$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft File: zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json) Hash identifier: U/Bqx4onclLBPt2TfPBYbC3y1o9OV4BBF881l8uk16c= Subject key identifier: 3A:28:8F:01:6A:69:DC:01:9D:6C:83:57:E7:14:CC:2F:15:04:34:0A Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft Manifest number: 0148 Signing time: Thu 21 Aug 2025 04:31:08 +0000 Manifest this update: Thu 21 Aug 2025 04:31:08 +0000 Manifest next update: Thu 28 Aug 2025 04:31:08 +0000 Files and hashes: 1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: /+GFgCt1uRZ1QlKD8tsOrjW57/TB/ssNrv+K6CxZVQ0=) 2: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: 05BxmRyvKNcOlG0da2lnXsYOxEsMKdSx2ZRkaVaMWv4=) 3: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: cOcYEcKHuf/JYD0AEBC5IpcPkABHQnNi85MejRVjkMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B Validity Not Before: Aug 21 04:31:08 2025 GMT Not After : Aug 28 04:31:08 2025 GMT Subject: CN=68a6a10c-4ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:09:1a:5e:74:f1:38:3b:90:d8:e2:e7:a8: 4a:9f:74:20:43:79:1b:a7:7f:bc:40:28:1b:0b:91: ed:64:e6:69:60:2b:03:38:c2:b9:ad:c0:86:ea:01: 63:2e:8e:68:9a:44:0f:8b:fd:ca:6f:65:ff:e0:a2: 97:f7:64:3f:2c:3e:e3:e6:fe:4e:c3:c1:76:3d:c1: 56:c1:e8:6d:7e:f2:5e:38:64:87:98:63:4d:e2:5e: e6:c3:1c:44:f1:e4:d2:d6:35:6a:4c:30:8d:9b:04: 3d:f8:6a:6f:86:32:16:54:95:2c:7b:5c:7d:c0:79: ea:56:c5:47:8d:c0:c3:51:05:af:b7:5a:be:60:7b: 37:4f:d0:d7:e9:05:64:37:77:aa:49:2b:93:b0:9c: 06:c8:dc:87:d4:47:aa:7c:1a:f0:fc:06:b4:92:17: 8a:3f:51:7e:2c:f6:37:47:f9:f9:d8:19:09:0f:72: 34:42:95:67:e8:75:56:36:f6:98:d9:df:e6:a6:ba: 44:51:d0:b2:a7:e7:d9:f9:9d:50:30:61:bd:dc:d7: 68:ab:19:c7:61:97:17:b6:2a:d7:e6:68:ae:d0:f2: 52:23:72:2f:b8:f7:64:61:a7:ae:e4:cc:10:00:5b: 18:ff:71:dd:51:b5:dc:e9:05:f9:73:54:c4:f9:46: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:8F:01:6A:69:DC:01:9D:6C:83:57:E7:14:CC:2F:15:04:34:0A X509v3 Authority Key Identifier: keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:25:fe:4c:32:b5:de:57:98:40:11:90:e2:51:d5:07:70:71: 09:c0:df:41:fd:16:5d:22:2f:84:29:23:9b:73:a7:8d:8f:f5: 30:09:ef:46:8e:42:10:cc:f6:ae:9d:e4:d9:c2:9f:e9:e2:e4: dd:0e:8f:bd:aa:54:dc:70:76:4d:20:3b:1c:a1:d5:cc:9b:f3: b7:3f:6f:94:7f:d3:27:70:b8:3d:e7:68:0e:57:d1:71:96:e8: f7:48:ac:90:40:11:74:21:ec:0f:9d:b7:b7:fa:a2:af:04:73: 20:cf:53:26:d3:ee:bd:5a:03:00:3d:af:9e:a6:00:c8:b1:2e: ae:6e:2e:65:cf:89:5a:5a:90:4a:2c:51:4a:68:cc:60:11:bc: 57:76:c0:a2:eb:9f:d2:44:22:6b:3e:8b:6b:6f:b5:74:ce:57: 5e:80:3d:89:1a:43:ad:da:bc:ca:ab:5d:85:d8:a2:c3:a9:d3: 5e:9c:5c:d9:6b:96:8a:18:e6:b3:33:78:5e:77:97:46:ee:90: b3:fc:84:7c:41:19:24:9b:78:1e:c1:3d:93:f0:c9:46:af:5a: b6:d3:57:2b:70:33:5d:43:2d:d9:90:6f:b7:1f:ad:a1:23:f7: fb:52:d0:80:43:1c:e9:c6:d4:cb:02:78:2c:bb:a1:4c:d6:bd: 95:14:82:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjExMTAvBgNVBAUTKENEODlBODI2OEVCMTFFMzMwRkJENDRDMDQ4NzIwRDEz MjVDNUE2MEIwHhcNMjUwODIxMDQzMTA4WhcNMjUwODI4MDQzMTA4WjAYMRYwFAYD VQQDEw02OGE2YTEwYy00YmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBEJGl508Tg7kNji56hKn3QgQ3kbp3+8QCgbC5HtZOZpYCsDOMK5rcCG6gFj Lo5omkQPi/3Kb2X/4KKX92Q/LD7j5v5Ow8F2PcFWwehtfvJeOGSHmGNN4l7mwxxE 8eTS1jVqTDCNmwQ9+GpvhjIWVJUse1x9wHnqVsVHjcDDUQWvt1q+YHs3T9DX6QVk N3eqSSuTsJwGyNyH1EeqfBrw/Aa0kheKP1F+LPY3R/n52BkJD3I0QpVn6HVWNvaY 2d/mprpEUdCyp+fZ+Z1QMGG93NdoqxnHYZcXtirX5miu0PJSI3IvuPdkYaeu5MwQ AFsY/3HdUbXc6QX5c1TE+UYIIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoojwFq adwBnWyDV+cUzC8VBDQKMB8GA1UdIwQYMBaAFM2JqCaOsR4zD71EwEhyDRMlxaYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2MS9EMDY1QkM0Qzkz NDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhqTVB2VVRBU0hJTkV5WEZw Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2MS9EMDY1QkM0QzkzNDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhq TVB2VVRBU0hJTkV5WEZwZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Jf5MMrXeV5hAEZDiUdUHcHEJwN9B/RZdIi+EKSObc6eNj/UwCe9G jkIQzPauneTZwp/p4uTdDo+9qlTccHZNIDscodXMm/O3P2+Uf9MncLg952gOV9Fx luj3SKyQQBF0IewPnbe3+qKvBHMgz1Mm0+69WgMAPa+epgDIsS6ubi5lz4laWpBK LFFKaMxgEbxXdsCi65/SRCJrPotrb7V0zldegD2JGkOt2rzKq12F2KLDqdNenFzZ a5aKGOazM3hed5dG7pCz/IR8QRkkm3gewT2T8MlGr1q201crcDNdQy3ZkG+3H62h I/f7UtCAQxzpxtTLAngsu6FM1r2VFIKk -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:17 2025 by rpki-client