$ rpki-client -vvf rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft File: yU_6eqS897yayfDTywnSlOVxFiM.mft (raw, json) Hash identifier: +aWV4MUfHQIrgYf+r/7dDnrbfTqMBEvQRtUqQIsCjJc= Subject key identifier: EF:AF:2D:A3:69:AE:4D:C5:F2:AE:04:2B:66:4E:4D:80:2D:C0:C9:41 Authority key identifier: C9:4F:FA:7A:A4:BC:F7:BC:9A:C9:F0:D3:CB:09:D2:94:E5:71:16:23 Certificate issuer: /CN=A915730C/serialNumber=C94FFA7AA4BCF7BC9AC9F0D3CB09D294E5711623 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft Manifest number: 2A Signing time: Thu 21 Aug 2025 07:59:04 +0000 Manifest this update: Thu 21 Aug 2025 07:59:03 +0000 Manifest next update: Thu 28 Aug 2025 07:59:03 +0000 Files and hashes: 1: yU_6eqS897yayfDTywnSlOVxFiM.crl (hash: fPpzJS1drI1VaxoUWqBs+EqGgEsheDamYh1qG/HZCfE=) 2: 949C3D70497C11F0A5181A5FC4F9AE02.roa (hash: jJYL7x8+30zgOjJC0KXeGcN5Hx3RtHR1U+WuBZx+L40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.crl rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915730C, serialNumber=C94FFA7AA4BCF7BC9AC9F0D3CB09D294E5711623 Validity Not Before: Aug 21 07:59:03 2025 GMT Not After : Aug 28 07:59:03 2025 GMT Subject: CN=68a6d1c7-7d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:02:b7:45:e3:ad:88:7a:03:de:59:d7:92:29: ea:5d:5a:c3:15:06:eb:02:b8:1f:1c:be:8f:f1:64: 91:7c:7d:73:80:e7:b2:01:c8:8b:1a:33:ba:af:76: 55:32:22:c3:d0:d3:28:5b:17:21:66:6d:07:22:4c: 37:98:66:87:7d:8f:0f:54:4b:51:08:c5:0d:86:cb: 95:9a:b5:91:07:0f:7f:ac:38:57:0c:35:98:43:fb: 6d:9e:4c:d0:01:54:47:9f:7e:bf:53:e2:45:2e:bf: 87:79:d8:e7:a3:97:45:1f:a5:40:93:31:a4:85:e8: c8:c6:3d:18:dd:3c:95:7c:bb:5f:59:67:6d:a3:cd: 10:a1:28:28:1d:f6:34:c1:b9:dd:f2:c7:f3:4e:3b: 93:b7:fc:cb:c9:12:92:ca:a0:b2:9c:eb:43:ea:77: 18:09:41:d8:72:18:32:24:f6:70:6f:70:d4:39:2a: 43:8d:6d:07:44:12:d7:10:36:22:04:94:22:e9:b5: b3:90:e3:78:d1:90:7e:3b:45:65:4f:82:da:a5:61: d3:86:24:e4:a9:c9:96:13:9f:04:2b:33:e0:b4:1f: 41:81:40:33:b9:a7:1f:f3:aa:d5:e6:44:65:78:75: 3a:6e:02:10:84:e6:61:dd:2b:6d:18:24:30:2e:63: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AF:2D:A3:69:AE:4D:C5:F2:AE:04:2B:66:4E:4D:80:2D:C0:C9:41 X509v3 Authority Key Identifier: keyid:C9:4F:FA:7A:A4:BC:F7:BC:9A:C9:F0:D3:CB:09:D2:94:E5:71:16:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yU_6eqS897yayfDTywnSlOVxFiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915730C/0F6E470A420711F090D74A3EC4F9AE02/yU_6eqS897yayfDTywnSlOVxFiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:24:bd:ca:32:c2:46:f4:5a:b5:c2:cd:23:b6:75:cc:43:c9: 