$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json) Hash identifier: oVTkRu/pCGIt0MRILSaMStCJsltiDBH3POUgmeICNrU= Subject key identifier: 24:BF:76:D6:E7:30:93:42:31:12:42:78:00:6F:D7:11:BB:7F:B1:E9 Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft Manifest number: 0162 Signing time: Wed 17 Sep 2025 04:32:54 +0000 Manifest this update: Wed 17 Sep 2025 04:32:54 +0000 Manifest next update: Wed 24 Sep 2025 04:32:54 +0000 Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: 2EHK4YLWTVaE0LxKZ+lExvy7d/CIXz3SAxno2GQxVfQ=) 2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: Au9LqYxSegxqPey9TLXuRtICRWaNbswTGw/Qw/oD2tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: Sep 17 04:32:54 2025 GMT Not After : Sep 24 04:32:54 2025 GMT Subject: CN=68ca39f6-98c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:81:4f:62:31:e3:b5:ed:37:29:3c:09:2c: b5:57:82:a9:46:94:0f:2a:b5:8e:3a:b1:ad:56:53: 8f:c5:2d:b6:f3:03:43:e3:ec:b2:50:db:8b:1e:77: c9:62:a1:ae:7f:ef:d2:cf:04:ed:ea:e1:72:de:96: 5a:de:32:3e:61:aa:e4:ea:ab:1d:9b:fc:79:7c:17: 41:dc:97:7e:ab:85:4c:ac:02:15:cc:d2:25:f1:7c: 26:04:fb:cb:a8:6e:f1:e2:dd:30:de:0e:b6:7a:da: 3d:16:84:c5:98:c3:57:f7:eb:43:ac:22:a4:40:e3: 17:03:31:cb:f2:a9:85:b8:e7:11:55:36:85:50:ef: 31:61:66:0d:65:5a:2e:c8:85:52:db:ca:c6:be:c0: bf:70:76:73:79:21:b4:62:1d:9c:b4:69:f7:60:5c: 8f:f8:78:25:71:b0:6f:f8:0a:01:46:2b:01:8b:c4: 16:73:cc:e1:4a:0c:c5:cc:5a:18:53:32:c9:51:1b: 64:0a:59:3a:f5:4c:e7:3b:10:be:e6:c3:e2:17:55: 29:74:89:7f:9f:c4:b1:79:2c:09:c3:87:99:0d:f9: 80:26:49:44:4f:d6:94:9a:9c:e2:e2:20:a6:a5:07: b4:2e:a6:17:bb:a6:3e:3b:25:cd:17:ae:c1:94:da: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BF:76:D6:E7:30:93:42:31:12:42:78:00:6F:D7:11:BB:7F:B1:E9 X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:8e:c6:1f:c1:0a:a5:ae:e1:4b:3a:59:28:44:f5:d2:8f:9d: 02:37:c7:a1:eb:42:58:91:0d:37:a8:a6:1c:2d:d6:2f:c8:b3: ee:ef:c0:8f:2b:a6:e9:1a:07:0f:30:55:2c:d6:d3:76:bd:90: 5a:1f:00:2d:60:9a:e5:8a:47:33:a7:20:4b:b3:91:c5:e0:00: d0:d4:83:b5:e1:ac:6b:fd:77:90:3f:ab:45:cc:66:c7:29:41: 30:13:16:6a:8b:f8:3a:80:b1:cb:3d:fd:20:9c:44:d8:d3:94: 2b:8e:ef:27:a7:af:b0:6f:df:19:eb:ba:85:73:05:ec:19:bf: ac:19:27:f6:86:95:4c:1a:9d:66:45:39:09:ce:d1:bc:73:d0: 4d:71:48:6d:dc:8b:eb:89:65:e2:f0:ec:79:b9:cf:9b:2a:36: de:29:02:44:5a:99:82:cc:34:37:93:86:33:49:37:8b:a9:8d: 94:21:45:ef:37:3c:d7:47:52:b4:3f:98:71:a3:7f:3c:ac:b0: f5:cf:f6:c6:b8:ba:bb:a5:9e:61:1f:bd:4f:6b:9a:47:2f:67: 89:53:d9:a1:5f:9c:62:89:36:0b:56:09:4c:21:45:79:60:e2: 90:3e:34:ee:79:23:a6:d0:d0:88:09:3c:84:3e:49:06:85:09: 98:30:52:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNzAxMTAvBgNVBAUTKDYyMkU3NjYyRDlGQkUxMEMxQUFFMEJERkU5ODhEQjk5 NkFFM0ZENTkwHhcNMjUwOTE3MDQzMjU0WhcNMjUwOTI0MDQzMjU0WjAYMRYwFAYD VQQDEw02OGNhMzlmNi05OGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLuBT2Ix47XtNyk8CSy1V4KpRpQPKrWOOrGtVlOPxS228wND4+yyUNuLHnfJ YqGuf+/SzwTt6uFy3pZa3jI+Yark6qsdm/x5fBdB3Jd+q4VMrAIVzNIl8XwmBPvL qG7x4t0w3g62eto9FoTFmMNX9+tDrCKkQOMXAzHL8qmFuOcRVTaFUO8xYWYNZVou yIVS28rGvsC/cHZzeSG0Yh2ctGn3YFyP+HglcbBv+AoBRisBi8QWc8zhSgzFzFoY UzLJURtkClk69UznOxC+5sPiF1UpdIl/n8SxeSwJw4eZDfmAJklET9aUmpzi4iCm pQe0LqYXu6Y+OyXNF67BlNpZEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCS/dtbn MJNCMRJCeABv1xG7f7HpMB8GA1UdIwQYMBaAFGIudmLZ++EMGq4L3+mI25lq4/1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI3MC9DQ0I0NTRBNDcz QTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRRd2FyZ3ZmNllqYm1Xcmpf VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI3MC9DQ0I0NTRBNDczQTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRR d2FyZ3ZmNllqYm1XcmpfVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFjsYfwQqlruFLOlkoRPXSj50CN8eh60JYkQ03qKYcLdYvyLPu78CP K6bpGgcPMFUs1tN2vZBaHwAtYJrlikczpyBLs5HF4ADQ1IO14axr/XeQP6tFzGbH KUEwExZqi/g6gLHLPf0gnETY05Qrju8np6+wb98Z67qFcwXsGb+sGSf2hpVMGp1m RTkJztG8c9BNcUht3IvriWXi8Ox5uc+bKjbeKQJEWpmCzDQ3k4YzSTeLqY2UIUXv NzzXR1K0P5hxo388rLD1z/bGuLq7pZ5hH71Pa5pHL2eJU9mhX5xiiTYLVglMIUV5 YOKQPjTueSOm0NCICTyEPkkGhQmYMFIW -----END CERTIFICATE-----Generated at Thu Sep 18 20:34:46 2025 by rpki-client