$ rpki-client -vvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft File: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft (raw, json) Hash identifier: quUTbPbbRG3Jrctt26c2KecyXkXRln5emGfyL+QYY0I= Subject key identifier: CF:11:89:14:AF:15:D8:EA:98:48:39:E9:C0:AB:76:11:11:E2:4C:29 Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 Certificate issuer: /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Certificate serial: 2102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft Manifest number: 20F6 Signing time: Sun 24 Aug 2025 15:55:06 +0000 Manifest this update: Sun 24 Aug 2025 15:55:04 +0000 Manifest next update: Sun 31 Aug 2025 15:55:04 +0000 Files and hashes: 1: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl (hash: Z3S8HxmeTNSU1nzR9uYOy8u0TyonHZMluVqa9dFw2WA=) 2: C49E2E22FF0111E591C15659C4F9AE02.roa (hash: oBzh3F7vXr0+lbZGHQqiGoRJzyM9Q1R1dON0koDXQXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8450 (0x2102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B5BB, serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Validity Not Before: Aug 24 15:55:04 2025 GMT Not After : Aug 31 15:55:04 2025 GMT Subject: CN=68ab35d9-dee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:d1:3e:9b:55:56:26:c9:8a:21:f4:56:4f: e4:6b:56:58:cd:df:d2:bf:31:80:c1:0c:b2:91:44: 0a:04:90:5b:d8:2a:76:a5:f0:5a:63:54:37:41:4d: cb:58:61:e0:e8:b4:ba:71:ad:84:8c:ea:d5:3a:b1: f2:b3:d2:45:d0:36:1e:9e:91:50:77:93:e3:89:ab: c6:2f:d3:e1:13:84:80:f7:b3:e0:5f:1d:4d:5c:ea: 1d:49:86:ff:fc:32:f7:9b:cf:1e:57:4d:df:90:89: 69:f9:7b:0b:03:dc:08:67:0e:bb:ce:84:53:df:00: 12:3d:fc:30:af:ef:57:b4:cd:18:d5:03:cc:da:3d: 4c:d7:4a:45:56:7a:01:cf:d5:eb:f7:f4:ee:e4:21: 8b:3e:ed:88:33:ed:fa:64:76:68:d7:05:db:7c:c5: 2f:81:db:66:5d:1c:df:2a:65:96:ce:fe:64:ac:24: a8:03:dc:ed:c7:d4:21:83:5c:ab:34:0d:c3:08:ac: 05:5f:77:7a:02:db:2c:ff:73:88:63:04:f1:e9:9c: 6a:f4:e5:82:4b:08:63:1b:ac:01:43:37:b3:c1:62: bc:95:cb:9d:79:88:54:02:d1:85:dc:97:e7:21:ac: fc:70:05:23:0f:91:b1:c6:6e:04:bd:4f:4e:99:f7: 27:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:11:89:14:AF:15:D8:EA:98:48:39:E9:C0:AB:76:11:11:E2:4C:29 X509v3 Authority Key Identifier: keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:5f:42:8c:a8:ed:15:22:19:9d:fe:05:9e:01:00:01:fb:01: bc:e9:54:05:07:00:75:fe:e5:25:63:54:eb:de:c0:81:f3:e1: 21:80:c6:8a:91:d6:03:2e:d7:2f:3e:d7:91:48:31:48:5d:4f: 7b:bd:c1:0d:e9:96:ea:7a:6d:8d:78:c3:9e:8b:44:40:f5:8d: 3d:ed:99:f0:68:54:69:f3:a7:d3:9e:15:c1:ce:56:46:6c:7e: 04:c0:76:72:7f:a8:8f:db:85:74:48:a6:ff:8a:c0:03:b2:dc: 67:6c:4e:70:cd:67:b2:24:e3:71:27:2a:be:c8:32:32:ec:fb: 07:29:d5:2d:2f:94:8c:10:b5:1b:b6:55:a2:78:ad:88:1a:dc: 85:f2:1b:2b:12:93:67:76:f2:8b:92:67:10:ee:e5:da:6c:c2: 33:48:25:24:61:1c:b3:6b:fa:c0:b1:6c:69:92:3f:25:82:d5: 9c:45:06:47:a9:4b:6f:ca:20:7a:5f:7a:da:b5:e0:db:d9:5e: ec:9a:77:6d:fe:a3:97:e6:c8:62:40:72:4e:eb:13:9e:65:6c: d3:13:62:02:b2:44:8a:3b:bc:3c:29:11:ff:6e:65:2f:79:d6: f0:28:30:69:fa:15:bc:9c:22:39:93:0b:15:cc:5b:eb:58:6e: 64:07:9c:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI1QkIxMTAvBgNVBAUTKENBQzQ0NzhGMEZERDlBRTQxRTI0RTlGQzY3Rjg1MUZG NDNDMzMzMDkwHhcNMjUwODI0MTU1NTA0WhcNMjUwODMxMTU1NTA0WjAYMRYwFAYD VQQDEw02OGFiMzVkOS1kZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e7RPptVVibJiiH0Vk/ka1ZYzd/SvzGAwQyykUQKBJBb2Cp2pfBaY1Q3QU3L WGHg6LS6ca2EjOrVOrHys9JF0DYenpFQd5PjiavGL9PhE4SA97PgXx1NXOodSYb/ /DL3m88eV03fkIlp+XsLA9wIZw67zoRT3wASPfwwr+9XtM0Y1QPM2j1M10pFVnoB z9Xr9/Tu5CGLPu2IM+36ZHZo1wXbfMUvgdtmXRzfKmWWzv5krCSoA9ztx9Qhg1yr NA3DCKwFX3d6Atss/3OIYwTx6Zxq9OWCSwhjG6wBQzezwWK8lcudeYhUAtGF3Jfn Iaz8cAUjD5Gxxm4EvU9OmfcnTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8RiRSv FdjqmEg56cCrdhER4kwpMB8GA1UdIwQYMBaAFMrER48P3ZrkHiTp/Gf4Uf9DwzMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjVCQi80NEJCQzE0Q0ZG MDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11UWVKT244Wl9oUl8wUERN d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzUkhqd19kbXVRZUpPbjhaX2hSXzBQRE13ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjVCQi80NEJCQzE0Q0ZGMDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11 UWVKT244Wl9oUl8wUERNd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHX0KMqO0VIhmd/gWeAQAB+wG86VQFBwB1/uUlY1Tr3sCB8+EhgMaK kdYDLtcvPteRSDFIXU97vcEN6Zbqem2NeMOei0RA9Y097ZnwaFRp86fTnhXBzlZG bH4EwHZyf6iP24V0SKb/isADstxnbE5wzWeyJONxJyq+yDIy7PsHKdUtL5SMELUb tlWieK2IGtyF8hsrEpNndvKLkmcQ7uXabMIzSCUkYRyza/rAsWxpkj8lgtWcRQZH qUtvyiB6X3rateDb2V7smndt/qOX5shiQHJO6xOeZWzTE2ICskSKO7w8KRH/bmUv edbwKDBp+hW8nCI5kwsVzFvrWG5kB5zM -----END CERTIFICATE-----Generated at Sun Aug 24 21:31:18 2025 by rpki-client