$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: c2Ub2e/FGusyVekDozY16F79PvKkNhaT2aBHHQyJDRk= Subject key identifier: 3E:E8:A2:26:5B:88:02:85:E4:36:40:AC:33:55:39:5E:E2:B4:80:A3 Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0BAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0B97 Signing time: Mon 08 Sep 2025 19:02:36 +0000 Manifest this update: Mon 08 Sep 2025 19:02:36 +0000 Manifest next update: Mon 15 Sep 2025 19:02:36 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: mh9+SsyhCtksRj0BwZXi98SR+7i9XkJ/B4nO+whg8ac=) 2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: 9VkEhYHF3f19k3ccapKOmWUnQN3qe0LKW0bGLzgAj2Q=) 3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: UVKRHigELp+/xtOJ9hxFUzKgCIBL/cBJ5XfcHMgTaRI=) 4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: qEnxbXTZjYArRGRzDWZrlZe2tR2ZHb8POdNuo8ieu30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2988 (0xbac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Sep 8 19:02:36 2025 GMT Not After : Sep 15 19:02:36 2025 GMT Subject: CN=68bf284c-908a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2b:f2:eb:78:3a:7a:22:4e:f5:f2:cd:7e:83: 09:c2:83:8b:f2:00:19:21:df:e5:5b:e9:48:f9:ad: 91:61:95:c3:e9:03:78:c2:33:d1:1f:ca:90:dc:33: 47:2a:56:39:32:13:71:88:0b:8c:01:eb:9f:aa:c8: 81:a8:7d:06:b6:92:a3:f6:f3:ce:77:61:7a:ce:bd: b9:d7:56:48:d7:08:73:13:65:ab:d3:cd:b2:44:c5: e1:da:22:99:f4:91:db:36:67:c5:be:9a:24:8f:8a: e6:10:3d:4b:4c:52:89:45:aa:d2:0f:a7:87:91:d9: 8b:43:da:9b:ca:e9:81:29:83:05:be:b5:09:23:23: 63:7e:3f:20:32:1c:19:80:ee:d5:50:3e:97:1f:1d: a1:23:6b:00:5d:ee:d4:7c:62:6d:95:10:72:b2:59: 35:49:57:eb:5c:6c:52:1e:39:61:52:66:30:b2:f1: 7f:57:6d:7f:26:db:db:c0:73:c2:99:64:13:22:77: 62:89:83:95:11:44:4f:3c:27:7d:95:b4:6a:b0:04: d3:d0:c6:b3:19:d6:08:c0:3d:cc:ae:bf:d3:bc:6b: 93:d3:6c:5e:b2:e8:44:bc:5c:f0:84:91:b7:83:57: 8f:04:e2:28:86:8c:37:87:57:4f:d0:a8:8c:6a:b9: 61:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:A2:26:5B:88:02:85:E4:36:40:AC:33:55:39:5E:E2:B4:80:A3 X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:50:15:40:55:6e:6a:ba:f4:70:a4:f1:8a:86:72:9d:69:25: 4c:18:b0:c6:13:b1:c1:da:e1:ca:f6:01:51:2b:38:ea:86:fb: 01:f4:cc:98:40:cb:e1:b7:53:71:55:b4:18:8a:39:d9:1f:39: 02:a8:76:a7:5b:d8:2d:68:b3:bb:f1:51:78:9f:ce:ea:39:ac: f9:e4:38:5a:71:68:d0:c5:18:e0:81:a9:3d:51:de:80:fb:08: 62:72:d1:11:7a:7f:19:7a:76:33:a8:9f:00:a2:1a:57:05:28: 31:21:c3:ef:53:f2:fa:72:95:5c:04:0e:79:4c:d6:7c:47:3b: 76:3e:18:e2:b1:22:cf:99:f8:2f:6b:75:36:bb:7c:8a:0d:c2: 2d:b5:66:19:a1:f5:2e:96:5f:b0:80:cf:26:f1:97:88:e7:4c: c0:fa:ad:f3:81:52:2a:d4:f3:25:5d:5a:06:ee:52:5b:17:34: 78:b3:19:58:42:c6:7e:3e:d7:b4:0a:09:da:88:50:34:cf:13: 3f:4b:a2:88:97:bc:ea:47:06:22:bc:6d:90:7f:2c:f1:1a:c8: 6e:7e:57:08:b3:2e:89:3a:35:f1:14:5b:7e:21:b5:79:b7:7a: ba:09:d4:08:d8:ce:b1:92:05:44:37:79:a1:3a:b6:10:1a:d1: 0f:62:c1:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjUwOTA4MTkwMjM2WhcNMjUwOTE1MTkwMjM2WjAYMRYwFAYD VQQDEw02OGJmMjg0Yy05MDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Svy63g6eiJO9fLNfoMJwoOL8gAZId/lW+lI+a2RYZXD6QN4wjPRH8qQ3DNH KlY5MhNxiAuMAeufqsiBqH0GtpKj9vPOd2F6zr2511ZI1whzE2Wr082yRMXh2iKZ 9JHbNmfFvpokj4rmED1LTFKJRarSD6eHkdmLQ9qbyumBKYMFvrUJIyNjfj8gMhwZ gO7VUD6XHx2hI2sAXe7UfGJtlRByslk1SVfrXGxSHjlhUmYwsvF/V21/JtvbwHPC mWQTIndiiYOVEURPPCd9lbRqsATT0MazGdYIwD3Mrr/TvGuT02xesuhEvFzwhJG3 g1ePBOIohow3h1dP0KiMarlhrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7ooiZb iAKF5DZArDNVOV7itICjMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQUBVAVW5quvRwpPGKhnKdaSVMGLDGE7HB2uHK9gFRKzjqhvsB9MyY QMvht1NxVbQYijnZHzkCqHanW9gtaLO78VF4n87qOaz55DhacWjQxRjggak9Ud6A +whictERen8ZenYzqJ8AohpXBSgxIcPvU/L6cpVcBA55TNZ8Rzt2PhjisSLPmfgv a3U2u3yKDcIttWYZofUull+wgM8m8ZeI50zA+q3zgVIq1PMlXVoG7lJbFzR4sxlY QsZ+Pte0CgnaiFA0zxM/S6KIl7zqRwYivG2QfyzxGshuflcIsy6JOjXxFFt+IbV5 t3q6CdQI2M6xkgVEN3mhOrYQGtEPYsFM -----END CERTIFICATE-----Generated at Wed Sep 10 16:11:28 2025 by rpki-client