$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft File: YhuBwQnlqnjYKfMKV9o1MwglT2k.mft (raw, json) Hash identifier: LD/i/dseVOLyyAz0TE1pPWNfXck02+VI9EPqUjGFRZY= Subject key identifier: 28:B4:1B:48:12:91:01:FC:0E:38:97:86:FF:A0:CA:90:02:A6:5D:A8 Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 Certificate issuer: /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft Manifest number: 045E Signing time: Thu 21 Aug 2025 00:20:30 +0000 Manifest this update: Thu 21 Aug 2025 00:20:29 +0000 Manifest next update: Thu 28 Aug 2025 00:20:29 +0000 Files and hashes: 1: YhuBwQnlqnjYKfMKV9o1MwglT2k.crl (hash: PGp3K5enkv3Ax/XpfToJRywgRSw2sbvz1Dkw3MexFy0=) 2: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (hash: bAaCSc9TYM7K2UkBDoNWyjDrI2lpV2TgVDZgy3NjGCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138D62, serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Validity Not Before: Aug 21 00:20:29 2025 GMT Not After : Aug 28 00:20:29 2025 GMT Subject: CN=68a6664d-46e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:91:07:f3:4b:d7:7c:c6:67:55:10:a4:1f: cc:06:26:3b:0b:33:f5:5f:92:ce:f1:eb:d4:6b:2e: 0a:2c:75:80:79:78:d6:73:28:3c:4c:a8:5a:8c:51: 9d:b3:e3:17:f4:f6:f3:0e:bc:d2:e4:89:f6:f2:e1: 26:87:1e:62:e2:32:f0:23:3d:4e:81:98:92:f7:44: 36:36:72:38:88:17:37:6b:97:6a:86:10:5f:fe:c3: 5c:51:a3:88:ea:6e:ba:12:d5:70:74:4a:33:d4:c0: ae:7e:b4:81:18:ea:cc:4b:58:a3:39:d6:c9:21:72: da:1e:dc:53:76:25:00:a0:d7:07:4b:d9:23:83:31: 35:d0:cb:7a:24:8f:5c:b9:2b:c4:d0:a2:7b:fa:d7: 72:c4:f1:d9:41:0a:12:d8:f5:8b:61:84:1a:9c:12: 46:7c:a7:67:36:70:7d:42:e2:de:bc:90:98:35:11: 92:6d:8d:f4:96:92:2b:0a:86:f0:2b:dc:ee:4f:fa: 96:e6:f7:b9:be:02:bb:b5:34:92:fb:bd:7b:07:70: ab:e7:2e:a9:91:c0:47:b8:e4:35:fb:3b:43:9b:1b: 3d:30:04:25:0b:a9:b6:e1:6c:59:f4:d7:02:17:50: f4:cd:87:65:6e:dd:8a:ed:74:7d:e3:2e:9b:92:a8: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:1B:48:12:91:01:FC:0E:38:97:86:FF:A0:CA:90:02:A6:5D:A8 X509v3 Authority Key Identifier: keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:4e:5a:78:e2:29:d1:1f:1c:1d:f4:3b:e5:a2:e0:91:91:45: 28:0e:6e:f3:d3:44:e6:12:7b:10:9c:fc:4a:3e:2e:45:ab:d1: e5:4b:08:04:88:be:92:a0:bc:95:d3:a3:52:98:40:24:a6:96: 6a:9a:90:e0:8e:d5:90:a9:11:04:3d:0f:4f:0f:2b:5c:0e:e5: 12:67:3b:e4:cf:78:fd:f5:4d:8b:32:65:de:a5:66:d9:6b:83: 62:3a:88:3f:f2:39:9e:4c:f5:c7:d1:ee:cd:59:f1:94:ac:e4: e4:52:7b:33:76:9b:24:3c:0d:02:34:89:b7:a1:28:58:bc:5f: 83:3c:a3:48:42:8d:7a:2f:ac:b9:62:f0:6b:1c:20:7e:18:f9: e6:85:64:ff:37:75:df:5d:39:29:d3:6e:c4:c3:27:40:88:3f: 30:12:b1:61:ec:01:b3:ab:15:b8:02:1f:b8:e2:35:4c:10:12: 8d:b4:af:a5:1c:fb:48:66:7f:04:eb:fe:e6:7f:2e:b5:f7:c9: 08:b0:3c:de:0d:75:ac:f2:dc:d5:49:b3:f2:70:e3:d3:d9:00: 25:26:e1:c4:17:ee:84:a8:be:9f:bf:96:16:31:d8:3d:fa:15: 5e:f7:33:92:74:87:62:a8:42:35:d2:8d:71:c0:bf:d4:8b:af: 0f:2c:12:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhENjIxMTAvBgNVBAUTKDYyMUI4MUMxMDlFNUFBNzhEODI5RjMwQTU3REEzNTMz MDgyNTRGNjkwHhcNMjUwODIxMDAyMDI5WhcNMjUwODI4MDAyMDI5WjAYMRYwFAYD VQQDEw02OGE2NjY0ZC00NmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuiRB/NL13zGZ1UQpB/MBiY7CzP1X5LO8evUay4KLHWAeXjWcyg8TKhajFGd s+MX9PbzDrzS5In28uEmhx5i4jLwIz1OgZiS90Q2NnI4iBc3a5dqhhBf/sNcUaOI 6m66EtVwdEoz1MCufrSBGOrMS1ijOdbJIXLaHtxTdiUAoNcHS9kjgzE10Mt6JI9c uSvE0KJ7+tdyxPHZQQoS2PWLYYQanBJGfKdnNnB9QuLevJCYNRGSbY30lpIrCobw K9zuT/qW5ve5vgK7tTSS+717B3Cr5y6pkcBHuOQ1+ztDmxs9MAQlC6m24WxZ9NcC F1D0zYdlbt2K7XR94y6bkqh1RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi0G0gS kQH8DjiXhv+gypACpl2oMB8GA1UdIwQYMBaAFGIbgcEJ5ap42CnzClfaNTMIJU9p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEQ2Mi9CQ0I0MEE1ODVG Q0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFuallLZk1LVjlvMU13Z2xU MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lodUJ3UW5scW5qWUtmTUtWOW8xTXdnbFQyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEQ2Mi9CQ0I0MEE1ODVGQ0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFu allLZk1LVjlvMU13Z2xUMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Tlp44inRHxwd9DvlouCRkUUoDm7z00TmEnsQnPxKPi5Fq9HlSwgE iL6SoLyV06NSmEAkppZqmpDgjtWQqREEPQ9PDytcDuUSZzvkz3j99U2LMmXepWbZ a4NiOog/8jmeTPXH0e7NWfGUrOTkUnszdpskPA0CNIm3oShYvF+DPKNIQo16L6y5 YvBrHCB+GPnmhWT/N3XfXTkp027EwydAiD8wErFh7AGzqxW4Ah+44jVMEBKNtK+l HPtIZn8E6/7mfy6198kIsDzeDXWs8tzVSbPycOPT2QAlJuHEF+6EqL6fv5YWMdg9 +hVe9zOSdIdiqEI10o1xwL/Ui68PLBLs -----END CERTIFICATE-----Generated at Fri Aug 22 16:20:35 2025 by rpki-client