$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: 7uR9Z8F7tfGDh+dtT8Mt+D9H1/3W91YfP1iQsPsz1IA= Subject key identifier: D0:87:C0:1A:09:C9:00:70:AC:5F:C6:C7:7B:FB:9A:BD:2C:EC:F4:28 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 04D6 Signing time: Sat 23 Aug 2025 00:03:23 +0000 Manifest this update: Sat 23 Aug 2025 00:03:22 +0000 Manifest next update: Sat 30 Aug 2025 00:03:22 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: EfohkukRxC3LJnT++chjO+KBmb1Ag50pddgPk06A70Y=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: xNVbMWOJTNr+TWQdJDNkDpjKnJa72sxLxfgu1hE4Y3w=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: yMa9anpM1Fx5awM2ELLejmDtWuOQ4e92GvLkjwBL1Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Aug 23 00:03:22 2025 GMT Not After : Aug 30 00:03:22 2025 GMT Subject: CN=68a9054b-9ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:35:66:28:d1:ed:79:e9:e1:4c:3c:fe:45:de: f6:f3:ef:06:4b:28:7a:1e:a0:2b:3c:26:19:21:ed: 35:31:81:69:fb:ed:88:9b:d6:42:22:92:5f:43:f7: 50:d6:14:0e:6a:94:61:d9:96:9d:cb:58:35:31:2d: 01:75:12:af:a3:ca:92:00:20:82:0a:44:17:82:3c: cf:20:7e:a6:f1:a6:9f:17:db:5a:59:b0:0a:bd:21: a4:c4:14:17:6e:4d:36:8a:3f:ca:55:68:8f:17:0c: 8b:34:c8:3e:40:7f:8f:24:31:ab:98:cd:7d:6a:8c: 20:04:02:60:01:72:db:39:a8:23:b7:e7:60:1b:b4: 1d:0c:59:03:19:74:29:02:dd:d5:e0:17:1c:cc:0e: 95:25:21:86:f9:34:ec:41:11:52:6f:03:43:28:cb: 72:07:c7:cd:cd:ef:a4:34:33:42:b0:3f:2a:9c:66: a2:92:a8:eb:e1:81:1c:96:63:df:90:ab:8c:bd:02: c8:86:f9:99:11:4c:a0:4c:b0:fe:43:28:49:09:02: 44:a0:5e:3a:3c:5c:2e:5b:03:19:d9:ad:29:76:7d: 8e:a6:86:e1:41:02:7a:cb:04:37:63:5a:12:ff:76: c1:67:e5:ea:7f:5f:5e:01:f7:28:5e:de:ab:e5:20: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:87:C0:1A:09:C9:00:70:AC:5F:C6:C7:7B:FB:9A:BD:2C:EC:F4:28 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5c:c0:29:23:1c:5c:49:61:93:02:77:9b:6e:2d:fe:77:1b: 07:35:13:1a:71:79:3b:6b:9d:0c:97:8d:54:c1:5b:9f:d7:9e: 86:51:5a:a4:4f:6b:b3:0b:3a:ec:69:d8:6e:59:37:a4:0e:6f: 10:8c:d1:b4:fe:d7:52:5a:58:30:df:8c:b1:f2:ec:18:00:95: 1e:3f:8c:89:8a:4f:d3:55:6b:2f:b2:e0:73:c6:8f:ca:8d:a4: 93:93:4a:74:fd:33:b9:17:6a:b5:2e:ed:93:22:fa:ee:db:a4: c9:7d:6e:09:bb:3e:10:ab:b4:a9:18:52:fa:99:26:e2:7d:a2: 43:9c:3e:ec:52:7b:f2:6a:79:49:af:0f:56:5d:af:c0:18:b6: ed:51:01:e0:59:da:84:61:d1:3c:8f:ff:b0:9a:a1:3e:f6:2f: 47:9f:95:98:a7:2b:15:2f:b4:ad:83:54:55:65:70:79:99:42: 04:b1:5c:6c:6f:cd:2c:43:92:df:4f:71:d6:04:44:0b:19:b2: ec:10:6f:42:f2:5d:69:97:b4:84:2c:3a:89:f5:37:a8:2a:b0: cd:4a:9a:9b:9d:97:68:04:49:ec:16:30:79:d6:39:79:57:1e: 1f:fb:7c:d9:d3:05:68:56:a4:2b:09:9a:7b:6b:1e:c6:64:a4: 9b:1f:3a:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjUwODIzMDAwMzIyWhcNMjUwODMwMDAwMzIyWjAYMRYwFAYD VQQDEw02OGE5MDU0Yi05YWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jVmKNHteenhTDz+Rd728+8GSyh6HqArPCYZIe01MYFp++2Im9ZCIpJfQ/dQ 1hQOapRh2Zady1g1MS0BdRKvo8qSACCCCkQXgjzPIH6m8aafF9taWbAKvSGkxBQX bk02ij/KVWiPFwyLNMg+QH+PJDGrmM19aowgBAJgAXLbOagjt+dgG7QdDFkDGXQp At3V4BcczA6VJSGG+TTsQRFSbwNDKMtyB8fNze+kNDNCsD8qnGaikqjr4YEclmPf kKuMvQLIhvmZEUygTLD+QyhJCQJEoF46PFwuWwMZ2a0pdn2OpobhQQJ6ywQ3Y1oS /3bBZ+Xqf19eAfcoXt6r5SBKzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCHwBoJ yQBwrF/Gx3v7mr0s7PQoMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeXMApIxxcSWGTAnebbi3+dxsHNRMacXk7a50Ml41UwVuf156GUVqk T2uzCzrsadhuWTekDm8QjNG0/tdSWlgw34yx8uwYAJUeP4yJik/TVWsvsuBzxo/K jaSTk0p0/TO5F2q1Lu2TIvru26TJfW4Juz4Qq7SpGFL6mSbifaJDnD7sUnvyanlJ rw9WXa/AGLbtUQHgWdqEYdE8j/+wmqE+9i9Hn5WYpysVL7Stg1RVZXB5mUIEsVxs b80sQ5LfT3HWBEQLGbLsEG9C8l1pl7SELDqJ9TeoKrDNSpqbnZdoBEnsFjB51jl5 Vx4f+3zZ0wVoVqQrCZp7ax7GZKSbHzrC -----END CERTIFICATE-----Generated at Sun Aug 24 04:45:45 2025 by rpki-client