$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: Inmd+w09GWqiHCe8GsxALu8k7LPjKISqMqojnIl+490= Subject key identifier: 9F:31:45:5B:C6:18:DD:B4:4E:C6:94:58:2B:2F:DE:C1:BF:F9:9D:EC Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 082B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 0825 Signing time: Fri 22 Aug 2025 20:56:35 +0000 Manifest this update: Fri 22 Aug 2025 20:56:35 +0000 Manifest next update: Fri 29 Aug 2025 20:56:35 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: EUZ8EKmmpJZLpth4BkfUZMlt7ksoTqep3kvrdaV3kWE=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: EHew2Al89yfLEVdXGaRbj1T8KtGh2w0PUC3MBSskoUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: Aug 22 20:56:35 2025 GMT Not After : Aug 29 20:56:35 2025 GMT Subject: CN=68a8d983-1d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:07:21:b1:5c:61:8c:48:74:73:96:c7:18: 09:59:9b:f1:f2:d7:fd:cf:5f:e4:22:0c:5b:81:b9: 4a:89:d9:f8:52:2a:03:52:9f:a6:96:30:d2:e9:77: 6e:2f:db:f3:a5:5a:38:a0:a3:64:06:23:10:23:91: ba:03:32:71:4e:c5:ca:44:b9:ee:3c:97:d1:92:7d: 49:a8:62:58:51:21:0e:f5:21:a1:a2:1e:62:a8:ab: 57:2e:1e:5e:92:dc:ba:e9:84:93:f6:77:9f:2c:e4: 2f:cb:6a:74:75:5e:de:24:ef:ff:73:d6:d1:83:23: 63:c0:a2:3c:35:bb:f5:9f:25:80:8e:88:49:5a:90: d4:0a:cd:95:a6:9d:bf:1f:32:3d:aa:22:7f:af:08: 2e:37:cc:bd:00:d8:e7:3d:fe:bc:75:8c:78:8a:d3: 48:e4:f5:f4:1d:98:c2:ed:95:6f:b1:7f:ca:46:af: bb:a1:a0:51:22:16:cc:5e:3b:ec:ea:30:cc:8e:38: 02:68:87:9e:a5:93:32:c8:f2:a7:6c:82:8b:ea:ed: 93:42:0b:42:50:85:66:5b:7a:ea:51:66:20:d3:7d: 6d:b1:3c:11:ba:38:e9:da:6d:54:e3:8f:e6:df:a3: dc:a9:7f:32:8a:ae:0f:b3:50:c9:2e:f8:60:5a:1b: 1c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:31:45:5B:C6:18:DD:B4:4E:C6:94:58:2B:2F:DE:C1:BF:F9:9D:EC X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ba:79:a6:b8:86:39:83:2c:76:c2:35:1a:5f:e2:47:12:39: 30:94:ba:6c:af:83:09:19:82:d9:d2:0b:5a:69:5e:a3:2d:c6: dd:85:b2:62:e7:ba:14:46:70:a2:e8:52:d7:a6:5c:0b:0a:d9: 68:96:f7:ab:1a:e6:1f:aa:79:d6:6d:fe:ff:b1:a2:7a:b7:27: f1:bc:8a:1c:3f:6d:74:27:63:61:e1:c0:3e:09:1d:64:bb:88: 6a:e6:d3:2d:8d:3d:30:5f:28:9c:a4:af:bb:74:9f:ce:d0:0e: ea:fb:15:88:40:2b:92:b3:ad:a8:fc:e6:e6:f5:94:51:1c:0a: f4:04:f5:84:2f:98:6a:aa:eb:91:7f:0b:9d:a5:06:d4:4a:0d: ab:1e:5c:31:e1:90:22:ab:da:bf:9b:13:37:c4:e4:83:d7:52: 4e:4e:09:01:ed:dc:5a:e1:e6:b9:e1:ae:61:82:27:01:c2:0c: 46:f5:b2:72:69:d8:64:b1:78:78:eb:9d:49:f8:83:ab:fc:83: 21:14:03:57:64:60:e9:3f:e8:94:17:d2:14:ca:2f:b7:d7:a1: 4d:e0:46:ec:fc:3a:50:02:4c:70:23:d4:c0:cd:c5:f8:a3:e1: 78:84:9f:a5:92:c4:12:79:7b:be:3b:ee:13:ce:c1:ec:46:75: 30:5a:7c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjUwODIyMjA1NjM1WhcNMjUwODI5MjA1NjM1WjAYMRYwFAYD VQQDEw02OGE4ZDk4My0xZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDcHIbFcYYxIdHOWxxgJWZvx8tf9z1/kIgxbgblKidn4UioDUp+mljDS6Xdu L9vzpVo4oKNkBiMQI5G6AzJxTsXKRLnuPJfRkn1JqGJYUSEO9SGhoh5iqKtXLh5e kty66YST9nefLOQvy2p0dV7eJO//c9bRgyNjwKI8Nbv1nyWAjohJWpDUCs2Vpp2/ HzI9qiJ/rwguN8y9ANjnPf68dYx4itNI5PX0HZjC7ZVvsX/KRq+7oaBRIhbMXjvs 6jDMjjgCaIeepZMyyPKnbIKL6u2TQgtCUIVmW3rqUWYg031tsTwRujjp2m1U44/m 36PcqX8yiq4Ps1DJLvhgWhscWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8xRVvG GN20TsaUWCsv3sG/+Z3sMB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrunmmuIY5gyx2wjUaX+JHEjkwlLpsr4MJGYLZ0gtaaV6jLcbdhbJi 57oURnCi6FLXplwLCtlolverGuYfqnnWbf7/saJ6tyfxvIocP210J2Nh4cA+CR1k u4hq5tMtjT0wXyicpK+7dJ/O0A7q+xWIQCuSs62o/Obm9ZRRHAr0BPWEL5hqquuR fwudpQbUSg2rHlwx4ZAiq9q/mxM3xOSD11JOTgkB7dxa4ea54a5hgicBwgxG9bJy adhksXh4651J+IOr/IMhFANXZGDpP+iUF9IUyi+316FN4Ebs/DpQAkxwI9TAzcX4 o+F4hJ+lksQSeXu+O+4TzsHsRnUwWnwI -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:17 2025 by rpki-client