xJvC1hRvEsWZBzXJMEh 3nnwttEnUf/0UwpgaKfbMfylE8255nMwLOgS2IlXVqHQMQx5Pf/C61SZzEahn9Pb eOwSSSIwYq1MVFPrlEUtq3yGMAwNxUpUAc3lpLTyrTd2Uvdo8FYKNVnr54r//YaN XLQl4wwOCKOHjytAiNpKH8/tTjPqkSTOAa9RAzNTV+h2YnUf597NRZY8hIco+wd4 GyzIjZredgZusQ5kBP0u+L/3DfsIAeWU -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:59 2025 by rpki-client