$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft File: yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json) Hash identifier: lUC2+MfM9uySndwdHRUt+t5n1bZkaqGAH+PIVBpPMXo= Subject key identifier: EF:6A:9E:D7:5E:35:11:38:40:D2:ED:D3:67:D6:FF:80:F9:8A:EA:A9 Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft Manifest number: 013C Signing time: Wed 17 Sep 2025 05:01:39 +0000 Manifest this update: Wed 17 Sep 2025 05:01:38 +0000 Manifest next update: Wed 24 Sep 2025 05:01:38 +0000 Files and hashes: 1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: wQdx2yfBRfuZmq88ysWIyhNE1VgTm35vclbS29n17+U=) 2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: Oy0sD/XZsc15D/sxcRQlGFb92CKWJ3EipEQzMz/zoGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Validity Not Before: Sep 17 05:01:38 2025 GMT Not After : Sep 24 05:01:38 2025 GMT Subject: CN=68ca40b3-7f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:77:2d:b6:59:09:2b:31:ff:26:d8:83:bc:49: ee:91:e3:79:b0:0c:bb:87:5c:50:51:c4:67:32:56: 66:29:e6:b4:b8:26:65:f7:5d:18:cb:40:82:4c:25: 17:74:76:72:c1:b3:1e:bd:e5:ad:27:70:6f:a6:34: 65:8e:63:87:bb:f7:5c:0f:45:bc:51:19:82:25:b6: 87:ae:be:bf:b5:7b:9f:57:14:cb:c7:2a:e4:1d:9a: 22:40:4c:e9:6d:02:23:98:cf:63:77:cc:4f:36:c6: 5a:e6:d3:05:d6:93:49:0e:e3:9c:0e:f7:07:1c:8f: ef:ab:f9:d0:55:46:82:a4:dc:46:2e:f3:ed:d9:1f: 98:81:a3:85:a8:49:5e:c6:3b:68:c6:6a:b3:c7:4b: f1:e4:ed:b1:3a:83:4c:a8:45:87:63:ed:4e:32:90: a0:c1:e7:41:49:eb:91:4c:88:68:7e:ab:fe:f4:3a: 32:62:c9:64:99:7e:2b:6a:14:c8:00:00:43:54:a7: c2:8b:cb:35:9c:57:88:9f:ee:f8:c5:8d:d8:7d:ed: bf:40:06:3b:5a:d0:f3:a7:d3:fa:0b:04:2b:b3:7d: 90:57:89:57:44:29:89:c2:14:ba:0f:1f:55:02:43: db:3d:af:43:51:2d:81:c2:ad:d1:a9:e4:82:68:57: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6A:9E:D7:5E:35:11:38:40:D2:ED:D3:67:D6:FF:80:F9:8A:EA:A9 X509v3 Authority Key Identifier: keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:1e:c6:28:12:8a:7a:72:d2:8d:f2:33:f5:7a:db:9b:db:c4: f4:24:4f:f5:1f:3e:65:86:aa:69:9a:e1:23:eb:8d:f3:23:09: 9d:7b:ae:b6:fa:d3:60:d3:e2:1e:4a:aa:56:7e:f7:d4:0f:05: 02:67:43:28:d3:0a:98:b6:fa:2e:59:d8:72:cc:58:09:40:f3: 59:3f:6b:c2:8f:24:b5:13:a5:28:64:be:75:83:36:91:bb:86: 6c:7a:56:ad:f7:db:72:d6:06:b9:0f:3b:fb:be:45:9f:1d:d8: c0:f0:a6:69:07:f3:25:a0:9d:72:1b:f0:2e:31:d0:3f:5c:c7: 70:d8:35:1b:a1:7d:d8:9f:38:0e:5e:41:6c:08:9a:ac:41:81: 32:a8:39:a3:a0:d3:65:78:57:5e:75:28:3f:6f:f4:0b:ea:b8: b9:3a:7b:da:89:db:77:07:08:34:83:d2:c7:e3:9c:df:f8:b5: cd:02:93:6b:66:b7:d2:a1:5f:4a:7b:cf:02:df:18:e3:25:7f: 00:c4:7f:bd:8e:0c:b6:b4:15:0d:df:74:95:35:77:83:a9:37: 5c:92:19:84:06:c4:08:62:24:88:fa:8f:6f:a9:f4:aa:31:45: 59:12:57:a1:cb:da:6e:b8:9e:66:58:b0:be:af:56:11:a0:ea: 4c:8c:29:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1MjYxMTAvBgNVBAUTKENBRTkwRjQ2QzIyMUQwMEIyREEwODA3QUQ0QzRCMDY1 MDMzNzQzNDQwHhcNMjUwOTE3MDUwMTM4WhcNMjUwOTI0MDUwMTM4WjAYMRYwFAYD VQQDEw02OGNhNDBiMy03Zjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HcttlkJKzH/JtiDvEnukeN5sAy7h1xQUcRnMlZmKea0uCZl910Yy0CCTCUX dHZywbMeveWtJ3BvpjRljmOHu/dcD0W8URmCJbaHrr6/tXufVxTLxyrkHZoiQEzp bQIjmM9jd8xPNsZa5tMF1pNJDuOcDvcHHI/vq/nQVUaCpNxGLvPt2R+YgaOFqEle xjtoxmqzx0vx5O2xOoNMqEWHY+1OMpCgwedBSeuRTIhofqv+9DoyYslkmX4rahTI AABDVKfCi8s1nFeIn+74xY3Yfe2/QAY7WtDzp9P6CwQrs32QV4lXRCmJwhS6Dx9V AkPbPa9DUS2Bwq3RqeSCaFfQWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9qntde NRE4QNLt02fW/4D5iuqpMB8GA1UdIwQYMBaAFMrpD0bCIdALLaCAetTEsGUDN0NE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODUyNi9DNEM2RDA0NkI0 NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBBc3RvSUI2MU1Td1pRTTNR MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1a1BSc0loMEFzdG9JQjYxTVN3WlFNM1EwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODUyNi9DNEM2RDA0NkI0NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBB c3RvSUI2MU1Td1pRTTNRMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzHsYoEop6ctKN8jP1etub28T0JE/1Hz5lhqppmuEj643zIwmde662 +tNg0+IeSqpWfvfUDwUCZ0Mo0wqYtvouWdhyzFgJQPNZP2vCjyS1E6UoZL51gzaR u4Zselat99ty1ga5Dzv7vkWfHdjA8KZpB/MloJ1yG/AuMdA/XMdw2DUboX3YnzgO XkFsCJqsQYEyqDmjoNNleFdedSg/b/QL6ri5Onvaidt3Bwg0g9LH45zf+LXNApNr ZrfSoV9Ke88C3xjjJX8AxH+9jgy2tBUN33SVNXeDqTdckhmEBsQIYiSI+o9vqfSq MUVZElehy9puuJ5mWLC+r1YRoOpMjClB -----END CERTIFICATE-----Generated at Fri Sep 19 03:57:06 2025 by rpki-client