$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json) Hash identifier: a4dXqWbrZez4rGGhzPoByXY7rCtA4xuIe6JgnSZXGEI= Subject key identifier: 7D:01:B6:6B:EF:6D:C8:03:4A:1F:CA:15:26:BF:83:2E:96:1B:E9:EA Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft Manifest number: 020B Signing time: Wed 17 Sep 2025 02:47:56 +0000 Manifest this update: Wed 17 Sep 2025 02:47:55 +0000 Manifest next update: Wed 24 Sep 2025 02:47:55 +0000 Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: TTUEUIl8q2WQDAwQCjyYZNttag0HnmoROADa3gEeAOA=) 2: 9DE3DEAEAC9E11EFBAC6A027C4F9AE02.roa (hash: TvtT1Oa3KekcpLOO3lB33TtpOxnVn3h062NADWWRlOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Validity Not Before: Sep 17 02:47:55 2025 GMT Not After : Sep 24 02:47:55 2025 GMT Subject: CN=68ca215c-66ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:9c:2f:ba:23:23:49:1b:5d:80:97:4d:ec: 85:f6:9a:b1:55:f0:94:a7:00:71:64:0d:61:db:6c: e5:f1:1f:cd:be:b2:5d:54:4f:e2:29:c4:45:e1:f2: 5a:f0:74:f4:8e:36:6a:ee:12:1a:0a:d4:2d:51:e5: 28:61:4b:2b:30:e1:ea:62:72:6f:c9:95:cf:be:35: b7:49:3c:9b:39:ca:3e:0a:96:60:85:64:6c:c2:dd: bd:eb:b5:e2:7f:4f:32:75:0b:a0:87:e3:c5:5e:8a: 21:62:09:ee:a5:60:0b:bc:5e:f1:90:9e:f7:f3:b6: d9:2e:95:ed:72:ae:c1:50:81:1d:a6:05:93:7b:86: ea:a6:54:b4:09:17:00:85:3e:e4:f0:d2:85:49:65: 7d:f8:70:25:ce:ba:49:c6:b5:93:a4:05:86:86:25: 6d:d2:9b:cd:44:88:2f:10:e4:9a:5d:65:b2:5a:0b: 31:94:6c:79:66:32:7b:b0:8f:7a:4b:af:3a:e5:3b: a0:bc:94:75:d3:d2:c2:e9:ff:b4:0f:78:0a:25:6a: 0d:70:cb:a6:2c:74:38:1e:f1:45:27:61:f3:38:16: cd:59:57:9b:65:8f:35:6a:97:1e:55:c4:d1:ff:9b: 7d:85:f3:1c:8b:c3:1d:ef:0f:9c:57:f3:d1:69:bd: c1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:01:B6:6B:EF:6D:C8:03:4A:1F:CA:15:26:BF:83:2E:96:1B:E9:EA X509v3 Authority Key Identifier: keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:01:e1:b9:49:7d:47:83:d8:c9:87:92:ca:22:b0:48:47:39: b5:b4:d3:c5:b4:bc:a4:bb:0d:34:9a:92:62:1e:e5:ad:cf:59: 3b:1e:ff:40:0a:72:bd:7c:09:d9:80:37:3f:d0:aa:a7:1a:2c: b9:6f:0e:b0:1b:92:8b:3a:3f:d3:62:8e:0e:b1:db:34:44:50: 9e:12:1b:7f:85:8d:f0:94:1f:ad:be:a9:10:47:ae:19:42:79: 20:70:cf:77:63:c5:e6:b8:40:94:c8:04:b3:63:cf:d7:af:a6: 5b:71:2f:a8:e7:3d:47:f1:44:6f:6f:b4:f1:4d:83:29:07:8a: 81:6f:2b:18:4c:bc:05:85:96:2e:51:61:f7:98:b5:cd:ef:74: 92:41:a0:7c:26:9a:50:e7:2c:d7:84:58:c6:d6:f5:97:ac:76: a2:78:ef:49:78:ff:f4:fc:e2:dd:b8:7f:22:e5:4d:fb:ee:fd: 7c:ea:27:7b:88:64:4a:d3:6e:45:ae:d3:65:8d:71:f8:ed:99: bc:83:48:af:46:cd:4c:ea:be:4c:45:7d:ae:28:b1:10:d3:21: f3:e9:a9:74:c5:15:b6:27:c6:e7:31:dd:98:e9:0e:06:eb:68: 33:de:f8:a2:0f:20:45:85:fb:38:12:5b:f2:55:7c:ce:5d:dc: 7f:07:c6:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5MDcxMTAvBgNVBAUTKENBMDA3MEFDNTIwMUQ2RjZBNzc1QUE1MjVENTNEOEUz MzBFMzIwOTYwHhcNMjUwOTE3MDI0NzU1WhcNMjUwOTI0MDI0NzU1WjAYMRYwFAYD VQQDEw02OGNhMjE1Yy02NmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIicL7ojI0kbXYCXTeyF9pqxVfCUpwBxZA1h22zl8R/NvrJdVE/iKcRF4fJa 8HT0jjZq7hIaCtQtUeUoYUsrMOHqYnJvyZXPvjW3STybOco+CpZghWRswt2967Xi f08ydQugh+PFXoohYgnupWALvF7xkJ7387bZLpXtcq7BUIEdpgWTe4bqplS0CRcA hT7k8NKFSWV9+HAlzrpJxrWTpAWGhiVt0pvNRIgvEOSaXWWyWgsxlGx5ZjJ7sI96 S6865TugvJR109LC6f+0D3gKJWoNcMumLHQ4HvFFJ2HzOBbNWVebZY81apceVcTR /5t9hfMci8Md7w+cV/PRab3BUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0Btmvv bcgDSh/KFSa/gy6WG+nqMB8GA1UdIwQYMBaAFMoAcKxSAdb2p3WqUl1T2OMw4yCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkwNy9CNTZBN0NCMDdB QjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2YW5kYXBTWFZQWTR6RGpJ SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lnQndyRklCMXZhbmRhcFNYVlBZNHpEaklKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjkwNy9CNTZBN0NCMDdBQjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2 YW5kYXBTWFZQWTR6RGpJSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGAeG5SX1Hg9jJh5LKIrBIRzm1tNPFtLykuw00mpJiHuWtz1k7Hv9A CnK9fAnZgDc/0KqnGiy5bw6wG5KLOj/TYo4Osds0RFCeEht/hY3wlB+tvqkQR64Z QnkgcM93Y8XmuECUyASzY8/Xr6ZbcS+o5z1H8URvb7TxTYMpB4qBbysYTLwFhZYu UWH3mLXN73SSQaB8JppQ5yzXhFjG1vWXrHaieO9JeP/0/OLduH8i5U377v186id7 iGRK025FrtNljXH47Zm8g0ivRs1M6r5MRX2uKLEQ0yHz6al0xRW2J8bnMd2Y6Q4G 62gz3viiDyBFhfs4ElvyVXzOXdx/B8ZZ -----END CERTIFICATE-----Generated at Fri Sep 19 02:10:05 2025 by rpki-client