$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: KBdaIAEbq430mBjY6/kCc3wj208swvLL2/ZYoz+e57M= Subject key identifier: 42:02:95:A3:F5:33:90:C9:2B:24:F5:02:87:26:D5:1A:EB:63:D5:3A Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0CCA Signing time: Fri 22 Aug 2025 18:16:34 +0000 Manifest this update: Fri 22 Aug 2025 18:16:34 +0000 Manifest next update: Fri 29 Aug 2025 18:16:34 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: Deeg10o5FWdI2kg6j89V7VuK2D5+uRtm3Urv9WhbNzs=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: X3uR7nkHEkJDs/4UDZXjCbVpYlI7ETxizWrqRmPT3Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Aug 22 18:16:34 2025 GMT Not After : Aug 29 18:16:34 2025 GMT Subject: CN=68a8b402-54ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:11:85:4c:51:81:d8:25:29:6e:38:c6:15:77: 71:a6:27:e3:98:b8:a3:8a:ee:be:75:a3:a2:6d:29: 13:af:10:94:98:1c:74:8d:f9:96:33:74:9e:b4:81: 2c:c7:b9:10:8a:48:27:1b:b2:c8:0b:60:2f:84:97: ff:c2:8a:35:02:5a:7d:09:5a:d2:05:61:75:f3:11: 2c:78:f6:ab:86:2e:58:67:7c:11:13:a2:b1:d9:6f: fa:54:3e:3d:38:ef:c4:22:1d:7d:0e:5a:53:c0:b8: 1f:73:e5:a2:5e:f1:58:21:10:d9:dc:fa:fa:e1:55: 42:8d:e1:59:5c:9c:46:01:c2:aa:74:3a:cb:4f:0c: cd:c4:4e:74:36:89:d9:84:9d:d4:5c:5c:1e:c4:e7: df:62:af:5b:eb:00:dc:4b:2c:a8:b1:7b:80:07:c6: 57:70:bf:76:97:9e:11:a9:3d:cc:a5:6c:5f:f3:bb: d6:9b:6d:54:59:a5:66:7b:b7:8e:49:d5:89:1c:7f: 92:0a:fd:f1:fe:a1:24:dd:f5:a3:17:14:88:eb:d8: 87:8c:d3:10:22:b4:e2:23:0c:94:02:d1:0c:10:9a: 28:43:09:0d:99:3b:03:02:8d:4f:47:9b:c0:51:0a: 68:cf:b9:51:f1:3b:de:3e:1f:37:54:f6:c5:ad:1f: 31:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:02:95:A3:F5:33:90:C9:2B:24:F5:02:87:26:D5:1A:EB:63:D5:3A X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:84:c8:31:f8:91:86:00:e6:e6:28:ef:54:dd:17:3f:07:6f: 43:0f:2f:80:b8:35:8b:af:6f:fe:60:5b:b3:d1:7b:a7:b8:fd: 4a:03:05:39:89:c7:b9:ea:41:c6:80:8f:b0:2b:99:cc:87:e6: 5b:3b:4a:74:d7:f8:b9:f2:5b:74:21:8c:df:9c:2e:59:d4:f8: 1c:01:42:e9:11:a8:d5:e3:35:4c:ae:6e:14:c1:44:b5:f7:ab: 78:1e:95:91:35:1b:0b:0c:19:97:9e:81:85:b2:1d:40:68:15: d8:4a:5a:83:5e:d9:98:83:25:8e:11:f1:99:20:eb:04:81:95: c7:76:73:fd:a6:84:7f:5f:ab:fc:1e:8d:9e:eb:29:67:7a:75: 9c:7b:ff:b9:b8:f5:3b:d2:3a:c0:2e:96:6b:7e:de:05:1f:a3: 1b:6b:70:6a:94:f3:0f:0f:fa:4d:4c:0a:18:22:35:fe:7c:6c: 0e:c0:60:a5:3d:93:35:51:9a:66:f9:43:68:95:7a:00:34:04: 01:ef:e4:bc:79:a7:32:5d:56:8f:e5:9a:1b:07:1b:c6:71:f7: 9c:e1:27:65:a5:b6:7c:db:3a:cd:9b:6b:cb:a5:7d:7f:24:75: 52:aa:4e:bf:7a:22:8e:cd:c9:6e:ef:6b:e6:80:88:e1:28:05: d9:0d:09:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjUwODIyMTgxNjM0WhcNMjUwODI5MTgxNjM0WjAYMRYwFAYD VQQDEw02OGE4YjQwMi01NGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/RGFTFGB2CUpbjjGFXdxpifjmLijiu6+daOibSkTrxCUmBx0jfmWM3SetIEs x7kQikgnG7LIC2AvhJf/woo1Alp9CVrSBWF18xEseParhi5YZ3wRE6Kx2W/6VD49 OO/EIh19DlpTwLgfc+WiXvFYIRDZ3Pr64VVCjeFZXJxGAcKqdDrLTwzNxE50NonZ hJ3UXFwexOffYq9b6wDcSyyosXuAB8ZXcL92l54RqT3MpWxf87vWm21UWaVme7eO SdWJHH+SCv3x/qEk3fWjFxSI69iHjNMQIrTiIwyUAtEMEJooQwkNmTsDAo1PR5vA UQpoz7lR8TvePh83VPbFrR8x5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIClaP1 M5DJKyT1Aocm1RrrY9U6MB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMhMgx+JGGAObmKO9U3Rc/B29DDy+AuDWLr2/+YFuz0XunuP1KAwU5 ice56kHGgI+wK5nMh+ZbO0p01/i58lt0IYzfnC5Z1PgcAULpEajV4zVMrm4UwUS1 96t4HpWRNRsLDBmXnoGFsh1AaBXYSlqDXtmYgyWOEfGZIOsEgZXHdnP9poR/X6v8 Ho2e6ylnenWce/+5uPU70jrALpZrft4FH6Mba3BqlPMPD/pNTAoYIjX+fGwOwGCl PZM1UZpm+UNolXoANAQB7+S8eacyXVaP5ZobBxvGcfec4SdlpbZ82zrNm2vLpX1/ JHVSqk6/eiKOzclu72vmgIjhKAXZDQnX -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:34 2025 by rpki-client