$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft File: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json) Hash identifier: vge8b04HJ8oAoiP+v5N5eedZqcyj8wsZWYX75Oswjsk= Subject key identifier: 70:09:45:DD:8B:55:17:96:80:7B:07:63:49:F6:D0:63:02:1F:43:D5 Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1 Certificate issuer: /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft Manifest number: 01FA Signing time: Wed 23 Jul 2025 02:38:02 +0000 Manifest this update: Wed 23 Jul 2025 02:38:02 +0000 Manifest next update: Wed 30 Jul 2025 02:38:02 +0000 Files and hashes: 1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: 3WwN2YHSlvCKp0WtQP+K64GELLTwHP17wYOX6UYoRUA=) 2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: 0dlbreUmhOPpVhne6aJZBNls5GiTDrN1TntwCVFUe0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1 Validity Not Before: Jul 23 02:38:02 2025 GMT Not After : Jul 30 02:38:02 2025 GMT Subject: CN=68804b0a-4be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:3c:0c:51:b2:83:61:44:d2:01:6d:c2:03: d9:c8:0f:af:c2:7b:21:b3:97:65:9a:39:59:33:50: 0d:f2:3f:fe:d1:e2:1c:f4:d9:81:92:46:5f:1b:dc: 89:b0:22:54:4e:0b:be:6f:fb:14:89:40:96:f8:30: 12:5d:4d:9a:6d:2f:de:fa:83:19:6c:0c:14:44:b6: 87:bd:10:21:a8:e3:1d:c8:be:d6:ab:ad:b4:35:1f: 19:34:39:6a:ec:5a:31:9c:f6:70:e5:88:38:b6:c5: 21:ae:84:3e:da:ff:4b:79:bc:4e:32:da:f9:21:90: c6:55:64:ac:98:d8:9f:36:65:e7:47:bc:ef:3a:12: d4:35:59:17:42:f6:2e:75:c4:1d:08:38:11:74:a1: 7e:f9:b4:29:0a:a7:11:36:b4:13:2d:26:8c:9e:81: 29:b0:3c:63:70:a4:6b:74:76:c5:bb:00:f1:30:0a: 55:e9:79:83:c5:7e:68:7c:bd:74:57:6a:1e:a5:e3: 17:99:42:32:67:39:01:a6:37:7f:65:08:9f:44:ea: 0b:43:e9:9c:37:c3:67:a9:9e:d6:aa:48:03:7b:5d: a9:d6:17:1e:0b:36:87:d9:b8:ec:ea:b7:21:1c:ab: a2:af:0b:66:7b:7a:e5:53:a9:61:f1:2e:ee:e3:75: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:09:45:DD:8B:55:17:96:80:7B:07:63:49:F6:D0:63:02:1F:43:D5 X509v3 Authority Key Identifier: keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:69:d5:f4:d5:ae:21:4e:09:05:f0:ff:2e:7d:8a:e2:e0:4d: e7:60:1c:30:e5:60:26:05:27:9b:68:46:64:0b:00:a3:67:42: 06:eb:c8:84:53:86:98:56:4b:98:c7:d1:ca:5b:e6:29:79:72: de:ae:2c:e9:3e:53:78:19:6b:44:70:e9:b0:1a:27:a4:71:b9: e9:ee:26:9c:21:e5:e9:3a:d4:a4:48:8d:cb:64:9d:0d:1d:73: 5d:c2:7c:eb:ff:50:a3:62:81:c3:3c:bf:01:8d:cc:c6:84:ce: c2:15:ab:6b:c7:63:1b:fc:21:23:1a:4d:7b:2d:bc:e6:35:71: b9:47:23:1a:94:0e:60:b9:43:38:1d:1f:4d:50:c5:cc:f8:db: 2e:16:7d:f3:7e:63:ef:4d:e9:ed:4c:11:08:c8:03:e5:fb:9b: 8c:43:9e:66:48:3b:68:ef:e0:62:21:78:de:99:27:45:74:a7: dc:aa:d4:45:d9:27:6d:f8:fc:36:b3:55:f6:8e:32:b8:f3:6e: f6:e2:a5:fb:d4:a4:1f:3b:59:d4:2a:d4:91:64:2f:2e:8f:47: d7:c5:37:68:29:87:5d:60:cc:3a:52:f1:9e:0d:0e:70:7c:da: 15:77:25:09:7a:7c:6d:4c:d5:94:71:5b:d3:02:5b:d3:fa:3f: 24:f5:dd:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxNEUxMTAvBgNVBAUTKENBMzgwMzY5OUFENUIwOTA2QzAwNzk3QTNBMUU5Q0Q5 NUI2NTkxQjEwHhcNMjUwNzIzMDIzODAyWhcNMjUwNzMwMDIzODAyWjAYMRYwFAYD VQQDEw02ODgwNGIwYS00YmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3508DFGyg2FE0gFtwgPZyA+vwnshs5dlmjlZM1AN8j/+0eIc9NmBkkZfG9yJ sCJUTgu+b/sUiUCW+DASXU2abS/e+oMZbAwURLaHvRAhqOMdyL7Wq620NR8ZNDlq 7FoxnPZw5Yg4tsUhroQ+2v9LebxOMtr5IZDGVWSsmNifNmXnR7zvOhLUNVkXQvYu dcQdCDgRdKF++bQpCqcRNrQTLSaMnoEpsDxjcKRrdHbFuwDxMApV6XmDxX5ofL10 V2oepeMXmUIyZzkBpjd/ZQifROoLQ+mcN8NnqZ7WqkgDe12p1hceCzaH2bjs6rch HKuirwtme3rlU6lh8S7u43XHGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAJRd2L VReWgHsHY0n20GMCH0PVMB8GA1UdIwQYMBaAFMo4A2ma1bCQbAB5ejoenNlbZZGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE0RS84MEM5NUFBRTVG MjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNKQnNBSGw2T2g2YzJWdGxr YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lqZ0RhWnJWc0pCc0FIbDZPaDZjMlZ0bGtiRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE0RS84MEM5NUFBRTVGMjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNK QnNBSGw2T2g2YzJWdGxrYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbadX01a4hTgkF8P8ufYri4E3nYBww5WAmBSebaEZkCwCjZ0IG68iE U4aYVkuYx9HKW+YpeXLerizpPlN4GWtEcOmwGiekcbnp7iacIeXpOtSkSI3LZJ0N HXNdwnzr/1CjYoHDPL8BjczGhM7CFatrx2Mb/CEjGk17LbzmNXG5RyMalA5guUM4 HR9NUMXM+NsuFn3zfmPvTentTBEIyAPl+5uMQ55mSDto7+BiIXjemSdFdKfcqtRF 2Sdt+Pw2s1X2jjK482724qX71KQfO1nUKtSRZC8uj0fXxTdoKYddYMw6UvGeDQ5w fNoVdyUJenxtTNWUcVvTAlvT+j8k9d3X -----END CERTIFICATE-----Generated at Wed Jul 23 12:52:01 2025 by rpki-client