$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft File: SL_YCBmvF_vAh15iBvAoIqewTpg.mft (raw, json) Hash identifier: TN9xzKqEEgLa0iRlgKQ2vj0QOqrToUEoZvMqQAvhLBc= Subject key identifier: 03:CB:F3:AB:4C:66:71:80:7E:E5:05:99:8F:80:70:28:A4:B0:58:E6 Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98 Certificate issuer: /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft Manifest number: 03C0 Signing time: Sat 23 Aug 2025 02:57:30 +0000 Manifest this update: Sat 23 Aug 2025 02:57:30 +0000 Manifest next update: Sat 30 Aug 2025 02:57:30 +0000 Files and hashes: 1: SL_YCBmvF_vAh15iBvAoIqewTpg.crl (hash: swYxmqUqKpeYvWbLbx3XMxyOa0HQd9Sf4UD8dwhuj04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EC2D, serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98 Validity Not Before: Aug 23 02:57:30 2025 GMT Not After : Aug 30 02:57:30 2025 GMT Subject: CN=68a92e1a-a1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1f:24:6f:0b:f3:fa:9e:d3:1b:b4:b1:1e:a2: a7:29:ce:39:60:38:f4:bd:78:47:5f:8e:23:1b:77: 5d:6b:77:6b:60:da:ae:bc:c0:5a:37:fc:63:2c:bc: 5f:34:37:4e:9e:12:97:69:94:7a:6b:b6:52:b3:1c: 88:a1:aa:37:a7:5e:cb:25:ba:84:9a:ca:db:7c:5f: 8e:ee:c7:75:77:b6:e2:1d:d0:5c:91:94:48:ab:25: 0a:f9:fe:7c:dd:b2:3d:35:f0:94:8f:f7:f3:f5:a1: 47:fe:4d:9c:09:72:be:3f:38:80:8a:54:d4:0c:fd: 3e:f4:2c:68:84:86:03:c5:c4:f7:54:04:e4:54:98: 5b:4e:83:1f:a2:5e:36:bf:da:36:b6:bb:fd:d2:16: a9:9a:51:fa:39:f3:04:ac:e1:11:ef:fa:51:a0:ec: d4:82:02:bc:09:b8:21:58:87:0f:2e:de:dd:7e:6e: 78:00:64:2b:91:3e:50:7a:5b:86:96:e1:ad:d4:ad: 82:3c:e9:45:23:22:b8:82:09:5e:4e:43:f3:ac:f1: 4c:45:2f:6f:ce:cc:41:5c:f6:be:92:51:ba:73:72: 50:4a:1d:aa:8c:ca:e3:8b:1a:38:d9:78:20:5e:26: 6e:8c:de:e1:48:b9:c3:28:3f:9f:57:b8:5c:7e:c7: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CB:F3:AB:4C:66:71:80:7E:E5:05:99:8F:80:70:28:A4:B0:58:E6 X509v3 Authority Key Identifier: keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:30:75:21:21:32:fa:41:df:c4:7f:2a:62:ce:4b:e8:ef:b0: d6:6b:60:cb:0e:d6:09:12:5c:b6:aa:b0:14:55:a7:b4:af:85: e9:f5:41:95:f0:8d:dd:0e:04:3b:71:1b:89:ff:7e:7e:26:2a: 45:63:18:71:db:c5:1c:3a:16:ae:ca:1e:5d:42:58:dd:dc:02: 67:44:12:db:af:d5:30:f2:df:ae:1f:3b:49:6e:03:64:d1:7c: 1a:b6:f9:fa:7f:37:a4:1d:d4:48:ba:c6:9f:98:d6:a4:e8:9c: 6a:ea:8a:ca:db:31:b5:52:48:cc:25:ac:a3:5a:82:78:ff:db: 4c:42:23:9a:93:3b:17:0e:fd:a9:b7:42:d2:44:eb:81:bf:1a: e1:a9:8c:44:6f:7a:34:8d:e1:77:73:2c:e9:22:0c:ca:2c:bb: d4:ca:5d:98:61:f6:de:cb:e0:16:ab:d3:40:33:04:25:30:60: c2:a0:89:ce:69:5e:ea:37:6c:e2:6a:2a:d9:d9:35:0e:d0:12: 53:17:ed:06:d9:28:7a:82:07:54:51:a0:06:00:3d:56:ba:91: 5d:18:14:a9:4b:d5:88:c2:6e:94:f8:68:88:5a:b2:7a:dd:cd: 32:c0:fc:e0:4a:21:76:b2:a3:82:a7:96:16:16:2c:1a:44:db: cd:03:5d:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDMkQxMTAvBgNVBAUTKDQ4QkZEODA4MTlBRjE3RkJDMDg3NUU2MjA2RjAyODIy QTdCMDRFOTgwHhcNMjUwODIzMDI1NzMwWhcNMjUwODMwMDI1NzMwWjAYMRYwFAYD VQQDEw02OGE5MmUxYS1hMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4h8kbwvz+p7TG7SxHqKnKc45YDj0vXhHX44jG3dda3drYNquvMBaN/xjLLxf NDdOnhKXaZR6a7ZSsxyIoao3p17LJbqEmsrbfF+O7sd1d7biHdBckZRIqyUK+f58 3bI9NfCUj/fz9aFH/k2cCXK+PziAilTUDP0+9CxohIYDxcT3VATkVJhbToMfol42 v9o2trv90hapmlH6OfMErOER7/pRoOzUggK8CbghWIcPLt7dfm54AGQrkT5QeluG luGt1K2CPOlFIyK4ggleTkPzrPFMRS9vzsxBXPa+klG6c3JQSh2qjMrjixo42Xgg XiZujN7hSLnDKD+fV7hcfsdxDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPL86tM ZnGAfuUFmY+AcCiksFjmMB8GA1UdIwQYMBaAFEi/2AgZrxf7wIdeYgbwKCKnsE6Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUMyRC84MkI3MjVFOEJD RTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9TTF9ZQ0JtdkZfdkFoMTVpQnZBb0lxZXdU cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMX1lDQm12Rl92QWgxNWlCdkFvSXFld1RwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9TTF9ZQ0JtdkZf dkFoMTVpQnZBb0lxZXdUcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2MHUhITL6Qd/Efypizkvo77DWa2DLDtYJEly2qrAUVae0r4Xp9UGV 8I3dDgQ7cRuJ/35+JipFYxhx28UcOhauyh5dQljd3AJnRBLbr9Uw8t+uHztJbgNk 0Xwatvn6fzekHdRIusafmNak6Jxq6orK2zG1UkjMJayjWoJ4/9tMQiOakzsXDv2p t0LSROuBvxrhqYxEb3o0jeF3cyzpIgzKLLvUyl2YYfbey+AWq9NAMwQlMGDCoInO aV7qN2ziairZ2TUO0BJTF+0G2Sh6ggdUUaAGAD1WupFdGBSpS9WIwm6U+GiIWrJ6 3c0ywPzgSiF2sqOCp5YWFiwaRNvNA10U -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:09 2025 by rpki-client