$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: FzbicwuaBbY89BuKUD87pZQDnpvSf++weE9hTD73ABg= Subject key identifier: 0D:E3:F7:C4:ED:9E:47:FB:D0:2B:D1:2A:2F:78:D6:EC:D7:CD:50:29 Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1B92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1B88 Signing time: Fri 22 Aug 2025 16:20:47 +0000 Manifest this update: Fri 22 Aug 2025 16:20:47 +0000 Manifest next update: Fri 29 Aug 2025 16:20:47 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: NBzSB+W1t4BuRKoYf70STiw5Z0WGIKtDspTQpDBVM/0=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: CIx5a/KDORd4MxJLQ+psYC26naN8iQLI+AuxYnr9L/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7058 (0x1b92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: Aug 22 16:20:47 2025 GMT Not After : Aug 29 16:20:47 2025 GMT Subject: CN=68a898df-c09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:27:9b:7d:8d:ba:db:6f:54:66:74:0c:20:9d: cb:63:14:bd:37:b8:08:f4:2d:af:76:45:cd:1a:f5: 94:1e:63:00:5e:d2:c5:b0:9e:12:0e:5a:96:b3:7b: fb:aa:47:4d:4d:e4:12:89:44:35:71:13:6b:f6:a4: 76:c1:a7:59:4c:3d:58:c0:a9:de:21:5c:c7:7d:31: dc:b7:1e:df:85:38:b7:13:9e:23:e9:cc:f8:97:74: ed:06:4f:b0:21:5e:d0:ac:12:68:8c:7b:1a:71:08: d5:da:0d:bd:49:9a:45:15:4d:3f:03:7d:dd:e1:d7: c9:f1:27:cf:01:b5:37:72:e0:ab:0f:cf:c8:56:0c: 01:1f:cc:05:e4:d3:de:53:95:74:6d:77:28:78:9e: 14:f2:b2:c3:15:f4:80:13:da:d6:85:40:06:34:0f: eb:f5:2f:59:97:cb:fe:e0:48:8d:42:45:e8:a8:88: 96:51:63:fe:3a:79:9f:62:75:ba:63:c4:57:f8:a2: f7:a7:d7:35:bf:73:69:f1:98:d3:9d:46:1d:27:2e: 70:c8:2c:ad:1a:2d:f8:c8:2d:73:86:33:6c:6c:71: e7:43:5e:80:f7:a5:33:1c:e0:7a:7c:a7:3f:37:52: c3:fa:c5:03:40:16:77:f8:13:56:db:39:e9:80:77: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E3:F7:C4:ED:9E:47:FB:D0:2B:D1:2A:2F:78:D6:EC:D7:CD:50:29 X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:22:73:db:22:96:4e:3c:5a:35:64:40:00:8f:4e:92:48:de: bb:b2:08:bb:b3:12:54:80:57:78:9c:c4:3e:6d:17:80:d3:5a: a0:79:28:cf:ef:52:24:24:09:43:2a:1f:cb:61:ce:aa:4f:b2: 44:f6:99:5f:2c:d1:f2:c1:55:1e:9a:5a:9b:2c:e6:a8:0a:1b: 54:a6:fc:1e:bb:99:56:c6:e9:29:b9:18:b5:3e:ba:94:63:d5: 43:b4:32:e0:ff:6b:85:4b:06:a6:35:c4:f3:ed:67:80:21:a1: a5:43:4b:33:87:aa:72:82:81:4f:d9:55:22:25:d2:8e:4d:83: da:42:dd:a1:2b:d7:30:fc:78:72:ab:f8:df:3d:94:c3:43:3b: 72:9e:b0:5f:46:bf:c4:e0:f7:47:0f:c0:57:f4:ae:7f:cc:f1: b8:60:83:95:ad:1a:e4:ed:0a:08:18:18:08:fb:92:12:68:d4: e4:04:82:d9:72:1d:36:29:38:96:c8:47:1e:97:c9:37:d7:c4: 1d:19:60:64:15:e8:62:02:66:79:09:5f:00:b9:d9:c9:f2:31: c3:24:1c:32:68:8d:74:89:4b:e1:7e:2a:2e:a2:f9:80:26:4e: 03:cc:c7:1a:3a:d6:2b:84:1e:fd:8b:f6:0f:25:6b:02:b4:b6: c0:fa:51:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjUwODIyMTYyMDQ3WhcNMjUwODI5MTYyMDQ3WjAYMRYwFAYD VQQDEw02OGE4OThkZi1jMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4CebfY26229UZnQMIJ3LYxS9N7gI9C2vdkXNGvWUHmMAXtLFsJ4SDlqWs3v7 qkdNTeQSiUQ1cRNr9qR2wadZTD1YwKneIVzHfTHctx7fhTi3E54j6cz4l3TtBk+w IV7QrBJojHsacQjV2g29SZpFFU0/A33d4dfJ8SfPAbU3cuCrD8/IVgwBH8wF5NPe U5V0bXcoeJ4U8rLDFfSAE9rWhUAGNA/r9S9Zl8v+4EiNQkXoqIiWUWP+OnmfYnW6 Y8RX+KL3p9c1v3Np8ZjTnUYdJy5wyCytGi34yC1zhjNsbHHnQ16A96UzHOB6fKc/ N1LD+sUDQBZ3+BNW2znpgHc/3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3j98Tt nkf70CvRKi941uzXzVApMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArInPbIpZOPFo1ZEAAj06SSN67sgi7sxJUgFd4nMQ+bReA01qgeSjP 71IkJAlDKh/LYc6qT7JE9plfLNHywVUemlqbLOaoChtUpvweu5lWxukpuRi1PrqU Y9VDtDLg/2uFSwamNcTz7WeAIaGlQ0szh6pygoFP2VUiJdKOTYPaQt2hK9cw/Hhy q/jfPZTDQztynrBfRr/E4PdHD8BX9K5/zPG4YIOVrRrk7QoIGBgI+5ISaNTkBILZ ch02KTiWyEcel8k318QdGWBkFehiAmZ5CV8AudnJ8jHDJBwyaI10iUvhfiouovmA Jk4DzMcaOtYrhB79i/YPJWsCtLbA+lFp -----END CERTIFICATE-----Generated at Sat Aug 23 20:38:44 2025 by rpki-client