$ rpki-client -vvf rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft File: ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft (raw, json) Hash identifier: RunnhS8mNTG85v39B8DSbOJND9pTbFREgOHfzcfSXAg= Subject key identifier: BD:41:3A:3B:9B:8D:60:6D:74:78:B5:60:C5:09:62:E7:57:B9:C6:02 Authority key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6 Certificate issuer: /CN=A9199656/serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft Manifest number: 3C Signing time: Sat 23 Aug 2025 07:44:38 +0000 Manifest this update: Sat 23 Aug 2025 07:44:37 +0000 Manifest next update: Sat 30 Aug 2025 07:44:37 +0000 Files and hashes: 1: ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl (hash: efTnm+yEQqjlUVFcUZwdDH+cPY5ivFCAKl1g39/tXlQ=) 2: 45D237A423E211F0A5DCED27C4F9AE02.roa (hash: 3wfdkAiEkFODU6B4YeHm0vdAyiuwr8rUvXL2nV5+auc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6 Validity Not Before: Aug 23 07:44:37 2025 GMT Not After : Aug 30 07:44:37 2025 GMT Subject: CN=68a97165-c6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9f:a7:e6:c3:0a:16:d9:ee:bc:b0:89:2b:e4: 0e:86:f0:ac:82:b4:48:61:1d:4e:b6:49:d6:6d:ef: 5f:96:96:fb:b4:d7:c6:fd:d1:ce:3a:3d:21:d4:c4: e0:c0:0e:53:1b:9c:18:d3:55:3e:b6:3a:cb:4f:f9: 29:60:7d:1f:a0:3c:44:d3:3f:89:8e:b8:2a:bd:c2: ce:c2:74:36:ca:aa:eb:ad:fb:ab:45:f1:32:a3:2e: 17:f3:d8:2c:b8:e6:5d:a7:06:6b:de:3d:2f:2e:68: 33:b8:79:06:9b:11:1c:b0:40:d3:3c:48:04:70:c7: b4:5a:ac:ed:67:c8:70:a6:47:db:a1:e6:55:1c:64: 1e:33:32:44:08:8e:65:f3:11:35:fc:2e:b6:15:ea: 1b:fd:47:4e:de:ce:60:18:ab:28:de:ba:37:1c:a1: 03:9e:4e:b9:0e:0b:17:d8:0d:9b:ed:1f:2f:1c:ad: 9c:91:dc:82:8f:5c:a9:b7:70:51:e0:3d:f4:63:af: 3e:33:26:e7:80:5b:9f:1b:53:ea:c2:7d:0c:80:3e: 66:ee:6a:6f:81:ce:b8:00:ee:2d:97:28:84:e5:19: 23:e0:c9:75:21:17:3b:31:c2:d4:c2:c1:09:e7:03: 88:65:bb:ce:19:b9:7c:f5:a1:a6:47:c4:67:9b:70: 1f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:41:3A:3B:9B:8D:60:6D:74:78:B5:60:C5:09:62:E7:57:B9:C6:02 X509v3 Authority Key Identifier: keyid:C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0a:94:35:8e:80:63:7f:c0:16:9c:a8:7f:cc:c2:9e:da:dc: e0:24:34:56:b9:a6:b1:78:e7:25:d8:f8:c2:63:8e:48:c8:f8: 5c:62:dd:0a:82:4e:e2:f3:ac:5a:ce:e8:54:34:86:3d:f7:d3: 0a:c5:e6:70:21:2b:a2:52:a6:ed:91:63:73:b2:a0:8d:a8:e8: 79:0e:a1:4a:35:69:f0:ea:cc:6d:52:88:cb:48:9e:eb:3e:bc: 30:fc:37:88:43:4f:89:bf:59:75:ac:c4:51:ed:29:26:37:72: ca:20:be:01:f2:9a:76:75:5d:fc:79:df:65:48:c8:1b:0d:21: c7:74:7c:dd:fc:d5:b9:e9:40:d7:5f:d8:62:91:df:70:63:c4: 31:ab:67:33:ed:7e:be:36:af:d0:21:0c:11:98:b9:73:85:b2: de:e3:67:c7:9a:a0:56:37:d5:a7:44:16:31:fc:bc:1a:e2:f2: 8a:52:3f:49:4c:57:45:bb:8a:a3:37:f8:af:51:72:d8:1f:cd: bd:45:b7:a6:4c:08:7d:d3:fe:78:e6:cd:64:6e:ec:0a:f2:7e: 8e:a4:c9:6d:30:85:aa:40:30:27:9c:22:d1:f1:75:35:ae:8c: f9:62:d9:eb:a9:59:d4:44:3d:09:a4:0f:5f:79:54:e8:60:93: 6c:27:bc:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTY1NjExMC8GA1UEBRMoQzlDMzBCN0M1N0UyRjAxNkRCMUYwMUMwOUU1OTJFMDUw NDc0QzlBNjAeFw0yNTA4MjMwNzQ0MzdaFw0yNTA4MzAwNzQ0MzdaMBgxFjAUBgNV BAMTDTY4YTk3MTY1LWM2YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkn6fmwwoW2e68sIkr5A6G8KyCtEhhHU62SdZt71+Wlvu018b90c46PSHUxODA DlMbnBjTVT62OstP+SlgfR+gPETTP4mOuCq9ws7CdDbKquut+6tF8TKjLhfz2Cy4 5l2nBmvePS8uaDO4eQabERywQNM8SARwx7RarO1nyHCmR9uh5lUcZB4zMkQIjmXz ETX8LrYV6hv9R07ezmAYqyjeujccoQOeTrkOCxfYDZvtHy8crZyR3IKPXKm3cFHg PfRjrz4zJueAW58bU+rCfQyAPmbuam+BzrgA7i2XKITlGSPgyXUhFzsxwtTCwQnn A4hlu84ZuXz1oaZHxGebcB/5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvUE6O5uN YG10eLVgxQli51e5xgIwHwYDVR0jBBgwFoAUycMLfFfi8BbbHwHAnlkuBQR0yaYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NjU2L0E1RTdDRDc2MjNF MTExRjBBNjUwRUEyM0M0RjlBRTAyL3ljTUxmRmZpOEJiYkh3SEFubGt1QlFSMHlh WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWNNTGZGZmk4QmJiSHdIQW5sa3VCUVIweWFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 NjU2L0E1RTdDRDc2MjNFMTExRjBBNjUwRUEyM0M0RjlBRTAyL3ljTUxmRmZpOEJi Ykh3SEFubGt1QlFSMHlhWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIAKlDWOgGN/wBacqH/Mwp7a3OAkNFa5prF45yXY+MJjjkjI+Fxi3QqC TuLzrFrO6FQ0hj330wrF5nAhK6JSpu2RY3OyoI2o6HkOoUo1afDqzG1SiMtInus+ vDD8N4hDT4m/WXWsxFHtKSY3csogvgHymnZ1Xfx532VIyBsNIcd0fN381bnpQNdf 2GKR33BjxDGrZzPtfr42r9AhDBGYuXOFst7jZ8eaoFY31adEFjH8vBri8opSP0lM V0W7iqM3+K9Rctgfzb1Ft6ZMCH3T/njmzWRu7Aryfo6kyW0whapAMCecItHxdTWu jPli2eupWdREPQmkD195VOhgk2wnvCA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:46 2025 by rpki-client