$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft File: yMJcY971ZwDWV_xDmUpVH-QMzcc.mft (raw, json) Hash identifier: NT7Xk6S3V/+XfpmVUEGznBbHznjvgtyJbGG9sRjF4o4= Subject key identifier: 65:D1:4C:34:3A:36:68:E4:B9:E0:87:4A:CE:F9:08:0B:C8:0F:AC:A5 Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7 Certificate issuer: /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft Manifest number: 0663 Signing time: Sat 23 Aug 2025 00:23:05 +0000 Manifest this update: Sat 23 Aug 2025 00:23:05 +0000 Manifest next update: Sat 30 Aug 2025 00:23:05 +0000 Files and hashes: 1: yMJcY971ZwDWV_xDmUpVH-QMzcc.crl (hash: E3o6T3fG3Airo6q91z6qbn9VLs4YCcY7Kf0cs9AFcbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119363, serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7 Validity Not Before: Aug 23 00:23:05 2025 GMT Not After : Aug 30 00:23:05 2025 GMT Subject: CN=68a909e9-34f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:75:5a:38:06:a5:02:48:58:a3:b5:49:81:d5: c6:b1:4c:0a:c8:77:72:d9:2c:52:9c:51:d1:b5:6c: 62:fd:64:c7:65:4a:dc:a8:eb:c9:8b:cb:ff:aa:bb: 8d:1a:c3:28:02:1d:ca:84:45:63:53:f1:4f:ac:bc: 72:14:bb:cf:3d:b7:78:f6:0e:c1:0c:72:d9:c2:4d: 78:ce:ba:9b:ae:a4:f5:b3:22:61:56:54:61:61:bb: 43:78:5f:ee:f6:f8:b2:7c:a1:59:4e:09:7a:67:ef: 00:54:0b:de:ff:2e:30:44:6b:3c:6f:74:2d:26:cb: 8f:24:36:a5:4a:f0:a6:fd:fd:7e:25:36:de:37:c4: b9:8f:48:b9:35:72:2d:1d:c0:81:a6:6e:00:0e:a0: 33:1d:66:30:2c:a6:29:50:9b:77:c5:0f:f4:3b:f2: cd:62:a9:09:20:19:14:ad:e7:c3:34:02:4b:53:82: e8:23:23:e4:a1:9a:a9:66:a6:a6:57:f3:f9:9e:e8: 7d:57:5a:52:c2:be:9c:90:eb:6e:6f:d2:f6:f4:16: a3:07:c2:84:c9:6f:9b:36:ae:bf:f5:d0:0f:a7:06: 9d:d5:61:65:49:16:f9:66:49:a3:d3:f9:21:68:24: 3a:0d:3a:e8:cf:dc:94:a4:e0:c0:e6:bd:f5:b5:33: f4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D1:4C:34:3A:36:68:E4:B9:E0:87:4A:CE:F9:08:0B:C8:0F:AC:A5 X509v3 Authority Key Identifier: keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f6:0b:15:45:66:33:66:d9:5c:91:e8:96:97:2a:68:85:98: dd:0b:52:03:10:56:33:fc:96:18:25:4b:aa:cb:10:fd:52:82: 7b:56:23:7d:23:0a:4e:00:c9:c4:94:2a:16:61:fa:b7:8a:22: 52:8f:13:7f:7d:9b:9c:fe:5e:8a:dd:1b:c3:94:87:d4:f3:88: 2f:8a:72:64:e7:45:30:6d:d0:af:76:30:d6:ca:87:6d:b6:3a: a1:f7:92:64:ad:a9:1f:22:a2:a3:8c:80:72:ae:6c:85:08:40: 6a:9c:47:36:6d:62:a7:a8:c8:ec:c6:f5:9c:59:2c:67:11:66: a2:6d:35:53:9f:aa:d4:8c:7c:e9:41:33:77:eb:dd:6a:c6:0f: ee:6d:d6:d1:16:54:00:1a:28:1a:e2:ff:a4:f3:72:b5:5b:70: 39:0a:70:53:e6:7b:d7:c9:52:8d:b0:eb:e2:6e:ab:1c:16:5b: 89:32:36:f3:76:26:4d:9a:47:76:dc:00:b5:d5:38:30:ee:9f: 02:0c:53:78:7e:05:1f:54:36:bd:d4:fe:08:84:e3:c2:59:92: 87:8d:58:f4:b7:29:0e:d8:d4:fc:72:18:77:d7:0b:b4:22:19: ed:07:e4:dd:e6:39:30:9c:ba:25:f1:90:28:47:bd:26:61:45: ef:63:81:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzNjMxMTAvBgNVBAUTKEM4QzI1QzYzREVGNTY3MDBENjU3RkM0Mzk5NEE1NTFG RTQwQ0NEQzcwHhcNMjUwODIzMDAyMzA1WhcNMjUwODMwMDAyMzA1WjAYMRYwFAYD VQQDEw02OGE5MDllOS0zNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXVaOAalAkhYo7VJgdXGsUwKyHdy2SxSnFHRtWxi/WTHZUrcqOvJi8v/qruN GsMoAh3KhEVjU/FPrLxyFLvPPbd49g7BDHLZwk14zrqbrqT1syJhVlRhYbtDeF/u 9viyfKFZTgl6Z+8AVAve/y4wRGs8b3QtJsuPJDalSvCm/f1+JTbeN8S5j0i5NXIt HcCBpm4ADqAzHWYwLKYpUJt3xQ/0O/LNYqkJIBkUrefDNAJLU4LoIyPkoZqpZqam V/P5nuh9V1pSwr6ckOtub9L29BajB8KEyW+bNq6/9dAPpwad1WFlSRb5Zkmj0/kh aCQ6DTroz9yUpODA5r31tTP0eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXRTDQ6 NmjkueCHSs75CAvID6ylMB8GA1UdIwQYMBaAFMjCXGPe9WcA1lf8Q5lKVR/kDM3H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD QkExMUVDOEFBMTNFMjRDNEY5QUUwMi95TUpjWTk3MVp3RFdWX3hEbVVwVkgtUU16 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lNSmNZOTcxWndEV1ZfeERtVXBWSC1RTXpjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi95TUpjWTk3MVp3 RFdWX3hEbVVwVkgtUU16Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA09gsVRWYzZtlckeiWlypohZjdC1IDEFYz/JYYJUuqyxD9UoJ7ViN9 IwpOAMnElCoWYfq3iiJSjxN/fZuc/l6K3RvDlIfU84gvinJk50UwbdCvdjDWyodt tjqh95JkrakfIqKjjIByrmyFCEBqnEc2bWKnqMjsxvWcWSxnEWaibTVTn6rUjHzp QTN3691qxg/ubdbRFlQAGiga4v+k83K1W3A5CnBT5nvXyVKNsOvibqscFluJMjbz diZNmkd23AC11Tgw7p8CDFN4fgUfVDa91P4IhOPCWZKHjVj0tykO2NT8chh31wu0 IhntB+Td5jkwnLol8ZAoR70mYUXvY4FV -----END CERTIFICATE-----Generated at Sun Aug 24 00:06:30 2025 by rpki-client