$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: +o3yDUxioXXgGD6oE/tvsRPHwmyTISp4Nc2AZiow8uw= Subject key identifier: B9:0D:03:CB:35:EF:22:56:4D:B8:2A:83:63:AC:6C:6B:C4:1F:59:A7 Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0CD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0CCB Signing time: Sun 24 Aug 2025 18:07:35 +0000 Manifest this update: Sun 24 Aug 2025 18:07:34 +0000 Manifest next update: Sun 31 Aug 2025 18:07:34 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: x3RqZ6o57OmxNI1pt63NmHp8x7CIz1SPcGahyXxZv9k=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: X3uR7nkHEkJDs/4UDZXjCbVpYlI7ETxizWrqRmPT3Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Aug 24 18:07:34 2025 GMT Not After : Aug 31 18:07:34 2025 GMT Subject: CN=68ab54e6-a913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ef:ff:84:7a:0f:b5:4a:6e:ae:ca:bb:bb:89: 5b:70:eb:c2:ce:2b:04:50:5e:8f:f3:4e:7b:be:8f: f3:44:f8:50:bb:ca:8c:7a:d8:63:84:d3:12:6c:b0: bd:41:78:23:35:24:0d:cb:72:3f:40:ab:d5:d1:ae: 34:28:b5:7b:7d:24:76:e4:1e:96:cf:53:65:4b:0f: dc:5f:af:d1:80:34:2c:10:fa:d4:35:fe:6d:30:64: 31:fa:3f:db:c3:c9:d3:2b:e0:15:71:05:8f:e1:10: 94:7f:73:4f:85:55:11:81:7b:ca:41:98:ad:c2:ca: af:7d:cf:1e:4d:0e:5f:d2:ad:34:ef:29:fc:4d:df: c3:70:72:b9:b2:18:5a:c0:1c:de:1b:f6:7b:0e:0d: 43:09:6d:7c:c8:4e:c4:c4:cf:9e:a0:ee:1f:48:24: 10:85:fc:5c:d1:ae:6d:01:6e:ae:44:45:4e:61:87: 96:3e:ac:cf:69:e2:71:6a:d3:de:30:d6:a3:e9:9e: 25:e7:f5:91:84:65:96:eb:0c:8a:42:4c:64:30:81: 7b:1e:06:38:2c:e4:cf:48:7b:05:14:55:7b:40:d2: e9:fd:fe:d1:93:e5:45:33:c8:37:4b:cf:a6:4e:51: 45:8b:cd:70:41:ae:da:e1:58:aa:e1:da:90:20:3d: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0D:03:CB:35:EF:22:56:4D:B8:2A:83:63:AC:6C:6B:C4:1F:59:A7 X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:75:61:24:38:06:dd:7a:6a:b4:48:b7:a4:0e:f4:99:de:45: ec:43:b5:5c:a1:7f:08:64:b9:82:95:cf:de:17:c7:46:d4:eb: b1:ed:db:5e:26:f5:01:a1:08:37:f5:a9:56:1a:92:c6:07:e5: e2:8c:3a:a0:c7:65:19:7f:1a:8c:4c:2a:24:59:29:10:c2:0a: 69:1b:7c:00:c5:f6:f1:07:e4:3e:b3:78:1c:bd:55:8c:30:bf: df:ce:5b:d8:45:46:a1:2d:b8:00:39:a3:89:15:48:4e:fa:11: b3:ee:fc:d9:1e:58:b5:6b:2e:d1:a1:02:89:99:94:40:86:bd: f9:51:fb:40:da:50:55:48:38:e6:c3:ba:36:db:66:6e:a4:18: 4c:67:fd:0b:01:1e:58:c3:95:6f:89:50:1f:32:70:71:cd:b5: 84:d1:3d:75:7f:cd:6e:33:eb:03:2c:f2:d6:77:98:60:c9:cb: fc:47:72:7f:fd:1c:88:62:89:b9:98:6c:71:0b:b8:dc:0b:66: 32:f0:a1:63:b3:4d:b3:d0:fd:e8:a1:9e:a4:04:96:93:54:0e: a4:d0:37:7f:41:b2:23:4d:4d:31:40:e2:cf:09:0c:d7:d9:cc: 43:45:1d:20:c1:70:a3:a4:e2:e1:a4:a2:83:35:31:bd:cb:71: b1:73:6d:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjUwODI0MTgwNzM0WhcNMjUwODMxMTgwNzM0WjAYMRYwFAYD VQQDEw02OGFiNTRlNi1hOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5u//hHoPtUpursq7u4lbcOvCzisEUF6P8057vo/zRPhQu8qMethjhNMSbLC9 QXgjNSQNy3I/QKvV0a40KLV7fSR25B6Wz1NlSw/cX6/RgDQsEPrUNf5tMGQx+j/b w8nTK+AVcQWP4RCUf3NPhVURgXvKQZitwsqvfc8eTQ5f0q007yn8Td/DcHK5shha wBzeG/Z7Dg1DCW18yE7ExM+eoO4fSCQQhfxc0a5tAW6uREVOYYeWPqzPaeJxatPe MNaj6Z4l5/WRhGWW6wyKQkxkMIF7HgY4LOTPSHsFFFV7QNLp/f7Rk+VFM8g3S8+m TlFFi81wQa7a4Viq4dqQID2sXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkNA8s1 7yJWTbgqg2OsbGvEH1mnMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCudWEkOAbdemq0SLekDvSZ3kXsQ7VcoX8IZLmClc/eF8dG1Oux7dte JvUBoQg39alWGpLGB+XijDqgx2UZfxqMTCokWSkQwgppG3wAxfbxB+Q+s3gcvVWM ML/fzlvYRUahLbgAOaOJFUhO+hGz7vzZHli1ay7RoQKJmZRAhr35UftA2lBVSDjm w7o222ZupBhMZ/0LAR5Yw5VviVAfMnBxzbWE0T11f81uM+sDLPLWd5hgycv8R3J/ /RyIYom5mGxxC7jcC2Yy8KFjs02z0P3ooZ6kBJaTVA6k0Dd/QbIjTU0xQOLPCQzX 2cxDRR0gwXCjpOLhpKKDNTG9y3Gxc20q -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:21 2025 by rpki-client