$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: v+pSVBHfYvEjuqup4rzfqTQADUdu75ZXG8BJUPLVCUw= Subject key identifier: 53:36:16:62:81:4F:65:0F:61:12:0F:6D:48:9B:D1:19:EE:68:B5:61 Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 2531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 2514 Signing time: Thu 18 Sep 2025 15:50:54 +0000 Manifest this update: Thu 18 Sep 2025 15:50:53 +0000 Manifest next update: Thu 25 Sep 2025 15:50:53 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: 3zVucW7ExvX4L51uQuGee8P+wWklYAhdKbTzhAsAtLw=) 2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: 2tz7LMjITp7vanRGF3Qd5TIIIj7fKWHmsVgw8s6O7nY=) 3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: W5nO0Dm01E1L0J0RrwxDTx9HsKlaz3AShpTaXk9sHks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9521 (0x2531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Sep 18 15:50:53 2025 GMT Not After : Sep 25 15:50:53 2025 GMT Subject: CN=68cc2a5d-c89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f0:ca:d5:bc:9b:cd:0f:db:06:db:26:b2:ae: 61:73:b8:f8:6b:28:dd:f2:18:be:34:ad:73:a9:dc: d8:50:8b:d3:38:0a:b4:fa:34:c5:64:a1:d8:f0:24: db:e8:df:61:46:74:e2:7d:20:c6:3a:0d:d0:32:3f: cb:26:ff:1e:65:c8:9d:92:e3:e2:53:f1:a9:ca:d8: 93:bf:d2:1d:f9:c1:94:1d:91:89:bf:ba:88:16:4b: 36:ec:09:de:f8:5a:2c:05:1d:bd:ab:09:67:ef:49: 17:8c:cd:92:1d:b7:6a:8c:64:ad:bb:cd:4c:54:b7: df:f1:09:43:5b:4d:87:0f:56:62:d9:59:91:61:ba: ba:ab:37:e8:c7:e2:9d:31:58:9f:14:0b:38:55:6a: 50:f0:54:77:d7:6e:16:bb:bf:d3:54:c0:85:dd:49: 61:42:4b:52:cd:8d:22:7c:d4:a7:a3:c6:6f:44:7c: 20:f1:9b:7a:d2:e6:13:19:b7:e7:de:aa:2e:24:bc: da:ea:08:3c:14:7d:f0:5e:8a:6a:0f:8a:bd:ef:e9: ec:65:c0:db:a8:13:b3:6a:50:12:5f:0f:32:ef:36: 8b:e6:4a:b9:4e:75:74:96:03:49:46:0b:7f:4a:71: e7:ad:5b:52:fd:0e:b6:80:c5:28:7f:58:83:e4:87: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:36:16:62:81:4F:65:0F:61:12:0F:6D:48:9B:D1:19:EE:68:B5:61 X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ba:79:89:6a:5e:b1:5f:37:d5:59:59:b8:a6:ec:25:b7:43: cd:39:4e:08:c5:b7:59:45:4f:36:eb:96:f9:bf:b2:b2:21:28: 3d:6e:38:3f:85:2c:db:2f:12:fe:56:ee:3e:0b:93:3d:27:73: c9:11:18:44:08:ef:84:f8:2a:9c:84:d8:af:7c:f4:f1:75:cd: c5:17:d6:7a:07:f5:98:c8:21:60:88:da:c4:70:28:42:ce:a8: 86:72:ec:70:8c:4a:6d:41:fd:87:cb:ed:f3:4b:69:a4:14:e4: ee:29:5b:e1:9a:34:2d:87:8e:74:c2:ff:90:70:10:af:48:1e: f9:14:5f:6e:7b:89:9f:e0:9f:ba:0f:33:53:96:6a:4b:fb:50: cd:f7:79:be:2d:07:24:b0:f4:27:0f:d6:ae:81:a2:39:65:91: 62:a7:23:96:75:1c:92:07:45:22:e2:b5:e9:a0:f8:5c:7b:65: 99:e9:9b:5d:4e:28:a4:56:7f:5d:ab:fd:4e:b6:7f:41:44:67: 61:35:3c:70:95:ca:d7:80:65:bd:24:4d:e5:08:25:d8:38:cb: fc:c9:3c:ad:5e:b9:1e:28:58:c9:57:f1:2e:6b:ea:61:9f:8d: c4:cc:eb:f9:07:ec:f6:d6:d6:89:5d:fa:8a:28:8a:d0:ed:f0: 10:30:99:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUwOTE4MTU1MDUzWhcNMjUwOTI1MTU1MDUzWjAYMRYwFAYD VQQDEw02OGNjMmE1ZC1jODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PDK1bybzQ/bBtsmsq5hc7j4ayjd8hi+NK1zqdzYUIvTOAq0+jTFZKHY8CTb 6N9hRnTifSDGOg3QMj/LJv8eZcidkuPiU/GpytiTv9Id+cGUHZGJv7qIFks27Ane +FosBR29qwln70kXjM2SHbdqjGStu81MVLff8QlDW02HD1Zi2VmRYbq6qzfox+Kd MVifFAs4VWpQ8FR3124Wu7/TVMCF3UlhQktSzY0ifNSno8ZvRHwg8Zt60uYTGbfn 3qouJLza6gg8FH3wXopqD4q97+nsZcDbqBOzalASXw8y7zaL5kq5TnV0lgNJRgt/ SnHnrVtS/Q62gMUof1iD5Ie5PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFM2FmKB T2UPYRIPbUib0RnuaLVhMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0unmJal6xXzfVWVm4puwlt0PNOU4IxbdZRU8265b5v7KyISg9bjg/ hSzbLxL+Vu4+C5M9J3PJERhECO+E+CqchNivfPTxdc3FF9Z6B/WYyCFgiNrEcChC zqiGcuxwjEptQf2Hy+3zS2mkFOTuKVvhmjQth450wv+QcBCvSB75FF9ue4mf4J+6 DzNTlmpL+1DN93m+LQcksPQnD9augaI5ZZFipyOWdRySB0Ui4rXpoPhce2WZ6Ztd TiikVn9dq/1Otn9BRGdhNTxwlcrXgGW9JE3lCCXYOMv8yTytXrkeKFjJV/Eua+ph n43EzOv5B+z21taJXfqKKIrQ7fAQMJnX -----END CERTIFICATE-----Generated at Fri Sep 19 00:43:07 2025 by rpki-client