$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft File: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json) Hash identifier: HSEG+HgdZ3TLsHnO6VGBUiSIUE+g6Hlpk5ei1n+q5jY= Subject key identifier: CE:24:C0:2E:AB:BC:DF:C2:AB:89:CC:DD:15:18:D6:C6:D9:7E:04:20 Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 Certificate issuer: /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft Manifest number: 1E Signing time: Sat 23 Aug 2025 08:06:25 +0000 Manifest this update: Sat 23 Aug 2025 08:06:24 +0000 Manifest next update: Sat 30 Aug 2025 08:06:24 +0000 Files and hashes: 1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: 2xtI3hCLiz2jY3JmTFVd73AuJfbkLpaU1MoGrsJYdQ8=) 2: 05939A1C554611F09F737331C4F9AE02.roa (hash: wHvbvusPDO6yRWHfYUtmsZklb3g0w6TjKvsCHWFb4uE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Validity Not Before: Aug 23 08:06:24 2025 GMT Not After : Aug 30 08:06:24 2025 GMT Subject: CN=68a97681-e92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:df:61:fd:0a:bc:8f:ce:e2:16:fa:d7:0b: 1e:00:c4:a9:1c:58:51:6d:ab:2d:1b:88:11:0a:0b: ba:7d:8d:0b:e7:14:c2:df:f6:7e:7a:ed:09:f4:b3: a3:d0:a8:54:18:25:8a:8d:20:45:f1:15:ea:98:b6: 99:1b:e3:6c:2b:84:a7:d8:7a:b3:a8:ab:98:3c:a0: 10:4c:cc:e7:c0:be:b1:78:5a:a8:6f:78:81:45:86: bf:9d:86:7b:a2:2c:1e:40:11:c0:b6:b6:5e:59:29: 63:f1:ee:32:83:69:4c:8b:2e:8f:d0:08:59:21:8d: 6a:bd:bd:04:b2:2c:13:c0:f2:ec:17:6b:f1:1f:b5: 1e:02:d2:19:ba:b7:4c:85:d2:48:e0:08:e3:0a:79: 25:7e:bb:c7:e6:d1:8e:a8:6c:53:b5:e2:37:c9:63: b4:7d:9b:a0:15:c0:60:af:22:b5:70:c6:87:38:e1: 3c:bd:c0:0a:f7:cc:0b:c0:27:20:f6:9a:c5:78:1b: 83:c0:16:a7:e3:f1:9a:80:2e:00:3f:10:be:b2:99: 5e:13:b4:47:f7:b8:1a:cc:24:95:ca:59:bc:96:8a: 6c:8a:4c:ff:12:d6:ea:b9:89:c9:ce:8e:db:50:3f: c9:c0:50:df:de:97:15:73:e5:79:d0:06:80:72:23: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:24:C0:2E:AB:BC:DF:C2:AB:89:CC:DD:15:18:D6:C6:D9:7E:04:20 X509v3 Authority Key Identifier: keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4f:1b:4c:e1:27:75:e4:46:47:4b:e0:97:cb:79:c3:98:d8: df:cc:39:4e:c9:ab:cc:2d:a0:a0:03:9c:1d:d6:2c:f5:fc:14: db:f5:53:5a:e2:7d:9f:39:c9:60:1b:4f:93:43:8d:6f:3d:74: 5f:d3:e9:7d:17:25:64:88:df:d4:a0:d7:74:0f:10:52:b7:f9: 5c:25:c7:18:b8:46:70:78:1e:c4:df:90:f5:47:db:2a:b3:04: 52:0c:05:d7:c5:e4:2c:1c:06:37:23:b3:30:a4:1a:89:f7:fb: af:b8:d3:61:ef:9f:34:4e:1a:5a:cb:db:77:a1:e8:e4:ca:a3: 55:f2:28:9f:63:ab:d6:1d:d3:9b:7b:e5:ee:0e:14:6c:3d:8b: a3:3e:29:5f:b4:81:45:7a:d3:72:fb:ed:a0:af:78:dc:ed:eb: 79:dd:9f:f4:b4:2d:98:3c:b8:6d:bb:50:10:a9:e5:8f:1e:5c: dc:70:bc:99:39:ac:60:44:40:62:19:c0:fd:5f:d3:2d:0f:ec: 86:d4:d2:d4:a0:d3:a7:df:19:2c:c5:e0:c2:0b:8e:3e:e7:13: 21:0f:91:ea:51:99:69:ae:4a:7b:fd:71:82:4f:6c:58:c0:36: 67:b1:be:e9:7e:1e:6e:cc:52:21:4b:34:b0:fe:74:9e:97:1a: 13:f8:f4:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzk5QzExMC8GA1UEBRMoNjAwMjUwRjYzODM2RkI0QzJGMjNGNDg3RDcxNEJGMzJG NzU5QTVCNTAeFw0yNTA4MjMwODA2MjRaFw0yNTA4MzAwODA2MjRaMBgxFjAUBgNV BAMTDTY4YTk3NjgxLWU5MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Kt9h/Qq8j87iFvrXCx4AxKkcWFFtqy0biBEKC7p9jQvnFMLf9n567Qn0s6PQ qFQYJYqNIEXxFeqYtpkb42wrhKfYerOoq5g8oBBMzOfAvrF4WqhveIFFhr+dhnui LB5AEcC2tl5ZKWPx7jKDaUyLLo/QCFkhjWq9vQSyLBPA8uwXa/EftR4C0hm6t0yF 0kjgCOMKeSV+u8fm0Y6obFO14jfJY7R9m6AVwGCvIrVwxoc44Ty9wAr3zAvAJyD2 msV4G4PAFqfj8ZqALgA/EL6ymV4TtEf3uBrMJJXKWbyWimyKTP8S1uq5icnOjttQ P8nAUN/elxVz5XnQBoByI96pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUziTALqu8 38KriczdFRjWxtl+BCAwHwYDVR0jBBgwFoAUYAJQ9jg2+0wvI/SH1xS/MvdZpbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3OTlDLzM1RUJEOEU4NTU0 NDExRjA5MzQyQUMwQ0M0RjlBRTAyL1lBSlE5amcyLTB3dklfU0gxeFNfTXZkWnBi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUFKUTlqZzItMHd2SV9TSDF4U19NdmRacGJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 OTlDLzM1RUJEOEU4NTU0NDExRjA5MzQyQUMwQ0M0RjlBRTAyL1lBSlE5amcyLTB3 dklfU0gxeFNfTXZkWnBiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAxPG0zhJ3XkRkdL4JfLecOY2N/MOU7Jq8wtoKADnB3WLPX8FNv1U1ri fZ85yWAbT5NDjW89dF/T6X0XJWSI39Sg13QPEFK3+Vwlxxi4RnB4HsTfkPVH2yqz BFIMBdfF5CwcBjcjszCkGon3+6+402HvnzROGlrL23eh6OTKo1XyKJ9jq9Yd05t7 5e4OFGw9i6M+KV+0gUV603L77aCveNzt63ndn/S0LZg8uG27UBCp5Y8eXNxwvJk5 rGBEQGIZwP1f0y0P7IbU0tSg06ffGSzF4MILjj7nEyEPkepRmWmuSnv9cYJPbFjA Nmexvul+Hm7MUiFLNLD+dJ6XGhP49NE= -----END CERTIFICATE-----Generated at Sat Aug 23 20:34:52 2025 by rpki-client