$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft File: yvC3hLE-FADutCJboi1vmDiCTsM.mft (raw, json) Hash identifier: aUMvYjP5ZnSQ8ChzZiNR0UJa5qTEzYm0L/gUFVsHRWA= Subject key identifier: F0:BE:AB:73:9E:89:3D:F8:81:44:A2:FF:D5:4F:72:BA:DD:1E:2E:B2 Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3 Certificate issuer: /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3 Certificate serial: 157F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft Manifest number: 155D Signing time: Sun 24 Aug 2025 16:46:22 +0000 Manifest this update: Sun 24 Aug 2025 16:46:22 +0000 Manifest next update: Sun 31 Aug 2025 16:46:22 +0000 Files and hashes: 1: yvC3hLE-FADutCJboi1vmDiCTsM.crl (hash: p0KPs75V0jVCGjVE29F+d08gYwmw/zasYPGPHlQSRPk=) 2: 4861945C599A11ED99A5B776C4F9AE02.roa (hash: WWunrSKNr/tHvzh6M3TsIN0SasCbbY/rUP6pCCee+Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5503 (0x157f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D99E, serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3 Validity Not Before: Aug 24 16:46:22 2025 GMT Not After : Aug 31 16:46:22 2025 GMT Subject: CN=68ab41de-d6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fa:82:dc:c7:8a:0e:a3:24:c0:61:37:a1:57: 76:da:0e:24:72:3f:31:79:51:9a:01:74:5e:25:28: 35:03:03:79:d0:2c:74:5c:38:dd:4d:d5:72:73:58: 7d:db:ef:fd:85:fb:25:5a:c5:bc:51:92:54:22:1c: d4:4f:dc:cd:b6:18:f2:ea:47:3c:34:26:71:ad:55: db:de:67:e6:d9:54:46:d3:68:ba:1a:c0:89:f4:9b: 79:88:67:5f:0e:5e:fa:74:91:a0:6a:dc:ab:13:a2: fc:f4:3e:38:49:a0:a6:1d:d6:46:5b:f2:bc:51:db: 12:fc:1f:20:68:18:81:bb:80:97:c7:e9:71:38:94: 33:dd:b4:6b:76:3b:be:b7:1a:15:6f:14:0f:4a:69: 7d:3a:e8:bf:4f:a2:c5:d5:58:db:74:f5:50:9d:18: 74:eb:50:37:7c:6c:9a:b9:9d:8f:28:a6:ec:e0:09: 4c:80:dd:32:11:01:5b:84:23:2f:0b:27:43:ea:27: 0c:c0:00:35:7d:8a:43:43:8c:8b:9e:70:52:ad:5d: cb:3a:00:49:24:16:6d:db:20:61:a6:5e:cc:b0:92: e8:3a:dd:d3:ff:2a:c1:30:89:0b:3c:00:f6:32:3c: 2b:6f:ba:16:e6:bf:5b:be:39:ad:f2:8d:96:54:80: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BE:AB:73:9E:89:3D:F8:81:44:A2:FF:D5:4F:72:BA:DD:1E:2E:B2 X509v3 Authority Key Identifier: keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:eb:5e:9f:b9:a8:f3:d1:53:0b:3a:1f:af:83:96:7a:3c:96: 4b:34:6a:1b:d5:9a:ed:b3:2a:51:e2:da:c9:ef:1a:f7:65:ba: 07:09:f7:ec:98:29:3b:26:12:4e:3f:46:dd:a3:25:75:1f:96: b0:d1:13:4c:fc:00:e7:a7:b9:5e:2b:02:63:bc:c8:ec:3b:ae: 0f:95:16:eb:81:fb:71:a5:29:04:dd:3c:52:75:c5:5f:76:a8: 7c:7a:8b:b4:25:3d:fe:99:ac:02:89:2f:0a:bb:ed:89:b8:c5: b1:77:31:4a:a7:5b:7e:1f:59:b7:d5:9b:e8:90:39:bd:d0:b4: 0d:ac:4a:52:93:01:e8:2d:d8:e0:34:d5:0a:10:11:db:f4:a3: fe:b6:9e:6f:54:79:33:70:4c:7b:66:3a:83:f3:9f:59:14:b9: 91:ef:a1:5b:4f:e5:60:12:26:e4:2f:90:88:d4:6c:53:3d:76: 78:86:e4:ac:e1:b8:03:8f:f1:6f:e7:6b:3f:9a:bd:6c:cf:de: 49:a8:20:4f:3b:35:59:fe:67:85:a3:dc:4e:17:1b:1a:dc:57: f2:fa:6f:23:97:13:f2:c6:6b:27:51:eb:79:d8:1d:97:55:1a: 13:71:4e:dc:58:cb:00:0a:13:b8:bf:d1:3d:77:ca:da:9d:4f: 28:3b:6c:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5OUUxMTAvBgNVBAUTKENBRjBCNzg0QjEzRTE0MDBFRUI0MjI1QkEyMkQ2Rjk4 Mzg4MjRFQzMwHhcNMjUwODI0MTY0NjIyWhcNMjUwODMxMTY0NjIyWjAYMRYwFAYD VQQDEw02OGFiNDFkZS1kNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/qC3MeKDqMkwGE3oVd22g4kcj8xeVGaAXReJSg1AwN50Cx0XDjdTdVyc1h9 2+/9hfslWsW8UZJUIhzUT9zNthjy6kc8NCZxrVXb3mfm2VRG02i6GsCJ9Jt5iGdf Dl76dJGgatyrE6L89D44SaCmHdZGW/K8UdsS/B8gaBiBu4CXx+lxOJQz3bRrdju+ txoVbxQPSml9Oui/T6LF1VjbdPVQnRh061A3fGyauZ2PKKbs4AlMgN0yEQFbhCMv CydD6icMwAA1fYpDQ4yLnnBSrV3LOgBJJBZt2yBhpl7MsJLoOt3T/yrBMIkLPAD2 Mjwrb7oW5r9bvjmt8o2WVICGhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPC+q3Oe iT34gUSi/9VPcrrdHi6yMB8GA1UdIwQYMBaAFMrwt4SxPhQA7rQiW6Itb5g4gk7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDk5RS80NjA0OEM3MDQ5 NzExMUU4QTdGOUE2NzJDNEY5QUUwMi95dkMzaExFLUZBRHV0Q0pib2kxdm1EaUNU c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2QzNoTEUtRkFEdXRDSmJvaTF2bURpQ1RzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDk5RS80NjA0OEM3MDQ5NzExMUU4QTdGOUE2NzJDNEY5QUUwMi95dkMzaExFLUZB RHV0Q0pib2kxdm1EaUNUc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3616fuajz0VMLOh+vg5Z6PJZLNGob1ZrtsypR4trJ7xr3ZboHCffs mCk7JhJOP0bdoyV1H5aw0RNM/ADnp7leKwJjvMjsO64PlRbrgftxpSkE3TxSdcVf dqh8eou0JT3+mawCiS8Ku+2JuMWxdzFKp1t+H1m31ZvokDm90LQNrEpSkwHoLdjg NNUKEBHb9KP+tp5vVHkzcEx7ZjqD859ZFLmR76FbT+VgEibkL5CI1GxTPXZ4huSs 4bgDj/Fv52s/mr1sz95JqCBPOzVZ/meFo9xOFxsa3Ffy+m8jlxPyxmsnUet52B2X VRoTcU7cWMsAChO4v9E9d8ranU8oO2wm -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:54 2025 by rpki-client