$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft File: yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json) Hash identifier: XE9UOl658pQcnHxvGNSCRR+ic7n3twI74kyqRw2IjwQ= Subject key identifier: 64:26:34:E6:5A:78:7B:F6:59:C1:82:A8:03:50:DD:73:D3:17:26:98 Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3 Certificate issuer: /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3 Certificate serial: 0C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft Manifest number: 0C1F Signing time: Sun 24 Aug 2025 18:40:50 +0000 Manifest this update: Sun 24 Aug 2025 18:40:49 +0000 Manifest next update: Sun 31 Aug 2025 18:40:49 +0000 Files and hashes: 1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: mynTNLjg063VMg3j/nrMr/QIxJ00A5aAPlTxJCFBG90=) 2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: 7P+2TWLqfeVNyGM33Rg8heOwqWfXOoMC0kS7Ev1IOzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3 Validity Not Before: Aug 24 18:40:49 2025 GMT Not After : Aug 31 18:40:49 2025 GMT Subject: CN=68ab5cb2-175b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:77:fb:f3:f5:02:a4:40:7f:96:88:45:f6:3b: 89:2a:b2:a9:19:55:c4:8c:72:87:46:12:ef:3b:7b: 9f:64:8c:2e:d9:35:76:4c:d7:86:ed:95:21:b0:1c: 36:ba:03:35:fa:3e:bb:da:84:e2:2a:6a:9f:4c:67: a5:7b:52:0b:04:23:d5:7f:8a:7b:3b:d7:d2:63:9a: 5e:39:02:90:f9:27:73:db:6a:84:09:a6:00:81:38: ba:02:a7:6a:99:89:12:dd:16:49:e5:f6:18:88:ae: d6:8c:0d:3a:85:4d:11:24:c9:e1:06:88:58:2d:ac: c5:cb:90:ba:9a:40:6a:41:6f:5e:ec:c8:43:3b:3b: d7:e5:09:ee:17:16:02:69:21:58:83:39:d0:84:91: c7:ed:3a:d6:5b:d4:5f:a2:5d:80:57:9d:d1:cb:b9: d6:08:37:a9:c1:5e:86:31:93:91:ac:d4:9a:87:a7: 38:f2:40:de:0e:4e:df:3c:11:3b:37:5e:83:d7:dc: 01:92:cb:8a:70:36:ff:71:fc:c8:e3:ba:b1:50:54: 43:08:04:89:d9:11:e2:a0:03:3b:28:f5:1a:6b:8d: 0d:7b:74:3b:62:af:33:57:ce:fe:85:a0:09:d8:21: dc:53:b6:bd:16:72:4f:2c:c4:66:e0:87:da:c3:6c: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:26:34:E6:5A:78:7B:F6:59:C1:82:A8:03:50:DD:73:D3:17:26:98 X509v3 Authority Key Identifier: keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d9:5b:b2:5a:d5:f4:63:74:e4:37:38:83:eb:21:fe:43:6d: 89:84:da:18:38:c2:ea:ca:18:ba:dc:48:c3:c8:63:e5:f5:26: 5d:74:c0:a8:50:c8:d1:ad:1e:55:fc:e4:8a:54:c4:eb:fe:c3: c4:70:ba:8a:25:6e:8c:fa:7d:cb:ba:5e:c8:88:74:0a:b5:35: 25:12:f6:84:72:e3:9b:06:aa:06:f9:5f:5b:9b:bc:f1:9a:c4: 82:47:58:e7:61:bd:38:10:9b:22:c1:2b:3d:09:5f:2c:15:8b: 97:91:09:65:fb:41:ed:5c:36:69:74:d4:61:c9:75:90:1b:8a: a9:d9:ed:fc:99:53:e3:f8:cb:8f:4c:24:75:1c:2a:c3:f6:a9: 3d:5a:aa:0b:9c:b7:06:00:f1:f2:3e:5f:3b:92:2d:1c:84:ff: 2f:ee:88:d7:78:93:e1:9b:42:c0:6e:82:7c:e8:8c:3d:ce:b6: 37:7e:67:59:d3:b8:92:21:ed:74:87:75:a3:08:ee:a4:72:8c: b3:15:a9:75:d4:44:a4:4a:4a:fb:ef:92:5c:58:46:81:e4:35: cf:98:44:8b:b3:18:b7:2d:aa:c8:7d:f6:0d:b4:54:58:31:a0: 48:fa:97:9c:0f:af:1a:d6:3c:4a:85:a2:65:26:a2:6d:cb:9a: d7:72:95:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJEMjUxMTAvBgNVBAUTKEM5MDlCREIyODRFNERGMDg0Nzc2NjBENjgyQjdDQjNG NTk0ODMxRTMwHhcNMjUwODI0MTg0MDQ5WhcNMjUwODMxMTg0MDQ5WjAYMRYwFAYD VQQDEw02OGFiNWNiMi0xNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Hf78/UCpEB/lohF9juJKrKpGVXEjHKHRhLvO3ufZIwu2TV2TNeG7ZUhsBw2 ugM1+j672oTiKmqfTGele1ILBCPVf4p7O9fSY5peOQKQ+Sdz22qECaYAgTi6Aqdq mYkS3RZJ5fYYiK7WjA06hU0RJMnhBohYLazFy5C6mkBqQW9e7MhDOzvX5QnuFxYC aSFYgznQhJHH7TrWW9Rfol2AV53Ry7nWCDepwV6GMZORrNSah6c48kDeDk7fPBE7 N16D19wBksuKcDb/cfzI47qxUFRDCASJ2RHioAM7KPUaa40Ne3Q7Yq8zV87+haAJ 2CHcU7a9FnJPLMRm4Ifaw2xadwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQmNOZa eHv2WcGCqANQ3XPTFyaYMB8GA1UdIwQYMBaAFMkJvbKE5N8IR3Zg1oK3yz9ZSDHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkQyNS8wN0Y4MjE0QTE0 RTQxMUVBODc2RTg2NDBDNEY5QUUwMi95UW05c29UazN3aEhkbURXZ3JmTFAxbElN ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lRbTlzb1RrM3doSGRtRFdncmZMUDFsSU1lTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkQyNS8wN0Y4MjE0QTE0RTQxMUVBODc2RTg2NDBDNEY5QUUwMi95UW05c29UazN3 aEhkbURXZ3JmTFAxbElNZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx2VuyWtX0Y3TkNziD6yH+Q22JhNoYOMLqyhi63EjDyGPl9SZddMCo UMjRrR5V/OSKVMTr/sPEcLqKJW6M+n3Lul7IiHQKtTUlEvaEcuObBqoG+V9bm7zx msSCR1jnYb04EJsiwSs9CV8sFYuXkQll+0HtXDZpdNRhyXWQG4qp2e38mVPj+MuP TCR1HCrD9qk9WqoLnLcGAPHyPl87ki0chP8v7ojXeJPhm0LAboJ86Iw9zrY3fmdZ 07iSIe10h3WjCO6kcoyzFal11ESkSkr775JcWEaB5DXPmESLsxi3LarIffYNtFRY MaBI+pecD68a1jxKhaJlJqJty5rXcpXW -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:59 2025 by rpki-client