$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: eYwWGqysIum6AHb7ZD373rB9BFA5T2gIN0kgfWwPYFk= Subject key identifier: 5D:20:6A:E4:FA:49:31:84:A5:A2:F7:4E:36:E7:5F:8D:DF:B3:EE:D4 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: F2 Signing time: Sat 19 Jul 2025 05:33:51 +0000 Manifest this update: Sat 19 Jul 2025 05:33:50 +0000 Manifest next update: Sat 26 Jul 2025 05:33:50 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: NboIUbOEu8kSiFGYN/GVEC3CCv1gTO478prF+zvoFSY=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=) 3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Jul 19 05:33:50 2025 GMT Not After : Jul 26 05:33:50 2025 GMT Subject: CN=687b2e3e-8be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:36:e2:05:7b:2b:1b:62:15:96:93:07:76: 2c:56:b1:02:06:3d:c5:ff:7f:29:49:e2:cc:5f:aa: 9d:a1:5b:5b:97:7d:a8:b8:ee:bd:b1:49:5f:c4:81: 14:d2:c4:ab:33:47:0d:fe:1d:a1:f4:39:31:75:1c: 58:4c:77:07:61:b1:c4:ad:27:96:32:92:42:0f:3a: c0:41:50:7b:f8:b9:67:99:6a:75:1f:47:56:47:fb: 05:7a:8d:19:f9:7b:2c:5e:59:bc:a4:53:db:48:4e: 55:9e:8a:16:da:76:42:24:95:6e:c8:bf:b8:ee:ef: b4:ca:12:9e:2a:8c:13:7e:11:a3:13:48:bd:6e:63: fe:5b:8e:0b:f7:1f:aa:37:99:da:70:b3:df:d2:fe: bf:ee:ae:fd:df:6f:53:44:86:b4:e2:b0:a4:44:c5: 69:db:22:2c:f5:e3:20:ba:94:6b:27:88:57:3a:b9: 55:37:c2:c6:99:5c:89:83:53:10:3e:52:d6:f2:2e: 2e:6d:e1:3e:7b:04:5b:d4:5f:71:ba:81:e2:3d:6d: 83:98:2f:00:b1:fa:c7:23:83:07:87:12:87:e6:2c: 5c:e9:b2:10:3f:26:a8:5c:67:7a:e7:4c:48:52:4c: 45:f0:d2:89:aa:47:35:a7:9e:b5:7e:37:2e:5d:da: 0f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:20:6A:E4:FA:49:31:84:A5:A2:F7:4E:36:E7:5F:8D:DF:B3:EE:D4 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5b:f8:d8:5b:42:e0:24:17:66:aa:bc:40:9c:cd:19:dc:9d: 56:9d:3f:3b:b7:95:7f:48:57:29:2f:ab:11:55:72:45:ca:71: ad:25:71:28:3e:8b:91:fb:91:e9:59:29:c1:e1:b5:ed:13:c8: 68:c3:d5:78:72:48:61:69:8f:90:eb:fe:ac:3b:2f:06:f3:ec: 28:f9:23:1e:fe:71:42:f7:c3:b0:95:83:ce:b7:f9:de:4d:ef: d9:cd:a0:20:3f:b6:c6:f3:e4:7e:4b:75:d5:ac:c3:67:90:75: 08:97:dd:4f:f7:d8:3a:8b:b7:b5:f1:c1:ed:ab:72:aa:2c:d6: aa:92:57:d8:8f:e4:c7:66:b1:c1:a2:f9:51:3b:6b:a4:1d:15: 34:17:ec:9f:f8:35:8c:50:21:e8:b3:cc:b2:c2:42:2e:88:d4: b9:c2:3e:cf:0b:ec:5f:80:30:dc:65:2a:e2:78:24:ec:37:51: d1:50:98:1c:a4:af:14:59:35:96:88:45:f1:6f:4a:5e:31:89: 2f:b1:4a:43:b8:9d:33:27:84:1d:fa:37:6b:68:4d:32:2f:46: c4:2e:0f:47:f1:dc:18:26:a1:22:16:ce:87:43:6f:32:a1:b1: 62:76:00:b6:a2:4d:aa:f5:a8:a3:cb:35:19:f2:82:de:b9:63: 57:23:02:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjUwNzE5MDUzMzUwWhcNMjUwNzI2MDUzMzUwWjAYMRYwFAYD VQQDEw02ODdiMmUzZS04YmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyc24gV7KxtiFZaTB3YsVrECBj3F/38pSeLMX6qdoVtbl32ouO69sUlfxIEU 0sSrM0cN/h2h9DkxdRxYTHcHYbHErSeWMpJCDzrAQVB7+LlnmWp1H0dWR/sFeo0Z +XssXlm8pFPbSE5VnooW2nZCJJVuyL+47u+0yhKeKowTfhGjE0i9bmP+W44L9x+q N5nacLPf0v6/7q79329TRIa04rCkRMVp2yIs9eMgupRrJ4hXOrlVN8LGmVyJg1MQ PlLW8i4ubeE+ewRb1F9xuoHiPW2DmC8AsfrHI4MHhxKH5ixc6bIQPyaoXGd650xI UkxF8NKJqkc1p561fjcuXdoPGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0gauT6 STGEpaL3TjbnX43fs+7UMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqW/jYW0LgJBdmqrxAnM0Z3J1WnT87t5V/SFcpL6sRVXJFynGtJXEo PouR+5HpWSnB4bXtE8how9V4ckhhaY+Q6/6sOy8G8+wo+SMe/nFC98OwlYPOt/ne Te/ZzaAgP7bG8+R+S3XVrMNnkHUIl91P99g6i7e18cHtq3KqLNaqklfYj+THZrHB ovlRO2ukHRU0F+yf+DWMUCHos8yywkIuiNS5wj7PC+xfgDDcZSrieCTsN1HRUJgc pK8UWTWWiEXxb0peMYkvsUpDuJ0zJ4Qd+jdraE0yL0bELg9H8dwYJqEiFs6HQ28y obFidgC2ok2q9aijyzUZ8oLeuWNXIwK1 -----END CERTIFICATE-----Generated at Sun Jul 20 06:36:24 2025 by rpki-client