$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: 0JK/Hutxjd5azgLhQYn06Z8UeCjJ+IBL48m1S5c0LS0= Subject key identifier: 2F:46:C1:75:95:47:C0:10:27:35:1E:91:B3:2E:98:86:4E:C0:68:C3 Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 0190 Signing time: Sat 23 Aug 2025 03:39:53 +0000 Manifest this update: Sat 23 Aug 2025 03:39:53 +0000 Manifest next update: Sat 30 Aug 2025 03:39:53 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: trJIWoGm/oH/+vgbbbdKXIjdkRz8QTfoWIyrvF0XLh8=) 2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: T9bgb6w+YEKZ5F9ekCDjbubT5zB0ZkUsFds1ZxlsLrE=) 3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: Poe8WZPLlmMRopxum73vePC7h4bI4X/kM9rphS1LhLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Aug 23 03:39:53 2025 GMT Not After : Aug 30 03:39:53 2025 GMT Subject: CN=68a93809-0bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:26:de:f8:1e:79:d9:8c:a0:fb:8a:c9:a2:26: b3:48:8f:dc:3d:54:b5:8e:c2:5e:47:5d:89:3d:38: e6:9e:96:32:af:99:c7:9e:5b:b2:0d:48:5d:85:07: c7:a7:db:22:40:5e:06:b1:ad:4b:24:bf:a2:1b:ee: b4:15:0a:7e:7b:20:84:c4:3a:b4:6f:d9:5d:25:c2: 46:bb:d4:29:e2:44:31:f2:77:fb:49:ea:27:55:be: 98:84:fe:3b:ad:17:72:4e:33:72:41:8b:39:f8:f1: 4a:c7:db:c8:13:7a:f9:af:e5:70:0f:0a:6b:c8:19: ed:1d:30:0a:21:ca:92:01:95:c3:70:a4:cb:3c:90: b0:9b:7a:83:2a:61:c9:cd:e1:65:cb:52:ed:b9:28: ce:a7:6a:92:0b:20:42:a0:a9:a2:93:b8:7e:a9:6b: 83:68:94:6f:89:85:43:c0:a6:fe:dd:35:8a:12:a2: 78:c4:86:70:a2:84:09:e3:b8:68:8e:29:44:2c:28: 9a:bf:ec:04:a4:d7:37:82:80:28:8c:11:59:2b:d4: 68:91:66:92:c6:bc:57:6b:87:cb:b3:5a:ee:2f:e0: 29:a0:81:27:8a:4e:60:4c:23:29:4d:39:ea:7c:a3: 28:cb:0a:ee:4e:28:2d:b4:57:05:34:24:97:36:ee: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:46:C1:75:95:47:C0:10:27:35:1E:91:B3:2E:98:86:4E:C0:68:C3 X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:25:20:13:4b:ca:41:2e:61:2e:c2:f8:6d:19:df:1d:69:07: 72:cd:5b:94:d8:fe:f9:6f:f2:08:56:ca:57:9c:b9:cf:d7:df: a9:69:bb:73:a5:ba:04:c9:26:5d:46:f2:97:74:3c:56:e9:76: 18:df:77:9b:c5:da:1b:73:57:11:d1:04:f5:48:74:e1:48:39: 11:fb:14:cd:37:eb:79:95:ec:8d:47:62:f7:ba:77:3e:79:34: 8a:34:e6:ab:4d:bf:b7:9c:bf:51:35:55:cd:7f:08:47:f3:70: 9a:7f:29:1e:7e:d7:31:67:76:de:0d:4f:4c:1c:fb:d2:87:61: 8d:a8:da:83:ba:60:0f:e3:54:37:b5:1b:d2:94:71:d8:88:b2: 3f:a8:fd:5b:19:67:07:98:3e:80:0f:7e:78:c6:ca:7f:64:31: 64:c0:bc:b0:95:0f:e7:30:f1:7f:c8:88:c4:3d:be:04:16:23: cf:1a:7d:51:19:71:d2:12:93:55:62:bd:ae:59:41:de:7b:0f: 1f:1d:ee:bb:57:3a:1c:f6:13:9d:f9:c4:6b:96:cb:b1:12:98: ce:3a:0d:fd:a1:20:b9:e0:c7:e1:2a:0b:5e:46:81:1d:7c:23: fc:61:c8:d5:2a:65:12:11:89:70:18:0d:20:fc:f1:c5:7d:e3: c3:28:f5:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjUwODIzMDMzOTUzWhcNMjUwODMwMDMzOTUzWjAYMRYwFAYD VQQDEw02OGE5MzgwOS0wYmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ibe+B552Yyg+4rJoiazSI/cPVS1jsJeR12JPTjmnpYyr5nHnluyDUhdhQfH p9siQF4Gsa1LJL+iG+60FQp+eyCExDq0b9ldJcJGu9Qp4kQx8nf7SeonVb6YhP47 rRdyTjNyQYs5+PFKx9vIE3r5r+VwDwpryBntHTAKIcqSAZXDcKTLPJCwm3qDKmHJ zeFly1LtuSjOp2qSCyBCoKmik7h+qWuDaJRviYVDwKb+3TWKEqJ4xIZwooQJ47ho jilELCiav+wEpNc3goAojBFZK9RokWaSxrxXa4fLs1ruL+ApoIEnik5gTCMpTTnq fKMoywruTigttFcFNCSXNu5gLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9GwXWV R8AQJzUekbMumIZOwGjDMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUJSATS8pBLmEuwvhtGd8daQdyzVuU2P75b/IIVspXnLnP19+pabtz pboEySZdRvKXdDxW6XYY33ebxdobc1cR0QT1SHThSDkR+xTNN+t5leyNR2L3unc+ eTSKNOarTb+3nL9RNVXNfwhH83CafykeftcxZ3beDU9MHPvSh2GNqNqDumAP41Q3 tRvSlHHYiLI/qP1bGWcHmD6AD354xsp/ZDFkwLywlQ/nMPF/yIjEPb4EFiPPGn1R GXHSEpNVYr2uWUHeew8fHe67Vzoc9hOd+cRrlsuxEpjOOg39oSC54MfhKgteRoEd fCP8YcjVKmUSEYlwGA0g/PHFfePDKPWX -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:39 2025 by rpki-client