$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json) Hash identifier: RL1Fqf//14fP0bvYSj18Ug+rHFRsCku3piqBlzfe4XI= Subject key identifier: BE:5D:8C:A1:72:F6:DE:FB:CC:B8:16:18:4E:DC:01:3C:61:A9:4A:09 Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft Manifest number: 0155 Signing time: Sat 23 Aug 2025 04:15:56 +0000 Manifest this update: Sat 23 Aug 2025 04:15:55 +0000 Manifest next update: Sat 30 Aug 2025 04:15:55 +0000 Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: lKkKt5TkMpM9KS8xjq2x+XD22Nup/DWd+Bkr82jGgQM=) 2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: Au9LqYxSegxqPey9TLXuRtICRWaNbswTGw/Qw/oD2tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: Aug 23 04:15:55 2025 GMT Not After : Aug 30 04:15:55 2025 GMT Subject: CN=68a9407b-af31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:05:61:8c:62:bb:92:4d:0c:c4:23:8d:dc:ce: 81:a2:98:7d:5e:32:24:76:3d:8c:22:09:d2:09:41: c8:5a:39:9e:9a:4e:2d:b5:91:c8:5e:37:b3:f4:35: 81:34:2b:dc:30:44:77:0c:e7:3c:1a:d0:f5:2e:c7: 95:b6:f6:25:64:f5:e5:23:5b:bd:6a:33:89:3a:11: 09:60:ef:2e:d2:b2:2d:c3:2a:c3:ef:0c:75:92:72: c1:04:7f:d2:e8:5a:61:ce:d1:f1:ca:05:e2:fa:95: 75:90:a6:56:34:e6:1b:67:41:7c:3a:77:e4:9a:68: 2f:68:69:24:f8:86:db:56:73:28:af:91:c7:9a:1f: 3a:1c:ff:ac:40:36:63:96:54:42:31:14:b8:91:d3: 46:fc:de:a6:73:41:ef:98:38:85:35:b0:7e:ba:9d: 0b:23:36:1d:a7:ba:9a:cc:5c:06:2b:01:3c:ba:ec: 46:d4:62:e1:1e:83:3d:d5:6e:04:d7:e8:35:13:8c: e9:e8:0f:a8:51:51:5c:01:f6:2a:4c:7a:bc:8d:f2: 9e:78:16:8e:1e:0c:67:fc:f6:02:67:cf:d4:d6:f8: 2a:10:6d:1a:3f:89:b8:78:91:02:cc:92:04:f4:81: af:a3:44:f9:23:f2:ce:be:bd:cc:31:ee:0c:fa:7f: 01:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:8C:A1:72:F6:DE:FB:CC:B8:16:18:4E:DC:01:3C:61:A9:4A:09 X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:66:bd:6b:b3:33:05:2b:f9:f0:d9:2e:74:7f:a9:e5:c8:f2: 94:1f:05:d7:52:7c:87:c7:9d:31:a5:79:4a:60:ae:85:21:ce: 3f:be:28:36:13:3a:52:a3:cb:78:d5:71:e7:94:cb:cb:90:73: de:5c:62:3d:6c:f5:41:1f:03:99:13:31:07:7a:7d:ff:e0:f4: 27:81:5b:9f:a2:eb:a3:62:3c:a1:32:3f:a1:8d:f2:42:3e:de: 62:24:65:8c:30:3f:22:be:d4:73:ca:30:17:30:71:c9:3e:d6: ff:99:89:aa:38:7b:ee:88:9c:a6:b2:7b:82:00:53:c4:57:21: 94:29:13:80:63:0b:22:a9:48:06:61:07:cc:0d:ed:72:d0:85: cb:58:f6:4b:fe:85:e9:7c:8d:0d:af:10:9f:46:29:1d:5a:49: 6f:5c:ba:e8:fd:5f:b7:88:fb:79:a2:91:13:8e:3c:02:92:09: b4:70:16:04:27:27:91:27:39:fc:02:2f:73:f5:69:cb:fa:c0: 15:c9:67:84:ef:db:7a:ff:47:92:ad:96:cd:2f:60:8f:78:0b: 06:87:fb:a0:78:a4:93:dc:60:87:9f:92:85:fa:b3:d3:0a:88: 0f:fa:0a:2b:4a:28:7f:72:3c:18:c7:3c:07:9e:d5:c2:3b:d5: b3:d5:9a:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNzAxMTAvBgNVBAUTKDYyMkU3NjYyRDlGQkUxMEMxQUFFMEJERkU5ODhEQjk5 NkFFM0ZENTkwHhcNMjUwODIzMDQxNTU1WhcNMjUwODMwMDQxNTU1WjAYMRYwFAYD VQQDEw02OGE5NDA3Yi1hZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgVhjGK7kk0MxCON3M6Boph9XjIkdj2MIgnSCUHIWjmemk4ttZHIXjez9DWB NCvcMER3DOc8GtD1LseVtvYlZPXlI1u9ajOJOhEJYO8u0rItwyrD7wx1knLBBH/S 6FphztHxygXi+pV1kKZWNOYbZ0F8OnfkmmgvaGkk+IbbVnMor5HHmh86HP+sQDZj llRCMRS4kdNG/N6mc0HvmDiFNbB+up0LIzYdp7qazFwGKwE8uuxG1GLhHoM91W4E 1+g1E4zp6A+oUVFcAfYqTHq8jfKeeBaOHgxn/PYCZ8/U1vgqEG0aP4m4eJECzJIE 9IGvo0T5I/LOvr3MMe4M+n8BawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5djKFy 9t77zLgWGE7cATxhqUoJMB8GA1UdIwQYMBaAFGIudmLZ++EMGq4L3+mI25lq4/1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI3MC9DQ0I0NTRBNDcz QTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRRd2FyZ3ZmNllqYm1Xcmpf VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI3MC9DQ0I0NTRBNDczQTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRR d2FyZ3ZmNllqYm1XcmpfVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKZr1rszMFK/nw2S50f6nlyPKUHwXXUnyHx50xpXlKYK6FIc4/vig2 EzpSo8t41XHnlMvLkHPeXGI9bPVBHwOZEzEHen3/4PQngVufouujYjyhMj+hjfJC Pt5iJGWMMD8ivtRzyjAXMHHJPtb/mYmqOHvuiJymsnuCAFPEVyGUKROAYwsiqUgG YQfMDe1y0IXLWPZL/oXpfI0NrxCfRikdWklvXLro/V+3iPt5opETjjwCkgm0cBYE JyeRJzn8Ai9z9WnL+sAVyWeE79t6/0eSrZbNL2CPeAsGh/ugeKST3GCHn5KF+rPT CogP+gorSih/cjwYxzwHntXCO9Wz1Zqg -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:26 2025 by rpki-client