$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: lQX9rsKtQpe9vgx6PLuah6ndkj1R5WpIpPo4Jj/GwEY= Subject key identifier: AB:BC:06:8A:70:FD:4B:13:28:B1:DE:7B:8D:8B:D5:94:A8:87:5A:BF Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0B7F Signing time: Thu 24 Jul 2025 19:12:50 +0000 Manifest this update: Thu 24 Jul 2025 19:12:50 +0000 Manifest next update: Thu 31 Jul 2025 19:12:50 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: oERoMFDUYLYF5p/lo39Ph6bUBWz9Kn8aUOLu2j5ElZA=) 2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: 9VkEhYHF3f19k3ccapKOmWUnQN3qe0LKW0bGLzgAj2Q=) 3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: UVKRHigELp+/xtOJ9hxFUzKgCIBL/cBJ5XfcHMgTaRI=) 4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: qEnxbXTZjYArRGRzDWZrlZe2tR2ZHb8POdNuo8ieu30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 19:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2964 (0xb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Jul 24 19:12:50 2025 GMT Not After : Jul 31 19:12:50 2025 GMT Subject: CN=688285b2-b457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:23:3d:67:1d:d9:1a:1e:08:77:cb:89:4b:51: 52:00:c3:fa:38:76:00:da:70:8d:e1:5a:cc:12:01: c8:de:fa:1d:4a:ce:be:67:a1:78:dd:ff:75:ad:df: 49:e5:ed:f5:5d:2d:33:31:55:47:08:17:88:1b:2a: 73:ec:42:37:23:dc:41:a9:1b:29:10:9b:f5:64:6f: c9:df:fd:63:dd:b2:11:e2:52:98:b9:58:be:a4:8e: fb:6d:e7:3e:ea:ea:bd:54:7d:9a:e6:a4:c6:e7:a6: 14:fa:90:44:40:95:8b:c7:a2:67:13:e6:bf:57:8a: b6:10:f9:d0:d1:30:ee:1d:0c:36:7a:9e:fa:79:3e: 7f:c8:84:a3:ef:e8:c0:ba:20:d0:04:65:8a:5d:eb: da:55:48:cf:c7:91:0b:a9:a1:25:0a:41:d8:e0:3e: fc:02:32:fc:91:25:de:d9:73:e7:03:6b:f8:63:e5: 9a:1a:3e:22:f4:f2:b2:83:9d:8c:1e:80:a7:81:26: e1:58:ee:5b:ba:1f:38:58:50:34:c5:fe:49:fa:25: 63:90:dc:b1:ea:1a:a7:f6:b4:a2:e1:e7:44:47:bf: fe:9e:b8:63:e0:0f:fd:2f:65:67:54:6d:85:ef:85: ca:5f:a1:e2:e7:68:b4:0f:66:39:3f:65:b1:bb:27: a4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BC:06:8A:70:FD:4B:13:28:B1:DE:7B:8D:8B:D5:94:A8:87:5A:BF X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6d:0d:dc:6f:37:59:93:b9:a3:d5:46:0f:01:44:b5:fb:99: d1:94:1a:a0:30:95:e7:de:d0:ff:77:a5:99:27:cb:d2:43:e6: 5f:69:2d:bb:56:e5:a7:5d:6d:dc:55:8f:cc:e3:7f:f1:29:48: 45:9f:00:e2:22:c3:7f:69:79:f6:9e:db:51:9d:82:04:06:de: fc:bb:c1:9b:a5:fa:6a:2d:66:eb:90:3e:e3:5a:6d:f8:bd:92: f7:74:44:4f:81:00:94:4d:15:96:3f:03:08:64:14:3d:4d:b8: 2b:35:ce:e6:83:9f:ed:40:8a:b4:32:3d:e9:fa:0d:a3:55:74: bb:88:27:5a:84:3e:96:77:fa:70:65:0e:39:95:b4:88:37:59: 6b:7c:4a:50:7c:17:c9:70:92:38:9e:2b:32:eb:b0:a8:a2:a3: 12:00:56:cf:f9:16:e1:c7:28:e3:6c:75:76:8f:b6:d1:8f:46: 59:b4:ce:4f:0b:c7:87:05:41:55:c1:30:4e:a2:db:25:9c:2b: e8:3d:6e:71:42:a5:fd:75:c2:c0:f2:c4:7a:0f:14:90:15:3f: 90:a0:ba:e0:2e:26:76:df:fa:81:37:81:61:ce:c8:0c:cc:71: 51:5b:6a:21:9e:7c:cc:f9:f5:3e:f3:a3:49:15:5f:a7:d9:63: 76:04:d9:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjUwNzI0MTkxMjUwWhcNMjUwNzMxMTkxMjUwWjAYMRYwFAYD VQQDEw02ODgyODViMi1iNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CM9Zx3ZGh4Id8uJS1FSAMP6OHYA2nCN4VrMEgHI3vodSs6+Z6F43f91rd9J 5e31XS0zMVVHCBeIGypz7EI3I9xBqRspEJv1ZG/J3/1j3bIR4lKYuVi+pI77bec+ 6uq9VH2a5qTG56YU+pBEQJWLx6JnE+a/V4q2EPnQ0TDuHQw2ep76eT5/yISj7+jA uiDQBGWKXevaVUjPx5ELqaElCkHY4D78AjL8kSXe2XPnA2v4Y+WaGj4i9PKyg52M HoCngSbhWO5buh84WFA0xf5J+iVjkNyx6hqn9rSi4edER7/+nrhj4A/9L2VnVG2F 74XKX6Hi52i0D2Y5P2WxuyekjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKu8Bopw /UsTKLHee42L1ZSoh1q/MB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsbQ3cbzdZk7mj1UYPAUS1+5nRlBqgMJXn3tD/d6WZJ8vSQ+ZfaS27 VuWnXW3cVY/M43/xKUhFnwDiIsN/aXn2nttRnYIEBt78u8GbpfpqLWbrkD7jWm34 vZL3dERPgQCUTRWWPwMIZBQ9TbgrNc7mg5/tQIq0Mj3p+g2jVXS7iCdahD6Wd/pw ZQ45lbSIN1lrfEpQfBfJcJI4nisy67CooqMSAFbP+RbhxyjjbHV2j7bRj0ZZtM5P C8eHBUFVwTBOotslnCvoPW5xQqX9dcLA8sR6DxSQFT+QoLrgLiZ23/qBN4FhzsgM zHFRW2ohnnzM+fU+86NJFV+n2WN2BNmG -----END CERTIFICATE-----Generated at Sat Jul 26 15:22:18 2025 by rpki-client