$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: QIo9skgxZfOkpLDVYIk/gOe6c6AzYCQtHeqNkJj6c9I= Subject key identifier: A7:19:EA:34:8C:3E:95:F3:5D:EC:CD:10:9D:17:02:2D:55:A5:68:7A Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: EB Signing time: Sat 23 Aug 2025 05:32:38 +0000 Manifest this update: Sat 23 Aug 2025 05:32:38 +0000 Manifest next update: Sat 30 Aug 2025 05:32:37 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: Sf6kyDaLehguZfJ5aX6yCiOIwSVDQnjBC9piaZsju4Q=) 2: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: bUpgZDyaaNx2o4Iq2csQK5MMpOoGsf0d7wS0X/AlYLQ=) 3: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: iGJZ5nKtqdpr8XQ5xRp8ABn+d8XHdqoNNsqJjwgQg3Y=) 4: 680D797023E611EF8165F17BC4F9AE02.roa (hash: oa8frv8vlg1vBn275l50HRx0PnZyi1FiU/lJjWPqNdo=) 5: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: sopaYIQ7VXvlTBIzsDAOnSetWGJ3UTk1u9wD33/qnLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Aug 23 05:32:38 2025 GMT Not After : Aug 30 05:32:37 2025 GMT Subject: CN=68a95276-055f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:01:48:a3:31:79:eb:a5:40:a5:74:2e:d8:bf: 22:01:5b:7a:4c:8f:17:6e:1a:23:1f:9d:d5:ed:bf: e6:14:dc:38:e0:61:7b:6d:ef:d7:45:4e:0c:b0:ac: 0b:a6:95:bf:0a:18:62:57:ee:9b:83:b7:78:e3:ff: c7:40:d3:25:79:de:ca:2b:59:3b:84:93:29:db:39: 6e:4b:85:4f:22:e8:df:6c:7b:26:44:d4:a3:c6:1d: 23:4f:25:11:97:28:ec:e2:47:7c:04:fb:2b:69:68: 45:d9:b2:fe:16:e0:b6:68:52:c6:e7:78:43:e5:d9: a5:bd:d1:3a:de:4a:7e:8e:af:ac:91:86:63:1d:c6: cf:79:09:74:4d:c6:f5:5d:05:88:e2:a7:ec:14:18: 00:90:43:22:1c:b9:d4:6f:51:1b:74:42:22:6c:c3: c9:fb:f7:b9:96:97:6c:e7:32:aa:ca:54:89:0a:cc: 20:4a:98:14:5f:84:3d:13:71:d9:63:55:c2:29:92: 63:91:a1:b5:00:be:b7:7a:46:2a:c1:03:d8:d0:c8: 5a:f5:3a:1f:c6:67:30:e8:f2:61:fe:a8:5d:0b:61: 7d:fd:b8:25:78:89:5a:e0:bc:65:20:39:34:9f:5b: 48:eb:60:96:6f:0c:25:97:97:0d:36:f3:f3:61:e9: 98:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:19:EA:34:8C:3E:95:F3:5D:EC:CD:10:9D:17:02:2D:55:A5:68:7A X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d2:2a:17:8d:f2:dd:99:19:94:ee:91:7f:20:65:f8:3a:f1: 89:7d:de:d5:21:f1:1a:2d:88:89:a6:98:2a:73:df:b2:9f:73: 73:53:3d:1f:f3:d7:9c:79:ad:b8:55:2d:f3:7b:c2:46:37:8f: 02:2f:87:af:c1:ba:24:ef:30:99:1e:f1:cb:91:d0:82:60:b4: 11:40:15:54:da:3f:a8:02:61:89:75:cc:8d:a8:24:83:14:1c: e1:6f:a4:82:98:9a:01:53:1c:19:79:73:1a:1c:be:38:3d:58: bd:fd:3b:b5:13:37:5d:a6:0b:78:f1:a6:47:0d:b6:da:f4:58: 06:ff:8f:95:e5:7d:06:62:42:4a:2d:e0:07:a2:d4:6d:d8:da: ee:c3:24:6f:d6:29:ab:7f:98:fa:04:09:be:e6:06:e3:6e:b1: 00:04:3c:ec:7c:88:08:f5:d7:8f:a3:76:0f:07:67:2a:24:78: 44:47:b6:51:8a:a0:0c:d5:c9:b8:22:f4:d4:2b:59:2d:1f:6e: 2a:83:81:b5:dd:b2:82:4d:9a:9b:09:5a:5f:97:67:41:b1:ae: 1b:52:13:44:f3:50:17:78:ea:9e:aa:11:dc:8e:ff:47:65:e2: a4:38:26:5d:d5:cd:dd:59:1b:97:8f:8f:9c:2a:23:ab:3c:3d: 4c:28:d6:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2 NTQ0MDY3NzMwHhcNMjUwODIzMDUzMjM4WhcNMjUwODMwMDUzMjM3WjAYMRYwFAYD VQQDEw02OGE5NTI3Ni0wNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gFIozF566VApXQu2L8iAVt6TI8XbhojH53V7b/mFNw44GF7be/XRU4MsKwL ppW/ChhiV+6bg7d44//HQNMled7KK1k7hJMp2zluS4VPIujfbHsmRNSjxh0jTyUR lyjs4kd8BPsraWhF2bL+FuC2aFLG53hD5dmlvdE63kp+jq+skYZjHcbPeQl0Tcb1 XQWI4qfsFBgAkEMiHLnUb1EbdEIibMPJ+/e5lpds5zKqylSJCswgSpgUX4Q9E3HZ Y1XCKZJjkaG1AL63ekYqwQPY0Mha9Tofxmcw6PJh/qhdC2F9/bgleIla4LxlIDk0 n1tI62CWbwwll5cNNvPzYemY6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcZ6jSM PpXzXezNEJ0XAi1VpWh6MB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0 dEVZeEFOc3VsYkJsUkFaM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn0ioXjfLdmRmU7pF/IGX4OvGJfd7VIfEaLYiJppgqc9+yn3NzUz0f 89ecea24VS3ze8JGN48CL4evwbok7zCZHvHLkdCCYLQRQBVU2j+oAmGJdcyNqCSD FBzhb6SCmJoBUxwZeXMaHL44PVi9/Tu1Ezddpgt48aZHDbba9FgG/4+V5X0GYkJK LeAHotRt2NruwyRv1imrf5j6BAm+5gbjbrEABDzsfIgI9dePo3YPB2cqJHhER7ZR iqAM1cm4IvTUK1ktH24qg4G13bKCTZqbCVpfl2dBsa4bUhNE81AXeOqeqhHcjv9H ZeKkOCZd1c3dWRuXj4+cKiOrPD1MKNbz -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:12 2025 by rpki-client