$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json) Hash identifier: adndDUPTAb2/dH0C13lR36Kn0GF1zPH0VE6yPU0JfLY= Subject key identifier: 6E:C3:B9:BB:33:E7:9C:8C:1F:8F:19:B9:9F:0A:62:96:03:BB:6F:6F Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft Manifest number: 021E Signing time: Sat 23 Aug 2025 02:10:08 +0000 Manifest this update: Sat 23 Aug 2025 02:10:08 +0000 Manifest next update: Sat 30 Aug 2025 02:10:08 +0000 Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: DhnoErusxUVk+EXnzpmUSJC2QUJCn7QcWCmq5jPzNLs=) 2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: t7XCEjkxXsWQ/Dxk256ftxVIrolRXrZfUAZmnQPH6Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Validity Not Before: Aug 23 02:10:08 2025 GMT Not After : Aug 30 02:10:08 2025 GMT Subject: CN=68a92300-a9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:2d:30:a2:94:63:9b:8d:6b:7e:87:22:99: 34:9a:29:a6:de:25:21:06:17:cb:d1:47:90:a9:e0: 8a:6d:b4:60:7e:7b:b3:da:e9:84:f2:20:65:0d:4a: 3a:76:af:4d:fd:5e:77:95:7e:25:65:15:2c:34:59: 4f:7d:cd:a3:13:ff:27:75:ab:ce:f5:06:64:3f:d9: f0:6b:46:a0:f7:f6:65:f8:fc:0d:10:e7:19:f0:99: 0a:ae:68:17:31:dc:37:75:fd:fc:76:81:2b:f5:9e: a6:d6:41:a9:6f:46:9e:53:51:22:b4:17:09:a0:c6: be:3a:99:7a:20:7a:82:75:63:43:54:28:9c:98:8c: e6:a1:aa:eb:20:b9:58:da:e9:51:30:e2:c6:34:5d: 2f:ca:7e:1e:56:59:22:27:8f:eb:29:2e:6e:0d:24: 6e:f3:e0:b7:3a:6a:1d:f7:1f:08:e4:ff:aa:6f:1d: 7f:d8:0a:6a:59:20:9f:9e:30:29:07:c5:8b:1a:e3: a9:6f:7c:8a:0d:00:bb:63:a4:7d:9d:39:56:d9:51: 5a:04:fc:65:65:c0:23:80:08:3a:fb:02:3c:b7:e8: 36:e2:cb:0d:e4:5d:ba:95:6f:36:bb:62:73:a8:57: 20:26:77:bf:01:9b:32:b6:35:15:a4:cc:7d:3b:28: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C3:B9:BB:33:E7:9C:8C:1F:8F:19:B9:9F:0A:62:96:03:BB:6F:6F X509v3 Authority Key Identifier: keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a0:b0:5b:b7:8a:5f:df:d2:04:88:7d:da:d4:e5:da:4a:3b: e3:b4:6c:18:83:4f:2f:b9:9b:57:f3:df:ae:62:bd:43:c6:ff: d9:d5:b7:87:1a:7b:88:4f:c3:9e:24:ab:32:de:2e:a6:94:18: 9b:10:d5:7e:23:36:64:08:0f:ac:ac:8d:db:c5:04:83:47:08: d9:a0:c5:74:0e:ee:84:de:46:25:99:76:4d:72:d5:06:3f:d9: 04:41:09:41:38:af:3f:0d:d6:de:e7:03:a0:77:f9:d3:a9:d9: de:ae:2e:e0:4f:ce:e9:16:9b:77:c1:76:38:a2:45:7b:d9:63: f3:ab:27:ea:e4:93:0f:06:40:74:f2:0b:9c:09:23:ff:8d:c4: a9:e7:e7:86:9f:8b:a3:26:ce:a4:bf:cd:5f:96:78:5f:19:50: cc:8a:0c:9e:76:7c:e7:82:00:56:c0:44:95:3a:5c:66:f9:dd: 3e:ca:7c:ef:c9:9e:ac:9b:39:04:eb:34:e5:ba:a9:6d:eb:57: bd:40:ce:86:72:a8:8e:d6:2c:14:4a:28:31:01:72:58:f0:39: c5:b6:01:fa:40:d9:08:04:f9:a7:53:93:e0:cf:3d:91:b8:34: 9e:9a:42:2d:a6:fd:86:59:aa:46:3b:5f:2f:5b:0a:bf:df:cb: 63:38:11:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0 NUYyNUUyMEIwHhcNMjUwODIzMDIxMDA4WhcNMjUwODMwMDIxMDA4WjAYMRYwFAYD VQQDEw02OGE5MjMwMC1hOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr78tMKKUY5uNa36HIpk0mimm3iUhBhfL0UeQqeCKbbRgfnuz2umE8iBlDUo6 dq9N/V53lX4lZRUsNFlPfc2jE/8ndavO9QZkP9nwa0ag9/Zl+PwNEOcZ8JkKrmgX Mdw3df38doEr9Z6m1kGpb0aeU1EitBcJoMa+Opl6IHqCdWNDVCicmIzmoarrILlY 2ulRMOLGNF0vyn4eVlkiJ4/rKS5uDSRu8+C3Omod9x8I5P+qbx1/2ApqWSCfnjAp B8WLGuOpb3yKDQC7Y6R9nTlW2VFaBPxlZcAjgAg6+wI8t+g24ssN5F26lW82u2Jz qFcgJne/AZsytjUVpMx9Oyi0MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7Dubsz 55yMH48ZuZ8KYpYDu29vMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14 M3FlcE9jdmltbzlGOGw0Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWoLBbt4pf39IEiH3a1OXaSjvjtGwYg08vuZtX89+uYr1Dxv/Z1beH GnuIT8OeJKsy3i6mlBibENV+IzZkCA+srI3bxQSDRwjZoMV0Du6E3kYlmXZNctUG P9kEQQlBOK8/Ddbe5wOgd/nTqdneri7gT87pFpt3wXY4okV72WPzqyfq5JMPBkB0 8gucCSP/jcSp5+eGn4ujJs6kv81flnhfGVDMigyednznggBWwESVOlxm+d0+ynzv yZ6smzkE6zTluqlt61e9QM6GcqiO1iwUSigxAXJY8DnFtgH6QNkIBPmnU5Pgzz2R uDSemkItpv2GWapGO18vWwq/38tjOBFr -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:53 2025 by rpki-client