$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft File: ymSxcxGVIJPNTWDarxe2rKD3pRY.mft (raw, json) Hash identifier: 8kULEPtbWed13V3ARolnAPk998OAnIpFqK6yA3Tm8uY= Subject key identifier: 8F:B9:30:8D:94:54:7E:55:21:09:B8:69:D7:74:31:87:B2:6E:0B:38 Authority key identifier: CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 Certificate issuer: /CN=A9112B24/serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft Manifest number: C1 Signing time: Sat 23 Aug 2025 06:03:26 +0000 Manifest this update: Sat 23 Aug 2025 06:03:26 +0000 Manifest next update: Sat 30 Aug 2025 06:03:26 +0000 Files and hashes: 1: ymSxcxGVIJPNTWDarxe2rKD3pRY.crl (hash: cMhrJz1gSaFSDNAw/8TIQddBdImQNOY3r2H2WR8n7Y4=) 2: C384F0025BA011EFB7E79861C4F9AE02.roa (hash: aEdHvDNzBa4hPG2blWZSu2BBm178UoZmxvwcICwviec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112B24, serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Validity Not Before: Aug 23 06:03:26 2025 GMT Not After : Aug 30 06:03:26 2025 GMT Subject: CN=68a959ae-fce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:f0:f5:5b:0d:19:fd:de:a7:66:ca:cd:52: 3b:9f:2a:df:80:81:86:d6:bd:82:cc:e1:fa:2d:97: 6d:f4:a1:28:39:72:17:11:84:d3:a1:5a:db:0f:50: a8:49:d7:64:52:04:07:4d:f0:e6:a0:04:bb:52:4e: 76:27:32:a7:97:01:c1:d1:d4:b5:fa:f7:91:ee:8b: 40:4a:20:00:0b:6c:f7:ad:07:89:8e:11:78:55:d7: 78:ce:e8:28:17:c7:b9:b9:63:cd:4a:2a:e4:e2:16: cf:78:e9:34:a2:35:72:f1:61:fd:21:2d:bd:ee:d6: 1a:be:c8:93:c2:97:97:37:72:8e:bc:9d:6b:1a:4b: 76:d6:2a:11:1c:c4:ee:31:90:6e:bd:be:f9:be:99: 90:a9:2f:73:cb:04:fd:e1:03:87:d2:ff:3b:5f:b3: af:c0:7d:f1:08:eb:06:c6:79:21:bd:ec:b3:cf:92: 47:7e:14:ab:b4:33:38:72:2d:bf:5d:92:1a:53:c2: a4:4f:54:fe:b4:94:cf:28:45:b8:15:5a:24:f0:12: e2:9b:06:3d:4d:15:94:84:e0:c8:a2:74:de:41:28: 1d:e5:29:3b:45:9f:05:57:f8:ac:16:f5:af:14:2a: fe:ed:81:74:c8:0a:ab:ae:2d:29:87:65:01:85:c1: 47:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B9:30:8D:94:54:7E:55:21:09:B8:69:D7:74:31:87:B2:6E:0B:38 X509v3 Authority Key Identifier: keyid:CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:03:ea:b7:0c:3b:0a:2a:ff:4a:24:7f:3c:c9:80:35:b1:cd: f8:ec:9f:ff:47:96:dc:88:bf:b6:ea:5f:25:e7:2a:f5:a7:fa: 08:d6:8c:a8:9d:c3:f3:4d:41:07:02:75:3e:dc:37:03:d2:63: 6c:98:5d:ec:4a:10:88:1d:53:62:a1:88:d9:06:b4:73:84:77: d5:eb:b9:2f:12:c4:32:e8:59:43:96:d0:82:2c:c0:81:da:99: 9d:00:f3:ac:80:d7:c2:5f:7f:ba:52:c4:bf:2c:ca:1c:7b:a5: 81:ea:da:9c:99:99:3f:1e:eb:f9:7c:95:eb:2c:4f:4f:ce:6d: 15:37:ae:f4:c3:9a:5e:4c:d1:19:57:bf:4b:ed:4d:57:6f:7c: 0a:f9:c5:e2:bb:7c:88:16:55:a4:3f:8e:2c:fa:5e:b1:5c:35: 39:3a:00:51:2d:bd:10:42:97:fc:a0:65:c3:d4:a3:ca:f6:ef: 61:d2:69:fa:50:dc:12:ec:cb:1e:e3:3c:8c:8e:6c:e2:22:c3: 93:31:22:ef:d4:84:60:cf:69:26:f3:08:f3:59:6a:51:07:f8: 88:70:da:fa:fc:7a:e6:0e:e1:22:d9:9a:aa:33:70:93:16:ea: f9:f8:29:60:86:09:54:e0:d5:59:c3:66:f2:48:d6:9a:0d:78: 1c:8e:45:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCMjQxMTAvBgNVBAUTKENBNjRCMTczMTE5NTIwOTNDRDRENjBEQUFGMTdCNkFD QTBGN0E1MTYwHhcNMjUwODIzMDYwMzI2WhcNMjUwODMwMDYwMzI2WjAYMRYwFAYD VQQDEw02OGE5NTlhZS1mY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxy7w9VsNGf3ep2bKzVI7nyrfgIGG1r2CzOH6LZdt9KEoOXIXEYTToVrbD1Co SddkUgQHTfDmoAS7Uk52JzKnlwHB0dS1+veR7otASiAAC2z3rQeJjhF4Vdd4zugo F8e5uWPNSirk4hbPeOk0ojVy8WH9IS297tYavsiTwpeXN3KOvJ1rGkt21ioRHMTu MZBuvb75vpmQqS9zywT94QOH0v87X7OvwH3xCOsGxnkhveyzz5JHfhSrtDM4ci2/ XZIaU8KkT1T+tJTPKEW4FVok8BLimwY9TRWUhODIonTeQSgd5Sk7RZ8FV/isFvWv FCr+7YF0yAqrri0ph2UBhcFHswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+5MI2U VH5VIQm4add0MYeybgs4MB8GA1UdIwQYMBaAFMpksXMRlSCTzU1g2q8Xtqyg96UW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkIyNC84QTE2RkY3MjVC QTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklKUE5UV0RhcnhlMnJLRDNw UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltU3hjeEdWSUpQTlRXRGFyeGUycktEM3BSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkIyNC84QTE2RkY3MjVCQTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklK UE5UV0RhcnhlMnJLRDNwUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALA+q3DDsKKv9KJH88yYA1sc347J//R5bciL+26l8l5yr1p/oI1oyo ncPzTUEHAnU+3DcD0mNsmF3sShCIHVNioYjZBrRzhHfV67kvEsQy6FlDltCCLMCB 2pmdAPOsgNfCX3+6UsS/LMoce6WB6tqcmZk/Huv5fJXrLE9Pzm0VN670w5peTNEZ V79L7U1Xb3wK+cXiu3yIFlWkP44s+l6xXDU5OgBRLb0QQpf8oGXD1KPK9u9h0mn6 UNwS7Mse4zyMjmziIsOTMSLv1IRgz2km8wjzWWpRB/iIcNr6/HrmDuEi2ZqqM3CT Fur5+ClghglU4NVZw2bySNaaDXgcjkXc -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:18 2025 by rpki-client