$ rpki-client -vvf rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft File: yyTPMxKhYnFYzDraiI5bywxnzqE.mft (raw, json) Hash identifier: wm/czvXWrZm0jtNcGoQ5E83lTwZLVTyNE4qyta2Ax8M= Subject key identifier: EE:65:AC:FA:03:E7:DF:96:09:30:31:97:CE:CA:00:C9:6E:1E:01:53 Authority key identifier: CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1 Certificate issuer: /CN=A9122342/serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1 Certificate serial: 09B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft Manifest number: 09AD Signing time: Wed 20 Aug 2025 20:05:55 +0000 Manifest this update: Wed 20 Aug 2025 20:05:55 +0000 Manifest next update: Wed 27 Aug 2025 20:05:55 +0000 Files and hashes: 1: yyTPMxKhYnFYzDraiI5bywxnzqE.crl (hash: vM71ZhltUh8mr03xdixtJ5/w2HWFd8vkIGvLBp/Qjnk=) 2: 4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa (hash: lg62QlYMqjfdPrlhdfFEapPKxJAEOZfWw6bA0op19ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2484 (0x9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122342, serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1 Validity Not Before: Aug 20 20:05:55 2025 GMT Not After : Aug 27 20:05:55 2025 GMT Subject: CN=68a62aa3-caf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c0:e3:77:a1:1b:b3:0b:1b:25:4f:56:31:e4: 64:b3:3c:24:8c:e9:9c:d8:cf:99:a1:9b:00:df:ce: 34:97:cb:e8:3c:5f:30:81:01:68:44:fb:a1:06:8a: 4d:9f:87:90:96:90:41:7c:83:21:64:be:37:b1:d3: 76:ad:a0:84:af:fa:c7:96:2f:e2:cf:5e:78:ad:29: 5c:6b:6c:cf:63:b5:c4:fc:ff:c1:88:17:57:7f:1b: 3d:33:21:7e:d2:7d:a5:5f:28:d5:a8:50:04:19:dd: db:80:67:98:a9:2f:8c:a3:ec:3f:c4:29:b8:91:3b: e3:51:e6:da:f8:7a:5f:90:6b:5b:7a:5f:87:19:78: 24:ae:7b:bf:5e:8f:4f:f9:7a:e8:03:c4:65:e2:bc: 01:07:1e:3e:fc:69:a0:9f:67:2d:a3:8d:f7:44:7f: cc:a8:12:8e:57:1c:c7:d3:07:a5:96:b7:94:0f:b3: 9d:ad:07:d1:cd:7c:02:fa:07:74:22:75:27:d1:a6: 78:6b:74:72:75:1a:44:9b:c6:9b:be:83:c7:2e:01: 21:da:64:c8:04:59:e1:21:2d:f1:63:62:1d:2a:4e: 73:4b:58:16:11:c4:2b:3c:5d:9d:ac:0c:6d:0c:e4: 34:1d:d1:6d:7a:ad:a2:a5:8e:13:95:41:70:d2:fe: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:65:AC:FA:03:E7:DF:96:09:30:31:97:CE:CA:00:C9:6E:1E:01:53 X509v3 Authority Key Identifier: keyid:CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:69:8f:6a:98:d1:82:5f:b4:42:6d:98:06:30:d9:a9:1b:40: eb:39:fd:d0:2e:8c:46:9c:9e:f4:0d:6c:f5:6a:2c:92:57:91: d2:83:a9:e3:0e:c9:02:14:35:27:67:6b:2b:77:ec:79:4c:8a: bf:36:df:a6:3b:af:68:94:34:df:71:20:6d:9f:54:ff:02:4e: 3a:01:6f:91:61:9a:f4:d1:ba:45:79:91:32:fa:d5:8d:df:39: 39:4b:65:3e:af:1c:b8:d3:1b:0f:74:94:e2:b8:1a:86:2b:7b: 41:0e:92:3c:70:45:1f:de:7e:c6:41:0e:cd:0a:2d:70:54:1b: a9:a3:c9:c8:c0:39:8f:99:8b:47:6f:a2:f5:2e:38:aa:6b:ce: ac:17:a9:40:93:51:30:7a:f8:e4:8c:17:81:9c:ff:b1:40:f9: 94:05:11:fa:39:eb:8a:99:88:97:09:a6:8a:97:18:ac:dc:f4: 3e:34:f3:95:15:14:6e:db:f7:ed:ac:80:97:89:7f:89:8c:9f: 91:5b:78:b8:85:9b:22:03:0a:cf:f9:80:27:53:b1:25:9c:8d: b6:5c:c5:5e:19:6e:f4:f0:95:ce:e9:82:d4:d7:71:b0:2a:00: 7c:29:9d:72:23:ee:f3:8e:1c:2c:28:7e:5a:10:98:f2:52:2b: 5b:c6:8f:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIzNDIxMTAvBgNVBAUTKENCMjRDRjMzMTJBMTYyNzE1OENDM0FEQTg4OEU1QkNC MEM2N0NFQTEwHhcNMjUwODIwMjAwNTU1WhcNMjUwODI3MjAwNTU1WjAYMRYwFAYD VQQDEw02OGE2MmFhMy1jYWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MDjd6EbswsbJU9WMeRkszwkjOmc2M+ZoZsA3840l8voPF8wgQFoRPuhBopN n4eQlpBBfIMhZL43sdN2raCEr/rHli/iz154rSlca2zPY7XE/P/BiBdXfxs9MyF+ 0n2lXyjVqFAEGd3bgGeYqS+Mo+w/xCm4kTvjUeba+HpfkGtbel+HGXgkrnu/Xo9P +XroA8Rl4rwBBx4+/Gmgn2cto433RH/MqBKOVxzH0wellreUD7OdrQfRzXwC+gd0 InUn0aZ4a3RydRpEm8abvoPHLgEh2mTIBFnhIS3xY2IdKk5zS1gWEcQrPF2drAxt DOQ0HdFteq2ipY4TlUFw0v6JKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5lrPoD 59+WCTAxl87KAMluHgFTMB8GA1UdIwQYMBaAFMskzzMSoWJxWMw62oiOW8sMZ86h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM0Mi8wQjQxMDBDMDhF OEMxMUVBQkQzNDU4MTFDNEY5QUUwMi95eVRQTXhLaFluRll6RHJhaUk1Ynl3eG56 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5VFBNeEtoWW5GWXpEcmFpSTVieXd4bnpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjM0Mi8wQjQxMDBDMDhFOEMxMUVBQkQzNDU4MTFDNEY5QUUwMi95eVRQTXhLaFlu Rll6RHJhaUk1Ynl3eG56cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeaY9qmNGCX7RCbZgGMNmpG0DrOf3QLoxGnJ70DWz1aiySV5HSg6nj DskCFDUnZ2srd+x5TIq/Nt+mO69olDTfcSBtn1T/Ak46AW+RYZr00bpFeZEy+tWN 3zk5S2U+rxy40xsPdJTiuBqGK3tBDpI8cEUf3n7GQQ7NCi1wVBupo8nIwDmPmYtH b6L1Ljiqa86sF6lAk1EwevjkjBeBnP+xQPmUBRH6OeuKmYiXCaaKlxis3PQ+NPOV FRRu2/ftrICXiX+JjJ+RW3i4hZsiAwrP+YAnU7ElnI22XMVeGW708JXO6YLU13Gw KgB8KZ1yI+7zjhwsKH5aEJjyUitbxo+j -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:08 2025 by rpki-client