$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json) Hash identifier: VS2D2pDEiBZLbwwAzy/7rUSb+V8OnfThv5TLdnRGWQo= Subject key identifier: 96:EB:CE:7C:C2:68:AC:2C:85:93:CE:27:5A:F4:58:4D:AC:38:69:DC Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Certificate serial: 0DD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft Manifest number: 0DBC Signing time: Fri 22 Aug 2025 18:00:51 +0000 Manifest this update: Fri 22 Aug 2025 18:00:50 +0000 Manifest next update: Fri 29 Aug 2025 18:00:50 +0000 Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: 80Pfc3DauHzD3uksNtcFJUeJFl4hiXys9IOnROKiPMU=) 2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: qyDf++LPWxa+MkjWOgRr95EIpuQ2+myemcO9SD4YHEk=) 3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: 9F91+IUTL7h3rCEta0BAPCIgikPUjvwFDwgS+OoqM04=) 4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: UeNWqDuc6Ln+l4WWol/JGxPQ9/25U+hHn/L6mfBQ43Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3540 (0xdd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Validity Not Before: Aug 22 18:00:50 2025 GMT Not After : Aug 29 18:00:50 2025 GMT Subject: CN=68a8b052-0a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:e4:45:e2:fb:ba:d5:e6:a8:fc:bf:c9:41: f7:b5:2d:4d:b1:ee:31:21:8d:34:75:94:9c:77:7f: a5:b6:e4:6b:60:9f:be:20:fe:c1:0d:10:25:63:be: a3:65:34:87:02:08:c3:c9:a1:95:d5:f9:45:50:82: c5:b9:14:ac:b8:63:3b:2f:69:6a:ba:59:d3:10:43: 10:25:a7:c4:74:20:91:4e:79:d1:bc:63:41:61:7b: 0c:ef:b2:45:eb:1b:0f:c9:75:49:ab:e6:58:51:31: d1:7f:c4:ba:43:42:66:a7:49:e8:1a:13:7c:d3:ed: 3e:60:fd:a5:b8:fa:f5:33:c2:65:40:1d:77:97:f5: 3e:3d:6a:e0:00:57:4a:27:e6:fe:66:bc:4c:1f:f7: 97:39:e9:e8:b2:29:fc:08:99:13:61:cb:26:ec:f3: 4d:cb:d3:25:cb:c7:86:1b:09:47:4f:38:4f:18:02: 99:36:c6:9d:20:9c:ae:be:06:65:6e:a9:59:b4:88: e9:0a:b2:5e:70:cb:0d:04:76:4a:30:7c:c4:95:a1: bf:44:fd:6f:ff:fc:84:7c:8e:44:71:a1:47:0a:16: f4:98:16:4b:1c:1f:2e:25:54:2d:c6:1a:da:bd:0e: 13:66:cf:f6:83:55:af:be:79:49:86:01:60:9c:04: 1c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EB:CE:7C:C2:68:AC:2C:85:93:CE:27:5A:F4:58:4D:AC:38:69:DC X509v3 Authority Key Identifier: keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:57:ba:c0:c9:2a:94:a6:82:51:62:de:aa:bc:c7:e9:04:aa: 5d:63:99:38:52:5b:f0:24:17:14:1c:a8:ba:8d:d8:4e:5e:2b: dc:4e:96:18:94:6f:30:d9:28:d9:cb:9a:64:fc:cb:2c:97:d7: d2:ac:ea:c4:64:50:1c:52:05:93:be:2c:3c:02:dc:cc:99:2b: dd:52:93:a6:c9:0d:49:a3:21:58:a4:15:34:e7:25:d3:c4:4a: fb:f4:e6:3f:ed:ef:46:3a:05:29:a1:65:90:7f:e3:fb:e2:fc: 03:b3:e3:32:a3:fe:f2:3a:b6:17:bf:e3:bf:ed:e4:21:36:79: 0d:00:e7:1b:7d:a6:00:a2:96:53:98:90:0b:12:2c:bd:93:b3: 9b:2b:20:3d:c4:f7:1a:04:7b:3d:fa:49:97:89:84:84:99:e1: f7:8d:3e:be:07:15:2e:cb:a8:59:14:2c:58:11:6b:88:8d:b6: 32:a4:f1:e8:5c:ab:ad:78:e4:2c:38:65:c3:bd:e9:ee:92:65: 6a:75:09:40:09:db:bb:3f:03:6e:14:e1:a8:85:57:16:7f:1d: 7e:d4:94:74:ab:0e:34:9d:67:36:bc:ac:27:22:48:66:4c:1b: 80:57:b6:eb:bd:21:6f:a1:c3:55:16:18:5f:86:05:1a:c5:a6: 64:46:52:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz NEVEQTlDNjMwHhcNMjUwODIyMTgwMDUwWhcNMjUwODI5MTgwMDUwWjAYMRYwFAYD VQQDEw02OGE4YjA1Mi0wYTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0nkReL7utXmqPy/yUH3tS1Nse4xIY00dZScd3+ltuRrYJ++IP7BDRAlY76j ZTSHAgjDyaGV1flFUILFuRSsuGM7L2lqulnTEEMQJafEdCCRTnnRvGNBYXsM77JF 6xsPyXVJq+ZYUTHRf8S6Q0Jmp0noGhN80+0+YP2luPr1M8JlQB13l/U+PWrgAFdK J+b+ZrxMH/eXOenosin8CJkTYcsm7PNNy9Mly8eGGwlHTzhPGAKZNsadIJyuvgZl bqlZtIjpCrJecMsNBHZKMHzElaG/RP1v//yEfI5EcaFHChb0mBZLHB8uJVQtxhra vQ4TZs/2g1WvvnlJhgFgnAQcLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbrznzC aKwshZPOJ1r0WE2sOGncMB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDUyOS8yMENGMkUxNEMzNjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZi R2llajNUclZsV3MwN2FuR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAV7rAySqUpoJRYt6qvMfpBKpdY5k4UlvwJBcUHKi6jdhOXivcTpYY lG8w2SjZy5pk/Mssl9fSrOrEZFAcUgWTviw8AtzMmSvdUpOmyQ1JoyFYpBU05yXT xEr79OY/7e9GOgUpoWWQf+P74vwDs+Myo/7yOrYXv+O/7eQhNnkNAOcbfaYAopZT mJALEiy9k7ObKyA9xPcaBHs9+kmXiYSEmeH3jT6+BxUuy6hZFCxYEWuIjbYypPHo XKuteOQsOGXDvenukmVqdQlACdu7PwNuFOGohVcWfx1+1JR0qw40nWc2vKwnIkhm TBuAV7brvSFvocNVFhhfhgUaxaZkRlK1 -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:40 2025 by rpki-client