$ rpki-client -vvf rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft File: Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft (raw, json) Hash identifier: +EQdDiZ//8IBjIcNxuULD8WXQIE5FCtW7vwUGWcgEs4= Subject key identifier: AF:1B:19:32:D7:6A:7D:3F:9A:20:EC:8D:6F:01:42:59:6A:F9:0B:78 Authority key identifier: 63:6F:D1:40:D0:9E:CA:4D:18:EF:2C:B7:3A:ED:B1:24:79:FD:CC:99 Certificate issuer: /CN=A9188593/serialNumber=636FD140D09ECA4D18EF2CB73AEDB12479FDCC99 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft Manifest number: 58 Signing time: Sat 23 Aug 2025 07:25:06 +0000 Manifest this update: Sat 23 Aug 2025 07:25:05 +0000 Manifest next update: Sat 30 Aug 2025 07:25:05 +0000 Files and hashes: 1: Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl (hash: DGPLb/2X9nfG12cLCyZJgvu/CdiB58LolD5b+NnveDI=) 2: A60DE226FA6611EFA2492D77C4F9AE02.roa (hash: EaDsWh2ev+tCV5xfJvG7800tAekhxcSYZkZKsSGYDqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188593, serialNumber=636FD140D09ECA4D18EF2CB73AEDB12479FDCC99 Validity Not Before: Aug 23 07:25:05 2025 GMT Not After : Aug 30 07:25:05 2025 GMT Subject: CN=68a96cd2-7517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:ce:ae:8e:ad:1e:3e:e5:19:7c:ba:d8:cb: 14:2f:db:31:67:2b:cb:6c:c0:76:c5:c0:42:fa:c2: b4:17:f7:7c:42:eb:54:4c:90:9c:7b:1c:ae:55:2c: 3d:86:74:e6:28:75:01:d7:4a:51:2c:ed:78:c2:b2: 3a:54:4f:bc:9b:dd:f4:c5:b8:10:6d:07:6a:ba:1f: d9:32:01:19:5f:63:a0:c8:c1:dc:2d:5d:7a:49:08: 51:1a:fd:89:fc:21:8c:63:02:29:90:26:fc:d3:1d: 74:ec:01:f3:f2:13:ad:d6:d2:ca:17:87:aa:3d:26: 77:1c:a2:58:e8:85:7f:86:a4:72:21:3c:7e:a9:e7: ee:d1:cc:2e:d5:3f:17:f7:26:be:9c:8d:55:51:1f: ca:50:f2:9e:74:49:71:1b:90:94:0f:5e:23:de:bf: 38:31:d7:a3:d3:ee:05:77:59:b7:4d:0b:86:97:44: 9a:d2:87:a9:b3:cf:9e:56:49:8c:7e:13:86:9f:60: fe:15:2a:58:5a:06:0a:74:10:0b:6f:90:82:d5:42: 94:48:2b:ee:cd:58:2e:2c:e3:dc:2d:71:ba:b3:0a: 20:a1:df:69:22:b4:01:5c:d9:98:48:9c:ca:2d:11: 5f:3a:bf:77:7b:d5:55:37:de:62:9a:9d:a6:44:99: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1B:19:32:D7:6A:7D:3F:9A:20:EC:8D:6F:01:42:59:6A:F9:0B:78 X509v3 Authority Key Identifier: keyid:63:6F:D1:40:D0:9E:CA:4D:18:EF:2C:B7:3A:ED:B1:24:79:FD:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:dd:7a:71:24:e6:77:6a:49:02:d0:ce:80:fe:4c:f8:4f:d5: 