$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json) Hash identifier: FSdQJWUx4C1InsYPrhppPOF5iFvW/llLip20Pgbtst4= Subject key identifier: 46:A6:C1:AD:4C:DB:A6:DA:EC:4A:53:0F:AC:69:E4:EB:6D:37:AD:11 Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft Manifest number: 8B Signing time: Sat 23 Aug 2025 06:46:37 +0000 Manifest this update: Sat 23 Aug 2025 06:46:37 +0000 Manifest next update: Sat 30 Aug 2025 06:46:37 +0000 Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: C9rAIganYwsi1F3mQ6R6LzjFBhbMrfIs+LnU9CRCiGc=) 2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: Y+fJ5KK7IVdhYlyuLVkF2P1TQN/5/+n0ri0WCyCm2Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Validity Not Before: Aug 23 06:46:37 2025 GMT Not After : Aug 30 06:46:37 2025 GMT Subject: CN=68a963cd-caf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:06:47:37:96:5b:5f:a6:7b:8c:8d:85:9d: 1b:ab:52:f2:42:88:93:3e:cc:2d:29:a6:09:37:e0: a8:2e:7d:3a:8e:fe:84:de:f8:3c:c1:61:a6:03:40: 38:99:05:97:68:45:0d:fa:00:bd:ad:c4:5d:67:fe: 5e:cc:e2:78:c9:7a:d2:f5:9a:8e:21:96:4f:a5:02: 72:4d:00:f7:34:17:ce:95:67:4e:db:93:6f:1d:16: 74:20:36:e2:fa:5f:c7:8c:0e:88:c0:66:40:83:e5: 9a:c0:3a:c9:60:08:76:6b:d4:5b:77:ba:f4:5e:09: df:bd:71:cd:e5:4b:cd:d0:a8:f1:da:44:97:5b:5f: 67:fb:83:9e:77:8c:75:55:1c:7b:6d:2c:45:20:8a: ab:b7:fd:42:7e:3c:c7:3a:4e:84:10:59:e8:71:80: 5f:ec:e1:30:7d:da:b7:df:eb:92:fc:9e:0f:49:68: d6:61:47:f1:13:c4:e3:49:08:67:b2:48:9f:09:4e: e3:e2:e3:99:51:a7:b5:9c:52:fa:86:79:81:16:95: e2:ac:92:7d:22:b0:59:cd:d1:da:a4:52:97:b0:59: a8:db:90:27:a9:30:a3:5e:e9:72:e6:0a:ad:99:12: 28:e7:09:74:23:c3:a7:04:12:fd:e8:ca:c9:32:37: 34:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A6:C1:AD:4C:DB:A6:DA:EC:4A:53:0F:AC:69:E4:EB:6D:37:AD:11 X509v3 Authority Key Identifier: keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:2e:e6:b2:cd:d0:ca:3c:0c:e3:1b:16:0e:93:b3:d3:9c:19: 45:32:c7:cb:2e:9b:e5:e5:f9:7e:9c:4f:41:4a:dd:9b:bf:58: ac:bc:98:bf:9c:00:36:10:3f:61:ad:1d:69:72:71:d3:3d:0a: 37:86:3a:f1:f1:e2:67:d5:e4:e7:8e:db:5a:ab:9a:39:8e:47: 40:ff:fb:77:7f:7d:fc:06:d7:76:1b:b0:2f:f4:e2:85:61:85: 83:30:25:20:e1:e6:19:3f:a1:3e:5e:79:7d:cc:cd:c8:ac:33: 14:73:14:53:7d:4c:c8:85:fa:c2:0d:58:3c:3a:e3:c3:9a:08: 66:2e:f6:3a:79:b3:21:df:aa:4c:72:8c:d2:6f:83:90:9f:7c: c8:ed:0a:3a:61:c6:83:c1:eb:97:26:63:f7:e5:34:93:d0:43: a8:45:b7:aa:a7:29:c8:68:f3:a7:85:d6:88:48:6a:1a:4e:f2: b1:ad:f0:83:d2:2d:6d:21:5e:fa:3e:28:a8:d3:cf:86:b1:fa: 69:6b:75:f3:22:ee:03:ea:8f:e8:a2:c2:69:f7:f8:03:34:31: 94:31:5b:6f:74:f7:be:53:93:78:a8:e8:cb:75:35:4d:7e:e3: 4a:05:ae:b5:44:82:10:f0:73:aa:be:74:7e:16:ae:64:1b:42: ab:e1:ab:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJGQzUxMTAvBgNVBAUTKEZEODhERUY5QTZCRERCRUE1OTM4OUVEQzYxNzFBQURD QTEwNkI1MDkwHhcNMjUwODIzMDY0NjM3WhcNMjUwODMwMDY0NjM3WjAYMRYwFAYD VQQDEw02OGE5NjNjZC1jYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUkGRzeWW1+me4yNhZ0bq1LyQoiTPswtKaYJN+CoLn06jv6E3vg8wWGmA0A4 mQWXaEUN+gC9rcRdZ/5ezOJ4yXrS9ZqOIZZPpQJyTQD3NBfOlWdO25NvHRZ0IDbi +l/HjA6IwGZAg+WawDrJYAh2a9Rbd7r0XgnfvXHN5UvN0Kjx2kSXW19n+4Oed4x1 VRx7bSxFIIqrt/1CfjzHOk6EEFnocYBf7OEwfdq33+uS/J4PSWjWYUfxE8TjSQhn skifCU7j4uOZUae1nFL6hnmBFpXirJJ9IrBZzdHapFKXsFmo25AnqTCjXuly5gqt mRIo5wl0I8OnBBL96MrJMjc06QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEamwa1M 26ba7EpTD6xp5OttN60RMB8GA1UdIwQYMBaAFP2I3vmmvdvqWTie3GFxqtyhBrUJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkZDNS9FREFCRDIzMEFC M0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9fWWplLWFhOTItcFpPSjdjWVhHcTNLRUd0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZamUtYWE5Mi1wWk9KN2NZWEdxM0tFR3RRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkZDNS9FREFCRDIzMEFCM0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9fWWplLWFhOTIt cFpPSjdjWVhHcTNLRUd0UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgLuayzdDKPAzjGxYOk7PTnBlFMsfLLpvl5fl+nE9BSt2bv1isvJi/ nAA2ED9hrR1pcnHTPQo3hjrx8eJn1eTnjttaq5o5jkdA//t3f338Btd2G7Av9OKF YYWDMCUg4eYZP6E+Xnl9zM3IrDMUcxRTfUzIhfrCDVg8OuPDmghmLvY6ebMh36pM cozSb4OQn3zI7Qo6YcaDweuXJmP35TST0EOoRbeqpynIaPOnhdaISGoaTvKxrfCD 0i1tIV76Piio08+Gsfppa3XzIu4D6o/oosJp9/gDNDGUMVtvdPe+U5N4qOjLdTVN fuNKBa61RIIQ8HOqvnR+Fq5kG0Kr4auy -----END CERTIFICATE-----Generated at Sat Aug 23 23:58:19 2025 by rpki-client