$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft File: yPzMxL6JiqkgZxNmoP15UynpIB0.mft (raw, json) Hash identifier: iDTaNlVVKAOfzLhus9/e8A63PEt5THMEb2Bq44qjLbU= Subject key identifier: B2:37:48:3C:94:DE:17:79:8F:05:28:AD:59:8E:F9:23:36:3E:DD:63 Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D Certificate issuer: /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D Certificate serial: 0BE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft Manifest number: 0BD4 Signing time: Mon 18 Aug 2025 19:12:43 +0000 Manifest this update: Mon 18 Aug 2025 19:12:42 +0000 Manifest next update: Mon 25 Aug 2025 19:12:42 +0000 Files and hashes: 1: yPzMxL6JiqkgZxNmoP15UynpIB0.crl (hash: NcNPwwqV0sLEvmC+qqjqCJUHhJ31u9JEikIF8ofIBP8=) 2: 5407E320236911EA9967DA1CC4F9AE02.roa (hash: GtYvw7c3RkDDiFuFCL7+Z45DxtPwPDexplOkRnUJw+U=) 3: 20748896236511EABCF20E10C4F9AE02.roa (hash: trzbxuVClaSutyZA/avgKx2TpXKmsgUqrybxINd/UGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3045 (0xbe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D Validity Not Before: Aug 18 19:12:42 2025 GMT Not After : Aug 25 19:12:42 2025 GMT Subject: CN=68a37b2b-db86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:fc:aa:c1:90:29:d0:58:56:74:5b:a6:d2: ed:d2:d5:8e:21:e5:c7:00:62:dc:37:6e:d8:d1:37: 2f:21:ba:e9:b3:e8:e4:de:b5:ea:a5:92:b9:0c:40: 62:e4:77:6d:52:1d:4a:eb:39:23:a1:80:94:34:d4: 8b:58:36:90:ad:75:de:d8:4b:ea:15:00:be:fe:31: d1:65:47:5d:07:f8:89:bb:43:cb:2b:55:7f:83:6b: 9c:f6:0f:f9:b2:3e:00:aa:20:39:e3:9d:35:b4:19: 5f:40:63:de:d9:ca:31:e5:e4:de:da:5d:33:71:b3: 5f:a1:f3:1b:a3:04:2b:da:f5:97:c1:72:44:c2:cd: 7a:bf:fe:49:10:55:f2:e7:6f:f4:7d:07:fe:91:14: 4b:34:7b:fe:f2:dc:f6:3f:69:b5:30:0c:d2:d4:38: 78:7c:55:4e:72:5f:c3:d5:1c:f9:86:2e:a9:57:7c: d3:24:e9:ac:d6:cb:b5:a6:29:31:48:dc:04:a8:68: 67:32:f2:59:c0:dd:0e:a7:d2:94:51:a0:e6:86:94: 9d:68:2b:53:f5:ab:89:64:ae:5a:c2:a2:bf:db:fc: d4:bb:43:f4:d9:e2:30:6d:bc:1c:47:d3:34:e9:f1: 16:29:c7:0f:23:a1:80:45:c8:f8:93:b4:af:7e:1c: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:37:48:3C:94:DE:17:79:8F:05:28:AD:59:8E:F9:23:36:3E:DD:63 X509v3 Authority Key Identifier: keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d3:d7:1b:b9:8b:7e:3d:6f:cd:55:d5:62:9a:f3:03:3c:20: 20:de:78:02:ed:87:e7:f4:e3:7b:79:1a:df:4f:b7:2f:94:62: 