$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json) Hash identifier: hQQBZQNPqu0kO4qETdaWnaW9Vu6xa68hPz9GOb0RfFU= Subject key identifier: 4F:19:03:0C:AD:08:C3:C0:BA:36:FE:6D:CB:CD:EF:A0:BC:EF:18:55 Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft Manifest number: 0291 Signing time: Thu 21 Aug 2025 01:47:35 +0000 Manifest this update: Thu 21 Aug 2025 01:47:35 +0000 Manifest next update: Thu 28 Aug 2025 01:47:35 +0000 Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: zKBJYFZTmF+zo1TK1qbytsEAGHTq+LFFEWai1XVcHB8=) 2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: I/KyU3geIWwBo8ZaiWc/F+HF/TbeVrVlUgdVYuSp+mY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Validity Not Before: Aug 21 01:47:35 2025 GMT Not After : Aug 28 01:47:35 2025 GMT Subject: CN=68a67ab7-a201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:69:3b:27:8e:dd:fe:35:3e:30:81:3b:29:f7: 5e:65:3e:72:ae:39:2d:bc:6d:64:2b:af:78:d3:a0: c7:f7:1f:ac:5b:03:6a:f3:47:f6:a2:07:a5:58:ee: 86:23:b4:81:9a:e8:05:c1:c5:a7:29:2d:31:2a:07: 60:39:71:b3:4b:15:a9:92:4a:04:af:1e:67:44:e3: bf:96:cd:5e:71:41:33:a7:1f:26:08:0a:93:70:db: a8:7e:02:2a:c1:0f:75:58:d0:ef:4b:08:66:60:23: 02:16:c1:8e:8b:3c:7a:d3:27:dd:b5:04:f7:3c:2a: 50:fe:96:f2:dc:7a:0b:2a:7a:9e:a5:ff:c0:13:86: 61:c5:44:67:de:fb:b4:ac:16:a6:11:b1:b1:98:b2: 9d:0b:68:3d:74:43:fe:1a:10:ee:53:84:0f:4f:e7: eb:98:e2:d6:63:ad:23:a1:2a:d8:08:63:ed:80:6a: 70:f0:8e:6d:f9:6a:39:99:2d:db:f3:76:ea:2c:33: 89:3d:54:06:f6:bc:4d:3f:1c:2d:a5:e3:ef:c6:ca: a4:9c:cc:c0:1b:a3:3c:5b:fb:00:5a:8f:94:b5:9a: 93:f4:77:8d:64:96:eb:1a:d4:f9:1d:fc:b1:76:19: 9c:7e:bf:d0:ec:81:7c:ed:c5:bc:3f:a3:d7:43:2a: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:19:03:0C:AD:08:C3:C0:BA:36:FE:6D:CB:CD:EF:A0:BC:EF:18:55 X509v3 Authority Key Identifier: keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1b:cc:9b:23:02:3e:35:b0:25:d4:00:c7:b6:c9:2b:78:98: a6:73:93:f2:e6:73:aa:3e:63:a1:98:21:1e:1c:63:01:6c:51: b6:47:a9:3b:0b:69:f3:94:5a:10:e1:6c:eb:19:e3:d5:90:d7: fe:19:97:28:78:d9:12:5e:40:f0:cc:b2:50:46:77:e4:9e:1b: d0:13:ab:88:0c:84:a5:f0:e2:85:6a:b3:0d:4d:22:8a:3b:90: a8:f3:ea:ce:dd:4d:7e:58:ec:26:9f:5f:67:d7:92:59:91:44: f5:53:18:0e:89:d1:37:f7:8f:f0:aa:6e:60:ba:ca:fa:4a:ed: f1:e5:4b:d6:e7:40:84:0d:03:b4:fc:ea:a9:db:07:b6:2b:a6: 11:c6:05:89:58:95:51:e2:c6:89:74:77:ab:f7:88:29:53:38: 21:c4:3b:d6:7e:e5:cb:ba:8e:ee:69:dd:72:c4:22:62:86:1f: 55:f1:b7:20:05:01:6d:94:bd:b7:5a:78:7a:d1:40:39:d1:55: 83:73:32:cb:74:15:37:17:e3:8c:96:fb:a5:3c:90:03:2e:44: 2b:e8:1a:12:1b:3b:48:c4:8e:ac:6d:0b:37:35:e7:6b:8b:f3: ea:2c:b7:9a:af:63:91:c7:ae:ad:11:ac:a3:69:07:f3:a6:0e: 74:0f:6c:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3 N0NGNkFGMDAwHhcNMjUwODIxMDE0NzM1WhcNMjUwODI4MDE0NzM1WjAYMRYwFAYD VQQDEw02OGE2N2FiNy1hMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Gk7J47d/jU+MIE7KfdeZT5yrjktvG1kK69406DH9x+sWwNq80f2ogelWO6G I7SBmugFwcWnKS0xKgdgOXGzSxWpkkoErx5nROO/ls1ecUEzpx8mCAqTcNuofgIq wQ91WNDvSwhmYCMCFsGOizx60yfdtQT3PCpQ/pby3HoLKnqepf/AE4ZhxURn3vu0 rBamEbGxmLKdC2g9dEP+GhDuU4QPT+frmOLWY60joSrYCGPtgGpw8I5t+Wo5mS3b 83bqLDOJPVQG9rxNPxwtpePvxsqknMzAG6M8W/sAWo+UtZqT9HeNZJbrGtT5Hfyx dhmcfr/Q7IF87cW8P6PXQyp/2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8ZAwyt CMPAujb+bcvN76C87xhVMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ LWxWTktFTDFoQmgzejJyd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvG8ybIwI+NbAl1ADHtskreJimc5Py5nOqPmOhmCEeHGMBbFG2R6k7 C2nzlFoQ4WzrGePVkNf+GZcoeNkSXkDwzLJQRnfknhvQE6uIDISl8OKFarMNTSKK O5Co8+rO3U1+WOwmn19n15JZkUT1UxgOidE394/wqm5gusr6Su3x5UvW50CEDQO0 /Oqp2we2K6YRxgWJWJVR4saJdHer94gpUzghxDvWfuXLuo7uad1yxCJihh9V8bcg BQFtlL23Wnh60UA50VWDczLLdBU3F+OMlvulPJADLkQr6BoSGztIxI6sbQs3Nedr i/PqLLear2ORx66tEayjaQfzpg50D2zD -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:40 2025 by rpki-client