$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft File: zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json) Hash identifier: dJN9WTz/y79x9oAE9tBI4hN/n12xXLqJnJ6eqWcyMEM= Subject key identifier: E4:B0:A3:91:B1:6B:6B:4E:EB:09:A8:A2:DE:83:72:0B:11:D3:B4:BE Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft Manifest number: 0149 Signing time: Sat 23 Aug 2025 04:30:08 +0000 Manifest this update: Sat 23 Aug 2025 04:30:08 +0000 Manifest next update: Sat 30 Aug 2025 04:30:08 +0000 Files and hashes: 1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: bZW1ImncFl75tzNVIio7q/oibN4Ka1z6gDIXkpTnn/M=) 2: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: 05BxmRyvKNcOlG0da2lnXsYOxEsMKdSx2ZRkaVaMWv4=) 3: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: cOcYEcKHuf/JYD0AEBC5IpcPkABHQnNi85MejRVjkMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Validity Not Before: Aug 23 04:30:08 2025 GMT Not After : Aug 30 04:30:08 2025 GMT Subject: CN=68a943d0-8995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:00:d7:dc:2b:0d:77:ab:4c:8a:0d:a3:46: 13:b7:ac:9d:ca:54:bc:41:4e:6b:4a:f4:9e:5d:e0: 32:e6:6f:a0:d6:c7:41:00:85:c7:8a:8c:a0:a7:7e: c9:47:1e:56:56:45:e0:af:2b:0c:3c:cc:06:3a:9c: 9b:30:4a:d0:9f:14:94:b3:90:3a:03:7e:13:83:2d: 7f:ce:d9:99:61:b9:ba:83:d4:8d:51:8d:12:ec:a4: bd:a6:52:62:b7:f2:28:5c:07:63:09:85:d4:03:2e: 4a:91:0d:d3:81:03:ed:57:5c:bd:1f:41:c5:27:7b: ae:64:75:f9:e9:31:4b:ba:6d:dd:a2:de:a9:2e:68: 7c:e6:50:b6:d2:9d:11:3d:5c:9d:10:13:20:5d:bd: 5f:4b:a4:3b:61:30:e7:4f:7c:78:7b:0e:3c:26:04: 15:2f:fe:d6:6c:cc:6f:f7:f6:4a:5a:17:13:7a:57: 45:e9:a7:77:e9:a8:87:04:56:f9:86:64:db:8d:9e: 3b:43:36:95:b1:aa:4d:29:f8:7f:b8:85:f0:47:34: 4e:2f:31:ce:0e:97:41:19:b2:d4:9c:6b:a8:9a:28: ff:4b:aa:c7:13:da:fb:ae:08:b3:60:3b:93:e7:39: dd:2f:44:6e:3d:a3:7a:62:26:9a:a1:e6:cc:59:7d: 87:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B0:A3:91:B1:6B:6B:4E:EB:09:A8:A2:DE:83:72:0B:11:D3:B4:BE X509v3 Authority Key Identifier: keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e1:73:0f:c1:f1:28:86:88:ce:36:70:6e:5c:b8:29:02:92: 34:5f:31:90:8b:4e:62:85:3e:9f:cc:be:e6:7f:a6:46:23:ec: 8f:f1:98:54:79:1e:5a:e7:c7:28:56:86:a7:c0:81:18:8d:8b: 43:d6:8c:d5:b8:eb:c4:32:3a:3c:80:2e:9f:11:c8:2c:22:4f: c2:c1:87:5f:65:3f:cd:98:4e:c8:d0:36:84:a2:38:c0:6d:f4: 48:70:01:65:8d:02:23:18:09:44:96:8f:5a:50:21:01:bc:15: eb:28:91:b6:d9:d7:5c:f5:4b:0d:05:b6:ca:a9:b1:56:59:df: dd:e9:36:d7:8f:5f:7d:a2:bd:32:d2:bf:04:b8:23:b0:61:be: 56:2f:49:4a:7d:eb:c9:82:7f:74:db:a7:43:6f:1a:58:47:f7: 19:4a:07:73:e1:8a:b0:a1:92:0d:28:1a:73:10:d7:1c:aa:5b: 69:ea:b6:ec:f4:79:95:11:ed:25:ae:0c:2b:fb:84:e2:a8:a4: 9a:bd:32:70:6d:0d:e9:6d:b9:f8:ea:fe:c5:27:f6:c2:ea:0a: e8:0e:3b:b0:ae:3f:e4:90:4e:90:bb:2b:9a:1b:45:cc:8f:35: c9:70:6c:13:49:e1:f9:fe:40:8c:11:ad:d3:9b:a0:2a:dc:67: 3b:89:2b:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjExMTAvBgNVBAUTKENEODlBODI2OEVCMTFFMzMwRkJENDRDMDQ4NzIwRDEz MjVDNUE2MEIwHhcNMjUwODIzMDQzMDA4WhcNMjUwODMwMDQzMDA4WjAYMRYwFAYD VQQDEw02OGE5NDNkMC04OTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwYA19wrDXerTIoNo0YTt6ydylS8QU5rSvSeXeAy5m+g1sdBAIXHioygp37J Rx5WVkXgrysMPMwGOpybMErQnxSUs5A6A34Tgy1/ztmZYbm6g9SNUY0S7KS9plJi t/IoXAdjCYXUAy5KkQ3TgQPtV1y9H0HFJ3uuZHX56TFLum3dot6pLmh85lC20p0R PVydEBMgXb1fS6Q7YTDnT3x4ew48JgQVL/7WbMxv9/ZKWhcTeldF6ad36aiHBFb5 hmTbjZ47QzaVsapNKfh/uIXwRzROLzHODpdBGbLUnGuomij/S6rHE9r7rgizYDuT 5zndL0RuPaN6YiaaoebMWX2HtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSwo5Gx a2tO6wmoot6DcgsR07S+MB8GA1UdIwQYMBaAFM2JqCaOsR4zD71EwEhyDRMlxaYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2MS9EMDY1QkM0Qzkz NDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhqTVB2VVRBU0hJTkV5WEZw Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2MS9EMDY1QkM0QzkzNDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhq TVB2VVRBU0hJTkV5WEZwZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx4XMPwfEohojONnBuXLgpApI0XzGQi05ihT6fzL7mf6ZGI+yP8ZhU eR5a58coVoanwIEYjYtD1ozVuOvEMjo8gC6fEcgsIk/CwYdfZT/NmE7I0DaEojjA bfRIcAFljQIjGAlElo9aUCEBvBXrKJG22ddc9UsNBbbKqbFWWd/d6TbXj199or0y 0r8EuCOwYb5WL0lKfevJgn9026dDbxpYR/cZSgdz4YqwoZINKBpzENccqltp6rbs 9HmVEe0lrgwr+4TiqKSavTJwbQ3pbbn46v7FJ/bC6groDjuwrj/kkE6QuyuaG0XM jzXJcGwTSeH5/kCMEa3Tm6Aq3Gc7iSsn -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:52 2025 by rpki-client