$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft File: yy5uwVWepHY5RAtAqtdfleb9vF8.mft (raw, json) Hash identifier: Tz6iSEiZesbRl1aDFYxO6y1ahLsJwo+sJXNVbCZ7aK4= Subject key identifier: BE:6D:3F:D1:C7:09:52:04:71:6D:DE:3B:24:88:0E:59:A3:33:99:E4 Authority key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F Certificate issuer: /CN=A9127760/serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft Manifest number: 03 Signing time: Sat 23 Aug 2025 08:25:28 +0000 Manifest this update: Sat 23 Aug 2025 08:25:27 +0000 Manifest next update: Sat 30 Aug 2025 08:25:27 +0000 Files and hashes: 1: yy5uwVWepHY5RAtAqtdfleb9vF8.crl (hash: sNw4RILdy2Wd8dO90w0jEyzz0/6wj0WDXOAxcgGqohI=) 2: F9B1B1167E3F11F0B7941020C4F9AE02.roa (hash: bK7hZCbYRKmxsAbM/VvM+9yVYJP6bmKeYAFIpnPtV6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F Validity Not Before: Aug 23 08:25:27 2025 GMT Not After : Aug 30 08:25:27 2025 GMT Subject: CN=68a97af7-a433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:3b:5d:f1:62:0d:7c:91:32:68:98:e1:cb: a9:7f:83:fc:ca:1c:1e:63:08:c0:c4:47:31:f4:f1: d1:bb:27:d6:be:96:2a:43:42:62:c2:d7:d7:fc:43: 57:62:f4:10:b8:6e:ea:58:20:cc:bf:23:65:21:0b: bb:e1:ef:05:d5:72:9c:95:a9:c3:04:f1:c7:56:09: 9f:45:0d:61:0e:1f:39:75:da:d5:ce:14:5e:d9:2d: a9:e7:ba:ea:f1:74:48:69:f0:05:be:97:3b:b6:fe: fa:2c:56:c0:cf:65:58:03:02:7f:c7:1b:66:57:17: 1e:8a:48:35:6e:0e:8e:b0:db:19:6e:d1:23:63:19: 68:40:3b:53:be:30:52:11:a1:97:2c:70:5c:94:25: 39:63:94:e3:b0:2b:6d:d4:98:e9:cf:af:05:2c:a4: f8:4e:6a:1a:a8:17:82:8a:38:be:0a:93:30:5d:fd: b2:d9:eb:03:3b:7c:ab:f4:11:ac:e3:c8:88:71:61: 04:76:a7:60:ad:59:33:6b:1c:8a:2f:2a:9b:d3:6e: f2:e9:f4:a4:62:1d:f5:ab:c8:0e:a2:57:4e:a3:dd: a4:dc:c5:9d:7a:f4:62:ec:ac:88:b9:dd:d1:4f:9b: 8d:87:4c:a0:67:0d:fe:bf:e7:32:47:8f:44:26:0c: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6D:3F:D1:C7:09:52:04:71:6D:DE:3B:24:88:0E:59:A3:33:99:E4 X509v3 Authority Key Identifier: keyid:CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:0f:28:5d:9d:a2:1a:6a:d8:3d:fe:52:34:af:cb:14:0a:97: 3b:1b:e7:6d:57:a7:cd:4b:56:68:c0:a2:52:94:0a:34:4c:10: 3f:d0:7a:36:55:42:b9:4c:3d:0b:26:0d:6d:9c:11:d4:38:54: 64:80:18:14:e0:a1:ea:8c:f9:07:7e:41:13:df:98:cb:37:c5: c2:91:f4:8d:19:99:e4:58:be:03:95:a5:06:e2:5e:27:e2:cd: 3b:f4:1c:25:ca:4f:a3:2d:5b:3d:e4:a1:85:78:71:c6:25:b3: a7:9a:d6:96:d8:61:45:29:48:c0:3f:2a:4f:2c:71:59:ae:c0: c7:6c:6f:7e:fa:33:46:36:9a:e7:1e:54:25:98:fc:b9:d5:fb: c0:30:61:18:b0:65:97:b8:a2:d8:fc:21:48:c7:9f:80:fd:66: ef:0c:91:64:81:20:42:58:fc:08:13:2e:2e:4d:39:c1:57:b5: b3:94:c8:b2:f7:ec:a3:2f:53:96:11:88:ed:5d:90:6c:20:bc: fa:1b:5c:3d:cf:c6:e3:eb:29:38:61:63:ed:7f:69:84:74:83: 98:d6:b9:ca:f0:c2:25:f5:87:02:5a:5d:91:52:a8:6f:6a:a4: a5:b3:3e:7d:30:f5:50:ca:7a:9f:ad:98:89:87:e2:4b:1b:f0: 14:96:d4:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Nzc2MDExMC8GA1UEBRMoQ0IyRTZFQzE1NTlFQTQ3NjM5NDQwQjQwQUFENzVGOTVF NkZEQkM1RjAeFw0yNTA4MjMwODI1MjdaFw0yNTA4MzAwODI1MjdaMBgxFjAUBgNV BAMTDTY4YTk3YWY3LWE0MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxwztd8WINfJEyaJjhy6l/g/zKHB5jCMDERzH08dG7J9a+lipDQmLC19f8Q1di 9BC4bupYIMy/I2UhC7vh7wXVcpyVqcME8cdWCZ9FDWEOHzl12tXOFF7ZLannuurx dEhp8AW+lzu2/vosVsDPZVgDAn/HG2ZXFx6KSDVuDo6w2xlu0SNjGWhAO1O+MFIR oZcscFyUJTljlOOwK23UmOnPrwUspPhOahqoF4KKOL4KkzBd/bLZ6wM7fKv0Eazj yIhxYQR2p2CtWTNrHIovKpvTbvLp9KRiHfWryA6iV06j3aTcxZ169GLsrIi53dFP m42HTKBnDf6/5zJHj0QmDJ5bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvm0/0ccJ UgRxbd47JIgOWaMzmeQwHwYDVR0jBBgwFoAUyy5uwVWepHY5RAtAqtdfleb9vF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzc0M0QxNjdFN0Uz RjExRjBBQjA4OUIxRUM0RjlBRTAyL3l5NXV3VldlcEhZNVJBdEFxdGRmbGViOXZG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXk1dXdWV2VwSFk1UkF0QXF0ZGZsZWI5dkY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NzYwLzc0M0QxNjdFN0UzRjExRjBBQjA4OUIxRUM0RjlBRTAyL3l5NXV3VldlcEhZ NVJBdEFxdGRmbGViOXZGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL4PKF2dohpq2D3+UjSvyxQKlzsb521Xp81LVmjAolKUCjRMED/QejZV QrlMPQsmDW2cEdQ4VGSAGBTgoeqM+Qd+QRPfmMs3xcKR9I0ZmeRYvgOVpQbiXifi zTv0HCXKT6MtWz3koYV4ccYls6ea1pbYYUUpSMA/Kk8scVmuwMdsb376M0Y2muce VCWY/LnV+8AwYRiwZZe4otj8IUjHn4D9Zu8MkWSBIEJY/AgTLi5NOcFXtbOUyLL3 7KMvU5YRiO1dkGwgvPobXD3PxuPrKThhY+1/aYR0g5jWucrwwiX1hwJaXZFSqG9q pKWzPn0w9VDKep+tmImH4ksb8BSW1PM= -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:13 2025 by rpki-client