$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft File: yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json) Hash identifier: 2m4Pwmb0KDwc0AUI5fMi9qDGyIy4Hqg0oBScJU/SHao= Subject key identifier: 25:8D:34:75:CB:D2:05:F0:63:5F:EE:54:F7:E9:B5:D2:8D:63:E9:F4 Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Certificate serial: 14AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft Manifest number: 14A8 Signing time: Mon 08 Sep 2025 16:53:27 +0000 Manifest this update: Mon 08 Sep 2025 16:53:26 +0000 Manifest next update: Mon 15 Sep 2025 16:53:26 +0000 Files and hashes: 1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: l3dmJZf8a0RgLpjo7L4yYX+Llx58cDBSC/pQOi45JBM=) 2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: 9CCdXAmyhsUIKZ6n8Wk1KKSvrNfp24roJJogpEjyBYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5290 (0x14aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Validity Not Before: Sep 8 16:53:26 2025 GMT Not After : Sep 15 16:53:26 2025 GMT Subject: CN=68bf0a07-30dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:f6:33:5f:46:e8:d0:f7:b9:1b:22:0b:57: 3f:ac:7d:9e:36:5b:60:c7:06:6c:f4:e4:2e:ca:30: 77:ff:98:5f:02:94:c8:32:ba:1a:65:26:47:7d:9f: 76:c0:40:35:9f:4a:2a:32:0f:e0:57:0f:8c:39:2f: 46:6f:95:2a:47:ce:3d:10:f4:d4:d5:4e:ce:3d:a0: eb:3a:b3:0d:3c:4e:28:39:8e:f3:cb:5d:56:df:93: da:76:b3:58:8d:6a:cc:90:53:cd:5c:c6:84:7c:cb: 50:49:cf:2a:f0:07:54:18:75:87:28:6a:18:86:50: c0:87:50:ee:76:80:80:f2:e8:92:c3:e9:3a:08:7a: b1:55:e9:29:fa:54:7f:f6:95:bf:e0:0d:99:b2:eb: 54:73:a1:42:e1:84:b0:d6:1a:de:fa:00:f6:c4:44: df:44:a7:14:cc:28:1e:49:00:37:25:1b:c2:10:39: 3d:eb:a5:45:6b:9d:42:55:63:c1:d7:06:fd:e9:60: e2:61:18:f5:4f:c9:1b:91:a7:34:cb:d3:11:fe:f5: 37:63:37:a7:f7:e1:cf:57:3d:78:16:f5:b0:e9:c9: 5a:63:9f:bb:52:54:e1:22:d3:93:75:4e:92:f5:a8: 73:f1:12:f9:80:f1:22:01:84:3f:35:24:b0:be:b2: 96:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8D:34:75:CB:D2:05:F0:63:5F:EE:54:F7:E9:B5:D2:8D:63:E9:F4 X509v3 Authority Key Identifier: keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:38:90:67:46:34:5f:ac:0e:65:0e:c9:ca:65:12:ce:72:83: 97:9f:5e:4c:c6:fd:1b:49:e8:e1:e0:d1:fc:3f:c2:e0:a5:43: e2:6f:c1:e6:19:dc:12:7f:44:be:2c:a0:e9:73:d6:8e:53:bf: c6:b2:15:89:a0:c7:09:b0:af:de:31:1b:fb:98:34:61:91:0a: 1f:0e:5b:06:de:2d:5f:f7:6c:4f:9b:21:a0:ac:03:3c:f9:ab: 79:11:e6:e1:57:74:5d:fb:4a:87:04:5f:fb:8b:1f:14:47:b2: 1c:66:30:27:4e:b7:af:f9:83:32:67:51:75:3a:c2:31:59:28: 13:d2:ad:70:ca:32:34:bf:c9:e1:17:88:f5:74:97:b9:e5:e1: b4:a6:d6:58:5a:01:41:bb:26:3f:dd:9f:da:56:bc:c4:20:d0: 21:17:55:02:34:ab:6a:48:c5:4c:a7:55:1d:33:ac:71:90:f6: c0:80:87:2b:2b:c5:cc:a7:b8:a1:6a:d4:73:2c:3d:9f:60:e6: 81:6b:51:d5:b9:4b:1f:c4:b4:5f:46:9b:bb:71:99:12:56:8c: 8a:b4:db:64:b4:6f:f6:2a:ef:43:e7:2d:4f:fb:ce:07:85:64: 13:11:56:85:16:d3:49:85:e4:b3:6a:e0:29:03:42:02:bb:0a: 75:38:fd:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEM5NEEwMzUwRTcwOUY1NkMyMzk2RTMwQjQ3MEM4QjVF MURGQjE3MDAwHhcNMjUwOTA4MTY1MzI2WhcNMjUwOTE1MTY1MzI2WjAYMRYwFAYD VQQDEw02OGJmMGEwNy0zMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcb2M19G6ND3uRsiC1c/rH2eNltgxwZs9OQuyjB3/5hfApTIMroaZSZHfZ92 wEA1n0oqMg/gVw+MOS9Gb5UqR849EPTU1U7OPaDrOrMNPE4oOY7zy11W35PadrNY jWrMkFPNXMaEfMtQSc8q8AdUGHWHKGoYhlDAh1DudoCA8uiSw+k6CHqxVekp+lR/ 9pW/4A2ZsutUc6FC4YSw1hre+gD2xETfRKcUzCgeSQA3JRvCEDk966VFa51CVWPB 1wb96WDiYRj1T8kbkac0y9MR/vU3Yzen9+HPVz14FvWw6claY5+7UlThItOTdU6S 9ahz8RL5gPEiAYQ/NSSwvrKWTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWNNHXL 0gXwY1/uVPfptdKNY+n0MB8GA1UdIwQYMBaAFMlKA1DnCfVsI5bjC0cMi14d+xcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8wMjMyODM0ODY3 Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlXd2psdU1MUnd5TFhoMzdG d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVb0RVT2NKOVd3amx1TUxSd3lMWGgzN0Z3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8wMjMyODM0ODY3Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlX d2psdU1MUnd5TFhoMzdGd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBROJBnRjRfrA5lDsnKZRLOcoOXn15Mxv0bSejh4NH8P8LgpUPib8Hm GdwSf0S+LKDpc9aOU7/GshWJoMcJsK/eMRv7mDRhkQofDlsG3i1f92xPmyGgrAM8 +at5EebhV3Rd+0qHBF/7ix8UR7IcZjAnTrev+YMyZ1F1OsIxWSgT0q1wyjI0v8nh F4j1dJe55eG0ptZYWgFBuyY/3Z/aVrzEINAhF1UCNKtqSMVMp1UdM6xxkPbAgIcr K8XMp7ihatRzLD2fYOaBa1HVuUsfxLRfRpu7cZkSVoyKtNtktG/2Ku9D5y1P+84H hWQTEVaFFtNJheSzauApA0ICuwp1OP0C -----END CERTIFICATE-----Generated at Tue Sep 9 13:13:39 2025 by rpki-client