$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft File: yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json) Hash identifier: u6xWxwiahNKvIEyWKFAPnK932V6GM5Hb3NUVMlEnfag= Subject key identifier: 91:09:FE:34:10:6A:8C:B3:36:D2:3E:3A:F1:48:EF:4F:5C:54:73:68 Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 Certificate issuer: /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft Manifest number: 4F Signing time: Wed 17 Sep 2025 08:03:30 +0000 Manifest this update: Wed 17 Sep 2025 08:03:29 +0000 Manifest next update: Wed 24 Sep 2025 08:03:29 +0000 Files and hashes: 1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: umzMOQiVuE9FnWULByX5q4cYd225CvAxaKhiZtS2++U=) 2: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: qPzJ/oeyp8XIlVlZetvJbilZBw8geUbM+mpNnzYDNLQ=) 3: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: hVkpqBz8Nr9HJbp7PiFoLwVsufH9j8FcqYll8CUZa9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Validity Not Before: Sep 17 08:03:29 2025 GMT Not After : Sep 24 08:03:29 2025 GMT Subject: CN=68ca6b51-ef36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dc:b4:ad:a7:2e:6e:67:e7:6b:02:c8:48:ed: 6f:ae:74:7e:2a:d4:19:89:cd:cd:d2:f6:42:56:6d: e7:1a:5b:5d:0b:28:5f:55:1b:d2:95:1e:bf:41:b3: a2:c2:13:05:ba:eb:5e:ff:29:62:7a:4d:f8:66:70: 44:ef:11:1a:7b:62:72:6a:3d:80:88:c9:88:dd:a3: 58:8c:69:df:46:3a:57:97:d3:67:21:aa:f8:f3:e2: d3:c2:9a:8b:ff:3f:f0:cc:54:73:fd:a5:c0:cc:a4: ee:12:41:0e:e7:4f:51:c7:9a:fe:42:18:b9:9a:c7: c5:15:55:34:a5:5a:03:b0:20:93:a0:ba:bf:19:2c: 7d:c9:66:1f:2c:de:8d:66:d2:ec:8c:54:2a:e7:3f: e4:85:cb:64:d5:db:39:ce:4f:f2:cd:25:bd:5f:bd: d2:9f:fa:91:fc:2f:c6:f2:93:2f:d4:5b:10:c0:0d: b9:f9:e5:7a:77:e1:84:03:09:23:f6:04:5a:72:3c: 69:89:f2:1c:11:a3:fa:bc:52:35:16:f0:18:59:6a: eb:a2:0a:ff:a4:67:82:f0:da:77:31:ea:86:ed:e0: a0:12:a9:22:5f:b8:d5:55:b0:e2:4f:75:ee:09:d1: e0:8c:ea:72:fa:d3:fc:f8:88:04:9f:a5:6f:84:f8: 28:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:09:FE:34:10:6A:8C:B3:36:D2:3E:3A:F1:48:EF:4F:5C:54:73:68 X509v3 Authority Key Identifier: keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:88:d7:d6:3a:dc:4f:59:18:08:7b:10:d7:b9:c6:98:f6:0d: b0:ad:b9:7f:18:7f:c3:51:3d:2d:25:1b:36:4a:d0:28:db:57: 98:87:4f:47:10:aa:d1:b0:58:da:41:be:3a:f2:4a:81:bd:f5: 15:31:b4:a7:b6:06:a2:1a:7e:a2:2d:40:0b:1c:21:71:1d:3f: 74:8c:cb:cf:ff:a3:95:3a:e5:5f:94:3b:7c:b9:6f:4d:a4:d9: 64:83:3c:8f:9f:80:eb:6e:99:4c:f4:b4:e7:86:84:ea:a9:06: 24:52:f5:ce:9f:fd:1a:8c:15:8c:9f:5d:f3:75:11:f8:d0:5a: 79:18:07:9d:8b:cd:91:89:46:23:47:24:9c:fa:ab:2a:fc:d0: 85:df:09:ad:45:9c:f7:8a:9f:94:8e:f0:f3:a3:d3:24:80:09: 15:37:e9:c6:64:95:f1:df:3a:db:b2:d9:cd:0d:cc:9b:6d:d1: 11:f4:70:28:39:6f:89:20:e4:97:f6:8c:9d:cd:76:3b:8b:24: 49:cf:af:c9:18:b3:4c:75:b1:ce:b4:e1:41:39:6b:7f:bf:0f: a4:d2:1f:35:a2:fb:b4:3d:33:64:53:ac:c5:dc:fc:ea:d4:92: ac:cc:7d:86:36:eb:45:7d:3c:1d:9b:07:13:cc:38:54:94:c5: 7a:13:f5:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MzQ5MzExMC8GA1UEBRMoQzhCMkJDM0I4QUIxRUJBRTRBNzQzRjkwRDhDOEExREZE MUQ0Q0UxNzAeFw0yNTA5MTcwODAzMjlaFw0yNTA5MjQwODAzMjlaMBgxFjAUBgNV BAMTDTY4Y2E2YjUxLWVmMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC73LStpy5uZ+drAshI7W+udH4q1BmJzc3S9kJWbecaW10LKF9VG9KVHr9Bs6LC EwW6617/KWJ6TfhmcETvERp7YnJqPYCIyYjdo1iMad9GOleX02chqvjz4tPCmov/ P/DMVHP9pcDMpO4SQQ7nT1HHmv5CGLmax8UVVTSlWgOwIJOgur8ZLH3JZh8s3o1m 0uyMVCrnP+SFy2TV2znOT/LNJb1fvdKf+pH8L8byky/UWxDADbn55Xp34YQDCSP2 BFpyPGmJ8hwRo/q8UjUW8BhZauuiCv+kZ4Lw2ncx6obt4KASqSJfuNVVsOJPde4J 0eCM6nL60/z4iASfpW+E+CjbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkQn+NBBq jLM20j468UjvT1xUc2gwHwYDVR0jBBgwFoAUyLK8O4qx665KdD+Q2Mih39HUzhcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzNDkzLzA1RUMxRDE0MUVG OTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1S2RELVEyTWloMzlIVXpo Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUxLOE80cXg2NjVLZEQtUTJNaWgzOUhVemhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz NDkzLzA1RUMxRDE0MUVGOTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1 S2RELVEyTWloMzlIVXpoYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD6I19Y63E9ZGAh7ENe5xpj2DbCtuX8Yf8NRPS0lGzZK0CjbV5iHT0cQ qtGwWNpBvjrySoG99RUxtKe2BqIafqItQAscIXEdP3SMy8//o5U65V+UO3y5b02k 2WSDPI+fgOtumUz0tOeGhOqpBiRS9c6f/RqMFYyfXfN1EfjQWnkYB52LzZGJRiNH JJz6qyr80IXfCa1FnPeKn5SO8POj0ySACRU36cZklfHfOtuy2c0NzJtt0RH0cCg5 b4kg5Jf2jJ3NdjuLJEnPr8kYs0x1sc604UE5a3+/D6TSHzWi+7Q9M2RTrMXc/OrU kqzMfYY260V9PB2bBxPMOFSUxXoT9dA= -----END CERTIFICATE-----Generated at Fri Sep 19 04:02:12 2025 by rpki-client