$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json) Hash identifier: 8e8DScJi56m1z2Wd+qZv9osohiaevkxD0pP+7mZPbUk= Subject key identifier: A0:8F:33:F4:25:13:E6:F1:8D:13:D7:96:A4:79:29:68:3C:3D:5E:55 Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Certificate serial: 07FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft Manifest number: 07F2 Signing time: Thu 18 Sep 2025 21:18:18 +0000 Manifest this update: Thu 18 Sep 2025 21:18:17 +0000 Manifest next update: Thu 25 Sep 2025 21:18:17 +0000 Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: y5qPibHRHOwSwigBt2BfFLLrjbzlizA1Hw6atkMhoaY=) 2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: jObAEaW9jlDTMyIb6A8JZqjslqhvlPIsAzJOzv+NnRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Validity Not Before: Sep 18 21:18:17 2025 GMT Not After : Sep 25 21:18:17 2025 GMT Subject: CN=68cc7719-63e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:c7:a4:c3:bc:17:16:cf:3a:38:ce:5d:32: cf:c4:fc:4e:aa:5b:bb:0e:cb:7a:9e:0b:86:cc:be: 74:f5:fb:bd:18:77:90:2c:c6:24:66:f6:4c:eb:6b: 1d:6f:fb:bd:86:80:12:a3:c2:f9:89:2b:3d:45:90: a4:8f:8b:a0:fe:52:94:82:aa:dd:13:20:2f:23:5e: 7b:74:31:29:4f:e5:6f:4f:5e:0e:72:b1:03:e1:c5: 5e:2d:7e:a7:f2:42:ee:c2:82:53:82:2c:99:8b:89: b0:2f:c9:b6:69:e3:b9:75:d9:83:72:43:ed:0c:07: 28:14:8b:c8:ec:a2:37:5d:e0:30:1b:50:3f:a8:62: 28:17:03:0d:c2:88:26:77:6d:d8:3a:64:06:fc:65: 01:2c:b0:49:65:2c:08:04:5a:12:75:a2:b0:04:c1: 46:c4:6d:a2:6e:f8:79:59:ca:30:ae:dd:38:a5:47: 7e:51:cb:5d:fa:66:66:61:9c:ce:1d:fe:2b:12:26: de:df:d2:f6:21:71:f8:4f:b8:b2:42:9c:ea:d8:d3: f6:e4:a5:23:40:91:9a:aa:d2:a5:52:5d:68:68:9d: df:8b:a6:86:c4:be:68:db:f9:61:67:0e:d6:17:cc: 05:5b:32:7a:b8:ad:c5:e8:ab:2d:3c:ae:d3:86:ed: 10:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:33:F4:25:13:E6:F1:8D:13:D7:96:A4:79:29:68:3C:3D:5E:55 X509v3 Authority Key Identifier: keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:9e:33:0c:08:60:df:7f:bf:77:83:40:2e:a8:3f:06:94:f2: 1b:9d:af:6b:97:27:f0:af:65:e6:1b:6d:3a:f4:04:38:1a:a6: a9:af:b1:b3:7f:61:91:01:ea:28:6b:c8:20:d0:36:db:fa:87: 21:e3:f3:df:cd:43:cd:8d:56:8d:cb:37:45:33:11:3c:fb:1b: 85:24:8f:9d:77:23:0e:51:c0:4b:da:0c:5b:d6:e0:ac:28:41: c5:68:5d:8a:83:3a:af:96:31:50:b4:4e:9c:0a:1d:87:78:a3: 9d:d7:bf:14:3b:de:7c:a3:65:61:ba:cd:70:9c:b2:df:d6:00: b9:b8:5f:4d:78:78:f6:f5:af:70:38:32:91:bf:4f:1d:d4:8c: 1e:35:49:24:e7:3e:f1:4e:75:a2:15:87:d5:8b:e2:7a:43:52: f3:38:9f:66:e9:19:83:b9:18:87:10:03:e4:94:51:e2:81:90: 7e:7a:34:47:7c:e2:18:a6:6e:fd:ae:60:c9:0e:e8:de:4f:84: b4:63:71:5e:a1:61:a4:a5:eb:03:26:48:97:26:91:f1:05:f4: 5a:13:4c:b8:17:4e:8b:6b:22:28:47:41:18:ce:3d:cc:2a:4f: 90:38:25:d8:e9:4d:63:f4:28:a7:c6:76:b7:72:59:dd:77:61: 16:2c:c4:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4OEYxMTAvBgNVBAUTKDNGRTYwMzFGMjU1NjdBNDU0N0NERTE3MzFBMkQ4MTRE Qjg2RTIwOTQwHhcNMjUwOTE4MjExODE3WhcNMjUwOTI1MjExODE3WjAYMRYwFAYD VQQDEw02OGNjNzcxOS02M2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnTHpMO8FxbPOjjOXTLPxPxOqlu7Dst6nguGzL509fu9GHeQLMYkZvZM62sd b/u9hoASo8L5iSs9RZCkj4ug/lKUgqrdEyAvI157dDEpT+VvT14OcrED4cVeLX6n 8kLuwoJTgiyZi4mwL8m2aeO5ddmDckPtDAcoFIvI7KI3XeAwG1A/qGIoFwMNwogm d23YOmQG/GUBLLBJZSwIBFoSdaKwBMFGxG2ibvh5Wcowrt04pUd+Uctd+mZmYZzO Hf4rEibe39L2IXH4T7iyQpzq2NP25KUjQJGaqtKlUl1oaJ3fi6aGxL5o2/lhZw7W F8wFWzJ6uK3F6KstPK7Thu0QlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCPM/Ql E+bxjRPXlqR5KWg8PV5VMB8GA1UdIwQYMBaAFD/mAx8lVnpFR83hcxotgU24biCU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTg4Ri8xOTI0N0ZCQUZF MjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2VrVkh6ZUZ6R2kyQlRiaHVJ SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtWURIeVZXZWtWSHplRnpHaTJCVGJodUlKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTg4Ri8xOTI0N0ZCQUZFMjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2Vr Vkh6ZUZ6R2kyQlRiaHVJSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmnjMMCGDff793g0AuqD8GlPIbna9rlyfwr2XmG2069AQ4Gqapr7Gz f2GRAeooa8gg0Dbb+och4/PfzUPNjVaNyzdFMxE8+xuFJI+ddyMOUcBL2gxb1uCs KEHFaF2KgzqvljFQtE6cCh2HeKOd178UO958o2Vhus1wnLLf1gC5uF9NeHj29a9w ODKRv08d1IweNUkk5z7xTnWiFYfVi+J6Q1LzOJ9m6RmDuRiHEAPklFHigZB+ejRH fOIYpm79rmDJDujeT4S0Y3FeoWGkpesDJkiXJpHxBfRaE0y4F06LayIoR0EYzj3M Kk+QOCXY6U1j9Cinxna3clndd2EWLMRT -----END CERTIFICATE-----Generated at Fri Sep 19 12:37:06 2025 by rpki-client