$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json) Hash identifier: QZ2Y6BxIWWMcaijfR8wqjGIY7xwcjmiMcMTbikA3a+8= Subject key identifier: 8F:E5:D0:F8:4F:46:EC:13:F2:7A:AD:03:CE:E2:54:CF:11:C8:1B:79 Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Certificate serial: 07CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft Manifest number: 07C1 Signing time: Fri 22 Aug 2025 21:20:56 +0000 Manifest this update: Fri 22 Aug 2025 21:20:56 +0000 Manifest next update: Fri 29 Aug 2025 21:20:56 +0000 Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: EcNZfJq+yoXyzN71ude5WP7i0xf13rORmJ8aY+xL0a0=) 2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: VJ44WLNQk6fthSf4IfFQ/fDdSEbGp2lfMGV/+APm5xk=) 3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: qJReJaaTRE38lshBw+MzbYFyUK14agtT5WHSqFZE0ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Validity Not Before: Aug 22 21:20:56 2025 GMT Not After : Aug 29 21:20:56 2025 GMT Subject: CN=68a8df38-d72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:30:1a:5d:69:68:d8:5f:a6:7e:1a:6a:a3:e9: 85:7e:71:c6:e1:0d:d3:97:ff:2f:5a:56:bd:39:0a: 30:70:4d:b4:f9:d4:65:92:2f:b9:e0:7e:07:ff:8d: 17:5f:8e:00:7f:7e:e3:60:05:67:32:64:e2:bb:8e: ae:4c:01:28:bd:87:c6:ed:94:07:f9:38:73:5f:3a: 2d:96:fc:6e:b1:59:53:33:47:d6:83:e2:4b:62:a9: e8:95:38:5a:95:48:c7:26:8b:64:2c:5a:41:b3:fd: ff:81:83:57:c1:6c:09:6e:e7:92:74:e3:7e:e5:ba: 2f:a6:52:10:7a:bd:99:bc:f8:38:f0:5d:b1:4b:f8: a9:8d:b0:f8:9f:d8:ae:20:24:3c:b6:dc:72:74:70: 99:5d:72:72:81:8f:fa:6c:48:0b:39:68:11:9b:87: 51:78:cf:e7:2e:38:9b:74:5d:f8:9e:fd:60:74:fc: dd:cb:7a:29:29:33:5d:11:eb:45:8c:50:26:d7:b3: 65:4e:b8:7d:1d:58:42:b5:82:92:1b:d7:16:b9:70: 10:98:a9:0d:1f:8b:27:c8:bf:22:20:dc:49:10:12: e5:3d:12:48:4d:73:6f:b1:ec:5e:26:e7:6a:c1:eb: e4:e0:1e:62:2f:ed:35:61:6e:e3:64:03:e4:42:c6: f8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E5:D0:F8:4F:46:EC:13:F2:7A:AD:03:CE:E2:54:CF:11:C8:1B:79 X509v3 Authority Key Identifier: keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:80:bb:f9:f9:4c:9c:61:a0:49:77:04:d8:be:55:55:02:a8: 12:66:b2:7c:64:91:02:a2:74:a6:07:12:71:13:73:3c:38:60: 1e:7b:41:c5:93:f7:95:1d:59:c8:c4:2e:87:e3:56:34:f1:95: d7:f7:67:85:34:41:4a:0f:f5:80:b1:96:d9:ef:92:7d:0f:99: 85:0e:3e:12:28:cb:99:da:6c:87:c2:4d:0c:a4:28:7d:d6:52: 28:61:05:13:8b:05:3d:a8:23:bc:59:f3:f8:16:2c:25:9b:46: 41:0d:92:7c:00:08:54:e1:6a:23:ee:7e:92:0f:bf:73:94:8f: af:d9:eb:b8:bd:c7:ee:72:dd:bf:5f:29:f3:29:fe:a0:03:79: 2b:b4:6c:23:9b:36:9f:74:bb:79:32:b2:60:b2:52:ca:f6:b8: 62:cb:98:db:80:a5:1f:83:be:10:dc:c3:c6:88:3e:c5:21:d5: 03:b3:48:77:dc:56:99:bc:49:6f:50:c7:93:8a:b3:36:36:ce: 9f:d9:33:37:f8:23:d1:5b:f8:83:b0:c1:6e:34:28:0a:9a:a3: 64:6f:98:36:72:74:a1:30:47:77:fc:9a:9c:89:75:50:27:e3: 76:56:0f:26:c4:19:59:48:0e:79:4f:1a:a8:cf:90:f2:f4:5d: 0d:9e:70:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz QUE5MTEyRTYwHhcNMjUwODIyMjEyMDU2WhcNMjUwODI5MjEyMDU2WjAYMRYwFAYD VQQDEw02OGE4ZGYzOC1kNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8jAaXWlo2F+mfhpqo+mFfnHG4Q3Tl/8vWla9OQowcE20+dRlki+54H4H/40X X44Af37jYAVnMmTiu46uTAEovYfG7ZQH+ThzXzotlvxusVlTM0fWg+JLYqnolTha lUjHJotkLFpBs/3/gYNXwWwJbueSdON+5bovplIQer2ZvPg48F2xS/ipjbD4n9iu ICQ8ttxydHCZXXJygY/6bEgLOWgRm4dReM/nLjibdF34nv1gdPzdy3opKTNdEetF jFAm17NlTrh9HVhCtYKSG9cWuXAQmKkNH4snyL8iINxJEBLlPRJITXNvsexeJudq wevk4B5iL+01YW7jZAPkQsb4qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/l0PhP RuwT8nqtA87iVM8RyBt5MB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5 RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkI3Ni82Q0EzMzY5QzA5RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExk Z2hjVTdHZmhGMTQ2cVJFdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBygLv5+UycYaBJdwTYvlVVAqgSZrJ8ZJEConSmBxJxE3M8OGAee0HF k/eVHVnIxC6H41Y08ZXX92eFNEFKD/WAsZbZ75J9D5mFDj4SKMuZ2myHwk0MpCh9 1lIoYQUTiwU9qCO8WfP4Fiwlm0ZBDZJ8AAhU4Woj7n6SD79zlI+v2eu4vcfuct2/ XynzKf6gA3krtGwjmzafdLt5MrJgslLK9rhiy5jbgKUfg74Q3MPGiD7FIdUDs0h3 3FaZvElvUMeTirM2Ns6f2TM3+CPRW/iDsMFuNCgKmqNkb5g2cnShMEd3/JqciXVQ J+N2Vg8mxBlZSA55Txqoz5Dy9F0NnnCU -----END CERTIFICATE-----Generated at Sun Aug 24 00:51:36 2025 by rpki-client