$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft File: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft (raw, json) Hash identifier: kx0+vtZBV+3LmHFDX5oKijWKnIegQw+7QGYiOKlFvbc= Subject key identifier: CA:7B:63:51:1A:48:75:9D:20:31:94:64:C7:BC:E4:E7:1C:C2:54:E5 Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Certificate serial: 0C74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft Manifest number: 0C6D Signing time: Fri 22 Aug 2025 18:30:17 +0000 Manifest this update: Fri 22 Aug 2025 18:30:17 +0000 Manifest next update: Fri 29 Aug 2025 18:30:17 +0000 Files and hashes: 1: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl (hash: ySFVjp1+QCEy75uvf7qiwP+XFMjp4w3hRBdn8SVTDbM=) 2: A2A3D38A05CE11EA80526530C4F9AE02.roa (hash: f31uXjqb4DNcM+Zpb2Aaj4CME0IwegAYYNe/FOHZjWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Validity Not Before: Aug 22 18:30:17 2025 GMT Not After : Aug 29 18:30:17 2025 GMT Subject: CN=68a8b739-a835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:11:dd:64:25:79:e0:91:8b:fb:38:69:50: e2:b4:72:01:14:51:77:ac:8d:0f:ee:38:fd:e4:61: f3:83:39:de:a6:28:dd:0c:65:5c:8d:75:f8:bb:2b: 4d:be:24:eb:74:99:ee:8d:07:6e:d6:f5:d4:b2:66: 51:c0:6f:64:97:7b:68:b6:4f:6b:74:ce:f1:a1:80: 3c:c2:50:75:5c:c6:6f:39:d4:d9:88:d4:58:f7:b8: 10:6f:2b:36:28:bc:bd:df:ee:dd:07:83:1a:c2:e1: a7:44:42:5c:9d:20:eb:20:21:5f:e2:f5:63:b2:1f: fc:88:a1:96:02:93:e9:4a:0a:f9:a1:13:f0:67:54: 39:50:6d:7f:f5:6e:bc:08:fb:0c:59:a4:4e:83:16: f4:2b:34:67:83:3d:db:ca:98:d0:7f:48:93:c6:94: e2:54:9b:c9:1c:40:e2:73:82:73:ed:04:cc:3b:2c: 1e:54:c7:be:a7:e1:e5:0f:dc:c1:33:36:fc:9f:c6: bd:2b:d8:40:a2:99:58:72:76:8d:35:e0:bf:be:12: b7:5e:75:73:e9:3e:3d:60:71:ae:b3:ef:2c:e4:9d: 35:ae:e2:1c:5d:e0:07:ce:30:18:f9:02:1a:1e:a0: a6:64:ad:f9:d9:3f:87:23:8c:d4:6b:11:4d:d6:24: 53:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7B:63:51:1A:48:75:9D:20:31:94:64:C7:BC:E4:E7:1C:C2:54:E5 X509v3 Authority Key Identifier: keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:bf:e9:3f:c9:48:15:52:2b:98:f2:ce:5f:f9:b5:a2:81:4c: 1b:5d:aa:10:9d:bc:81:ae:d0:a2:09:f0:8f:34:4d:69:e8:dc: dc:ad:78:31:55:d5:0d:07:cb:f1:ca:5a:82:03:7e:0a:66:51: 5b:89:d0:eb:2b:f1:e5:43:f8:1b:9a:1a:07:f2:d6:39:5c:c2: f1:38:2a:9a:07:97:93:0d:cb:68:71:6c:52:b5:92:93:e9:93: 18:8c:3e:8c:0c:be:63:4d:c1:ff:0f:ad:93:69:e0:40:70:60: dd:ee:b0:06:61:2b:4d:fc:93:e7:95:87:56:b2:84:cc:a1:b6: 78:9b:39:fc:04:43:af:f4:74:ff:3e:a8:fa:6c:38:b2:68:db: a0:5e:2a:87:3c:75:04:70:4e:05:6e:6f:c5:9c:83:ca:a2:d3: ed:12:c1:e4:63:f6:c3:41:dd:4f:9b:c4:01:30:ae:a5:a7:d5: 33:2e:22:f3:11:d7:e4:5c:16:d8:53:19:b2:04:57:16:78:fa: 5a:17:f4:7e:33:23:28:db:e8:0a:19:3e:21:47:ad:04:1a:38: 7e:d9:5f:e2:30:36:7e:07:01:6d:d1:c1:b8:12:59:7a:ef:dd: be:09:19:90:e2:98:74:db:4a:65:ab:42:ba:be:49:57:65:fd: 0b:5a:75:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEwNjQxMTAvBgNVBAUTKEZEODI3QzAyNkIzOTY3RTJBMTQwRDREMjMxNEUyQjBF OUMwNDc0MzAwHhcNMjUwODIyMTgzMDE3WhcNMjUwODI5MTgzMDE3WjAYMRYwFAYD VQQDEw02OGE4YjczOS1hODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnoR3WQleeCRi/s4aVDitHIBFFF3rI0P7jj95GHzgznepijdDGVcjXX4uytN viTrdJnujQdu1vXUsmZRwG9kl3totk9rdM7xoYA8wlB1XMZvOdTZiNRY97gQbys2 KLy93+7dB4MawuGnREJcnSDrICFf4vVjsh/8iKGWApPpSgr5oRPwZ1Q5UG1/9W68 CPsMWaROgxb0KzRngz3bypjQf0iTxpTiVJvJHEDic4Jz7QTMOyweVMe+p+HlD9zB Mzb8n8a9K9hAoplYcnaNNeC/vhK3XnVz6T49YHGus+8s5J01ruIcXeAHzjAY+QIa HqCmZK352T+HI4zUaxFN1iRTWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMp7Y1Ea SHWdIDGUZMe85OccwlTlMB8GA1UdIwQYMBaAFP2CfAJrOWfioUDU0jFOKw6cBHQw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTA2NC8wNzYzOTYyMDA1 MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVotS2hRTlRTTVU0ckRwd0Vk REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZSjhBbXM1Wi1LaFFOVFNNVTRyRHB3RWREQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTA2NC8wNzYzOTYyMDA1MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVot S2hRTlRTTVU0ckRwd0VkREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2v+k/yUgVUiuY8s5f+bWigUwbXaoQnbyBrtCiCfCPNE1p6NzcrXgx VdUNB8vxylqCA34KZlFbidDrK/HlQ/gbmhoH8tY5XMLxOCqaB5eTDctocWxStZKT 6ZMYjD6MDL5jTcH/D62TaeBAcGDd7rAGYStN/JPnlYdWsoTMobZ4mzn8BEOv9HT/ Pqj6bDiyaNugXiqHPHUEcE4Fbm/FnIPKotPtEsHkY/bDQd1Pm8QBMK6lp9UzLiLz EdfkXBbYUxmyBFcWePpaF/R+MyMo2+gKGT4hR60EGjh+2V/iMDZ+BwFt0cG4Ell6 792+CRmQ4ph020plq0K6vklXZf0LWnXb -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:30 2025 by rpki-client