$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft File: YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json) Hash identifier: bB9mHJFxSgJalkICnya8Rl+JXX5bVbh7J4AEe4Ct2kc= Subject key identifier: 9B:EA:7F:FE:10:E9:E7:DB:FF:DA:76:E9:3D:3B:A2:D8:05:F5:EF:5A Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B Certificate issuer: /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Certificate serial: 0742 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft Manifest number: 0737 Signing time: Sat 06 Sep 2025 22:02:25 +0000 Manifest this update: Sat 06 Sep 2025 22:02:24 +0000 Manifest next update: Sat 13 Sep 2025 22:02:24 +0000 Files and hashes: 1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: EQrO2h3D9zE4BCGntZ6uP4llkYrEK7gDzxnnPEd+w2E=) 2: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: zn3yB42jw2hzH+xn19p165uLAUG2n0kqHzuj3/mwn8o=) 3: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: HCayWNYMawI3TC+eVTwbN3SfHqs+Xl6h8HaND1yg0zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1858 (0x742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A88D, serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Validity Not Before: Sep 6 22:02:24 2025 GMT Not After : Sep 13 22:02:24 2025 GMT Subject: CN=68bcaf70-5149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6d:ff:2f:f8:21:dd:b3:10:28:73:45:26:26: cd:c4:73:ed:1d:70:d3:09:ca:7a:6f:0d:76:e9:8d: 81:4a:aa:89:46:75:f5:b9:6e:0e:e1:c8:3b:04:2d: c4:7b:68:f4:49:8e:01:55:06:a4:68:0f:d4:a3:8b: 45:01:e8:b0:08:1f:23:df:02:b7:ec:af:3a:60:ce: 38:a1:d8:1c:aa:93:24:35:d0:d5:0c:44:a5:8a:35: 1c:e1:10:ac:0c:2d:b4:71:79:48:6e:2f:82:b2:97: fc:11:98:50:56:bb:d6:99:a0:d6:16:52:9a:31:a6: af:ec:71:1a:05:18:e2:54:44:15:28:8c:2a:ac:00: 66:54:c1:fe:9f:66:c8:41:48:95:81:c7:d7:89:8d: 8e:a8:97:fb:a7:46:ef:bf:8f:0e:8b:f9:07:d6:c8: 1a:bf:4b:f1:a7:8d:1d:64:40:32:f8:66:6b:ff:5e: 3c:0b:3b:4a:f6:6e:2d:1d:7b:f4:49:ef:1b:85:a4: bf:95:2a:dd:90:5e:33:17:8a:11:6b:09:a3:25:4e: 68:d6:98:ab:4e:a7:97:b6:1a:a0:ee:d3:5f:14:f8: e6:bc:80:3e:cc:54:8e:ac:f2:3e:97:d6:a9:af:3d: bc:16:08:35:c3:95:27:ad:ff:32:92:13:7d:58:dd: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EA:7F:FE:10:E9:E7:DB:FF:DA:76:E9:3D:3B:A2:D8:05:F5:EF:5A X509v3 Authority Key Identifier: keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fc:35:3f:00:e7:7e:ea:dc:d6:90:23:c9:83:d6:1b:31:73: 19:c8:68:f3:3f:f8:73:5a:b9:f5:6c:41:00:3f:76:1c:72:9f: 48:ce:d8:c0:ab:62:e4:65:36:66:96:18:93:c5:bc:6f:1a:79: 58:7d:67:ba:09:1f:2a:40:76:bf:00:8d:10:7e:75:4c:b1:0f: 09:14:2b:85:91:72:b5:24:d2:3a:ea:4f:40:c6:36:f1:fd:b4: 72:ad:3a:24:5c:fe:56:a6:db:0c:6c:d2:ea:f0:38:59:c8:3a: 06:f3:49:8c:22:be:df:63:90:6c:69:8b:23:6d:cc:d4:7a:13: 65:3d:b9:bf:18:a3:c3:5b:1d:f0:6a:eb:55:1f:20:d6:63:05: 4d:e8:82:6f:31:ec:5a:05:c7:cc:31:d1:de:6f:90:82:be:8c: 8e:d5:ff:11:c8:63:53:c1:15:76:0c:80:ad:90:9c:93:67:bb: f7:7a:e9:02:67:1c:74:fa:58:c8:28:69:73:66:7a:14:c8:cb: 9b:1e:3d:e6:cd:62:2f:2e:c6:1f:61:53:5c:29:0f:87:9f:54: 20:d3:3d:ce:82:04:67:b0:c3:3f:5b:6c:14:f6:87:da:da:6c: cd:99:db:61:2b:8f:6a:e4:bf:10:f2:5d:8e:90:64:a0:16:10: 95:1b:1e:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4OEQxMTAvBgNVBAUTKDYwNkYzMzRCN0U4MDAzQTNDODIxRDBDOTg0MTlCMzE0 M0E5QTNFNEIwHhcNMjUwOTA2MjIwMjI0WhcNMjUwOTEzMjIwMjI0WjAYMRYwFAYD VQQDEw02OGJjYWY3MC01MTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8m3/L/gh3bMQKHNFJibNxHPtHXDTCcp6bw126Y2BSqqJRnX1uW4O4cg7BC3E e2j0SY4BVQakaA/Uo4tFAeiwCB8j3wK37K86YM44odgcqpMkNdDVDESlijUc4RCs DC20cXlIbi+Cspf8EZhQVrvWmaDWFlKaMaav7HEaBRjiVEQVKIwqrABmVMH+n2bI QUiVgcfXiY2OqJf7p0bvv48Oi/kH1sgav0vxp40dZEAy+GZr/148CztK9m4tHXv0 Se8bhaS/lSrdkF4zF4oRawmjJU5o1pirTqeXthqg7tNfFPjmvIA+zFSOrPI+l9ap rz28Fgg1w5Unrf8ykhN9WN1XAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvqf/4Q 6efb/9p26T07otgF9e9aMB8GA1UdIwQYMBaAFGBvM0t+gAOjyCHQyYQZsxQ6mj5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTg4RC9GMEYxOUYyMDQy OTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2UElJZERKaEJtekZEcWFQ a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHOHpTMzZBQTZQSUlkREpoQm16RkRxYVBrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTg4RC9GMEYxOUYyMDQyOTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2 UElJZERKaEJtekZEcWFQa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa/DU/AOd+6tzWkCPJg9YbMXMZyGjzP/hzWrn1bEEAP3Yccp9IztjA q2LkZTZmlhiTxbxvGnlYfWe6CR8qQHa/AI0QfnVMsQ8JFCuFkXK1JNI66k9Axjbx /bRyrTokXP5WptsMbNLq8DhZyDoG80mMIr7fY5BsaYsjbczUehNlPbm/GKPDWx3w autVHyDWYwVN6IJvMexaBcfMMdHeb5CCvoyO1f8RyGNTwRV2DICtkJyTZ7v3eukC Zxx0+ljIKGlzZnoUyMubHj3mzWIvLsYfYVNcKQ+Hn1Qg0z3OggRnsMM/W2wU9ofa 2mzNmdthK49q5L8Q8l2OkGSgFhCVGx6T -----END CERTIFICATE-----Generated at Mon Sep 8 17:54:20 2025 by rpki-client