$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json) Hash identifier: sB/xL7aa/g2tTd/KqcWpVfxSICrZfUUY1b8wiqusqAc= Subject key identifier: FC:A0:8C:C1:7C:A8:A7:6D:BC:16:DA:C5:0D:FF:36:FB:CB:FD:D4:F8 Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft Manifest number: 042F Signing time: Thu 21 Aug 2025 00:26:47 +0000 Manifest this update: Thu 21 Aug 2025 00:26:46 +0000 Manifest next update: Thu 28 Aug 2025 00:26:46 +0000 Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: jgEwduzczfHCXygJNnGRA/J+828wap6sMscQqsQ98Kw=) 2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: VxhE0yOw2UpFEmn9cUfGr5NqfhjBpOy+NCMi8LSn31o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BA8, serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Validity Not Before: Aug 21 00:26:46 2025 GMT Not After : Aug 28 00:26:46 2025 GMT Subject: CN=68a667c6-a58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:c8:9d:6a:95:42:c3:f7:4e:8f:fe:2e:1b: 16:36:e8:0a:d1:50:44:04:97:f8:f4:05:0c:a1:06: da:53:5e:60:5e:89:0b:1e:01:c6:83:56:4d:a2:1a: db:89:80:6e:fb:1c:bc:d7:24:5e:22:ce:f0:c0:89: d7:c8:6f:bd:3f:6c:12:25:88:4d:c6:c6:da:e8:ad: 3d:7b:f9:60:42:d8:54:1d:21:6b:d0:e9:f9:c6:33: 7b:89:47:79:56:23:70:13:ca:d9:66:ce:30:e1:21: b4:ac:5c:da:e2:b9:d7:41:86:10:93:b0:ba:10:96: 13:1d:97:c1:88:7b:76:9e:f5:d4:17:05:5b:e6:31: 80:8c:ef:e3:ca:03:09:55:35:12:0b:dc:8d:f4:9e: a5:2f:12:56:4a:33:91:56:67:1c:a4:d2:cb:23:50: fa:57:30:8e:40:3c:ad:1c:4c:00:1b:bd:5b:f3:22: 35:9f:b7:6d:1d:d2:bb:44:87:40:de:e0:5f:19:df: ea:f2:ae:13:29:70:c0:62:66:7d:5d:0e:d4:35:d9: c3:f8:e3:5c:80:5b:fe:67:3c:2c:c8:cb:ef:38:b4: e9:63:ee:94:6f:99:e6:2c:0d:45:6a:5d:60:ee:31: a4:35:05:88:fa:30:f5:5f:9b:75:03:e8:da:67:ab: c3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A0:8C:C1:7C:A8:A7:6D:BC:16:DA:C5:0D:FF:36:FB:CB:FD:D4:F8 X509v3 Authority Key Identifier: keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:fd:cc:18:b3:4c:7a:bc:dc:f1:93:12:74:77:17:9b:61:26: 3b:61:f1:e6:e8:6f:8a:b2:21:9c:aa:73:3a:ed:93:6f:79:b5: 05:bb:44:eb:ad:79:4b:a9:39:69:73:af:4d:8d:8d:db:72:49: 56:51:6b:c1:45:f5:51:6b:bf:68:3a:e2:9b:81:59:e2:51:41: fd:7f:6c:55:c6:9b:ee:53:28:af:99:05:67:78:8e:88:c8:7e: d7:fe:9a:27:3a:52:34:87:87:b1:44:4c:10:b6:b1:27:57:73: be:77:55:01:a0:39:94:f8:14:ce:a7:0c:c1:8b:1c:ac:1a:30: 6a:a8:7b:c5:83:17:59:27:f1:be:f9:92:29:07:a7:22:28:b1: f7:09:5e:6f:79:d7:6b:07:0d:e4:15:7d:9a:8f:99:9a:4e:ef: bd:da:9b:24:ad:d9:ee:54:f2:65:6c:0a:4f:22:c1:00:ee:8b: 19:dd:c5:38:95:05:43:fc:91:34:9e:fd:af:96:da:1f:ba:fd: a7:d8:e7:fb:5c:ad:ad:2a:6d:76:ee:53:35:f2:a9:8b:08:e7: 86:ec:e2:b2:48:a2:f1:3a:a3:c9:96:95:27:ae:36:ad:86:ec: 2b:4a:32:b3:49:75:74:3f:3d:cf:ef:84:02:d5:de:7c:d3:e6: a0:43:7f:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQTgxMTAvBgNVBAUTKENBNTU5NDEyRTJBMjM4MDIxQTk0RUYyNzE4RURCMDAx RUY5NkVBODUwHhcNMjUwODIxMDAyNjQ2WhcNMjUwODI4MDAyNjQ2WjAYMRYwFAYD VQQDEw02OGE2NjdjNi1hNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMjInWqVQsP3To/+LhsWNugK0VBEBJf49AUMoQbaU15gXokLHgHGg1ZNohrb iYBu+xy81yReIs7wwInXyG+9P2wSJYhNxsba6K09e/lgQthUHSFr0On5xjN7iUd5 ViNwE8rZZs4w4SG0rFza4rnXQYYQk7C6EJYTHZfBiHt2nvXUFwVb5jGAjO/jygMJ VTUSC9yN9J6lLxJWSjORVmccpNLLI1D6VzCOQDytHEwAG71b8yI1n7dtHdK7RIdA 3uBfGd/q8q4TKXDAYmZ9XQ7UNdnD+ONcgFv+ZzwsyMvvOLTpY+6Ub5nmLA1Fal1g 7jGkNQWI+jD1X5t1A+jaZ6vDdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPygjMF8 qKdtvBbaxQ3/NvvL/dT4MB8GA1UdIwQYMBaAFMpVlBLiojgCGpTvJxjtsAHvluqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJBOC9ERTc4RDU4Qzcy MDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9BSWFsTzhuR08yd0FlLVc2 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsV1VFdUtpT0FJYWxPOG5HTzJ3QWUtVzZvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJBOC9ERTc4RDU4QzcyMDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9B SWFsTzhuR08yd0FlLVc2b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn/cwYs0x6vNzxkxJ0dxebYSY7YfHm6G+KsiGcqnM67ZNvebUFu0Tr rXlLqTlpc69NjY3bcklWUWvBRfVRa79oOuKbgVniUUH9f2xVxpvuUyivmQVneI6I yH7X/ponOlI0h4exREwQtrEnV3O+d1UBoDmU+BTOpwzBixysGjBqqHvFgxdZJ/G+ +ZIpB6ciKLH3CV5veddrBw3kFX2aj5maTu+92pskrdnuVPJlbApPIsEA7osZ3cU4 lQVD/JE0nv2vltofuv2n2Of7XK2tKm127lM18qmLCOeG7OKySKLxOqPJlpUnrjat huwrSjKzSXV0Pz3P74QC1d580+agQ39+ -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:38 2025 by rpki-client