$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft File: yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json) Hash identifier: z58C4b046QAG4tOG7qHEIkUNZhC3WtVOpI0JNsVdfPw= Subject key identifier: B8:FF:CC:93:98:9E:82:42:51:A5:4A:D0:C6:FA:49:A1:B9:A2:38:E9 Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 Certificate issuer: /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft Manifest number: 018E Signing time: Sat 23 Aug 2025 03:39:13 +0000 Manifest this update: Sat 23 Aug 2025 03:39:12 +0000 Manifest next update: Sat 30 Aug 2025 03:39:12 +0000 Files and hashes: 1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: di7mPpAyQey+eb90e+O4aicufwuYWdqNo38hWCwPhM8=) 2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: WDQMfZuZicx7LXWpfOFLeZ3xfavkxYpJ8JsSlFG8PpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Validity Not Before: Aug 23 03:39:12 2025 GMT Not After : Aug 30 03:39:12 2025 GMT Subject: CN=68a937e0-b5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:49:3c:f0:81:f6:ad:7b:20:b3:23:73:04: 45:ac:a5:ed:39:56:f0:9f:b0:91:b1:cd:1b:54:85: 99:f8:6a:c0:08:6c:0d:55:cc:c6:ad:db:b4:e4:db: 34:86:00:8c:69:63:94:71:67:86:bd:1d:8d:6b:63: 07:5b:7f:c2:16:a9:2c:32:e2:bc:2c:85:b1:46:b9: dd:91:55:30:84:58:db:3d:ab:cf:27:a0:f5:12:3f: 44:53:69:66:4b:4a:a1:30:16:99:d1:b2:95:05:cc: 7c:13:da:55:7c:80:c5:0d:4a:4d:74:66:d1:ab:bd: d5:e3:a8:59:2e:b7:2a:f8:e5:b9:d8:c7:e1:51:0a: b3:fe:fb:b5:5e:30:d0:a3:ac:67:a5:e4:1c:0f:33: 79:08:75:70:15:38:69:1d:0c:cb:1a:da:67:91:a8: b7:0e:1f:8c:ad:b2:05:48:6b:b8:44:13:2a:ae:36: a4:01:58:bb:67:7a:42:67:4e:a2:2e:fb:2e:25:ce: 6c:77:ad:31:ac:07:fc:a8:8a:bd:6f:42:69:6e:16: 1e:5b:d8:46:69:6d:fd:4a:5d:ed:fb:98:de:74:01: f7:b7:fe:14:3e:53:97:51:d6:83:55:fb:e5:76:96: 91:2e:6c:28:5f:8b:5c:da:83:1e:0f:9a:40:1d:d9: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FF:CC:93:98:9E:82:42:51:A5:4A:D0:C6:FA:49:A1:B9:A2:38:E9 X509v3 Authority Key Identifier: keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:b5:5d:e6:69:3c:c8:3b:e4:66:95:58:64:eb:02:c1:f3:6a: 14:7d:17:8c:12:2a:b7:4f:e8:be:1b:96:fa:54:4c:62:ca:eb: bc:d6:99:97:79:37:a5:c8:05:89:9b:3f:68:7f:ee:05:33:b3: e7:99:98:e0:f2:46:56:d4:ad:4e:ef:62:49:02:1b:9b:e6:32: 74:93:80:ad:b4:0a:ce:8d:84:35:11:cd:d3:1a:ce:73:74:49: e1:62:e5:73:33:08:9e:9a:51:66:e9:e0:85:6d:2d:4e:ab:ff: c2:a7:c1:f9:2e:79:e3:ba:79:33:b3:11:0b:8d:e1:b3:2a:1b: fb:fc:03:8b:c0:40:2b:12:77:74:c7:d1:80:17:17:de:5b:0c: 73:c2:cc:51:ee:1c:d2:c9:e3:97:90:2c:1f:6a:cb:61:4c:d0: 26:b1:7c:9b:69:b2:79:42:63:a8:65:45:a7:a5:c2:47:8c:17: be:46:1a:7d:4f:e8:49:6f:a1:0a:5e:c0:0d:13:f3:90:d3:5c: fd:a0:bf:37:08:3d:99:a1:37:e4:da:89:27:8e:ea:35:b3:5e: f4:31:7d:0d:bd:63:dd:be:1b:1d:af:f2:e5:4b:73:d4:23:e5: 61:94:b0:79:30:77:7d:23:e1:ac:e5:53:05:fe:48:93:aa:2e: 3f:58:56:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw NkRGNDdFOTEwHhcNMjUwODIzMDMzOTEyWhcNMjUwODMwMDMzOTEyWjAYMRYwFAYD VQQDEw02OGE5MzdlMC1iNWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqr5JPPCB9q17ILMjcwRFrKXtOVbwn7CRsc0bVIWZ+GrACGwNVczGrdu05Ns0 hgCMaWOUcWeGvR2Na2MHW3/CFqksMuK8LIWxRrndkVUwhFjbPavPJ6D1Ej9EU2lm S0qhMBaZ0bKVBcx8E9pVfIDFDUpNdGbRq73V46hZLrcq+OW52MfhUQqz/vu1XjDQ o6xnpeQcDzN5CHVwFThpHQzLGtpnkai3Dh+MrbIFSGu4RBMqrjakAVi7Z3pCZ06i LvsuJc5sd60xrAf8qIq9b0JpbhYeW9hGaW39Sl3t+5jedAH3t/4UPlOXUdaDVfvl dpaRLmwoX4tc2oMeD5pAHdmGAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLj/zJOY noJCUaVK0Mb6SaG5ojjpMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2 MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU OVdtRFVfeUZzTWtHMzBmcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFtV3maTzIO+RmlVhk6wLB82oUfReMEiq3T+i+G5b6VExiyuu81pmX eTelyAWJmz9of+4FM7PnmZjg8kZW1K1O72JJAhub5jJ0k4CttArOjYQ1Ec3TGs5z dEnhYuVzMwiemlFm6eCFbS1Oq//Cp8H5LnnjunkzsxELjeGzKhv7/AOLwEArEnd0 x9GAFxfeWwxzwsxR7hzSyeOXkCwfasthTNAmsXybabJ5QmOoZUWnpcJHjBe+Rhp9 T+hJb6EKXsANE/OQ01z9oL83CD2ZoTfk2oknjuo1s170MX0NvWPdvhsdr/LlS3PU I+VhlLB5MHd9I+Gs5VMF/kiTqi4/WFZh -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:22 2025 by rpki-client