$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json) Hash identifier: A5RWh85WKF+3Bvb3prTQ60miCtDBIzMyS0d+HScult4= Subject key identifier: C7:FB:59:F5:A6:AE:94:49:A4:24:00:22:27:8C:CB:8D:20:93:8E:13 Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft Manifest number: B3 Signing time: Thu 21 Aug 2025 06:12:54 +0000 Manifest this update: Thu 21 Aug 2025 06:12:54 +0000 Manifest next update: Thu 28 Aug 2025 06:12:54 +0000 Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: vS5Su4wJXtQzUkxhEbQuO5mZCUf75QHRMye3YEClJSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Validity Not Before: Aug 21 06:12:54 2025 GMT Not After : Aug 28 06:12:54 2025 GMT Subject: CN=68a6b8e6-929a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:b0:c0:61:10:0b:e4:95:f5:aa:99:d0:8d: 72:a6:c6:fd:82:fc:84:e1:43:72:9d:9e:2d:19:bf: e9:dd:6b:e7:f4:ab:09:a1:b8:bd:86:d5:cb:89:90: 8d:15:92:50:2b:51:07:50:d5:b1:1a:96:bd:03:b1: e4:9a:41:35:6d:64:d9:42:18:b9:a2:6f:42:09:a2: 0b:b3:83:91:c8:d6:b0:c6:b6:1d:93:87:c0:ad:8a: 0a:78:33:ac:23:1d:c4:d5:12:df:59:b9:28:09:5e: d5:ae:26:d2:34:04:57:8f:aa:1b:7f:b6:72:de:b4: 2e:49:01:04:7c:98:b9:07:02:fd:ec:f8:2e:e9:0b: 50:db:52:11:4a:be:0d:c6:ef:36:75:08:45:97:37: 08:2b:03:62:09:14:34:9f:42:cf:ff:5c:7f:a6:68: 24:68:1d:e7:08:e4:3c:8d:8a:6d:9d:0a:e9:ba:cc: ad:25:e2:ce:be:1e:ab:77:46:7d:f4:13:2a:fa:94: 2b:d0:48:60:34:49:59:a8:4f:bf:9b:22:e8:5d:a3: c5:68:d4:a4:b6:5b:4a:e0:ff:eb:e2:8d:a0:5d:e4: 94:27:00:01:06:99:22:91:ca:d7:d3:c4:d0:8c:a2: 7b:2a:15:2a:40:54:b8:c0:f1:c4:52:2f:0b:cb:02: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FB:59:F5:A6:AE:94:49:A4:24:00:22:27:8C:CB:8D:20:93:8E:13 X509v3 Authority Key Identifier: keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:a2:8b:c9:b5:04:f7:46:24:24:f0:92:28:ac:36:5d:e2:68: e2:c1:95:0c:df:42:68:47:bc:ab:08:8b:b8:3d:21:69:e8:57: 54:88:80:13:b3:54:a3:2f:df:2e:8a:c5:30:b9:30:1c:46:5a: 60:5d:b1:0a:19:a2:31:df:39:e4:55:45:84:0a:5b:6c:37:ff: 37:99:8a:42:f9:44:3b:cf:51:7a:22:f4:ab:69:96:7c:89:3f: 75:fd:ec:5a:09:de:ac:a9:d1:92:1b:90:73:6a:89:90:e0:be: 4e:d9:a7:cf:56:06:43:d7:4b:b2:ef:9f:de:09:41:0e:ce:78: ef:ea:41:5f:81:54:29:c3:cc:5e:38:ab:c2:e1:3c:74:f8:0f: 89:db:34:3a:d1:37:f0:49:0b:81:fa:29:8d:6e:ac:13:2c:10: 50:de:69:7c:23:18:44:25:b8:c7:2a:01:ee:e7:e1:67:15:9b: 69:8f:6a:24:8d:71:c9:6f:2b:12:34:7d:eb:51:fa:7f:c4:76: b9:02:4b:5e:e3:65:e4:26:84:57:04:e5:c3:9d:25:28:a3:d2: 04:e7:e3:95:85:02:c9:34:06:21:d8:93:3c:e5:01:c9:98:ab: 17:82:37:c4:00:37:88:b1:1d:94:75:f1:cf:3f:07:08:cd:98: b6:fc:af:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1NkQxMTAvBgNVBAUTKENCNzlEOUJFMTBEQ0Y3MDI0NkZDNjk0NjM0NThBRUNB MjQyNUNCOEUwHhcNMjUwODIxMDYxMjU0WhcNMjUwODI4MDYxMjU0WjAYMRYwFAYD VQQDEw02OGE2YjhlNi05MjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqiwwGEQC+SV9aqZ0I1ypsb9gvyE4UNynZ4tGb/p3Wvn9KsJobi9htXLiZCN FZJQK1EHUNWxGpa9A7HkmkE1bWTZQhi5om9CCaILs4ORyNawxrYdk4fArYoKeDOs Ix3E1RLfWbkoCV7VribSNARXj6obf7Zy3rQuSQEEfJi5BwL97Pgu6QtQ21IRSr4N xu82dQhFlzcIKwNiCRQ0n0LP/1x/pmgkaB3nCOQ8jYptnQrpusytJeLOvh6rd0Z9 9BMq+pQr0EhgNElZqE+/myLoXaPFaNSktltK4P/r4o2gXeSUJwABBpkikcrX08TQ jKJ7KhUqQFS4wPHEUi8LywKDjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf7WfWm rpRJpCQAIieMy40gk44TMB8GA1UdIwQYMBaAFMt52b4Q3PcCRvxpRjRYrsokJcuO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84RENBMzJDRTZC NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3SkdfR2xHTkZpdXlpUWx5 NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzblp2aERjOXdKR19HbEdORml1eWlRbHk0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU2RC84RENBMzJDRTZCNTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3 SkdfR2xHTkZpdXlpUWx5NDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+oovJtQT3RiQk8JIorDZd4mjiwZUM30JoR7yrCIu4PSFp6FdUiIAT s1SjL98uisUwuTAcRlpgXbEKGaIx3znkVUWECltsN/83mYpC+UQ7z1F6IvSraZZ8 iT91/exaCd6sqdGSG5BzaomQ4L5O2afPVgZD10uy75/eCUEOznjv6kFfgVQpw8xe OKvC4Tx0+A+J2zQ60TfwSQuB+imNbqwTLBBQ3ml8IxhEJbjHKgHu5+FnFZtpj2ok jXHJbysSNH3rUfp/xHa5Akte42XkJoRXBOXDnSUoo9IE5+OVhQLJNAYh2JM85QHJ mKsXgjfEADeIsR2UdfHPPwcIzZi2/K/2 -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:10 2025 by rpki-client