$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: l6jDdvRvHYknd595JUsWYZd8dvOBj5CZ8fDpAZ7qx14= Subject key identifier: 38:A8:F4:51:BC:9F:C8:38:66:D9:DA:15:2C:4C:CB:84:2F:51:C8:E8 Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 0157 Signing time: Sun 07 Sep 2025 04:32:42 +0000 Manifest this update: Sun 07 Sep 2025 04:32:41 +0000 Manifest next update: Sun 14 Sep 2025 04:32:41 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: CMx/D5kgH4upzz1zEkZiJ3JOgRaJ00ST4i4iERTyZ9w=) 2: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: DpGOi0sB2sMQxf4ZO7IGNHJMX8cIMnNNE4SuDpT2FAo=) 3: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: RSiHqX4rb/XiO/VoDBBhBwIwk/xvfX+c6El0AIzq620=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: Sep 7 04:32:41 2025 GMT Not After : Sep 14 04:32:41 2025 GMT Subject: CN=68bd0ae9-d793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:00:f4:10:7f:69:d5:af:80:ba:0e:1a:c3: e5:be:ff:e7:e9:e4:61:ad:0a:81:23:80:23:cc:73: 0f:43:fb:c6:ed:ef:2e:e1:7c:03:e4:4a:e8:38:41: 86:29:a4:0a:6e:e7:c5:55:73:73:2a:70:86:e0:18: 7e:7a:2b:66:91:71:70:76:5c:e9:e6:a2:07:61:70: 20:ef:ec:77:34:72:af:8e:15:09:15:ac:df:52:be: 02:41:fd:48:47:ea:f8:4b:20:6e:f8:76:9b:a7:fc: a9:36:46:d0:e4:8b:fe:ab:f6:95:ea:67:e3:ab:08: 3f:f7:39:7d:56:5b:7e:57:78:78:37:13:93:20:01: ba:4d:28:ba:07:04:b2:e9:1d:bc:5e:83:74:04:bf: 42:33:02:eb:ea:c4:79:ca:43:1c:42:58:eb:3b:c8: de:69:1a:d9:1a:67:14:85:c7:91:6d:f5:7e:28:51: f3:f6:b4:fa:2c:fe:48:9a:74:6f:30:89:34:e4:dd: 74:99:4d:6e:7d:3f:58:99:9e:fc:be:9a:01:36:a4: a0:0e:9b:3d:61:25:e6:15:c0:d2:17:5e:1a:87:c6: 1d:41:e9:fe:6e:83:54:f5:4d:9a:e5:50:8a:c8:ef: ad:f3:51:57:4b:df:cb:f5:c7:ea:27:da:22:ac:28: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A8:F4:51:BC:9F:C8:38:66:D9:DA:15:2C:4C:CB:84:2F:51:C8:E8 X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:dd:30:d8:a4:05:32:ef:e5:2f:41:de:d8:3d:8f:5d:49:f2: 17:a3:97:e0:7d:10:45:12:37:87:20:49:9b:59:31:ae:6f:5e: 0d:40:c5:1a:06:fb:70:2a:58:dd:47:e8:76:3c:d0:1e:16:c3: 5e:a0:37:9b:d2:27:d3:7a:d2:ac:6d:f2:2e:eb:05:1b:d0:2c: 1c:f0:76:f9:7f:60:4f:75:ea:f8:e8:fc:ca:cc:4f:c5:ec:09: aa:bb:2e:3a:63:a0:36:99:97:ad:15:61:4e:86:be:5e:a8:a5: 5e:2c:4d:86:86:a3:12:db:2b:1a:3e:51:32:31:88:7c:62:06: 9d:08:d0:6a:b0:a6:6e:cf:f0:43:6f:11:48:ef:f4:2b:36:77: a9:a3:6c:22:a1:7b:dd:18:de:09:15:6a:96:c7:65:a3:c5:d7: 16:7d:84:36:10:86:aa:6b:31:39:41:de:32:3d:7c:f7:b1:f4: 7a:ab:ff:5d:ff:b2:bb:f1:ce:ff:fc:ce:d7:83:ac:a6:34:6f: a9:b3:0c:6e:e4:64:46:be:85:cd:4b:02:ec:d3:cf:bc:b2:fa: a4:7d:38:98:f3:59:ca:4c:f1:d5:7a:c0:91:d2:b3:86:5d:9f: f3:f4:97:5f:c4:a7:c4:9e:89:ab:c5:26:ce:ab:58:bd:05:2b: 05:67:c5:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjUwOTA3MDQzMjQxWhcNMjUwOTE0MDQzMjQxWjAYMRYwFAYD VQQDEw02OGJkMGFlOS1kNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8QA9BB/adWvgLoOGsPlvv/n6eRhrQqBI4AjzHMPQ/vG7e8u4XwD5EroOEGG KaQKbufFVXNzKnCG4Bh+eitmkXFwdlzp5qIHYXAg7+x3NHKvjhUJFazfUr4CQf1I R+r4SyBu+Habp/ypNkbQ5Iv+q/aV6mfjqwg/9zl9Vlt+V3h4NxOTIAG6TSi6BwSy 6R28XoN0BL9CMwLr6sR5ykMcQljrO8jeaRrZGmcUhceRbfV+KFHz9rT6LP5ImnRv MIk05N10mU1ufT9YmZ78vpoBNqSgDps9YSXmFcDSF14ah8YdQen+boNU9U2a5VCK yO+t81FXS9/L9cfqJ9oirCgc3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDio9FG8 n8g4ZtnaFSxMy4QvUcjoMB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF3TDYpAUy7+UvQd7YPY9dSfIXo5fgfRBFEjeHIEmbWTGub14NQMUa BvtwKljdR+h2PNAeFsNeoDeb0ifTetKsbfIu6wUb0Cwc8Hb5f2BPder46PzKzE/F 7Amquy46Y6A2mZetFWFOhr5eqKVeLE2GhqMS2ysaPlEyMYh8YgadCNBqsKZuz/BD bxFI7/QrNnepo2wioXvdGN4JFWqWx2WjxdcWfYQ2EIaqazE5Qd4yPXz3sfR6q/9d /7K78c7//M7Xg6ymNG+pswxu5GRGvoXNSwLs08+8svqkfTiY81nKTPHVesCR0rOG XZ/z9JdfxKfEnomrxSbOq1i9BSsFZ8Xe -----END CERTIFICATE-----Generated at Sun Sep 7 14:22:23 2025 by rpki-client