$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json) Hash identifier: E/oJ+Sk09pVPoPpF/YiizYlUt40Tvqs7zCUgDR0UtV8= Subject key identifier: A7:BF:08:1E:3B:FA:9A:9C:17:24:30:9F:BB:85:5A:5E:08:72:36:BD Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Certificate serial: 0434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft Manifest number: 0430 Signing time: Sat 23 Aug 2025 00:32:01 +0000 Manifest this update: Sat 23 Aug 2025 00:32:00 +0000 Manifest next update: Sat 30 Aug 2025 00:32:00 +0000 Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: 4BfgJ/tjpXQo1HRNRiN5ua1bR+51Daa/0JOEFyTq5Y8=) 2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: VxhE0yOw2UpFEmn9cUfGr5NqfhjBpOy+NCMi8LSn31o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1076 (0x434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BA8, serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Validity Not Before: Aug 23 00:32:00 2025 GMT Not After : Aug 30 00:32:00 2025 GMT Subject: CN=68a90c00-52bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:5c:dc:05:a1:52:88:75:94:1a:26:21:a3: 8c:e5:44:ae:77:7f:d4:af:92:21:45:e2:30:bd:90: e0:b6:71:46:08:40:dc:db:7e:59:0f:36:33:da:a6: b7:34:9e:6c:a9:37:85:92:f6:8b:ec:d3:10:cb:d5: a6:d7:20:3d:ff:5e:a1:d5:19:89:c7:0b:1a:02:3a: a8:79:f6:7a:ec:a9:72:ef:a4:66:e5:a4:9a:e4:c4: 71:67:eb:d3:b6:59:47:71:67:9b:05:42:47:33:07: 3a:5d:5a:fc:0f:12:5b:88:22:3f:aa:f6:9e:6a:fc: cc:88:8f:5b:b7:f3:5d:a2:44:ad:4a:12:8a:4b:44: 45:b5:d0:81:14:5f:8b:1c:45:67:06:8e:69:13:3d: ea:7d:a0:36:b7:84:fa:a6:75:b1:07:3f:d2:14:99: 0b:2f:a2:d6:18:6f:ed:c5:88:69:aa:17:87:34:9a: 33:a9:77:10:f5:3c:74:8b:b8:ce:1f:69:22:12:45: e9:c4:15:f2:1c:aa:c8:a0:46:73:2e:09:73:f3:9b: 2c:be:5c:41:85:98:2d:2e:e1:52:c9:ce:d3:26:5e: d6:0f:0d:82:fe:f6:50:8e:a5:8f:f3:e9:8e:8f:9f: 36:42:46:10:25:31:e0:d8:76:dc:52:46:9f:ca:7e: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BF:08:1E:3B:FA:9A:9C:17:24:30:9F:BB:85:5A:5E:08:72:36:BD X509v3 Authority Key Identifier: keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:f4:ca:2f:42:01:53:bb:61:15:f1:32:e3:de:6a:78:62:eb: 45:fa:68:75:ac:41:9b:34:b8:84:96:63:60:0c:3c:79:0c:2e: a9:32:c7:b3:29:c8:97:f4:18:cc:39:0b:ea:0b:c4:39:05:ab: 87:d4:a5:b4:4d:b9:0f:06:33:b7:a9:08:44:58:bd:05:de:7b: 81:f9:4a:3b:78:b5:2b:46:9d:fe:bf:0f:a3:a3:b7:33:b3:8d: cf:53:f4:c1:9e:0d:0d:59:ea:0f:e0:e7:ff:33:a4:d4:10:5f: 8a:1a:0e:b3:a8:e9:58:77:93:84:75:02:51:ac:95:b4:75:2c: ec:e8:01:ab:85:7d:f7:55:1f:e4:0f:b8:5e:c1:b2:59:34:d7: 03:78:a1:6b:2e:ec:1f:a5:73:66:4d:1b:9e:11:50:30:13:e2: 31:ea:59:e2:43:61:82:cd:e1:3b:a0:14:6c:8a:38:5c:13:0a: 7e:42:f0:a9:1a:e0:34:ee:04:1f:ab:a2:f3:c5:27:04:0a:83: 65:d8:66:b9:e1:34:9b:8a:64:3b:b8:5b:10:dc:d5:40:18:14: 8d:b4:1a:10:99:78:8b:50:51:3a:76:4d:3d:fa:36:f6:78:fe: 22:10:c6:6f:4b:33:41:5c:53:c9:e4:0c:b6:ad:96:d5:a9:30: 2d:60:57:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQTgxMTAvBgNVBAUTKENBNTU5NDEyRTJBMjM4MDIxQTk0RUYyNzE4RURCMDAx RUY5NkVBODUwHhcNMjUwODIzMDAzMjAwWhcNMjUwODMwMDAzMjAwWjAYMRYwFAYD VQQDEw02OGE5MGMwMC01MmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyx9c3AWhUoh1lBomIaOM5USud3/Ur5IhReIwvZDgtnFGCEDc235ZDzYz2qa3 NJ5sqTeFkvaL7NMQy9Wm1yA9/16h1RmJxwsaAjqoefZ67Kly76Rm5aSa5MRxZ+vT tllHcWebBUJHMwc6XVr8DxJbiCI/qvaeavzMiI9bt/NdokStShKKS0RFtdCBFF+L HEVnBo5pEz3qfaA2t4T6pnWxBz/SFJkLL6LWGG/txYhpqheHNJozqXcQ9Tx0i7jO H2kiEkXpxBXyHKrIoEZzLglz85ssvlxBhZgtLuFSyc7TJl7WDw2C/vZQjqWP8+mO j582QkYQJTHg2HbcUkafyn7HyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKe/CB47 +pqcFyQwn7uFWl4Icja9MB8GA1UdIwQYMBaAFMpVlBLiojgCGpTvJxjtsAHvluqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJBOC9ERTc4RDU4Qzcy MDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9BSWFsTzhuR08yd0FlLVc2 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsV1VFdUtpT0FJYWxPOG5HTzJ3QWUtVzZvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJBOC9ERTc4RDU4QzcyMDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9B SWFsTzhuR08yd0FlLVc2b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ9MovQgFTu2EV8TLj3mp4YutF+mh1rEGbNLiElmNgDDx5DC6pMsez KciX9BjMOQvqC8Q5BauH1KW0TbkPBjO3qQhEWL0F3nuB+Uo7eLUrRp3+vw+jo7cz s43PU/TBng0NWeoP4Of/M6TUEF+KGg6zqOlYd5OEdQJRrJW0dSzs6AGrhX33VR/k D7hewbJZNNcDeKFrLuwfpXNmTRueEVAwE+Ix6lniQ2GCzeE7oBRsijhcEwp+QvCp GuA07gQfq6LzxScECoNl2Ga54TSbimQ7uFsQ3NVAGBSNtBoQmXiLUFE6dk09+jb2 eP4iEMZvSzNBXFPJ5Ay2rZbVqTAtYFdQ -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:36 2025 by rpki-client