$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft File: yq12WnMFvBUlSxWyW1vTm2Oow68.mft (raw, json) Hash identifier: 3sCYf5YumAFt2rqv2TdalTLOyKHZRexCjdSBpSRo9ac= Subject key identifier: 9E:B6:82:17:A2:A0:41:CE:2E:7F:60:ED:A9:05:C5:7E:02:A9:27:73 Authority key identifier: CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF Certificate issuer: /CN=A911082E/serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft Manifest number: 1A Signing time: Fri 05 Sep 2025 08:28:24 +0000 Manifest this update: Fri 05 Sep 2025 08:28:24 +0000 Manifest next update: Fri 12 Sep 2025 08:28:24 +0000 Files and hashes: 1: yq12WnMFvBUlSxWyW1vTm2Oow68.crl (hash: GOQPl8Bw9OXqx9cGLHUW4xR8jy50uYxhuNFtT56A48k=) 2: 2CD74E4E66E311F08F05EC49C4F9AE02.roa (hash: 8+dSzRSc1+OXhRbW6N90YyrDk4oOdvcvAyZdFxbaVw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911082E, serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF Validity Not Before: Sep 5 08:28:24 2025 GMT Not After : Sep 12 08:28:24 2025 GMT Subject: CN=68ba9f28-ba49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:0d:00:e6:ea:05:cd:ea:1b:84:bc:a3:e8: 7d:42:7b:84:8e:a5:34:f0:cc:44:76:4d:29:58:67: f7:27:4d:04:4d:5f:08:6d:2f:85:6b:bb:bc:a1:7c: 39:62:48:36:91:8e:bb:63:19:ec:6c:98:5d:ff:02: 6d:89:27:cc:1a:eb:77:5f:6d:df:41:cd:22:f1:16: 0a:f9:9c:dc:95:a6:b8:2c:78:d0:00:b0:e8:d8:30: d3:de:1d:f5:51:2d:a0:8a:b3:84:94:9d:d7:cd:29: be:36:d2:f5:c9:f7:3c:1e:8a:77:1c:d9:f3:70:69: 63:2a:79:5d:6d:ee:72:c5:c6:c0:0b:ea:25:a5:9b: ac:2f:0a:9a:ba:2b:58:94:af:c6:2e:fa:f9:cb:3b: e4:40:b9:f8:5b:df:68:97:78:8f:a4:0c:05:a7:67: 0a:c7:87:5c:90:aa:1b:b0:88:9f:83:13:f7:58:77: 16:fd:3b:7b:07:8e:22:b4:34:d3:3f:33:ba:c3:8e: 67:8a:7f:25:85:b5:de:29:fa:43:96:98:5d:91:df: 50:09:03:ab:4e:48:0b:7f:3a:43:66:9b:b9:04:05: e6:94:21:fe:ab:e4:d9:2c:85:7b:3b:7c:31:fb:ed: be:fc:61:b7:f4:b5:bc:62:53:b6:cb:9b:9d:8b:51: 83:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B6:82:17:A2:A0:41:CE:2E:7F:60:ED:A9:05:C5:7E:02:A9:27:73 X509v3 Authority Key Identifier: keyid:CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:3d:38:b8:46:da:b3:8d:91:dd:81:ee:af:73:2f:1b:cf:fb: 0c:9a:8a:a9:51:95:91:d1:f5:6d:3e:f1:a2:d9:77:1f:d4:4d: 4a:6b:b1:fd:a7:c7:e2:82:16:c1:63:7f:51:ef:97:ff:57:0d: 36:c2:5f:df:b8:7b:31:7a:51:a0:0d:80:87:06:08:20:9f:d2: a5:a4:17:a5:7e:66:12:2d:87:9c:a2:c5:60:ab:92:dc:15:a9: d3:9e:a0:7e:6f:a4:5f:d3:aa:b9:62:4f:ac:ea:c0:db:1d:37: b7:92:86:b5:4d:02:c7:ca:92:41:7f:33:f3:a3:4e:68:5c:db: a6:17:1f:3b:b3:8f:cd:ac:e3:39:97:dc:a8:1b:0c:49:3d:37: 63:48:b2:47:67:ba:d8:01:7d:85:61:9f:35:30:41:6b:ce:53: 22:7a:f0:06:5d:f6:98:81:b7:3f:3c:03:b0:5d:dc:0d:ef:c1: 6a:01:07:72:36:bf:3f:06:b5:c0:71:5b:9a:d5:aa:f2:ec:98: 10:51:3d:8a:5e:ca:15:89:1a:2c:c8:3c:28:84:23:fd:62:51: e1:9c:41:81:41:b1:94:bb:d5:26:68:ea:b6:3f:60:39:b0:7d: 8c:5e:c4:46:c3:49:c8:c5:05:51:91:6d:86:76:3d:9f:3b:19: 77:b0:a1:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDgyRTExMC8GA1UEBRMoQ0FBRDc2NUE3MzA1QkMxNTI1NEIxNUIyNUI1QkQzOUI2 M0E4QzNBRjAeFw0yNTA5MDUwODI4MjRaFw0yNTA5MTIwODI4MjRaMBgxFjAUBgNV BAMTDTY4YmE5ZjI4LWJhNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrnw0A5uoFzeobhLyj6H1Ce4SOpTTwzER2TSlYZ/cnTQRNXwhtL4Vru7yhfDli SDaRjrtjGexsmF3/Am2JJ8wa63dfbd9BzSLxFgr5nNyVprgseNAAsOjYMNPeHfVR LaCKs4SUndfNKb420vXJ9zweincc2fNwaWMqeV1t7nLFxsAL6iWlm6wvCpq6K1iU r8Yu+vnLO+RAufhb32iXeI+kDAWnZwrHh1yQqhuwiJ+DE/dYdxb9O3sHjiK0NNM/ M7rDjmeKfyWFtd4p+kOWmF2R31AJA6tOSAt/OkNmm7kEBeaUIf6r5NkshXs7fDH7 7b78Ybf0tbxiU7bLm52LUYNJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnraCF6Kg Qc4uf2DtqQXFfgKpJ3MwHwYDVR0jBBgwFoAUyq12WnMFvBUlSxWyW1vTm2Oow68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwODJFLzg1M0ZEOTU4NjZF MjExRjBCRUFCRTkzRUM0RjlBRTAyL3lxMTJXbk1GdkJVbFN4V3lXMXZUbTJPb3c2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXExMlduTUZ2QlVsU3hXeVcxdlRtMk9vdzY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw ODJFLzg1M0ZEOTU4NjZFMjExRjBCRUFCRTkzRUM0RjlBRTAyL3lxMTJXbk1GdkJV bFN4V3lXMXZUbTJPb3c2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABM9OLhG2rONkd2B7q9zLxvP+wyaiqlRlZHR9W0+8aLZdx/UTUprsf2n x+KCFsFjf1Hvl/9XDTbCX9+4ezF6UaANgIcGCCCf0qWkF6V+ZhIth5yixWCrktwV qdOeoH5vpF/TqrliT6zqwNsdN7eShrVNAsfKkkF/M/OjTmhc26YXHzuzj82s4zmX 3KgbDEk9N2NIskdnutgBfYVhnzUwQWvOUyJ68AZd9piBtz88A7Bd3A3vwWoBB3I2 vz8GtcBxW5rVqvLsmBBRPYpeyhWJGizIPCiEI/1iUeGcQYFBsZS71SZo6rY/YDmw fYxexEbDScjFBVGRbYZ2PZ87GXewoe4= -----END CERTIFICATE-----Generated at Sat Sep 6 21:28:26 2025 by rpki-client