$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: TPJLTpO7nIkwNnwCYwGouTRuxbs9NAtXbC/qeh6seuk= Subject key identifier: C9:3C:1B:BC:13:A7:E3:BA:39:30:13:A7:14:EE:5D:A8:82:41:0D:FA Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 0794 Signing time: Wed 10 Sep 2025 21:40:49 +0000 Manifest this update: Wed 10 Sep 2025 21:40:49 +0000 Manifest next update: Wed 17 Sep 2025 21:40:49 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: HYrqER8PzK/U5Qt4TXgLAeRBF2Bru5yDpIVzRSUk2SI=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: pfFLA6S00NJF9wnUh3eyO3xPwlEBQIG4Qg4AiW8MLVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 21:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Sep 10 21:40:49 2025 GMT Not After : Sep 17 21:40:49 2025 GMT Subject: CN=68c1f061-e3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:70:4c:64:66:c0:a0:cf:ad:0b:95:f8:eb: d3:80:c3:f1:c4:8d:84:97:de:0f:b5:f3:68:61:ca: e8:34:bd:55:f9:7d:1e:44:5f:4a:55:2c:b7:0b:a9: cc:70:87:d7:e0:ba:18:97:14:21:23:7a:97:f6:31: 60:61:dd:dd:9f:aa:16:60:d6:07:0a:61:bd:bf:6e: 7f:e5:09:18:67:6c:6c:d5:4a:47:62:a7:27:08:98: 94:be:69:c4:3e:26:1f:b6:09:40:d2:17:bb:61:22: 2e:56:f8:46:ae:1e:5d:59:fb:02:fd:c2:25:5e:1f: 30:15:40:fe:52:72:95:52:57:ae:b7:bb:db:95:3c: 4b:d1:1a:98:9e:56:e4:50:c5:8a:07:7c:5f:2e:b3: 70:69:75:e2:10:68:f8:07:b9:67:ac:20:d0:34:1b: 3b:81:cc:b6:56:e3:92:44:f1:47:83:ba:95:a5:2b: f2:b0:e7:a7:df:aa:db:14:0d:20:e2:3d:06:06:6a: 22:57:a0:08:c9:55:01:fd:1a:db:5e:4b:76:6e:86: f7:dc:b8:a9:0e:97:72:a7:69:dc:eb:fc:24:57:b5: fa:e6:6e:a0:f6:c2:7e:ab:26:7c:a2:11:f5:15:d0: 34:2d:fa:6a:33:81:01:af:88:3f:84:5b:58:2f:c3: c5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3C:1B:BC:13:A7:E3:BA:39:30:13:A7:14:EE:5D:A8:82:41:0D:FA X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0e:03:84:e2:f0:14:e7:fa:30:e1:2e:6b:59:7c:a2:10:81: 4f:a9:90:ba:17:54:37:6e:e0:cb:a0:65:f2:16:72:b1:a8:7d: 78:00:3d:4e:39:04:52:c4:41:c9:9a:0a:a6:68:da:e9:84:a6: b7:45:ed:fc:a1:45:5f:e0:96:d1:bd:cf:66:39:10:cd:07:dd: 98:df:ea:4a:54:55:0e:4a:2f:4d:c2:0e:7b:29:89:f7:b4:27: 63:30:43:ed:7e:08:64:57:06:7c:9a:79:69:23:ab:19:a8:cc: aa:dd:26:fd:ee:4b:4c:de:1e:5e:37:e9:bd:30:44:bc:53:78: e2:8c:fc:83:37:fa:eb:92:e8:80:81:21:64:20:88:8f:9b:72: eb:fd:4a:8d:a9:f7:4a:84:7b:53:ec:85:8e:72:87:c8:16:cd: 44:85:c7:a5:77:34:75:a0:cc:4b:42:6e:57:c3:b9:b3:2b:30: d9:b3:eb:79:ea:c2:da:5f:49:db:00:8f:81:67:57:e6:b3:50: 98:c7:f5:51:29:d1:db:ff:2f:4c:33:5e:24:86:aa:8e:21:6f: e5:8c:0f:aa:34:f9:ca:3e:5a:4b:04:41:f7:82:f1:5c:6b:fd: 2d:a1:c2:d5:8c:dd:f1:47:a0:67:0d:39:7c:f2:f2:15:3c:73: c8:e9:7e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjUwOTEwMjE0MDQ5WhcNMjUwOTE3MjE0MDQ5WjAYMRYwFAYD VQQDEw02OGMxZjA2MS1lM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqptwTGRmwKDPrQuV+OvTgMPxxI2El94PtfNoYcroNL1V+X0eRF9KVSy3C6nM cIfX4LoYlxQhI3qX9jFgYd3dn6oWYNYHCmG9v25/5QkYZ2xs1UpHYqcnCJiUvmnE PiYftglA0he7YSIuVvhGrh5dWfsC/cIlXh8wFUD+UnKVUleut7vblTxL0RqYnlbk UMWKB3xfLrNwaXXiEGj4B7lnrCDQNBs7gcy2VuOSRPFHg7qVpSvysOen36rbFA0g 4j0GBmoiV6AIyVUB/RrbXkt2bob33LipDpdyp2nc6/wkV7X65m6g9sJ+qyZ8ohH1 FdA0LfpqM4EBr4g/hFtYL8PFywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMk8G7wT p+O6OTATpxTuXaiCQQ36MB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKDgOE4vAU5/ow4S5rWXyiEIFPqZC6F1Q3buDLoGXyFnKxqH14AD1O OQRSxEHJmgqmaNrphKa3Re38oUVf4JbRvc9mORDNB92Y3+pKVFUOSi9Nwg57KYn3 tCdjMEPtfghkVwZ8mnlpI6sZqMyq3Sb97ktM3h5eN+m9MES8U3jijPyDN/rrkuiA gSFkIIiPm3Lr/UqNqfdKhHtT7IWOcofIFs1EhceldzR1oMxLQm5Xw7mzKzDZs+t5 6sLaX0nbAI+BZ1fms1CYx/VRKdHb/y9MM14khqqOIW/ljA+qNPnKPlpLBEH3gvFc a/0tocLVjN3xR6BnDTl88vIVPHPI6X5y -----END CERTIFICATE-----Generated at Thu Sep 11 00:39:07 2025 by rpki-client