$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft File: yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json) Hash identifier: VOJurLBtihrAFQ/Ra2wY1ivh8WPw+IOZL2da0+VSDUE= Subject key identifier: C9:F6:15:B4:35:AB:2E:1E:BD:59:EA:B8:FE:C8:6E:54:5E:C5:D6:88 Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF Certificate issuer: /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft Manifest number: F3 Signing time: Sat 23 Aug 2025 05:24:50 +0000 Manifest this update: Sat 23 Aug 2025 05:24:49 +0000 Manifest next update: Sat 30 Aug 2025 05:24:49 +0000 Files and hashes: 1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: uTQFN6qZaknSAH7P66q7JYp2hQvKmguvmj5c3xn5XSQ=) 2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: tBki4iy/q8HliVYsXbIzEJgcPuIm2NjXgIYSPz8ugw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF Validity Not Before: Aug 23 05:24:49 2025 GMT Not After : Aug 30 05:24:49 2025 GMT Subject: CN=68a950a2-f81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:02:f4:d2:62:c8:52:60:39:4f:4f:f1:d3: 67:02:af:eb:c2:4e:71:30:a0:23:25:cc:7f:b9:16: 2f:40:d1:1f:02:6b:b6:41:41:c7:4c:e0:ac:12:3d: 8f:d7:cf:0b:d3:bc:3e:c4:c5:d4:a8:bb:3a:55:3e: a6:39:57:66:83:5a:a0:fc:70:40:30:92:9e:14:f0: 57:fe:a0:2b:df:9a:65:c9:93:d8:e0:eb:cd:30:57: e8:48:7a:12:97:e4:c5:11:9c:2f:75:4f:b5:f0:a0: 80:8f:b5:26:75:c9:4a:09:3a:37:d7:4b:19:e5:33: e6:ed:73:84:78:9c:b3:04:ce:e2:b5:37:8c:f6:cb: d4:22:7a:5a:5b:66:2e:3b:60:60:f5:31:96:e6:eb: 27:fe:b3:fd:e3:d6:fc:ef:64:a7:1e:fb:a3:6a:d4: 0d:90:d1:09:31:14:be:4e:d1:b4:cf:e4:dc:14:a5: c7:45:c5:d1:cf:cf:d9:dd:38:e0:c3:01:4b:f8:33: 21:73:cf:cb:b6:3a:4f:5f:dd:dc:40:b2:8c:ed:e5: b0:0b:a3:fe:82:0d:ad:73:b8:e7:b3:8e:e6:6e:7e: 8d:8c:58:be:f6:78:6f:b3:d0:98:31:db:7e:8d:97: 00:34:74:77:e9:ce:aa:06:35:08:a6:d0:23:64:37: 05:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F6:15:B4:35:AB:2E:1E:BD:59:EA:B8:FE:C8:6E:54:5E:C5:D6:88 X509v3 Authority Key Identifier: keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:8c:07:62:61:81:36:6b:5b:9d:a0:26:0b:b7:8d:a8:87:40: d3:cf:be:92:22:29:dd:b1:8a:2a:39:3b:e2:3f:dc:d9:cd:36: ec:4d:c7:d5:77:9c:54:f0:c9:d9:3e:e1:3f:61:05:0a:6b:a9: 6e:d1:46:fb:27:75:91:44:df:8f:1a:49:db:da:a3:55:3d:96: a0:9d:f4:b0:c2:74:08:d1:82:0d:47:45:9d:e3:c7:b2:07:36: 20:26:ec:11:48:2f:47:ba:8d:1c:2a:2c:1a:6c:32:62:16:62: 73:b4:20:bb:3e:54:b8:d9:77:af:79:e9:2d:53:b5:a7:85:6b: f5:dc:b3:06:71:1e:c6:43:a0:c6:6a:a4:ea:c2:db:a2:b6:0b: b9:cf:bb:bd:59:64:7c:9a:5f:3a:72:72:7d:0a:71:f1:09:1e: e8:08:c8:9b:b7:be:d9:82:83:cb:77:17:f2:92:a4:ab:f3:64: 24:32:5f:42:c9:d5:10:8a:5a:e4:b7:a8:86:12:e3:85:54:93: d3:c1:f4:bb:b2:ba:6b:87:72:aa:39:e5:3c:49:68:97:e2:3c: ca:af:0d:f5:2f:24:2c:26:00:1c:5e:a4:7a:fd:88:5b:64:22: c0:88:77:72:cb:13:5e:1a:8e:65:41:90:49:4c:a8:1d:6e:1a: 4f:7d:4d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NzUxMTAvBgNVBAUTKENBMjQ1ODMxMDZGQjU0OTg0Qzc4MTU4OTVFM0UxOUVE Rjc5Qzk4QkYwHhcNMjUwODIzMDUyNDQ5WhcNMjUwODMwMDUyNDQ5WjAYMRYwFAYD VQQDEw02OGE5NTBhMi1mODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEkC9NJiyFJgOU9P8dNnAq/rwk5xMKAjJcx/uRYvQNEfAmu2QUHHTOCsEj2P 188L07w+xMXUqLs6VT6mOVdmg1qg/HBAMJKeFPBX/qAr35plyZPY4OvNMFfoSHoS l+TFEZwvdU+18KCAj7UmdclKCTo310sZ5TPm7XOEeJyzBM7itTeM9svUInpaW2Yu O2Bg9TGW5usn/rP949b872SnHvujatQNkNEJMRS+TtG0z+TcFKXHRcXRz8/Z3Tjg wwFL+DMhc8/LtjpPX93cQLKM7eWwC6P+gg2tc7jns47mbn6NjFi+9nhvs9CYMdt+ jZcANHR36c6qBjUIptAjZDcFPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMn2FbQ1 qy4evVnquP7IblRexdaIMB8GA1UdIwQYMBaAFMokWDEG+1SYTHgViV4+Ge33nJi/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY3NS85MTVBMjg2NjBF QjMxMUVGODlDQUQxMkNDNEY5QUUwMi95aVJZTVFiN1ZKaE1lQldKWGo0WjdmZWNt TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lpUllNUWI3VkpoTWVCV0pYajRaN2ZlY21MOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzY3NS85MTVBMjg2NjBFQjMxMUVGODlDQUQxMkNDNEY5QUUwMi95aVJZTVFiN1ZK aE1lQldKWGo0WjdmZWNtTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApjAdiYYE2a1udoCYLt42oh0DTz76SIindsYoqOTviP9zZzTbsTcfV d5xU8MnZPuE/YQUKa6lu0Ub7J3WRRN+PGknb2qNVPZagnfSwwnQI0YINR0Wd48ey BzYgJuwRSC9Huo0cKiwabDJiFmJztCC7PlS42XeveektU7WnhWv13LMGcR7GQ6DG aqTqwtuitgu5z7u9WWR8ml86cnJ9CnHxCR7oCMibt77ZgoPLdxfykqSr82QkMl9C ydUQilrkt6iGEuOFVJPTwfS7srprh3KqOeU8SWiX4jzKrw31LyQsJgAcXqR6/Yhb ZCLAiHdyyxNeGo5lQZBJTKgdbhpPfU2H -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:40 2025 by rpki-client