$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft File: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft (raw, json) Hash identifier: DtVWu9xeRM2sTg0AMUlscKBqFD9btCE0y3VmlQ+DC7U= Subject key identifier: D8:BF:48:93:9B:1A:A3:1E:90:39:07:AD:1D:C8:40:3F:E1:22:63:97 Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 Certificate issuer: /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft Manifest number: AE Signing time: Sat 23 Aug 2025 06:23:08 +0000 Manifest this update: Sat 23 Aug 2025 06:23:08 +0000 Manifest next update: Sat 30 Aug 2025 06:23:08 +0000 Files and hashes: 1: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl (hash: 8iD3+/kxtODW1dEBoWQpVFZK6NZyHorilAIpTn2f0rQ=) 2: 86998830806F11EF91F9E57CC4F9AE02.roa (hash: zuZnWcJxNflnoIsWXIqoUOj1sGwHZyfS7R+rQUgHs48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C645, serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Validity Not Before: Aug 23 06:23:08 2025 GMT Not After : Aug 30 06:23:08 2025 GMT Subject: CN=68a95e4c-50c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:bc:60:de:cc:27:09:31:b8:78:06:0f:b3: 29:92:0b:44:af:3d:3f:c1:f2:ed:d7:70:72:3a:3c: a0:57:b8:68:2e:c3:79:60:40:d2:46:a4:dc:7e:ca: 76:20:81:aa:a7:8d:b1:39:c7:17:e2:57:0f:0d:da: 14:93:91:c0:fb:5c:41:77:a6:93:94:d1:7d:09:a1: 45:5d:c4:d7:fa:13:39:ac:fe:7c:d1:71:0c:1c:21: ea:66:86:f2:30:57:69:bf:32:c0:e8:49:42:2b:40: 15:75:9d:da:d3:17:0e:d0:37:a5:e9:bd:eb:ae:a2: 3e:2c:51:b2:3f:25:c4:4f:35:28:25:35:5f:36:26: eb:04:08:3d:48:a1:1d:23:05:bb:20:d5:31:fe:f8: 59:e1:71:4c:40:12:26:a2:0e:0c:7f:af:87:4c:f6: 32:8f:d2:ed:ba:79:b9:ca:8d:bf:35:a7:c6:34:ab: 45:c0:25:10:98:dd:87:76:f4:eb:5a:ae:53:42:38: 1c:89:b0:bb:5e:58:23:c3:e3:e7:ab:ea:95:14:41: 68:1f:c4:63:24:8f:55:49:ca:7d:02:4d:d5:ec:a5: c3:c9:27:40:1a:76:c7:b6:1f:a4:3f:45:f3:3e:3c: 43:83:75:fb:c8:9b:7f:8f:ef:5e:36:58:8a:88:12: c0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BF:48:93:9B:1A:A3:1E:90:39:07:AD:1D:C8:40:3F:E1:22:63:97 X509v3 Authority Key Identifier: keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c8:54:a7:bf:8b:fe:2a:08:86:f6:42:d6:ad:8a:17:4b:84: 87:68:60:b4:a6:69:99:bf:8c:8a:1e:56:3c:37:d2:aa:f8:c3: 1a:45:c9:b8:59:a8:f2:42:ae:86:db:6a:e1:1b:30:e3:30:66: 73:93:ca:1a:72:a0:04:10:bc:31:ad:4d:17:05:ae:c1:73:3d: 14:01:6d:11:20:67:b7:a9:9a:da:ea:3f:6d:73:4f:68:83:fb: 2d:91:81:00:c9:1c:6a:19:71:fb:e7:1f:16:ce:b8:8c:8b:03: af:2c:4c:2e:4c:51:df:99:79:06:77:d3:58:4d:e7:f2:31:bd: 51:77:da:95:50:0d:ea:2c:62:5e:6f:88:97:8b:12:44:53:f1: 9a:6b:60:0c:b8:ef:b0:74:6d:db:1f:88:a5:53:77:a0:39:7a: 04:82:11:9d:08:3f:f9:ae:ed:d2:5a:aa:fe:90:40:e3:3c:78: 6a:6b:d3:a8:db:e4:0b:6a:47:87:34:e7:b4:97:b7:42:2b:5c: 1c:fd:c8:b6:57:14:2b:7d:32:28:20:f0:cb:77:3c:ff:d3:51: 7c:1d:f9:b4:b8:a2:79:4d:1b:a1:c4:c3:ab:b9:72:59:31:38: 4b:6a:cb:2c:dd:e2:01:2a:1a:2f:0b:00:5b:e6:ea:4e:04:44: 4f:d8:cc:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2NDUxMTAvBgNVBAUTKENCMEMzMzBFMzgzNzk0OEZFNURERkE2MDQ3MzI3NzVE NEIwQ0Y4MTQwHhcNMjUwODIzMDYyMzA4WhcNMjUwODMwMDYyMzA4WjAYMRYwFAYD VQQDEw02OGE5NWU0Yy01MGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshu8YN7MJwkxuHgGD7MpkgtErz0/wfLt13ByOjygV7hoLsN5YEDSRqTcfsp2 IIGqp42xOccX4lcPDdoUk5HA+1xBd6aTlNF9CaFFXcTX+hM5rP580XEMHCHqZoby MFdpvzLA6ElCK0AVdZ3a0xcO0Del6b3rrqI+LFGyPyXETzUoJTVfNibrBAg9SKEd IwW7INUx/vhZ4XFMQBImog4Mf6+HTPYyj9Ltunm5yo2/NafGNKtFwCUQmN2HdvTr Wq5TQjgcibC7Xlgjw+Pnq+qVFEFoH8RjJI9VScp9Ak3V7KXDySdAGnbHth+kP0Xz PjxDg3X7yJt/j+9eNliKiBLA0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi/SJOb GqMekDkHrR3IQD/hImOXMB8GA1UdIwQYMBaAFMsMMw44N5SP5d36YEcyd11LDPgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzY0NS8xRUVFQkQyMjgw NkYxMUVGOEI0NUQ3NzlDNEY5QUUwMi95d3d6RGpnM2xJX2wzZnBnUnpKM1hVc00t QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l3d3pEamczbElfbDNmcGdSekozWFVzTS1CUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzY0NS8xRUVFQkQyMjgwNkYxMUVGOEI0NUQ3NzlDNEY5QUUwMi95d3d6RGpnM2xJ X2wzZnBnUnpKM1hVc00tQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARyFSnv4v+KgiG9kLWrYoXS4SHaGC0pmmZv4yKHlY8N9Kq+MMaRcm4 WajyQq6G22rhGzDjMGZzk8oacqAEELwxrU0XBa7Bcz0UAW0RIGe3qZra6j9tc09o g/stkYEAyRxqGXH75x8WzriMiwOvLEwuTFHfmXkGd9NYTefyMb1Rd9qVUA3qLGJe b4iXixJEU/Gaa2AMuO+wdG3bH4ilU3egOXoEghGdCD/5ru3SWqr+kEDjPHhqa9Oo 2+QLakeHNOe0l7dCK1wc/ci2VxQrfTIoIPDLdzz/01F8Hfm0uKJ5TRuhxMOruXJZ MThLasss3eIBKhovCwBb5upOBERP2Mxf -----END CERTIFICATE-----Generated at Sat Aug 23 16:32:50 2025 by rpki-client