$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json) Hash identifier: /Yc9XvEDNOVJSpN8h3cGiTBwcXXiJvpOSznFe6E3j3Y= Subject key identifier: D3:45:2A:07:45:0A:B9:C0:F2:0B:1A:F6:F9:1C:DC:08:7A:9D:51:39 Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Certificate serial: 1B29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft Manifest number: 1B1E Signing time: Fri 22 Aug 2025 16:22:42 +0000 Manifest this update: Fri 22 Aug 2025 16:22:42 +0000 Manifest next update: Fri 29 Aug 2025 16:22:42 +0000 Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: 3dO44cBOJ+qcKZpX4qqEXFCrIunwLnqqyYvoiDnea04=) 2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: XfYeKxfatX6id5bBv2XHc88RkA9A8XtPbM07HmC0bY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6953 (0x1b29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Validity Not Before: Aug 22 16:22:42 2025 GMT Not After : Aug 29 16:22:42 2025 GMT Subject: CN=68a89952-a41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c3:3a:73:6b:d7:44:3c:6d:4c:dd:58:2e:e9: 59:02:74:6b:0c:02:3b:aa:55:08:2c:37:b6:24:5d: 89:15:ef:5f:90:38:5e:b2:ba:61:44:75:29:00:bf: 71:98:56:ef:37:3b:af:a9:db:53:17:f1:54:14:65: 0b:83:e4:35:c1:4b:1f:5a:40:3b:31:f6:02:5e:3c: e7:30:5f:68:be:e8:a8:33:04:a3:72:23:1b:ec:44: c6:37:02:18:81:4b:4b:50:12:c0:e1:b0:39:ec:ae: 2c:98:f0:d8:f6:99:33:dc:71:25:87:8e:25:09:88: 5b:7e:c9:8d:e4:60:9a:7c:82:43:2b:51:2c:e5:d2: 4b:d8:a6:43:5c:93:3a:8a:aa:27:d5:e4:a6:14:33: 81:85:f3:e3:ed:6c:59:bd:44:3b:a1:72:ae:8f:42: ab:de:07:25:7c:58:ea:e3:8c:83:4e:de:c3:c5:62: 9e:09:39:e4:d6:38:c2:4c:f2:5e:71:db:bb:bd:04: 70:cf:6b:bb:55:88:5e:4c:66:6c:6b:73:88:aa:6f: d0:0b:41:c2:b5:82:a2:51:79:c3:7a:04:b8:c3:a0: 25:55:3a:73:b5:71:c0:13:63:1b:8f:23:13:92:f3: d2:a3:3c:e3:29:ed:64:fe:53:69:4b:6c:7c:70:68: da:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:45:2A:07:45:0A:B9:C0:F2:0B:1A:F6:F9:1C:DC:08:7A:9D:51:39 X509v3 Authority Key Identifier: keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:4d:83:8b:15:00:5d:39:d5:e7:26:4f:7f:1d:ca:b7:1e:29: 46:72:ac:30:4e:3e:32:c7:57:ee:dd:92:fd:7a:60:0b:01:18: 7e:17:dc:6b:24:6e:d5:23:d6:05:fe:67:0e:ae:c0:53:e3:b4: 49:9b:03:b4:71:8c:6c:cd:47:63:f2:94:1e:ab:d8:42:01:35: b3:60:c4:44:e0:c2:4e:06:e8:12:c5:31:5c:8b:a6:ac:78:17: 23:79:f0:f6:a3:aa:98:a9:0b:fd:04:17:f5:76:01:d8:47:4a: be:08:c5:d4:b2:0f:bc:17:f0:c1:58:a7:64:9d:f8:23:f0:f5: 0c:17:91:1a:25:26:b6:d5:0d:36:85:28:97:02:72:41:e4:cf: ca:5f:88:af:7c:7f:59:ff:e9:0d:4c:8b:10:e1:93:a9:0d:b9: e8:f4:d8:6a:f8:f6:29:0e:fe:aa:73:1f:ff:ff:8d:ae:08:62: 63:f0:0c:58:3c:e1:94:0e:00:f1:a5:79:e5:b9:3b:02:b0:8e: 19:30:a5:7c:e9:78:41:cc:6e:63:a8:6a:0e:1c:6d:b8:a6:5f: 3b:73:0a:0e:16:3a:ab:ba:18:22:98:74:63:41:82:f1:81:ed: 06:bc:b4:1f:cf:78:9b:f4:2d:cf:f7:0b:02:ce:6b:5e:8a:f9: ba:1f:e1:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy OUUyRDVDMjIwHhcNMjUwODIyMTYyMjQyWhcNMjUwODI5MTYyMjQyWjAYMRYwFAYD VQQDEw02OGE4OTk1Mi1hNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MM6c2vXRDxtTN1YLulZAnRrDAI7qlUILDe2JF2JFe9fkDhesrphRHUpAL9x mFbvNzuvqdtTF/FUFGULg+Q1wUsfWkA7MfYCXjznMF9ovuioMwSjciMb7ETGNwIY gUtLUBLA4bA57K4smPDY9pkz3HElh44lCYhbfsmN5GCafIJDK1Es5dJL2KZDXJM6 iqon1eSmFDOBhfPj7WxZvUQ7oXKuj0Kr3gclfFjq44yDTt7DxWKeCTnk1jjCTPJe cdu7vQRwz2u7VYheTGZsa3OIqm/QC0HCtYKiUXnDegS4w6AlVTpztXHAE2MbjyMT kvPSozzjKe1k/lNpS2x8cGjaUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNFKgdF CrnA8gsa9vkc3Ah6nVE5MB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY2RC8xRUIwOTI1NDIzMzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVG Z1Bza2NzSnhvRlFwNHRYQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADTYOLFQBdOdXnJk9/Hcq3HilGcqwwTj4yx1fu3ZL9emALARh+F9xr JG7VI9YF/mcOrsBT47RJmwO0cYxszUdj8pQeq9hCATWzYMRE4MJOBugSxTFci6as eBcjefD2o6qYqQv9BBf1dgHYR0q+CMXUsg+8F/DBWKdknfgj8PUMF5EaJSa21Q02 hSiXAnJB5M/KX4ivfH9Z/+kNTIsQ4ZOpDbno9Nhq+PYpDv6qcx///42uCGJj8AxY POGUDgDxpXnluTsCsI4ZMKV86XhBzG5jqGoOHG24pl87cwoOFjqruhgimHRjQYLx ge0GvLQfz3ib9C3P9wsCzmteivm6H+GP -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:53 2025 by rpki-client