$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft File: yyBKq8TrV0KH_ARSchxbAQqavzE.mft (raw, json) Hash identifier: aaPIgbKMSl6N1onbmeK1R5xzcf9NVle/RLZzu7TpREA= Subject key identifier: 98:F8:D0:89:CD:28:6D:00:80:B9:B6:7D:84:25:02:42:CF:B6:09:F4 Authority key identifier: CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31 Certificate issuer: /CN=A911082E/serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft Manifest number: 12 Signing time: Thu 21 Aug 2025 08:17:01 +0000 Manifest this update: Thu 21 Aug 2025 08:17:00 +0000 Manifest next update: Thu 28 Aug 2025 08:17:00 +0000 Files and hashes: 1: yyBKq8TrV0KH_ARSchxbAQqavzE.crl (hash: 9XXako3dAikjPykRnhujlYXlhOPxKPeQwQP9cb+52ZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911082E, serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31 Validity Not Before: Aug 21 08:17:00 2025 GMT Not After : Aug 28 08:17:00 2025 GMT Subject: CN=68a6d5fc-ee8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:26:fa:db:70:95:4e:51:f6:29:1c:f6:da: de:86:7d:8c:1a:7f:77:64:dd:4e:32:70:52:0a:72: ff:3f:37:3d:56:51:8a:f2:f2:5e:49:d6:8f:41:91: 8f:ec:5d:44:5f:89:c6:02:ae:82:6e:d1:76:32:9b: bc:56:5b:09:59:05:5c:2e:5f:a2:cb:cd:0c:ae:bf: e5:e7:1b:8f:1c:13:28:a3:1a:ac:55:ae:9e:e2:fd: 41:33:ec:98:70:0c:71:e3:4f:9b:a7:4f:f5:31:69: 2a:58:2b:6c:25:6b:e9:a0:7c:ad:41:f9:70:a9:b7: 03:20:3d:a6:76:72:a5:a8:b6:4c:4f:f6:a6:48:af: 32:98:d9:ef:ab:84:d6:2b:cf:03:2b:92:b0:8c:68: 1d:a1:ca:3f:48:50:42:12:48:05:c6:d3:d5:6e:5c: c7:f3:66:eb:95:25:58:a5:7d:a9:dd:b6:4c:64:93: 21:61:98:6f:90:2c:78:aa:bf:97:2e:a7:f4:79:07: cd:47:ba:7e:a2:a8:5e:b7:67:bc:32:1f:d2:5e:f6: 15:15:a9:29:52:25:6e:76:d9:c2:bb:9b:d0:fb:78: 61:56:de:e2:01:e3:e1:43:c8:f5:3a:03:59:27:43: 38:33:46:12:f1:34:34:e3:ab:4e:38:9c:a0:a3:b6: 0d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F8:D0:89:CD:28:6D:00:80:B9:B6:7D:84:25:02:42:CF:B6:09:F4 X509v3 Authority Key Identifier: keyid:CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ea:66:8a:54:08:62:a1:d5:e7:73:44:e5:6b:3b:b5:a8:4f: 23:9c:3c:65:a8:2d:7d:e3:43:28:e3:0e:ad:76:de:fe:a4:8a: 52:f6:6d:9c:a2:2b:d8:3b:fe:05:56:a4:4d:23:4c:35:aa:a4: f4:ca:32:dc:54:b2:43:ab:13:9d:61:c8:8b:0b:bf:c3:60:a7: 4d:1a:08:bb:24:2a:df:02:e7:c6:86:83:a7:ca:7d:f7:49:59: 96:4d:ad:85:a1:cd:8c:fa:d9:9c:5b:7a:d3:34:8a:3d:3f:c7: 5c:6f:74:35:ae:a7:35:49:a2:fc:b1:99:68:77:d8:f5:38:ee: 3a:26:19:29:89:45:e2:da:c4:99:4c:6f:24:b2:bc:df:dc:0c: 2d:c4:5c:7a:77:63:62:3b:9f:0b:fc:45:2e:86:3a:b3:2c:48: 6a:9c:1e:17:eb:2d:11:c9:6d:56:7f:1b:8a:f2:da:d0:e6:59: 87:d3:79:44:2d:8c:c3:e4:a9:92:7e:c2:bb:57:0d:0b:7f:aa: f6:4d:ff:c3:73:d6:e0:4d:1f:cd:64:0d:d1:14:04:89:33:f4: 9e:aa:42:44:09:bf:4e:2b:ec:8a:2d:00:ea:f4:18:c5:9c:00: de:b4:28:86:e5:43:1c:4c:0a:8c:d7:86:27:9a:d6:bf:4a:9a: dc:b3:57:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDgyRTExMC8GA1UEBRMoQ0IyMDRBQUJDNEVCNTc0Mjg3RkMwNDUyNzIxQzVCMDEw QTlBQkYzMTAeFw0yNTA4MjEwODE3MDBaFw0yNTA4MjgwODE3MDBaMBgxFjAUBgNV BAMTDTY4YTZkNWZjLWVlOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIiCb623CVTlH2KRz22t6GfYwaf3dk3U4ycFIKcv8/Nz1WUYry8l5J1o9BkY/s XURficYCroJu0XYym7xWWwlZBVwuX6LLzQyuv+XnG48cEyijGqxVrp7i/UEz7Jhw DHHjT5unT/UxaSpYK2wla+mgfK1B+XCptwMgPaZ2cqWotkxP9qZIrzKY2e+rhNYr zwMrkrCMaB2hyj9IUEISSAXG09VuXMfzZuuVJVilfandtkxkkyFhmG+QLHiqv5cu p/R5B81Hun6iqF63Z7wyH9Je9hUVqSlSJW522cK7m9D7eGFW3uIB4+FDyPU6A1kn QzgzRhLxNDTjq044nKCjtg1JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmPjQic0o bQCAubZ9hCUCQs+2CfQwHwYDVR0jBBgwFoAUyyBKq8TrV0KH/ARSchxbAQqavzEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwODJFLzhERkU2MzY2NjZF MjExRjBCRUFCRTkzRUM0RjlBRTAyL3l5QktxOFRyVjBLSF9BUlNjaHhiQVFxYXZ6 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXlCS3E4VHJWMEtIX0FSU2NoeGJBUXFhdnpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw ODJFLzhERkU2MzY2NjZFMjExRjBCRUFCRTkzRUM0RjlBRTAyL3l5QktxOFRyVjBL SF9BUlNjaHhiQVFxYXZ6RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK7qZopUCGKh1edzROVrO7WoTyOcPGWoLX3jQyjjDq123v6kilL2bZyi K9g7/gVWpE0jTDWqpPTKMtxUskOrE51hyIsLv8Ngp00aCLskKt8C58aGg6fKffdJ WZZNrYWhzYz62ZxbetM0ij0/x1xvdDWupzVJovyxmWh32PU47jomGSmJReLaxJlM bySyvN/cDC3EXHp3Y2I7nwv8RS6GOrMsSGqcHhfrLRHJbVZ/G4ry2tDmWYfTeUQt jMPkqZJ+wrtXDQt/qvZN/8Nz1uBNH81kDdEUBIkz9J6qQkQJv04r7IotAOr0GMWc AN60KIblQxxMCozXhiea1r9KmtyzV2U= -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:16 2025 by rpki-client