$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft File: yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json) Hash identifier: hHtwdilcUfm4PZfOT28J0C+2zjcg9RR71DXoHb6eUJc= Subject key identifier: 10:93:BE:D2:AB:E7:A4:34:D8:00:3B:00:FD:1A:7E:6C:51:9C:46:87 Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft Manifest number: 012D Signing time: Sat 23 Aug 2025 04:43:58 +0000 Manifest this update: Sat 23 Aug 2025 04:43:57 +0000 Manifest next update: Sat 30 Aug 2025 04:43:57 +0000 Files and hashes: 1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: UkW9zpHqxG2TQytyhEn9wZ4zOxunz0b2nJr99d9PKEU=) 2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: 6omCuuVUgdbnOuuOFxfXDIcF+rrSXl7KykbR3GM1b/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Validity Not Before: Aug 23 04:43:57 2025 GMT Not After : Aug 30 04:43:57 2025 GMT Subject: CN=68a9470e-7594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f0:ab:91:6c:43:8d:9d:99:1b:f7:e7:bc:21: e6:4f:4a:63:57:1e:7c:1e:cb:57:2f:8b:d9:31:ab: 19:fd:eb:34:2b:79:00:e1:de:bd:fb:26:01:03:71: ad:ee:f3:64:c1:a9:cb:14:45:90:9d:3b:a3:cd:29: d4:f9:49:44:10:11:e0:04:f3:67:3b:ce:14:b9:8c: 92:f7:72:47:1d:66:4f:23:1f:ab:b2:9f:4f:b5:87: ad:c2:bb:62:a9:10:d2:60:0f:dc:a1:82:14:02:44: 2c:9e:a7:df:c3:f9:d5:ec:1a:1d:55:10:ec:21:66: 34:43:18:00:79:01:c8:93:07:e3:0b:65:8e:ee:02: b2:76:2f:f7:28:28:4e:f0:a6:fc:d3:7f:98:55:5d: 7d:ed:dd:b6:a4:17:35:ac:73:41:1f:4b:7b:36:d0: b5:dd:da:ba:6f:94:b8:46:89:1d:b3:49:5e:d3:ac: 23:88:c5:3e:87:d6:b7:c5:9d:dd:91:d5:a8:6c:f7: 55:19:e4:db:07:a6:3e:57:f2:d3:e3:28:48:9c:f0: 3a:da:70:a9:f6:14:b6:88:1f:1e:03:32:59:2b:c2: 8f:94:0e:f0:6a:ca:64:11:ff:86:61:42:b8:82:5a: da:a2:ff:ec:86:8b:bf:88:0e:a9:a0:cb:0e:0a:02: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:93:BE:D2:AB:E7:A4:34:D8:00:3B:00:FD:1A:7E:6C:51:9C:46:87 X509v3 Authority Key Identifier: keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:de:c8:8b:36:29:41:05:07:d7:00:84:d9:1a:b5:b0:d8:15: b2:5b:84:74:aa:db:64:7b:5b:3d:a2:a5:cf:ad:d5:ca:b0:82: 2d:ef:6a:d5:ee:f3:76:02:6e:d0:e0:1b:f8:a4:98:6f:20:5f: 95:fd:07:a3:c2:0c:0a:5e:62:db:50:69:dd:54:4d:10:8c:bf: 65:e1:a4:6c:7d:67:78:f2:fe:df:71:3e:f9:37:dd:98:37:c6: e3:2d:ae:0a:51:35:63:90:45:f3:b5:2b:bd:9a:3c:3d:c5:f8: 48:40:de:0c:fe:4e:30:34:fc:cc:70:30:e9:58:43:13:71:a9: bb:a9:f3:a7:6f:5a:70:ff:13:50:e7:98:24:23:2d:06:24:da: 03:f4:22:8b:3d:6d:63:13:24:05:d3:6c:fa:b9:70:36:b4:8b: 1e:bf:ad:f8:79:81:a0:64:68:10:a1:91:e3:55:39:98:d3:fd: 7a:04:8a:66:c8:a2:fc:70:c8:9d:3a:99:95:14:a8:cb:7f:db: c5:6f:2b:dd:9d:67:57:73:6f:7d:d2:f8:78:f3:37:dd:11:aa: d0:89:d7:93:ec:93:be:cd:0e:5d:8a:4e:7d:50:ca:c5:04:0a: 5e:b0:eb:40:ea:79:66:cc:cc:b0:e2:1e:8a:c4:ff:71:fd:32: df:3f:78:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1MjYxMTAvBgNVBAUTKENBRTkwRjQ2QzIyMUQwMEIyREEwODA3QUQ0QzRCMDY1 MDMzNzQzNDQwHhcNMjUwODIzMDQ0MzU3WhcNMjUwODMwMDQ0MzU3WjAYMRYwFAYD VQQDEw02OGE5NDcwZS03NTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vCrkWxDjZ2ZG/fnvCHmT0pjVx58HstXL4vZMasZ/es0K3kA4d69+yYBA3Gt 7vNkwanLFEWQnTujzSnU+UlEEBHgBPNnO84UuYyS93JHHWZPIx+rsp9PtYetwrti qRDSYA/coYIUAkQsnqffw/nV7BodVRDsIWY0QxgAeQHIkwfjC2WO7gKydi/3KChO 8Kb803+YVV197d22pBc1rHNBH0t7NtC13dq6b5S4Rokds0le06wjiMU+h9a3xZ3d kdWobPdVGeTbB6Y+V/LT4yhInPA62nCp9hS2iB8eAzJZK8KPlA7waspkEf+GYUK4 glraov/shou/iA6poMsOCgJ+PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCTvtKr 56Q02AA7AP0afmxRnEaHMB8GA1UdIwQYMBaAFMrpD0bCIdALLaCAetTEsGUDN0NE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODUyNi9DNEM2RDA0NkI0 NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBBc3RvSUI2MU1Td1pRTTNR MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1a1BSc0loMEFzdG9JQjYxTVN3WlFNM1EwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODUyNi9DNEM2RDA0NkI0NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBB c3RvSUI2MU1Td1pRTTNRMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA93siLNilBBQfXAITZGrWw2BWyW4R0qttke1s9oqXPrdXKsIIt72rV 7vN2Am7Q4Bv4pJhvIF+V/QejwgwKXmLbUGndVE0QjL9l4aRsfWd48v7fcT75N92Y N8bjLa4KUTVjkEXztSu9mjw9xfhIQN4M/k4wNPzMcDDpWEMTcam7qfOnb1pw/xNQ 55gkIy0GJNoD9CKLPW1jEyQF02z6uXA2tIsev634eYGgZGgQoZHjVTmY0/16BIpm yKL8cMidOpmVFKjLf9vFbyvdnWdXc2990vh48zfdEarQideT7JO+zQ5dik59UMrF BApesOtA6nlmzMyw4h6KxP9x/TLfP3jR -----END CERTIFICATE-----Generated at Sat Aug 23 16:34:41 2025 by rpki-client