$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft File: YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json) Hash identifier: g9k/T8sBKtOtlMZs41G38pd2dpWodp9m+EDL3UnTLKQ= Subject key identifier: 8A:CB:74:19:41:1F:96:AE:31:6A:75:D2:5A:23:63:6C:A3:77:81:A8 Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 Certificate issuer: /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Certificate serial: 05FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft Manifest number: 05F4 Signing time: Fri 18 Jul 2025 23:14:50 +0000 Manifest this update: Fri 18 Jul 2025 23:14:50 +0000 Manifest next update: Fri 25 Jul 2025 23:14:50 +0000 Files and hashes: 1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: 62GsSttxTWTUEbF2drTkrbXvzTnVkBH9hIwaf5AQtik=) 2: 6D5F7C74B99611EBB5E9AE5EC4F9AE02.roa (hash: bUC1i6U8bBn9UfWkY4L4fN9q3qdDlIRzcJbNDpJZl6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Validity Not Before: Jul 18 23:14:50 2025 GMT Not After : Jul 25 23:14:50 2025 GMT Subject: CN=687ad56a-722e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:28:60:57:6e:61:f0:00:cf:3c:69:35:e7: a6:dc:22:c6:c8:fd:85:3e:b5:62:d0:ca:56:3f:9c: ec:9a:b9:22:02:3c:23:e7:04:96:3d:43:44:9b:cc: af:1f:00:51:0a:f1:ab:5b:a7:4d:26:d2:c5:fe:21: 60:67:9b:1d:ac:15:6b:46:43:b4:a2:24:f8:8a:03: fd:2a:f4:5a:42:57:d8:53:f6:6c:31:04:94:e2:ac: 13:ef:77:d1:eb:20:c1:96:71:a2:71:1a:f7:5f:1d: 2f:79:dd:d8:06:ab:47:63:41:db:ee:92:01:45:6a: 4c:f9:19:3a:60:09:c4:03:ae:c6:3d:6e:8e:f5:f2: 91:3d:fd:8a:4c:f9:f3:37:5a:99:06:5e:70:aa:fc: e1:18:13:39:a1:b3:57:34:ee:5e:22:e2:a1:b1:0b: bf:dd:dd:74:6f:9e:6b:15:08:a3:bb:f3:37:0a:b0: 27:3b:d6:f8:94:df:08:23:67:fb:a3:c8:4e:3a:de: f0:02:fb:61:7f:26:1e:72:3e:d9:d4:9b:45:f3:97: 5f:a3:dc:1c:96:2f:59:37:9e:4c:97:64:12:0d:13: 6b:7a:83:ff:60:56:88:c4:88:2a:d7:37:33:6b:27: 61:04:0c:92:97:30:0a:0a:4b:b8:80:d7:4e:18:e9: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CB:74:19:41:1F:96:AE:31:6A:75:D2:5A:23:63:6C:A3:77:81:A8 X509v3 Authority Key Identifier: keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9c:d9:e8:4d:05:4d:a0:fe:80:81:cf:6d:9c:3c:7f:4d:64: 34:40:b4:68:74:59:e1:ad:32:d3:6a:02:ed:a3:a8:1b:d6:32: f6:7f:a9:ce:a8:84:b2:d2:06:d2:79:4e:14:dc:e9:2b:38:3d: 10:e0:82:ca:cb:9b:62:9a:5f:f9:ad:49:02:e5:95:63:d4:ec: 7f:12:93:c5:cd:05:76:12:4c:e5:65:1a:1c:e4:19:f9:81:83: f5:a5:34:83:8e:0d:dd:ba:cb:8d:f9:89:97:8f:0c:21:ff:68: 31:44:09:88:c7:2f:22:d5:d6:2c:d8:ca:cd:0f:d0:61:2b:c6: 95:fa:ae:4f:7a:80:17:41:90:d2:cc:09:ab:d5:19:c3:5a:80: 04:8e:e1:dd:e7:9a:92:93:f3:68:85:b3:62:40:27:4c:b9:c6: e5:a5:90:9c:e1:15:ee:8a:b7:17:9f:c5:5a:61:15:34:a8:db: 12:de:29:74:4b:d1:78:ed:83:e1:0d:96:71:fb:fc:12:ce:2f: 4d:93:e9:25:78:99:05:9a:ce:d3:8b:68:da:f7:a4:c7:fb:d0: ed:0e:bd:2f:b8:08:5f:19:f2:a3:6f:41:d2:03:ea:13:3f:ac: c9:a0:cf:fe:5b:b3:ac:6b:ae:0f:26:db:73:1b:d6:ef:8a:6e: c1:a8:22:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDQ0UxMTAvBgNVBAUTKDYxRjQ1REM1NEY0N0UyNTJGQUM2NTUyRERCQjM5NjU4 NTRDNkM4MDEwHhcNMjUwNzE4MjMxNDUwWhcNMjUwNzI1MjMxNDUwWjAYMRYwFAYD VQQDEw02ODdhZDU2YS03MjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO0oYFduYfAAzzxpNeem3CLGyP2FPrVi0MpWP5zsmrkiAjwj5wSWPUNEm8yv HwBRCvGrW6dNJtLF/iFgZ5sdrBVrRkO0oiT4igP9KvRaQlfYU/ZsMQSU4qwT73fR 6yDBlnGicRr3Xx0ved3YBqtHY0Hb7pIBRWpM+Rk6YAnEA67GPW6O9fKRPf2KTPnz N1qZBl5wqvzhGBM5obNXNO5eIuKhsQu/3d10b55rFQiju/M3CrAnO9b4lN8II2f7 o8hOOt7wAvthfyYecj7Z1JtF85dfo9wcli9ZN55Ml2QSDRNreoP/YFaIxIgq1zcz aydhBAySlzAKCku4gNdOGOlkFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrLdBlB H5auMWp10lojY2yjd4GoMB8GA1UdIwQYMBaAFGH0XcVPR+JS+sZVLduzllhUxsgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkNDRS9CNzU1REEyOEI5 OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRsTDZ4bFV0MjdPV1dGVEd5 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lmUmR4VTlINGxMNnhsVXQyN09XV0ZUR3lBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkNDRS9CNzU1REEyOEI5OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRs TDZ4bFV0MjdPV1dGVEd5QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjnNnoTQVNoP6Agc9tnDx/TWQ0QLRodFnhrTLTagLto6gb1jL2f6nO qISy0gbSeU4U3OkrOD0Q4ILKy5timl/5rUkC5ZVj1Ox/EpPFzQV2EkzlZRoc5Bn5 gYP1pTSDjg3dusuN+YmXjwwh/2gxRAmIxy8i1dYs2MrND9BhK8aV+q5PeoAXQZDS zAmr1RnDWoAEjuHd55qSk/NohbNiQCdMucblpZCc4RXuircXn8VaYRU0qNsS3il0 S9F47YPhDZZx+/wSzi9Nk+kleJkFms7Ti2ja96TH+9DtDr0vuAhfGfKjb0HSA+oT P6zJoM/+W7Osa64PJttzG9bvim7BqCJa -----END CERTIFICATE-----Generated at Sun Jul 20 11:05:08 2025 by rpki-client