$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft File: YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json) Hash identifier: tRUd6i5nN3AyyAgBVY3MR5MrIFhoUU/MlqNzAUXWCUQ= Subject key identifier: D3:64:98:83:4C:AA:DC:5F:47:79:4F:DD:67:BB:9B:1C:5B:68:9C:F6 Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Certificate serial: 09F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft Manifest number: 09EA Signing time: Mon 08 Sep 2025 19:54:52 +0000 Manifest this update: Mon 08 Sep 2025 19:54:51 +0000 Manifest next update: Mon 15 Sep 2025 19:54:51 +0000 Files and hashes: 1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: U2Q/tjk3vVGK7CjouCipWMp83GMB/dButuY4hDP/XHo=) 2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: Jr5A5EFDHOtjVbEZUPlRHjoDRI+w8P0c18JoA/Eyebg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2544 (0x9f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Validity Not Before: Sep 8 19:54:51 2025 GMT Not After : Sep 15 19:54:51 2025 GMT Subject: CN=68bf348b-46c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:93:30:a0:6c:e7:0a:52:e7:02:98:01:b1: 24:16:5f:e5:b4:e8:2b:70:ec:74:b5:d4:b3:eb:e7: 34:3b:af:fd:d8:1c:e6:4b:f2:cb:55:50:d6:1e:4f: 41:ea:e9:68:f9:15:7c:7b:4a:dd:2d:25:0c:7d:74: cf:fe:0b:6e:35:83:be:f7:25:28:d2:35:e7:c6:4d: 3e:e6:ca:dd:3c:9d:1e:bd:ec:f5:cf:70:00:5d:dc: 60:ce:f5:39:b2:63:f1:e0:ea:2f:3c:ae:54:a7:89: b7:50:e5:b8:e9:39:ad:8a:54:f0:6a:5e:14:8a:ae: 27:b8:74:0d:73:fd:a1:93:ab:e3:d6:f1:82:64:83: d3:44:df:38:89:81:94:05:24:86:9b:cd:a4:73:d3: 43:42:6e:bd:c8:df:01:a9:29:fe:60:ee:90:4c:bb: 2d:f6:e5:df:9a:0b:82:f2:67:0d:1e:55:39:16:1a: 0e:d9:8b:4c:26:6e:b7:b9:2f:9c:83:f0:49:44:d5: 79:2b:3b:4d:63:d5:6e:76:3c:d3:c7:2a:37:8b:4a: dd:34:ce:da:98:f8:af:59:18:95:27:cd:52:b3:88: a6:4f:e1:87:02:c0:19:8e:64:20:8c:55:fe:5e:27: 94:ee:0c:d2:4d:09:68:04:36:b8:55:ca:ea:76:45: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:64:98:83:4C:AA:DC:5F:47:79:4F:DD:67:BB:9B:1C:5B:68:9C:F6 X509v3 Authority Key Identifier: keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:79:66:92:bf:b3:35:f1:a7:37:65:85:70:2b:4c:c7:f4:bf: 0b:5c:c3:ff:f4:1a:aa:be:69:43:95:63:22:c6:0e:f1:bf:48: 4d:40:6b:81:47:86:55:27:7b:86:69:07:92:d3:6d:21:be:74: 54:ee:96:ac:8f:8a:4b:9e:97:97:8b:76:56:64:9c:00:5d:40: 8d:6e:65:10:54:d7:77:9f:82:6d:11:d2:7a:d6:59:2e:70:81: 62:e8:7e:73:8a:94:31:59:88:2a:23:ee:a8:3a:92:c5:42:72: 8d:15:3d:a7:eb:d0:12:50:0c:6e:91:9d:c0:1e:fc:48:02:c7: d0:95:fd:fe:fa:07:d4:6c:dd:6c:5d:06:e6:03:e2:bc:3c:3d: 63:b1:1f:34:a2:9e:3e:09:4f:12:35:b1:6f:52:5f:9e:14:31: 9b:74:fb:8e:70:66:30:78:52:e6:fe:86:87:6a:76:73:07:9b: 4d:f7:e8:00:8e:7d:3d:5e:36:e9:fb:9f:95:84:24:d6:74:fb: 09:6f:07:cb:0c:37:b7:d9:e0:fc:5f:96:66:27:bc:1a:73:30: 3b:6c:e8:1c:67:08:fc:a4:46:da:a6:e0:13:8d:9e:6a:18:85: 5e:f0:9e:af:ba:5e:29:d9:9e:d7:b9:54:3d:27:a1:24:f7:f0: f3:8b:fb:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4 ODhGQTYzNDQwHhcNMjUwOTA4MTk1NDUxWhcNMjUwOTE1MTk1NDUxWjAYMRYwFAYD VQQDEw02OGJmMzQ4Yi00NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbSTMKBs5wpS5wKYAbEkFl/ltOgrcOx0tdSz6+c0O6/92BzmS/LLVVDWHk9B 6ulo+RV8e0rdLSUMfXTP/gtuNYO+9yUo0jXnxk0+5srdPJ0evez1z3AAXdxgzvU5 smPx4OovPK5Up4m3UOW46TmtilTwal4Uiq4nuHQNc/2hk6vj1vGCZIPTRN84iYGU BSSGm82kc9NDQm69yN8BqSn+YO6QTLst9uXfmguC8mcNHlU5FhoO2YtMJm63uS+c g/BJRNV5KztNY9VudjzTxyo3i0rdNM7amPivWRiVJ81Ss4imT+GHAsAZjmQgjFX+ XieU7gzSTQloBDa4VcrqdkV3nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNkmINM qtxfR3lP3We7mxxbaJz2MB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ4OC81RDI2ODM0QTgzOEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5 NjhwRW9VdmJjeGFJajZZMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBeWaSv7M18ac3ZYVwK0zH9L8LXMP/9BqqvmlDlWMixg7xv0hNQGuB R4ZVJ3uGaQeS020hvnRU7pasj4pLnpeXi3ZWZJwAXUCNbmUQVNd3n4JtEdJ61lku cIFi6H5zipQxWYgqI+6oOpLFQnKNFT2n69ASUAxukZ3AHvxIAsfQlf3++gfUbN1s XQbmA+K8PD1jsR80op4+CU8SNbFvUl+eFDGbdPuOcGYweFLm/oaHanZzB5tN9+gA jn09Xjbp+5+VhCTWdPsJbwfLDDe32eD8X5ZmJ7waczA7bOgcZwj8pEbapuATjZ5q GIVe8J6vul4p2Z7XuVQ9J6Ek9/Dzi/uW -----END CERTIFICATE-----Generated at Tue Sep 9 08:05:20 2025 by rpki-client