$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft File: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json) Hash identifier: tak90wn4U+H+pjGvFvX0iWbQ4bZwZ33IZwK4JptIkdQ= Subject key identifier: BA:27:FE:59:BB:E1:91:AF:D5:D8:44:6D:79:A6:62:7E:A3:A1:69:A0 Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Certificate serial: 0FB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft Manifest number: 0F9D Signing time: Thu 18 Sep 2025 17:42:35 +0000 Manifest this update: Thu 18 Sep 2025 17:42:34 +0000 Manifest next update: Thu 25 Sep 2025 17:42:34 +0000 Files and hashes: 1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: 6DxTTSYSnCvhYo7MRw5PE4/dJ3DJU7iWrruiUhnBfSc=) 2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: TQO7DA2C+52oraPsdnjGz3A009856ZzetwGGv8/CUtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4018 (0xfb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Validity Not Before: Sep 18 17:42:34 2025 GMT Not After : Sep 25 17:42:34 2025 GMT Subject: CN=68cc448b-aec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:e0:42:e8:ed:02:46:dc:8d:60:a8:4a:c9: 46:2f:9b:66:98:a9:34:ce:e1:8f:0c:27:7e:08:00: de:97:1c:09:66:1c:9a:af:c7:4c:ad:5d:41:21:8e: 77:f5:50:79:88:3a:e1:35:49:95:70:12:19:d9:24: 90:ba:98:e5:a0:61:fd:fc:7c:87:c9:c2:74:fb:28: 39:8e:85:0d:89:f9:24:cf:b5:32:4c:26:e5:41:41: 10:cc:4f:86:c6:62:b5:c4:0c:74:0d:5c:3e:bc:11: 7f:78:df:a9:f6:41:1f:a2:2e:66:b4:e7:49:a3:47: 09:08:f1:bd:08:9f:33:20:a4:d4:6f:42:65:f2:d8: 6e:26:c4:9b:86:e7:53:43:e2:b8:6b:8a:b6:fb:07: af:01:a3:ab:b7:0e:a1:6b:8a:83:f0:bf:37:c2:62: 06:38:f0:63:63:5a:fe:df:02:60:b3:eb:76:72:21: b6:d1:65:8d:90:42:6b:e1:5c:ee:6f:bc:7f:41:1c: 0a:b1:9d:2c:e1:fc:67:7e:d1:91:fb:54:ff:ff:c5: cd:36:15:65:dc:18:6e:70:42:78:27:7b:93:e6:48: a1:2f:88:fc:59:ca:b9:f1:23:6d:7d:93:98:ce:b3: ea:dc:02:e6:c7:73:ff:00:b0:9b:51:9a:72:69:e4: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:27:FE:59:BB:E1:91:AF:D5:D8:44:6D:79:A6:62:7E:A3:A1:69:A0 X509v3 Authority Key Identifier: keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:07:1f:d8:95:ee:16:26:d8:6e:b2:5a:62:1c:01:df:26:b1: 05:21:60:35:5f:e7:48:39:a2:5b:8f:57:37:12:67:9e:8e:e6: 0c:91:a0:5c:cc:9f:53:a5:dc:4c:77:1a:16:6d:f1:a0:70:fe: b6:04:89:a1:bd:a5:5f:a1:f6:19:ff:61:f4:9d:a1:57:d1:4b: a2:35:c6:30:9e:18:28:39:b3:16:f0:be:50:b5:5c:06:cc:e1: 82:e0:f9:1b:a2:5b:a5:88:25:65:9a:ba:e2:e4:46:02:16:39: 79:1b:31:07:29:99:c9:32:0a:1c:88:6d:ea:e6:49:76:07:39: 2a:b0:e9:97:c5:cc:c5:27:95:13:2f:18:fa:6b:06:0a:34:47: ab:9d:2f:4f:83:b9:8f:11:ff:c5:1d:5f:a2:bb:6a:9d:e5:ca: 36:af:11:7e:78:9e:f4:26:db:7b:53:a4:cf:34:de:b1:bb:7d: c3:a3:3b:d5:84:ff:9f:0b:9d:f2:ab:7b:bd:c7:3b:29:04:56: 5a:7d:f3:00:31:fc:8b:0b:32:21:2e:c3:28:1a:88:c2:e6:20: fe:6c:6f:ae:76:ab:33:17:ed:c8:60:79:d3:85:8b:12:d5:72: 0f:eb:c3:20:a2:09:1e:79:25:a8:68:e2:5e:82:ae:e2:bb:61: c2:a7:d3:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyRUUxMTAvBgNVBAUTKEM4MjQzNDc0MjVCQUM4QUY1OUI0RTE5NjZCQzEwREJG QThCREFCODIwHhcNMjUwOTE4MTc0MjM0WhcNMjUwOTI1MTc0MjM0WjAYMRYwFAYD VQQDEw02OGNjNDQ4Yi1hZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHTgQujtAkbcjWCoSslGL5tmmKk0zuGPDCd+CADelxwJZhyar8dMrV1BIY53 9VB5iDrhNUmVcBIZ2SSQupjloGH9/HyHycJ0+yg5joUNifkkz7UyTCblQUEQzE+G xmK1xAx0DVw+vBF/eN+p9kEfoi5mtOdJo0cJCPG9CJ8zIKTUb0Jl8thuJsSbhudT Q+K4a4q2+wevAaOrtw6ha4qD8L83wmIGOPBjY1r+3wJgs+t2ciG20WWNkEJr4Vzu b7x/QRwKsZ0s4fxnftGR+1T//8XNNhVl3BhucEJ4J3uT5kihL4j8Wcq58SNtfZOY zrPq3ALmx3P/ALCbUZpyaeRP/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLon/lm7 4ZGv1dhEbXmmYn6joWmgMB8GA1UdIwQYMBaAFMgkNHQlusivWbThlmvBDb+ovauC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjJFRS8xRjQxMUY1ODZD MjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlLOVp0T0dXYThFTnY2aTlx NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDUTBkQ1c2eUs5WnRPR1dhOEVOdjZpOXE0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjJFRS8xRjQxMUY1ODZDMjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlL OVp0T0dXYThFTnY2aTlxNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAABx/Yle4WJthuslpiHAHfJrEFIWA1X+dIOaJbj1c3EmeejuYMkaBc zJ9TpdxMdxoWbfGgcP62BImhvaVfofYZ/2H0naFX0UuiNcYwnhgoObMW8L5QtVwG zOGC4PkboluliCVlmrri5EYCFjl5GzEHKZnJMgociG3q5kl2BzkqsOmXxczFJ5UT Lxj6awYKNEernS9Pg7mPEf/FHV+iu2qd5co2rxF+eJ70Jtt7U6TPNN6xu33DozvV hP+fC53yq3u9xzspBFZaffMAMfyLCzIhLsMoGojC5iD+bG+udqszF+3IYHnThYsS 1XIP68MgogkeeSWoaOJegq7iu2HCp9ON -----END CERTIFICATE-----Generated at Fri Sep 19 06:56:20 2025 by rpki-client