$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft File: YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft (raw, json) Hash identifier: mvFHRL9TI6LSj+wgiIVq/HdbK/mR4uRr+0dNJrSg29k= Subject key identifier: 64:EE:F0:AB:A5:26:C3:D5:0F:CF:73:2B:88:45:62:73:57:9C:D3:ED Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA Certificate issuer: /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft Manifest number: 0A5C Signing time: Fri 22 Aug 2025 19:48:28 +0000 Manifest this update: Fri 22 Aug 2025 19:48:27 +0000 Manifest next update: Fri 29 Aug 2025 19:48:27 +0000 Files and hashes: 1: YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl (hash: ysXP5Lq4Tly+ulJM5mCcbflxFtymlGVie3t1nW8oAqQ=) 2: 0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (hash: Hp6K1tI8/RrDTW95E3dlGX3/hbhtzZBhD6rGFjZDwK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A839, serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Validity Not Before: Aug 22 19:48:27 2025 GMT Not After : Aug 29 19:48:27 2025 GMT Subject: CN=68a8c98c-7866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:4f:38:37:fc:d7:e4:62:9b:76:a0:9f:f2: b9:a9:97:35:20:ae:0f:9b:1d:72:eb:c5:6b:a8:58: 2d:11:37:a6:17:d3:3d:c9:19:90:29:61:61:b9:04: 32:d4:ad:38:f2:74:ed:0f:89:4e:e3:d9:0a:d8:0d: ee:17:bc:b4:af:fb:5f:3a:5f:d3:8a:0d:22:e2:d4: ef:c8:38:49:a7:d1:9d:2b:a3:6e:de:4d:42:83:41: 42:1c:a9:61:f5:f5:d0:4b:f1:b9:6f:5a:aa:9f:7b: 37:cb:d8:1f:70:d7:e0:0e:92:e2:4d:71:7f:b5:f2: 23:57:7c:ae:27:0e:33:a4:ad:31:c3:10:5e:91:de: 75:a3:b1:f8:7f:19:5d:6a:ab:8e:5f:97:9c:aa:e9: ef:a1:a0:32:a8:55:11:b2:aa:83:c8:e3:00:ba:12: d4:55:80:dc:a0:f2:41:59:74:aa:50:e6:64:b3:2f: 30:b3:89:89:21:20:33:3d:d7:3f:3d:bf:a4:33:8c: 7a:72:cc:10:9c:1c:27:ed:60:cd:97:c2:2c:55:0c: 03:b2:9b:ee:ef:31:e7:11:b7:c7:41:6f:9d:a3:14: 77:94:6d:02:ed:6c:e2:4a:d0:78:0a:a7:b7:da:72: 6c:fc:04:b1:32:06:3d:7a:47:f3:7c:f0:1b:7e:e4: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EE:F0:AB:A5:26:C3:D5:0F:CF:73:2B:88:45:62:73:57:9C:D3:ED X509v3 Authority Key Identifier: keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3e:21:04:9a:bb:72:8d:aa:56:d0:c4:49:f1:83:85:7c:d0: 6d:e0:9a:dc:50:11:2e:e3:ca:00:9c:35:e4:59:8e:10:c0:d3: f8:04:eb:93:6d:fc:0c:47:89:bf:ff:b5:da:37:ab:4c:6a:d6: 01:ed:f9:cf:01:24:cd:fd:21:56:72:4a:dc:ab:06:d3:71:30: dc:27:bc:24:40:81:00:99:e3:cf:90:5f:c3:97:66:aa:f6:1e: 69:66:e5:c6:a6:95:98:b6:4d:f0:45:52:08:b4:7f:21:68:90: ba:3e:cc:06:be:16:6b:44:a2:e0:8d:d1:02:cb:d9:59:f0:10: 31:de:26:0f:af:05:13:2c:fb:3c:0b:43:dd:16:38:25:db:71: fa:e2:39:0f:9d:b9:d4:46:bc:42:62:b8:cf:8f:32:29:4b:bb: de:1b:34:b3:02:83:9c:6e:9c:d1:a2:84:4c:b8:c0:a0:b4:c9: 24:59:6a:12:e6:4c:c6:2e:72:e6:65:c1:dc:66:03:40:2c:ab: b9:ea:96:bb:74:84:4b:66:53:63:ca:59:38:16:b9:72:bc:49: 7b:b8:00:8c:f9:4e:fa:99:ee:9e:e2:14:67:b2:66:bd:68:bb: a7:42:52:8d:ee:09:c5:2d:6b:ba:2b:d3:01:79:a5:2e:ea:82: 3e:4f:04:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4MzkxMTAvBgNVBAUTKDYwQUIzQ0ZGQUI4OEE1MTM0MkI4MTZGMDU5MDE5RjA3 M0U5NTAwQUEwHhcNMjUwODIyMTk0ODI3WhcNMjUwODI5MTk0ODI3WjAYMRYwFAYD VQQDEw02OGE4Yzk4Yy03ODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsV9PODf81+Rim3agn/K5qZc1IK4Pmx1y68VrqFgtETemF9M9yRmQKWFhuQQy 1K048nTtD4lO49kK2A3uF7y0r/tfOl/Tig0i4tTvyDhJp9GdK6Nu3k1Cg0FCHKlh 9fXQS/G5b1qqn3s3y9gfcNfgDpLiTXF/tfIjV3yuJw4zpK0xwxBekd51o7H4fxld aquOX5ecqunvoaAyqFURsqqDyOMAuhLUVYDcoPJBWXSqUOZksy8ws4mJISAzPdc/ Pb+kM4x6cswQnBwn7WDNl8IsVQwDspvu7zHnEbfHQW+doxR3lG0C7WziStB4Cqe3 2nJs/ASxMgY9ekfzfPAbfuRD0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTu8Kul JsPVD89zK4hFYnNXnNPtMB8GA1UdIwQYMBaAFGCrPP+riKUTQrgW8FkBnwc+lQCq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgzOS9DMEUwM0NGNDZD MkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBSTkN1QmJ3V1FHZkJ6NlZB S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lLczhfNnVJcFJOQ3VCYndXUUdmQno2VkFLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTgzOS9DMEUwM0NGNDZDMkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBS TkN1QmJ3V1FHZkJ6NlZBS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPPiEEmrtyjapW0MRJ8YOFfNBt4JrcUBEu48oAnDXkWY4QwNP4BOuT bfwMR4m//7XaN6tMatYB7fnPASTN/SFWckrcqwbTcTDcJ7wkQIEAmePPkF/Dl2aq 9h5pZuXGppWYtk3wRVIItH8haJC6PswGvhZrRKLgjdECy9lZ8BAx3iYPrwUTLPs8 C0PdFjgl23H64jkPnbnURrxCYrjPjzIpS7veGzSzAoOcbpzRooRMuMCgtMkkWWoS 5kzGLnLmZcHcZgNALKu56pa7dIRLZlNjylk4FrlyvEl7uACM+U76me6e4hRnsma9 aLunQlKN7gnFLWu6K9MBeaUu6oI+TwR0 -----END CERTIFICATE-----Generated at Sat Aug 23 14:10:08 2025 by rpki-client