$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json) Hash identifier: hgKhmT5HCMPB+zB+kPIWhyEsk24Jh6eNdTlHEoU/GPM= Subject key identifier: 52:53:3D:83:85:09:78:7F:44:D2:4C:2C:5D:28:5A:A5:97:49:E6:C9 Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft Manifest number: 066A Signing time: Fri 22 Aug 2025 23:55:48 +0000 Manifest this update: Fri 22 Aug 2025 23:55:47 +0000 Manifest next update: Fri 29 Aug 2025 23:55:47 +0000 Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: vmFXKUaWdfjy3yTtyJnXX/6EWMi/U7uM+c4St/86HQ4=) 2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: znV1YV1R4QHmzxUCIkShtYBgrQBJHV87NrUXdKtqEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Validity Not Before: Aug 22 23:55:47 2025 GMT Not After : Aug 29 23:55:47 2025 GMT Subject: CN=68a90383-97a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:e5:ea:66:37:3f:b8:49:f8:53:44:1b:b7: 87:86:48:c4:74:4a:29:38:0e:4c:af:d8:fa:20:c1: b0:0d:bc:12:0c:26:09:1a:3e:7a:93:54:71:35:b9: 16:c8:29:f4:f0:67:01:c2:3d:68:f6:a2:99:2f:02: 5f:ed:b7:cd:49:fa:73:4b:69:e6:88:a8:64:0a:14: e8:56:4e:5a:3f:b4:91:b0:24:b2:c9:54:2d:d4:85: 0d:91:76:bb:66:7d:99:40:d9:9a:4c:02:27:6f:4a: b8:6f:7c:62:2c:47:2f:6b:a9:95:11:0b:e5:c9:18: 7c:49:f6:d6:fb:e7:62:1d:96:80:23:91:72:90:9d: 65:02:48:26:5c:ce:a4:83:ef:88:f8:cd:22:65:b3: ec:d7:a4:07:38:b0:76:31:ce:cb:5f:fa:05:76:72: fa:bc:98:12:f1:1f:1c:bc:04:8d:2a:07:e1:ff:3c: 83:57:f6:88:03:9f:7c:b2:92:42:a8:cd:50:02:8c: 99:84:0e:50:e4:78:ef:d1:77:87:37:75:57:8e:e1: db:92:01:87:48:5d:b6:cf:8f:ed:d3:18:33:17:43: cb:1e:06:99:7b:bb:99:5d:01:99:fa:9a:35:13:ee: 4a:a6:10:e6:6e:1b:e7:bb:c9:56:fa:fe:b5:4f:c2: e1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:53:3D:83:85:09:78:7F:44:D2:4C:2C:5D:28:5A:A5:97:49:E6:C9 X509v3 Authority Key Identifier: keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4f:17:3d:81:c8:6a:b0:bc:c4:60:fb:be:c1:be:48:8c:6e: 71:b0:78:2f:7d:23:7a:fa:d9:c1:3c:a3:6d:ee:fd:05:0d:20: 27:02:16:25:7e:b5:12:90:b2:fe:c0:b6:87:d1:3e:b0:87:72: 20:c3:20:18:6e:5c:17:37:f2:59:d4:33:a2:c7:3e:d6:e9:42: 0f:fd:82:8b:af:66:2e:63:87:da:15:50:1c:61:d1:d2:49:3e: 32:3f:ce:c8:26:e3:a9:83:63:74:9f:11:44:79:4b:27:f9:6d: 4c:ac:91:49:f8:8d:99:da:2e:39:5e:49:91:4b:b1:0b:af:d4: e4:97:6a:5e:32:00:b0:96:ee:6d:b0:32:d9:7d:a3:e4:b6:bc: 6e:5f:65:62:71:66:c2:54:68:90:b8:f1:ae:5c:d1:27:7d:89: 60:ba:28:8d:39:0b:93:e0:18:7d:51:45:1f:a3:66:c9:d2:9f: b7:3d:bf:66:e5:70:15:7c:23:2d:13:0e:e7:79:93:e0:2a:21: fd:e3:bf:65:2c:09:3f:bd:a0:53:1a:e4:a0:57:0f:0c:ea:f0: 38:0f:ce:25:41:11:3b:47:ba:56:72:0a:c7:1b:a9:8f:09:04: 16:fd:93:01:cb:7c:67:74:b7:ea:f7:a8:94:c5:84:0b:29:05: 33:87:86:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz NTkwRkIyN0EwHhcNMjUwODIyMjM1NTQ3WhcNMjUwODI5MjM1NTQ3WjAYMRYwFAYD VQQDEw02OGE5MDM4My05N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhTl6mY3P7hJ+FNEG7eHhkjEdEopOA5Mr9j6IMGwDbwSDCYJGj56k1RxNbkW yCn08GcBwj1o9qKZLwJf7bfNSfpzS2nmiKhkChToVk5aP7SRsCSyyVQt1IUNkXa7 Zn2ZQNmaTAInb0q4b3xiLEcva6mVEQvlyRh8SfbW++diHZaAI5FykJ1lAkgmXM6k g++I+M0iZbPs16QHOLB2Mc7LX/oFdnL6vJgS8R8cvASNKgfh/zyDV/aIA598spJC qM1QAoyZhA5Q5Hjv0XeHN3VXjuHbkgGHSF22z4/t0xgzF0PLHgaZe7uZXQGZ+po1 E+5KphDmbhvnu8lW+v61T8LhgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJTPYOF CXh/RNJMLF0oWqWXSebJMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeTxc9gchqsLzEYPu+wb5IjG5xsHgvfSN6+tnBPKNt7v0FDSAnAhYl frUSkLL+wLaH0T6wh3IgwyAYblwXN/JZ1DOixz7W6UIP/YKLr2YuY4faFVAcYdHS ST4yP87IJuOpg2N0nxFEeUsn+W1MrJFJ+I2Z2i45XkmRS7ELr9Tkl2peMgCwlu5t sDLZfaPktrxuX2VicWbCVGiQuPGuXNEnfYlguiiNOQuT4Bh9UUUfo2bJ0p+3Pb9m 5XAVfCMtEw7neZPgKiH9479lLAk/vaBTGuSgVw8M6vA4D84lQRE7R7pWcgrHG6mP CQQW/ZMBy3xndLfq96iUxYQLKQUzh4ZL -----END CERTIFICATE-----Generated at Sat Aug 23 17:18:04 2025 by rpki-client