$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json) Hash identifier: aHInHBvuCPUPWFCPkhcKO9mahSrdi157nJM6Tz3BrZQ= Subject key identifier: FF:6D:84:2E:99:05:B7:19:A1:60:EB:FB:FE:DA:D4:B6:EC:DC:4B:CF Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft Manifest number: 0189 Signing time: Sat 23 Aug 2025 04:01:26 +0000 Manifest this update: Sat 23 Aug 2025 04:01:25 +0000 Manifest next update: Sat 30 Aug 2025 04:01:25 +0000 Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: f68sw+TuRJVXkTASJYdK9Av0Mgeq+4+ox2YDF0yCaC0=) 2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: 0UB6vf7tsJ4/eqdU0xPwdgNnTiXM+SW0/ez8sQsDOEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Validity Not Before: Aug 23 04:01:25 2025 GMT Not After : Aug 30 04:01:25 2025 GMT Subject: CN=68a93d16-4874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:61:35:a6:f4:62:e7:70:eb:4e:d7:ef:dd: b6:d8:97:8f:92:68:93:18:e9:45:ce:5d:b8:f3:22: e3:9c:30:c7:be:0d:9b:76:b6:d2:dd:95:74:e3:49: 03:ae:b2:a5:51:14:4e:c4:fa:f1:57:63:c4:9e:c6: f0:71:4b:27:d2:ec:c1:a8:fd:88:8b:db:20:64:57: 0e:4a:be:1a:7a:b5:58:90:7e:37:2a:59:b3:6e:d1: 6c:7c:06:f5:99:d6:91:ad:54:9c:07:99:bf:81:23: d3:d0:65:9d:9d:3d:28:9e:28:b4:41:44:3b:d7:d2: bf:d4:99:98:c0:a2:d5:a6:6f:b2:17:b8:f4:cd:d9: 6b:4a:40:7c:d3:32:aa:71:00:5c:09:48:61:04:80: ba:8f:2e:30:37:71:8e:28:3d:0a:7c:79:c1:d2:cd: bf:bd:ca:f3:d5:e6:ae:b6:54:5e:50:27:f5:f9:c6: fa:1d:d6:15:c8:f3:74:db:ca:10:14:4b:75:0f:31: 5d:82:b2:e4:89:c5:7f:d4:5c:81:54:3f:73:c3:0a: 48:07:1a:06:0d:b6:7a:bc:30:1e:c1:25:46:c4:11: e1:f6:b9:f8:a8:5d:39:14:9c:c4:04:91:5a:c5:b5: 85:cd:6a:31:c9:83:f6:92:d2:1c:8a:2d:b8:15:82: c0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6D:84:2E:99:05:B7:19:A1:60:EB:FB:FE:DA:D4:B6:EC:DC:4B:CF X509v3 Authority Key Identifier: keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:17:b7:12:85:fc:d1:61:09:ef:ed:02:30:7b:a3:4b:87:0c: db:2f:16:29:78:7d:d1:ac:c7:fb:9e:1c:44:28:bf:17:f8:2a: bf:9f:2c:83:7a:50:4a:00:d1:4e:83:8e:f9:ec:eb:82:70:a5: 6e:dd:e5:a3:d4:94:ab:d3:64:95:fa:8c:69:47:aa:a5:18:12: 53:f8:14:2b:65:a4:02:7c:5d:db:3e:69:a7:a4:cf:4a:3b:2a: 06:ff:94:21:cf:73:82:2c:d8:34:a5:df:de:89:5a:26:b4:ef: 71:14:4c:45:f7:d3:f5:72:1b:28:76:ed:08:c5:c3:2b:76:8e: 0b:9f:ce:66:b8:3f:c1:6f:29:f7:c9:81:f2:ce:55:20:77:9d: 92:0f:db:53:7d:25:e0:ab:9b:1e:0e:7f:90:e7:57:81:81:43: c6:0b:d5:4c:00:e3:1d:bb:92:0c:66:da:82:91:b1:d1:db:c8: 2c:d8:60:0b:f9:44:01:52:44:3f:20:db:63:35:55:99:68:6e: 13:1d:5e:6f:dd:06:3a:71:ac:4b:72:3f:55:0f:37:c8:76:6d: a2:20:40:ac:40:be:1c:4f:f2:bc:a3:5d:fa:fc:2c:c4:f6:39: 88:84:bc:bb:33:72:40:0b:fa:4f:fd:a4:db:c1:ab:de:19:35: f1:9e:db:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2 RDY3NzU4MDkwHhcNMjUwODIzMDQwMTI1WhcNMjUwODMwMDQwMTI1WjAYMRYwFAYD VQQDEw02OGE5M2QxNi00ODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwVhNab0Yudw607X79222JePkmiTGOlFzl248yLjnDDHvg2bdrbS3ZV040kD rrKlURROxPrxV2PEnsbwcUsn0uzBqP2Ii9sgZFcOSr4aerVYkH43KlmzbtFsfAb1 mdaRrVScB5m/gSPT0GWdnT0onii0QUQ719K/1JmYwKLVpm+yF7j0zdlrSkB80zKq cQBcCUhhBIC6jy4wN3GOKD0KfHnB0s2/vcrz1eautlReUCf1+cb6HdYVyPN028oQ FEt1DzFdgrLkicV/1FyBVD9zwwpIBxoGDbZ6vDAewSVGxBHh9rn4qF05FJzEBJFa xbWFzWoxyYP2ktIcii24FYLAfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9thC6Z BbcZoWDr+/7a1Lbs3EvPMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZX Nk9zVS1WUHExanR0WjNXQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeF7cShfzRYQnv7QIwe6NLhwzbLxYpeH3RrMf7nhxEKL8X+Cq/nyyD elBKANFOg4757OuCcKVu3eWj1JSr02SV+oxpR6qlGBJT+BQrZaQCfF3bPmmnpM9K OyoG/5Qhz3OCLNg0pd/eiVomtO9xFExF99P1chsodu0IxcMrdo4Ln85muD/Bbyn3 yYHyzlUgd52SD9tTfSXgq5seDn+Q51eBgUPGC9VMAOMdu5IMZtqCkbHR28gs2GAL +UQBUkQ/INtjNVWZaG4THV5v3QY6caxLcj9VDzfIdm2iIECsQL4cT/K8o136/CzE 9jmIhLy7M3JAC/pP/aTbwaveGTXxnts/ -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:32 2025 by rpki-client