2c:84:d9:65:17:3d:b6:48:3b:c9:48:81:2d:f3:0e:0d:b0:db: 2e:29:3d:03:11:fc:29:cf:0e:36:ce:77:0d:cc:e8:69:bc:cd: c4:71:d0:b9:1b:d0:a2:3f:d3:28:9f:03:50:79:dd:a0:56:02: c7:cb:ab:76:c5:f3:87:2c:27:d7:a0:c4:cb:c3:21:2c:aa:80: 93:27:81:41:05:e0:a0:2d:71:71:0b:da:31:47:d2:0e:56:7d: 59:8f:4a:02:6c:25:78:42:d1:34:8c:90:a2:8e:63:75:d6:96: e7:ed:22:89:f9:a9:94:84:b1:8a:df:b5:fd:af:79:0b:48:e6: 91:1e:b8:8a:7e:3d:cb:96:40:b3:7e:27:bd:95:14:f8:fe:4c: f4:7c:78:ae:ad:4e:e4:1c:bf:aa:b2:5f:cc:1e:0f:dd:1b:7a: d0:d7:a8:b2:94:1f:20:df:15:b2:93:28:6c:13:cc:a6:0a:02: 4a:0d:7b:eb:4a:2a:92:53:49:a8:0f:5c:cd:ec:79:b9:5b:af: 1d:5a:28:ab:58:4a:23:15:8f:a5:76:5f:75:76:50:3d:ed:60: 40:d7:88:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA0MEYxMTAvBgNVBAUTKEM4RkNDQ0M0QkU4OThBQTkyMDY3MTM2NkEwRkQ3OTUz MjlFOTIwMUQwHhcNMjUwODE4MTkxMjQyWhcNMjUwODI1MTkxMjQyWjAYMRYwFAYD VQQDEw02OGEzN2IyYi1kYjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtej8qsGQKdBYVnRbptLt0tWOIeXHAGLcN27Y0TcvIbrps+jk3rXqpZK5DEBi 5HdtUh1K6zkjoYCUNNSLWDaQrXXe2EvqFQC+/jHRZUddB/iJu0PLK1V/g2uc9g/5 sj4AqiA54501tBlfQGPe2cox5eTe2l0zcbNfofMbowQr2vWXwXJEws16v/5JEFXy 52/0fQf+kRRLNHv+8tz2P2m1MAzS1Dh4fFVOcl/D1Rz5hi6pV3zTJOms1su1pikx SNwEqGhnMvJZwN0Op9KUUaDmhpSdaCtT9auJZK5awqK/2/zUu0P02eIwbbwcR9M0 6fEWKccPI6GARcj4k7SvfhwECQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI3SDyU 3hd5jwUorVmO+SM2Pt1jMB8GA1UdIwQYMBaAFMj8zMS+iYqpIGcTZqD9eVMp6SAd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQwRi83MDdCN0I4MDIz NjMxMUVBOEI0RjM5MEJDNEY5QUUwMi95UHpNeEw2Smlxa2daeE5tb1AxNVV5bnBJ QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lQek14TDZKaXFrZ1p4Tm1vUDE1VXlucElCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDQwRi83MDdCN0I4MDIzNjMxMUVBOEI0RjM5MEJDNEY5QUUwMi95UHpNeEw2Smlx a2daeE5tb1AxNVV5bnBJQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG09cbuYt+PW/NVdVimvMDPCAg3ngC7Yfn9ON7eRrfT7cvlGIshNll Fz22SDvJSIEt8w4NsNsuKT0DEfwpzw42zncNzOhpvM3EcdC5G9CiP9MonwNQed2g VgLHy6t2xfOHLCfXoMTLwyEsqoCTJ4FBBeCgLXFxC9oxR9IOVn1Zj0oCbCV4QtE0 jJCijmN11pbn7SKJ+amUhLGK37X9r3kLSOaRHriKfj3LlkCzfie9lRT4/kz0fHiu rU7kHL+qsl/MHg/dG3rQ16iylB8g3xWykyhsE8ymCgJKDXvrSiqSU0moD1zN7Hm5 W68dWiirWEojFY+ldl91dlA97WBA14jl -----END CERTIFICATE-----Generated at Wed Aug 20 15:38:59 2025 by rpki-client