$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: kMvO+Bl9R0bRVZolZ2n12v5XjastRTYgOtJZYRmHRwY= Subject key identifier: A3:B6:07:ED:E6:9C:03:D0:58:D2:BA:4C:88:E5:A1:7F:17:D1:25:DA Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 2523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 2506 Signing time: Fri 22 Aug 2025 15:48:35 +0000 Manifest this update: Fri 22 Aug 2025 15:48:35 +0000 Manifest next update: Fri 29 Aug 2025 15:48:35 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: Z1lq85JS94XYGNX9oxhshkTYMLNTsFZyQkHRqBdvhqs=) 2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: 2tz7LMjITp7vanRGF3Qd5TIIIj7fKWHmsVgw8s6O7nY=) 3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: W5nO0Dm01E1L0J0RrwxDTx9HsKlaz3AShpTaXk9sHks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9507 (0x2523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Aug 22 15:48:35 2025 GMT Not After : Aug 29 15:48:35 2025 GMT Subject: CN=68a89153-7738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:60:24:d0:51:5f:4c:b4:51:b0:61:58:8e: 8e:22:62:ca:e7:7f:8d:32:9c:e5:a2:ec:5c:43:84: 3d:b9:a1:31:7a:1f:70:ca:9a:49:98:05:a0:d3:e7: f3:af:06:74:93:f1:7a:0c:c1:68:26:71:02:95:fc: e7:89:4c:2c:a1:11:95:93:10:41:8a:51:ae:3b:87: 7b:09:a3:59:f4:9a:fa:ed:4f:80:bb:03:75:91:f8: 18:cf:be:86:5f:aa:bb:d3:17:4e:35:1a:e6:02:f6: 24:2b:b6:c1:81:f3:3c:7e:2e:e2:eb:dc:81:df:f0: f3:8b:04:7e:dc:80:26:5e:15:61:6b:51:96:12:ed: d2:6d:62:86:f1:a3:ef:ce:a6:97:70:47:9d:75:75: 96:d1:37:e2:19:31:6c:e8:86:e9:fd:ef:b7:35:7b: d8:97:c9:6c:a2:1b:42:7f:27:d2:d8:80:7d:3c:4f: 42:5c:64:e8:70:f1:0f:ec:d2:e6:3f:79:70:c1:2e: 79:68:f2:59:36:12:3e:b0:6f:e0:19:b0:13:9a:b7: ca:3c:12:4d:00:ad:bb:3e:ba:28:ed:d9:94:cb:17: e7:f1:40:29:ae:72:31:3b:79:24:74:b8:d9:b9:19: 5a:c5:fc:75:ce:9d:9e:87:c8:b0:83:ba:3d:6d:3d: 51:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B6:07:ED:E6:9C:03:D0:58:D2:BA:4C:88:E5:A1:7F:17:D1:25:DA X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ce:69:64:b9:8b:f1:2b:1e:34:48:37:42:9f:44:4f:c4:3c: 74:bc:04:2e:d3:34:df:c5:17:3c:55:2f:32:01:a3:13:83:41: e2:47:f4:e2:de:01:37:80:ec:59:78:d6:16:e7:92:a9:b1:23: 19:a0:cd:ab:11:87:1d:a8:fe:b9:3a:b4:55:9b:03:5c:13:48: 6d:19:1c:a4:32:e5:db:90:b4:fb:84:2b:33:99:be:e7:7c:e6: a4:56:05:52:e9:53:01:20:22:45:d0:9e:a0:9d:a4:04:f9:fc: 2d:02:20:20:26:2f:80:8d:8d:e4:c5:a0:a6:b3:2a:03:e3:fd: 46:d5:c1:10:0e:a0:04:17:23:05:09:c3:61:d0:4b:f5:ad:06: ef:ed:cb:95:0b:9a:df:1e:3b:72:cd:6d:9a:50:96:1a:ea:2f: d3:91:e8:3f:4f:d3:04:87:a6:96:4d:3c:fa:86:01:21:38:e6: d0:30:92:76:4b:cb:b8:d5:7b:a1:09:ca:cf:d1:45:38:aa:de: bb:e5:1b:a4:d1:d9:a5:4d:14:b2:27:4b:e4:19:25:0a:56:49: 96:f5:47:56:c2:3d:1f:d7:8e:53:4b:49:7f:30:89:66:54:20: 24:64:2d:5c:9d:21:03:c5:7f:3f:0f:82:ef:55:41:96:d9:19: 74:ee:ba:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUwODIyMTU0ODM1WhcNMjUwODI5MTU0ODM1WjAYMRYwFAYD VQQDEw02OGE4OTE1My03NzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6xgJNBRX0y0UbBhWI6OImLK53+NMpzlouxcQ4Q9uaExeh9wyppJmAWg0+fz rwZ0k/F6DMFoJnEClfzniUwsoRGVkxBBilGuO4d7CaNZ9Jr67U+AuwN1kfgYz76G X6q70xdONRrmAvYkK7bBgfM8fi7i69yB3/DziwR+3IAmXhVha1GWEu3SbWKG8aPv zqaXcEeddXWW0TfiGTFs6Ibp/e+3NXvYl8lsohtCfyfS2IB9PE9CXGTocPEP7NLm P3lwwS55aPJZNhI+sG/gGbATmrfKPBJNAK27Proo7dmUyxfn8UAprnIxO3kkdLjZ uRlaxfx1zp2eh8iwg7o9bT1RRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKO2B+3m nAPQWNK6TIjloX8X0SXaMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBizmlkuYvxKx40SDdCn0RPxDx0vAQu0zTfxRc8VS8yAaMTg0HiR/Ti 3gE3gOxZeNYW55KpsSMZoM2rEYcdqP65OrRVmwNcE0htGRykMuXbkLT7hCszmb7n fOakVgVS6VMBICJF0J6gnaQE+fwtAiAgJi+AjY3kxaCmsyoD4/1G1cEQDqAEFyMF CcNh0Ev1rQbv7cuVC5rfHjtyzW2aUJYa6i/Tkeg/T9MEh6aWTTz6hgEhOObQMJJ2 S8u41XuhCcrP0UU4qt675Ruk0dmlTRSyJ0vkGSUKVkmW9UdWwj0f145TS0l/MIlm VCAkZC1cnSEDxX8/D4LvVUGW2Rl07roq -----END CERTIFICATE-----Generated at Sat Aug 23 21:36:58 2025 by rpki-client