8d:e0:fd:75:df:3b:cc:15:be:f9:69:31:c7:4d:a2:e9:2f:1a: 01:ba:36:e3:a5:e8:01:68:35:a5:e4:e9:e5:39:f1:87:09:32: 5c:e7:70:dd:2e:ad:c8:61:4f:2d:41:e9:b3:ed:0f:d3:ed:2a: c5:ff:d3:f3:bb:d8:f4:0b:41:b6:59:07:85:7f:db:be:14:1f: c0:27:91:9d:0d:00:07:7e:ca:de:82:d2:1f:6c:99:a3:57:ff: 6c:c0:87:c2:b4:a7:b6:02:c5:65:23:e0:61:fe:fd:4c:80:dc: 85:b1:7a:c4:db:94:8c:ad:d1:87:1e:47:f0:5c:d8:49:f1:0f: 0f:db:2a:5b:7e:18:b9:fc:a8:7b:10:8f:cc:93:3f:d5:dd:d2: a8:6c:a3:58:3f:a6:8a:c8:e3:e8:f5:e4:6b:cb:e7:5b:8c:3a: f0:a4:ac:d9:53:93:8f:6b:52:6b:a1:49:2f:10:2a:8b:d1:3d: 2f:bb:96:36:88:b4:50:c9:ed:74:4f:25:76:2f:81:de:5b:25: bb:24:07:5b:35:3c:b6:d5:d6:e3:e1:76:0d:e9:79:db:69:cf: 82:40:d7:2d:d7:da:05:51:ff:d1:49:94:45:90:6c:5b:fe:f7: 23:8b:77:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODU5MzExMC8GA1UEBRMoNjM2RkQxNDBEMDlFQ0E0RDE4RUYyQ0I3M0FFREIxMjQ3 OUZEQ0M5OTAeFw0yNTA4MjMwNzI1MDVaFw0yNTA4MzAwNzI1MDVaMBgxFjAUBgNV BAMTDTY4YTk2Y2QyLTc1MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsGc6ujq0ePuUZfLrYyxQv2zFnK8tswHbFwEL6wrQX93xC61RMkJx7HK5VLD2G dOYodQHXSlEs7XjCsjpUT7yb3fTFuBBtB2q6H9kyARlfY6DIwdwtXXpJCFEa/Yn8 IYxjAimQJvzTHXTsAfPyE63W0soXh6o9JnccoljohX+GpHIhPH6p5+7RzC7VPxf3 Jr6cjVVRH8pQ8p50SXEbkJQPXiPevzgx16PT7gV3WbdNC4aXRJrSh6mzz55WSYx+ E4afYP4VKlhaBgp0EAtvkILVQpRIK+7NWC4s49wtcbqzCiCh32kitAFc2ZhInMot EV86v3d71VU33mKanaZEmRWBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrxsZMtdq fT+aIOyNbwFCWWr5C3gwHwYDVR0jBBgwFoAUY2/RQNCeyk0Y7yy3Ou2xJHn9zJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NTkzLzFEMTU1OTg2RkE2 NjExRUZCQjJENEE3NkM0RjlBRTAyL1kyX1JRTkNleWswWTd5eTNPdTJ4SkhuOXpK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTJfUlFOQ2V5azBZN3l5M091MnhKSG45ekprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 NTkzLzFEMTU1OTg2RkE2NjExRUZCQjJENEE3NkM0RjlBRTAyL1kyX1JRTkNleWsw WTd5eTNPdTJ4SkhuOXpKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIPdenEk5ndqSQLQzoD+TPhP1Y3g/XXfO8wVvvlpMcdNoukvGgG6NuOl 6AFoNaXk6eU58YcJMlzncN0urchhTy1B6bPtD9PtKsX/0/O72PQLQbZZB4V/274U H8AnkZ0NAAd+yt6C0h9smaNX/2zAh8K0p7YCxWUj4GH+/UyA3IWxesTblIyt0Yce R/Bc2EnxDw/bKlt+GLn8qHsQj8yTP9Xd0qhso1g/porI4+j15GvL51uMOvCkrNlT k49rUmuhSS8QKovRPS+7ljaItFDJ7XRPJXYvgd5bJbskB1s1PLbV1uPhdg3pedtp z4JA1y3X2gVR/9FJlEWQbFv+9yOLd8E= -----END CERTIFICATE-----Generated at Sun Aug 24 01:03:27 2025 by rpki-client