$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: 00iYFWxKj40NdDgHXU7TU8uX+llsIRYtnNyHzipLm8s= Subject key identifier: 47:E2:24:DF:BE:FD:27:19:37:A3:F0:61:75:04:F6:45:DF:61:1B:6E Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 015B Signing time: Sat 23 Aug 2025 04:12:48 +0000 Manifest this update: Sat 23 Aug 2025 04:12:47 +0000 Manifest next update: Sat 30 Aug 2025 04:12:47 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: QWw+2Q7rjCUF49HS9CnrRUMyWWmGBw4tA8FwNS2sJlY=) 2: 045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa (hash: FlD/q0JbSZGoP+GmyJYdclxWBTvflYZJ2XaDZhQ/500=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Aug 23 04:12:47 2025 GMT Not After : Aug 30 04:12:47 2025 GMT Subject: CN=68a93fbf-691e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:86:dd:72:e6:65:61:50:eb:a0:0a:21:01: 01:61:10:7d:7b:95:f3:16:fb:c4:f4:99:5e:e0:1c: 46:a7:e9:6c:00:62:6e:fd:86:4d:31:06:4b:16:c5: ea:92:98:1e:2c:90:6c:b7:cd:d6:de:a0:e7:7a:7c: 02:0a:b4:da:fc:8f:b2:6f:ab:28:4e:91:54:bc:cd: a5:28:de:9d:c7:61:84:dc:fe:e5:4b:7a:45:b7:06: 61:bf:ac:17:4f:7e:66:74:76:d2:ee:7f:ba:a1:47: 72:6d:03:ea:bc:f5:aa:03:64:ed:ec:92:35:e1:2b: b2:ad:f0:9c:4d:9a:d5:50:76:a9:76:23:00:93:6c: c0:f3:6b:9b:16:13:ae:26:88:52:bd:8f:e0:5e:d9: c5:7a:8e:9a:0d:4f:69:0c:28:22:de:f0:4e:f6:99: 1d:ab:ba:7a:70:0c:57:c2:e6:ad:43:46:f6:df:fb: da:37:62:14:67:fd:0c:3d:5a:0c:0c:9f:85:21:80: e0:f9:4a:e9:98:fb:e0:62:71:6d:d4:d9:c6:62:f1: 05:ad:42:a7:91:2c:80:3b:79:f7:7b:5f:e9:cd:d4: d2:a0:1d:c2:fc:f1:29:eb:14:89:79:c4:01:2c:61: bc:50:74:b9:aa:54:6c:35:0c:fa:9f:43:6f:69:e7: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E2:24:DF:BE:FD:27:19:37:A3:F0:61:75:04:F6:45:DF:61:1B:6E X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:74:99:f0:71:83:5c:51:1c:7a:40:a5:86:85:4e:e6:94:02: 38:06:c8:6a:b9:61:c8:fc:af:b9:4f:a3:b1:0f:fa:31:c6:a1: b3:fb:b4:fa:a5:a4:7d:c8:96:af:68:d2:50:5e:eb:b2:1d:71: 35:d1:78:dc:ec:73:00:44:2e:c2:f2:63:08:34:91:ba:cc:c6: 46:d3:c7:29:db:84:bf:be:e4:16:97:c4:7d:5f:d1:21:f9:15: fd:1a:b1:21:ea:70:80:84:5a:95:cf:88:8d:7f:2b:2e:54:95: 2b:e4:6c:35:11:8b:e0:55:75:04:d8:0c:0b:9d:74:af:3c:47: af:64:31:03:df:16:8a:98:07:86:ba:98:49:41:b2:d6:3c:73: 33:3a:de:1c:ec:1b:37:08:13:e0:83:74:c2:7c:1f:d9:af:88: f0:f1:13:82:f9:a4:b4:98:d7:0b:af:22:31:c4:f5:4b:2e:1c: 61:2c:47:69:bc:38:ff:c8:52:34:bc:bd:68:c5:2d:29:4b:2a: d2:da:7f:15:d6:57:a0:3f:b9:49:d2:40:2c:d1:fb:a4:8a:c9: 4f:cb:f3:87:0c:31:0d:78:88:d7:c8:cc:3c:c6:ba:6e:90:8d: 60:23:a6:a2:29:18:3a:60:4a:d5:1b:80:a0:ba:8d:dd:c4:87: a4:a8:01:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjUwODIzMDQxMjQ3WhcNMjUwODMwMDQxMjQ3WjAYMRYwFAYD VQQDEw02OGE5M2ZiZi02OTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0uG3XLmZWFQ66AKIQEBYRB9e5XzFvvE9Jle4BxGp+lsAGJu/YZNMQZLFsXq kpgeLJBst83W3qDnenwCCrTa/I+yb6soTpFUvM2lKN6dx2GE3P7lS3pFtwZhv6wX T35mdHbS7n+6oUdybQPqvPWqA2Tt7JI14SuyrfCcTZrVUHapdiMAk2zA82ubFhOu JohSvY/gXtnFeo6aDU9pDCgi3vBO9pkdq7p6cAxXwuatQ0b23/vaN2IUZ/0MPVoM DJ+FIYDg+UrpmPvgYnFt1NnGYvEFrUKnkSyAO3n3e1/pzdTSoB3C/PEp6xSJecQB LGG8UHS5qlRsNQz6n0NvaeeQowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfiJN++ /ScZN6PwYXUE9kXfYRtuMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJdJnwcYNcURx6QKWGhU7mlAI4BshquWHI/K+5T6OxD/oxxqGz+7T6 paR9yJavaNJQXuuyHXE10Xjc7HMARC7C8mMINJG6zMZG08cp24S/vuQWl8R9X9Eh +RX9GrEh6nCAhFqVz4iNfysuVJUr5Gw1EYvgVXUE2AwLnXSvPEevZDED3xaKmAeG uphJQbLWPHMzOt4c7Bs3CBPgg3TCfB/Zr4jw8ROC+aS0mNcLryIxxPVLLhxhLEdp vDj/yFI0vL1oxS0pSyrS2n8V1legP7lJ0kAs0fukislPy/OHDDENeIjXyMw8xrpu kI1gI6aiKRg6YErVG4Cguo3dxIekqAH3 -----END CERTIFICATE-----Generated at Sat Aug 23 18:57:06 2025 by rpki-client