19:91:33:08:16:39:fa:b0:3c:e1:92:d6:12:68:92:7e:73:6f: 8f:3c:e8:13:af:f2:42:aa:82:43:70:d8:cc:33:d7:61:f8:4f: 60:a0:5b:e7:31:e9:88:5d:a7:5e:7e:2a:59:0f:ce:28:93:f8: 70:6c:42:44:79:6a:48:fc:56:fa:48:3f:b4:0b:dc:40:50:c8: 14:1c:ee:36:06:bc:96:4e:01:18:16:93:1a:eb:28:bd:fc:f4: 2e:92:6d:f3:52:11:88:98:f6:d6:57:b1:88:6e:57:84:bb:38: 6b:db:48:fe:31:a7:df:c1:c8:db:89:2c:3d:3c:e3:06:df:4d: 0f:2b:e9:fa:25:1f:7e:35:2c:45:18:41:f1:0b:2c:94:a5:c9: c7:35:ff:f6:cc:0e:c9:69:76:a3:3c:8c:c8:d6:93:b1:d0:cf: 4b:20:2d:59:f5:de:24:e7:7d:6e:8f:3a:de:f1:db:62:c5:ff: cc:12:46:8b:7c:cc:f5:6c:04:14:bc:55:f2:9a:f9:b0:81:1c: 08:c9:07:ce:58:55:74:69:e7:e3:9e:96:c8:46:9e:3e:15:03: 0c:30:e0:72:1b:a0:16:cf:ec:b4:4a:96:56:88:e0:85:9f:f9: 91:ce:69:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzMwQzExMC8GA1UEBRMoQzk0RkZBN0FBNEJDRjdCQzlBQzlGMEQzQ0IwOUQyOTRF NTcxMTYyMzAeFw0yNTA4MjEwNzU5MDNaFw0yNTA4MjgwNzU5MDNaMBgxFjAUBgNV BAMTDTY4YTZkMWM3LTdkM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRArdF462IegPeWdeSKepdWsMVBusCuB8cvo/xZJF8fXOA57IByIsaM7qvdlUy IsPQ0yhbFyFmbQciTDeYZod9jw9US1EIxQ2Gy5WatZEHD3+sOFcMNZhD+22eTNAB VEeffr9T4kUuv4d52Oejl0UfpUCTMaSF6MjGPRjdPJV8u19ZZ22jzRChKCgd9jTB ud3yx/NOO5O3/MvJEpLKoLKc60PqdxgJQdhyGDIk9nBvcNQ5KkONbQdEEtcQNiIE lCLptbOQ43jRkH47RWVPgtqlYdOGJOSpyZYTnwQrM+C0H0GBQDO5px/zqtXmRGV4 dTpuAhCE5mHdK20YJDAuY2jvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU768to2mu TcXyrgQrZk5NgC3AyUEwHwYDVR0jBBgwFoAUyU/6eqS897yayfDTywnSlOVxFiMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3MzBDLzBGNkU0NzBBNDIw NzExRjA5MEQ3NEEzRUM0RjlBRTAyL3lVXzZlcVM4OTd5YXlmRFR5d25TbE9WeEZp TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVVfNmVxUzg5N3lheWZEVHl3blNsT1Z4RmlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 MzBDLzBGNkU0NzBBNDIwNzExRjA5MEQ3NEEzRUM0RjlBRTAyL3lVXzZlcVM4OTd5 YXlmRFR5d25TbE9WeEZpTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA8kvcoywkb0WrXCzSO2dcxDyRmRMwgWOfqwPOGS1hJokn5zb4886BOv 8kKqgkNw2Mwz12H4T2CgW+cx6Yhdp15+KlkPziiT+HBsQkR5akj8VvpIP7QL3EBQ yBQc7jYGvJZOARgWkxrrKL389C6SbfNSEYiY9tZXsYhuV4S7OGvbSP4xp9/ByNuJ LD084wbfTQ8r6folH341LEUYQfELLJSlycc1//bMDslpdqM8jMjWk7HQz0sgLVn1 3iTnfW6POt7x22LF/8wSRot8zPVsBBS8VfKa+bCBHAjJB85YVXRp5+OelshGnj4V Awww4HIboBbP7LRKllaI4IWf+ZHOafQ= -----END CERTIFICATE-----Generated at Sat Aug 23 03:27:35 2025 by rpki-client