$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft File: YhuBwQnlqnjYKfMKV9o1MwglT2k.mft (raw, json) Hash identifier: MZKE5mpy6XEMsYbEGMSCs+KUrBwKwdyj3FGg1DhS7Hw= Subject key identifier: 6F:2B:05:EB:77:74:54:62:0A:8D:B8:53:82:CD:C0:58:07:CA:B0:C1 Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 Certificate issuer: /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft Manifest number: 045F Signing time: Sat 23 Aug 2025 00:25:47 +0000 Manifest this update: Sat 23 Aug 2025 00:25:47 +0000 Manifest next update: Sat 30 Aug 2025 00:25:47 +0000 Files and hashes: 1: YhuBwQnlqnjYKfMKV9o1MwglT2k.crl (hash: BuAk6aNFISi4hRrUnpsrufUCVGhhoTyMaofpNn2n/4U=) 2: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (hash: bAaCSc9TYM7K2UkBDoNWyjDrI2lpV2TgVDZgy3NjGCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138D62, serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Validity Not Before: Aug 23 00:25:47 2025 GMT Not After : Aug 30 00:25:47 2025 GMT Subject: CN=68a90a8b-84ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:3c:75:de:7b:65:39:80:cb:cf:6f:03:31: ad:2a:be:1c:03:69:b9:df:c1:22:a5:6c:33:5b:bf: 4d:cb:1a:7f:0d:39:f2:9f:54:9d:22:97:b6:31:03: cf:9b:97:fa:b3:82:4a:73:f7:13:84:84:3f:b4:b2: 39:14:3a:6d:c6:ec:8d:db:3b:4b:8c:f9:68:ba:4f: ae:8f:1b:87:9b:4e:38:45:ef:2b:c9:84:34:44:4c: da:95:18:10:85:9f:8f:9a:d0:4f:9e:78:49:b6:db: 55:99:5b:1a:ac:1c:be:4e:78:42:5b:41:d1:7a:70: 06:39:87:ba:e4:22:82:c7:d2:e9:e6:e4:37:c0:96: 51:12:0c:0d:c3:6e:c9:12:0c:49:f7:4c:4b:79:22: 5b:4c:d3:46:c1:1b:47:03:78:33:5f:ee:a0:d8:e4: 16:04:45:ef:84:3b:08:17:92:5d:9c:ce:e1:dc:e6: 8c:81:ca:18:89:fd:23:d1:46:5f:db:cc:39:e6:24: bd:f0:26:fe:1b:d9:d7:d4:93:c0:7c:ef:cf:4c:03: fd:f8:4d:f5:be:d1:1e:8a:c5:ed:89:62:8c:25:92: 75:cd:26:23:32:92:fd:e8:c0:36:86:da:d0:56:fe: a9:00:ab:95:3c:9e:c9:05:b6:07:ed:e8:be:02:99: df:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2B:05:EB:77:74:54:62:0A:8D:B8:53:82:CD:C0:58:07:CA:B0:C1 X509v3 Authority Key Identifier: keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c6:38:3d:ae:d8:f4:7c:b2:69:87:25:f8:2d:e7:be:be:72: fd:b5:f4:77:24:43:ae:76:4a:ad:da:11:3d:2c:3c:15:75:4b: 25:9b:62:85:93:35:8a:92:b8:8b:6b:cd:56:e8:aa:41:f1:eb: 2e:12:70:79:ba:3f:82:0b:af:12:50:4a:ab:1f:40:d5:8c:5c: 6a:c9:57:da:ab:5e:2c:ad:df:f7:65:65:fc:0b:09:71:35:18: 50:e3:13:92:d9:af:90:0e:5a:1b:f6:f8:0a:33:09:a5:1e:ef: 23:31:60:14:3d:b3:fd:a1:6c:a7:05:be:3f:99:b2:ac:16:4b: 39:55:b3:6d:a7:1c:2e:c7:d0:14:29:ce:0f:64:4f:2e:0b:df: d3:6e:ad:46:1e:53:17:43:7f:1e:58:63:1f:15:ce:dd:36:fe: d4:69:60:29:08:77:99:89:63:5e:c5:19:9e:a7:af:cf:5e:8f: b3:71:ad:7c:d3:99:11:26:d9:d9:74:62:3e:06:1b:c8:52:74: e5:68:51:5d:26:b7:39:4e:0f:a1:94:fc:bb:b0:21:1a:89:21: e2:59:e4:ea:21:0c:cd:68:30:13:37:aa:05:7b:96:04:dd:38: 2e:2d:35:1d:30:29:90:3b:2e:83:b5:e5:f4:37:8a:d3:3e:15: 9a:9e:35:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhENjIxMTAvBgNVBAUTKDYyMUI4MUMxMDlFNUFBNzhEODI5RjMwQTU3REEzNTMz MDgyNTRGNjkwHhcNMjUwODIzMDAyNTQ3WhcNMjUwODMwMDAyNTQ3WjAYMRYwFAYD VQQDEw02OGE5MGE4Yi04NGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBA8dd57ZTmAy89vAzGtKr4cA2m538EipWwzW79Nyxp/DTnyn1SdIpe2MQPP m5f6s4JKc/cThIQ/tLI5FDptxuyN2ztLjPlouk+ujxuHm044Re8ryYQ0REzalRgQ hZ+PmtBPnnhJtttVmVsarBy+TnhCW0HRenAGOYe65CKCx9Lp5uQ3wJZREgwNw27J EgxJ90xLeSJbTNNGwRtHA3gzX+6g2OQWBEXvhDsIF5JdnM7h3OaMgcoYif0j0UZf 28w55iS98Cb+G9nX1JPAfO/PTAP9+E31vtEeisXtiWKMJZJ1zSYjMpL96MA2htrQ Vv6pAKuVPJ7JBbYH7ei+ApnfeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8rBet3 dFRiCo24U4LNwFgHyrDBMB8GA1UdIwQYMBaAFGIbgcEJ5ap42CnzClfaNTMIJU9p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEQ2Mi9CQ0I0MEE1ODVG Q0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFuallLZk1LVjlvMU13Z2xU MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lodUJ3UW5scW5qWUtmTUtWOW8xTXdnbFQyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEQ2Mi9CQ0I0MEE1ODVGQ0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFu allLZk1LVjlvMU13Z2xUMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCxjg9rtj0fLJphyX4Lee+vnL9tfR3JEOudkqt2hE9LDwVdUslm2KF kzWKkriLa81W6KpB8esuEnB5uj+CC68SUEqrH0DVjFxqyVfaq14srd/3ZWX8Cwlx NRhQ4xOS2a+QDlob9vgKMwmlHu8jMWAUPbP9oWynBb4/mbKsFks5VbNtpxwux9AU Kc4PZE8uC9/Tbq1GHlMXQ38eWGMfFc7dNv7UaWApCHeZiWNexRmep6/PXo+zca18 05kRJtnZdGI+BhvIUnTlaFFdJrc5Tg+hlPy7sCEaiSHiWeTqIQzNaDATN6oFe5YE 3TguLTUdMCmQOy6DteX0N4rTPhWanjV1 -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:06 2025 by rpki-client