$ rpki-client -vvf rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft File: YptQlj68agIuJ67LYTQg5A5020o.mft (raw, json) Hash identifier: VqB5+VeK1+Ptai1PCM2y/lilMGrXKplXZxZcywJh3Lc= Subject key identifier: 49:74:75:6E:41:B3:3C:AA:AD:D2:53:34:D0:5D:47:76:4A:22:CB:2A Authority key identifier: 62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A Certificate issuer: /CN=A911392E/serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft Manifest number: CB Signing time: Sat 23 Aug 2025 05:54:52 +0000 Manifest this update: Sat 23 Aug 2025 05:54:51 +0000 Manifest next update: Sat 30 Aug 2025 05:54:51 +0000 Files and hashes: 1: YptQlj68agIuJ67LYTQg5A5020o.crl (hash: TCOo9ooXI2/hcZVVEh+XzZULF2cfztS4+wQZfsrMyf8=) 2: 8E9B074050E311EF8624AC36C4F9AE02.roa (hash: pSCYQ3uLsCLOJxTrAoE8Q2pLkXLNKvUAYP3brjTHhbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911392E, serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A Validity Not Before: Aug 23 05:54:51 2025 GMT Not After : Aug 30 05:54:51 2025 GMT Subject: CN=68a957ac-1b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:8a:ff:70:75:9a:71:e9:b6:6e:86:52:5e: f0:e4:93:82:46:3d:b2:95:d0:cb:a9:a8:13:57:49: 5c:fb:25:19:47:5e:d2:68:32:bd:d3:b5:4b:23:71: fe:7c:b9:9a:9d:5c:75:e3:78:08:c1:24:7a:03:c8: bd:d9:84:dc:cd:9f:b2:42:99:8e:f4:05:37:63:87: 99:0f:bf:4c:0b:9f:ff:cf:c7:04:88:d0:bb:14:9d: 1c:ba:10:14:44:3b:5f:7b:85:1d:b8:47:b9:e2:79: 41:72:1a:83:d6:91:19:89:ce:0b:a7:6b:27:bf:2b: 29:61:92:a6:d4:48:c4:6c:60:89:2c:ba:11:b5:ca: 9a:8f:a3:0e:1d:ec:8c:8d:f6:ae:48:ae:98:7d:00: 59:11:1b:0f:c1:81:04:b3:09:39:ff:98:ed:05:dd: 21:3c:46:1b:0c:f2:85:7a:f9:2c:55:55:ee:30:54: 00:43:32:24:67:ca:a3:c7:5d:95:ba:70:a6:d5:9c: 4c:09:e3:8e:87:79:d3:f3:23:d8:a9:6b:78:34:2b: aa:88:ae:11:8c:2f:70:67:7e:91:0f:79:f5:49:3f: 7c:95:ae:5f:7e:12:82:46:3f:58:03:5c:98:42:5e: 6a:4d:89:c8:6b:3a:3c:82:ae:cc:de:cd:89:46:c7: 9c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:74:75:6E:41:B3:3C:AA:AD:D2:53:34:D0:5D:47:76:4A:22:CB:2A X509v3 Authority Key Identifier: keyid:62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b1:e5:4f:08:ec:ea:34:9d:22:fb:59:08:38:04:f7:94:68: 00:6f:fe:d3:2e:2d:de:6d:2e:93:d6:26:95:46:54:04:b5:aa: d8:7b:86:17:b7:5b:01:66:14:fa:89:9e:a9:a6:ce:70:cf:12: e9:64:98:65:89:b2:ea:31:51:f7:16:40:5a:a6:4b:9f:52:8e: 1c:cd:ef:7a:72:03:f2:f7:2e:6b:d4:99:4f:81:62:66:d8:05: e1:b5:dc:55:af:76:c0:50:04:dd:30:8a:8e:c2:5d:cf:69:22: b8:74:70:47:76:41:0e:cc:62:a0:76:72:43:a9:3b:54:c9:83: 87:1a:e1:30:7d:9b:42:4b:51:74:4d:2d:a3:bb:24:20:f4:45: 93:e3:46:2a:50:89:26:9b:20:23:67:b6:e0:9a:31:ff:8c:12: 8b:fa:69:2a:db:ca:4f:3a:c7:7b:fd:56:66:b3:f8:f2:cb:74: 92:5a:d2:7c:e8:12:6b:cb:c0:14:19:8c:85:ca:dd:c7:13:ab: f8:ae:d6:9e:06:bc:a0:b1:ca:f4:87:7c:e0:d6:6f:f7:be:8e: 3d:d5:b5:77:dc:0f:52:a0:b2:9a:65:d4:40:58:8c:30:50:dc: e1:6a:ed:a6:df:55:89:a5:52:8a:18:ac:45:80:49:8d:90:ba: 0a:71:2b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5MkUxMTAvBgNVBAUTKDYyOUI1MDk2M0VCQzZBMDIyRTI3QUVDQjYxMzQyMEU0 MEU3NERCNEEwHhcNMjUwODIzMDU1NDUxWhcNMjUwODMwMDU1NDUxWjAYMRYwFAYD VQQDEw02OGE5NTdhYy0xYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNqK/3B1mnHptm6GUl7w5JOCRj2yldDLqagTV0lc+yUZR17SaDK907VLI3H+ fLmanVx143gIwSR6A8i92YTczZ+yQpmO9AU3Y4eZD79MC5//z8cEiNC7FJ0cuhAU RDtfe4UduEe54nlBchqD1pEZic4Lp2snvyspYZKm1EjEbGCJLLoRtcqaj6MOHeyM jfauSK6YfQBZERsPwYEEswk5/5jtBd0hPEYbDPKFevksVVXuMFQAQzIkZ8qjx12V unCm1ZxMCeOOh3nT8yPYqWt4NCuqiK4RjC9wZ36RD3n1ST98la5ffhKCRj9YA1yY Ql5qTYnIazo8gq7M3s2JRseccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEl0dW5B szyqrdJTNNBdR3ZKIssqMB8GA1UdIwQYMBaAFGKbUJY+vGoCLieuy2E0IOQOdNtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzkyRS8zMkUxRjM1ODUw RTAxMUVGQTcwOTQxNjhDNEY5QUUwMi9ZcHRRbGo2OGFnSXVKNjdMWVRRZzVBNTAy MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lwdFFsajY4YWdJdUo2N0xZVFFnNUE1MDIwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzkyRS8zMkUxRjM1ODUwRTAxMUVGQTcwOTQxNjhDNEY5QUUwMi9ZcHRRbGo2OGFn SXVKNjdMWVRRZzVBNTAyMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJseVPCOzqNJ0i+1kIOAT3lGgAb/7TLi3ebS6T1iaVRlQEtarYe4YX t1sBZhT6iZ6pps5wzxLpZJhlibLqMVH3FkBapkufUo4cze96cgPy9y5r1JlPgWJm 2AXhtdxVr3bAUATdMIqOwl3PaSK4dHBHdkEOzGKgdnJDqTtUyYOHGuEwfZtCS1F0 TS2juyQg9EWT40YqUIkmmyAjZ7bgmjH/jBKL+mkq28pPOsd7/VZms/jyy3SSWtJ8 6BJry8AUGYyFyt3HE6v4rtaeBrygscr0h3zg1m/3vo491bV33A9SoLKaZdRAWIww UNzhau2m31WJpVKKGKxFgEmNkLoKcSu9 -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:10 2025 by rpki-client