$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: NZhcCBgXVziZsXOdyQoLJJldhmtRho9r0aPmI/FRMO4= Subject key identifier: F4:E3:CC:5E:62:47:27:F9:CA:C7:75:31:83:49:54:6E:84:DC:10:FA Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 250E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 24F3 Signing time: Sun 20 Jul 2025 15:46:58 +0000 Manifest this update: Sun 20 Jul 2025 15:46:58 +0000 Manifest next update: Sun 27 Jul 2025 15:46:58 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: MCPZUk3BNmYmFjvBbc3ojc/VfH5b+g/Y/wTzaPZ7nKw=) 2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: yJwIYH0HnsFs9Iy2kQBVrjVIvfYou5TYh0Yox/p0ekY=) 3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: bQ3KvLtmzclqglCfQCTMWY9jEZJ/oqjU8/5vFJyfH5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9486 (0x250e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Jul 20 15:46:58 2025 GMT Not After : Jul 27 15:46:58 2025 GMT Subject: CN=687d0f72-f2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:b2:9f:15:da:ad:93:55:2d:26:9e:d6:b0: d3:5c:28:0f:d9:ee:be:86:a3:f3:d8:d4:41:90:c2: d8:56:61:45:7e:ec:d6:ac:85:dc:bc:40:aa:8a:2b: 48:09:d7:aa:86:67:ce:52:12:c7:f9:c6:49:b5:a9: 7a:04:3e:ca:5b:17:f7:d1:6a:79:46:37:61:70:a9: 49:0b:35:03:7d:30:59:3c:20:9f:ff:9b:c2:fd:f4: 70:3a:c5:2a:90:94:0f:3d:6f:7f:1b:04:01:bb:06: 44:a3:bb:6b:ee:21:a1:f5:ec:25:4e:6c:71:b5:77: c5:8e:9f:73:4a:79:29:52:aa:f6:7a:c6:b5:ff:65: 3b:ca:48:3f:40:90:9a:ec:47:ad:59:09:5b:28:2f: c4:a3:7d:fb:52:cc:6f:e7:0b:d5:41:d5:33:6b:b0: 93:78:5f:04:fd:2a:a3:80:65:12:e2:1b:1c:f7:97: 03:d5:c0:31:70:8b:d6:11:37:72:78:25:6a:a9:98: 05:bf:b8:18:5e:1a:f0:07:34:d3:82:5a:00:da:a4: fb:16:c9:27:1f:29:04:e2:cd:21:40:b0:72:06:13: 56:cf:ab:ab:32:6f:53:f5:49:62:cb:e3:70:ae:86: 42:99:c1:bb:0b:f0:b5:4b:67:06:da:ad:07:32:cb: 1a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E3:CC:5E:62:47:27:F9:CA:C7:75:31:83:49:54:6E:84:DC:10:FA X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:fa:a6:73:bc:f3:3e:b7:60:23:b0:6b:2b:11:fd:9f:fe:46: 10:01:d6:58:6f:de:62:90:c3:e1:b9:9a:32:f4:97:5c:7d:c4: bd:a9:a7:3a:bd:2c:f9:bc:41:03:1b:e9:64:1b:92:3f:0a:16: 0c:5a:5f:1c:4b:1c:1c:11:e0:14:1b:2d:1b:f9:a4:30:4d:c4: 86:5b:2d:7e:98:fa:6a:94:59:f2:ea:f3:14:32:39:1f:e3:65: 1f:e7:87:48:60:ff:03:d2:2d:be:93:8d:d0:c8:99:90:46:d6: b7:e4:3d:b7:27:ad:2c:ce:30:61:2b:ca:1b:8e:2e:02:a6:aa: 8c:a8:fb:5e:45:20:80:79:40:ca:5f:15:83:38:9f:e5:12:17: 83:a8:57:47:73:0f:8d:9f:06:ca:2f:aa:d2:74:18:1c:35:c9: 8e:7d:15:72:71:e4:28:79:dc:ca:d2:15:0a:ea:f4:aa:85:b9: d0:cb:b2:73:d8:f6:77:e4:84:06:30:92:c3:4b:4a:7f:13:4d: e1:cb:54:87:3d:df:2d:42:bf:a5:62:d0:5f:2a:72:a4:01:0f: 48:89:81:11:17:0e:0d:1b:b3:ac:52:c1:98:72:70:a6:43:ca: cd:e3:8e:bb:4d:10:5c:b7:02:ba:88:0f:c8:32:e8:41:13:e6: ad:d9:27:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUwNzIwMTU0NjU4WhcNMjUwNzI3MTU0NjU4WjAYMRYwFAYD VQQDEw02ODdkMGY3Mi1mMmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApv+ynxXarZNVLSae1rDTXCgP2e6+hqPz2NRBkMLYVmFFfuzWrIXcvECqiitI CdeqhmfOUhLH+cZJtal6BD7KWxf30Wp5RjdhcKlJCzUDfTBZPCCf/5vC/fRwOsUq kJQPPW9/GwQBuwZEo7tr7iGh9ewlTmxxtXfFjp9zSnkpUqr2esa1/2U7ykg/QJCa 7EetWQlbKC/Eo337Usxv5wvVQdUza7CTeF8E/SqjgGUS4hsc95cD1cAxcIvWETdy eCVqqZgFv7gYXhrwBzTTgloA2qT7FsknHykE4s0hQLByBhNWz6urMm9T9Uliy+Nw roZCmcG7C/C1S2cG2q0HMssazwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTjzF5i Ryf5ysd1MYNJVG6E3BD6MB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv+qZzvPM+t2AjsGsrEf2f/kYQAdZYb95ikMPhuZoy9JdcfcS9qac6 vSz5vEEDG+lkG5I/ChYMWl8cSxwcEeAUGy0b+aQwTcSGWy1+mPpqlFny6vMUMjkf 42Uf54dIYP8D0i2+k43QyJmQRta35D23J60szjBhK8obji4CpqqMqPteRSCAeUDK XxWDOJ/lEheDqFdHcw+NnwbKL6rSdBgcNcmOfRVyceQoedzK0hUK6vSqhbnQy7Jz 2PZ35IQGMJLDS0p/E03hy1SHPd8tQr+lYtBfKnKkAQ9IiYERFw4NG7OsUsGYcnCm Q8rN4467TRBctwK6iA/IMuhBE+at2Sfw -----END CERTIFICATE-----Generated at Mon Jul 21 08:07:05 2025 by rpki-client