$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft File: y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json) Hash identifier: B7/AZuQj605Cr6eQhS8K0tWyOK49HLDL+nVBfv8W0go= Subject key identifier: 73:81:BA:90:40:70:E3:F2:A1:06:AC:6A:31:BA:3C:BF:7F:AE:5C:25 Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD Certificate issuer: /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Certificate serial: 0B56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft Manifest number: 0CDE Signing time: Fri 22 Aug 2025 19:16:31 +0000 Manifest this update: Fri 22 Aug 2025 19:16:31 +0000 Manifest next update: Fri 29 Aug 2025 19:16:31 +0000 Files and hashes: 1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: FDvkAhwTL90otwg3LmA+CcDj8FKjEiE3qRAJPo/Z4fA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2902 (0xb56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Validity Not Before: Aug 22 19:16:31 2025 GMT Not After : Aug 29 19:16:31 2025 GMT Subject: CN=68a8c20f-6888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:54:5f:ba:90:e8:4e:6b:1f:28:6f:5a:f9:c0: cc:8c:88:30:ed:61:2e:45:4f:2c:ef:a1:f6:fa:1a: 1d:c9:96:76:e6:1c:1b:05:c7:fb:4a:ec:46:28:c2: fe:4e:cd:41:c1:77:56:d2:01:eb:74:4d:2b:24:78: 04:78:50:0c:30:67:e7:6b:0a:11:0a:a8:85:7f:a0: 78:e9:b0:ab:d2:b1:f4:36:12:7e:ae:c2:cb:45:c6: 29:70:94:b4:30:39:79:f7:3b:df:3a:c7:b6:7c:86: 02:ae:46:93:cb:a0:83:6a:2c:ee:f7:f3:75:82:db: f3:83:6a:d9:2b:4c:1b:0d:41:01:fa:c6:39:08:9e: ca:7b:bb:71:e3:3a:13:66:9a:75:45:6b:1e:7d:18: 43:3c:d1:4f:7c:40:30:70:59:8b:76:fd:13:41:5c: 56:48:64:8a:7c:a6:1e:93:79:1a:87:86:96:47:c5: ca:1a:42:d3:3f:fc:f5:a2:8c:79:30:b8:4c:ff:bd: 23:ee:a6:4e:e8:0c:f2:19:6a:c1:7a:b5:96:23:72: ca:4e:1c:dc:a3:11:7e:97:b2:1c:a6:4d:1b:67:84: 00:8e:6c:6b:ae:67:a4:a9:38:df:0b:2a:b4:0c:76: de:2a:ac:a3:c7:1c:0c:be:45:81:12:c7:66:74:c3: 7a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:81:BA:90:40:70:E3:F2:A1:06:AC:6A:31:BA:3C:BF:7F:AE:5C:25 X509v3 Authority Key Identifier: keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:5d:ba:5c:d3:f0:d6:0c:45:51:ee:e5:d5:92:f1:ab:3b:e3: e9:86:6b:a4:98:b9:8a:16:e1:02:28:2f:13:08:0b:be:e0:3f: 53:10:1c:1a:c9:c2:29:86:f6:a2:a9:36:61:69:b4:61:e9:b3: fd:68:a2:d7:a6:bf:a6:34:8e:1b:fb:14:cc:17:5f:89:d4:c6: bb:23:9c:85:95:86:ae:c7:49:d9:8d:b3:1c:b2:b2:5e:88:1a: 43:48:02:26:12:67:21:52:1c:08:79:74:b0:d9:0d:6a:da:8a: 48:e7:02:b2:7c:0e:7a:3f:da:27:2b:f3:36:8e:5c:8f:d5:1b: 35:ce:04:88:b5:4d:c7:85:95:d8:bc:cf:2d:31:f2:1a:57:ed: 05:bc:72:3e:b3:e5:a5:05:b6:01:0e:3a:b4:bc:12:e6:1c:03: 01:17:77:51:23:c9:da:48:3d:e7:b7:31:45:c4:f3:4b:64:3d: ae:00:c7:c3:7b:05:12:2f:5b:c6:66:28:cf:f3:a5:c3:a3:ce: ed:a5:0a:c1:0e:00:71:54:5f:7a:9a:41:ef:41:5b:2f:80:d7: 3d:18:43:96:0a:d4:47:53:aa:b6:98:91:48:3d:cd:99:8d:a3: 12:15:46:42:c7:07:8b:d7:0c:8d:85:36:ad:eb:77:b0:46:e8: 76:41:ff:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKENCOURGRDcyQThERjUwRTA2NTAwNDM3ODA2QjZBMjAx OEVDQ0JERkQwHhcNMjUwODIyMTkxNjMxWhcNMjUwODI5MTkxNjMxWjAYMRYwFAYD VQQDEw02OGE4YzIwZi02ODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VRfupDoTmsfKG9a+cDMjIgw7WEuRU8s76H2+hodyZZ25hwbBcf7SuxGKML+ Ts1BwXdW0gHrdE0rJHgEeFAMMGfnawoRCqiFf6B46bCr0rH0NhJ+rsLLRcYpcJS0 MDl59zvfOse2fIYCrkaTy6CDaizu9/N1gtvzg2rZK0wbDUEB+sY5CJ7Ke7tx4zoT Zpp1RWsefRhDPNFPfEAwcFmLdv0TQVxWSGSKfKYek3kah4aWR8XKGkLTP/z1oox5 MLhM/70j7qZO6AzyGWrBerWWI3LKThzcoxF+l7Icpk0bZ4QAjmxrrmekqTjfCyq0 DHbeKqyjxxwMvkWBEsdmdMN6pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOBupBA cOPyoQasajG6PL9/rlwlMB8GA1UdIwQYMBaAFMud/XKo31DgZQBDeAa2ogGOzL39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVPQmxBRU40QnJhaUFZN012 ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MzljcWpmVU9CbEFFTjRCcmFpQVk3TXZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVP QmxBRU40QnJhaUFZN012ZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1Xbpc0/DWDEVR7uXVkvGrO+PphmukmLmKFuECKC8TCAu+4D9TEBwa ycIphvaiqTZhabRh6bP9aKLXpr+mNI4b+xTMF1+J1Ma7I5yFlYaux0nZjbMcsrJe iBpDSAImEmchUhwIeXSw2Q1q2opI5wKyfA56P9onK/M2jlyP1Rs1zgSItU3HhZXY vM8tMfIaV+0FvHI+s+WlBbYBDjq0vBLmHAMBF3dRI8naSD3ntzFFxPNLZD2uAMfD ewUSL1vGZijP86XDo87tpQrBDgBxVF96mkHvQVsvgNc9GEOWCtRHU6q2mJFIPc2Z jaMSFUZCxweL1wyNhTat63ewRuh2Qf/S -----END CERTIFICATE-----Generated at Sun Aug 24 00:19:18 2025 by rpki-client