$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft File: y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json) Hash identifier: yvBdE/TUAdn7X/bXX6F6r9a8NpaJQGA3x7DdwiLqFkA= Subject key identifier: D8:78:1E:64:0E:15:3D:E1:D0:15:E6:60:CF:D6:9A:FA:58:12:C2:5A Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD Certificate issuer: /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Certificate serial: 0B57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft Manifest number: 0CE0 Signing time: Sun 24 Aug 2025 19:08:18 +0000 Manifest this update: Sun 24 Aug 2025 19:08:17 +0000 Manifest next update: Sun 31 Aug 2025 19:08:17 +0000 Files and hashes: 1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: a1jaIz07MokfW44EGIKyi+ULGj4HenmBGJci6ZPVKSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2903 (0xb57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Validity Not Before: Aug 24 19:08:17 2025 GMT Not After : Aug 31 19:08:17 2025 GMT Subject: CN=68ab6321-3e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:ff:54:14:4d:20:dd:ec:e4:66:de:c0:df: ea:68:41:75:b7:9a:b3:4f:59:0f:67:93:15:9b:14: 47:ab:29:16:2c:1a:59:b6:22:fe:44:67:52:52:ca: d2:57:8e:58:a3:e1:6f:a6:39:82:0c:2d:f9:e4:a9: f0:04:86:c8:27:b7:9f:8f:d0:9a:f9:05:03:bd:5e: 4d:0e:99:8f:49:dc:70:68:0d:df:ac:05:11:d0:33: f7:47:2f:bc:aa:d7:68:fc:a3:a1:b4:28:54:e3:2f: 80:a5:c3:84:95:ae:03:d2:de:a5:23:7b:05:4d:99: 99:de:ff:96:a7:25:47:b3:6f:d7:b5:f5:05:c2:93: 2c:f9:7b:d8:8a:57:b7:0f:3a:77:5c:d9:bd:50:0e: 24:11:cd:e6:c7:e4:11:0b:a4:7d:8a:e9:9c:79:af: 43:f7:07:a0:e7:f7:e6:eb:44:eb:a5:12:9c:26:ef: 8d:71:f4:ce:a9:21:51:91:73:47:e0:7c:58:89:64: ac:2c:03:2e:c8:17:ef:1a:5b:b1:e9:66:25:d2:24: 85:9f:46:56:a7:ea:46:e1:37:cf:e1:29:3e:38:a4: ca:fe:a0:49:87:62:08:3c:09:db:6d:73:80:f1:38: 03:bf:af:97:d6:9c:c5:9c:19:29:d0:8c:76:ca:9d: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:78:1E:64:0E:15:3D:E1:D0:15:E6:60:CF:D6:9A:FA:58:12:C2:5A X509v3 Authority Key Identifier: keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:12:4c:3b:18:cd:3a:aa:39:df:6b:44:5b:c6:dc:d7:4a:89: a9:65:22:c7:e1:19:47:e7:36:5c:44:a3:06:87:9c:34:cf:8a: db:7a:74:2d:d3:88:5f:a2:f3:16:2e:15:91:4a:3f:fd:7c:83: 06:8e:4b:84:ce:f1:22:e4:11:11:26:5d:6c:72:b6:55:2f:f5: cc:8d:a4:63:87:ad:25:06:95:15:0d:e7:46:8b:ce:e3:5d:ce: 9f:1f:f3:9e:3d:d0:b8:fc:c6:c3:c7:b9:73:fb:f8:b1:bd:09: 8e:9c:d9:64:21:ed:68:a2:75:19:91:04:eb:84:af:e5:0b:cc: 4b:c9:20:26:0d:8f:d4:d4:1b:8d:fc:fe:4b:87:b3:8e:87:3e: 8e:c7:8b:cb:b9:b8:f3:a8:b5:a2:4f:60:6a:fd:4a:43:45:20: 5e:0a:15:f6:eb:52:b9:dd:ec:cb:58:d0:51:d7:93:b9:68:28: 6e:7a:62:f8:6d:ae:f5:a8:63:37:99:7f:4b:7b:bc:39:f4:4e: c7:3a:dc:ca:bf:38:6b:90:6d:17:a8:8a:0d:9f:60:43:d6:bd: 6a:33:3c:0b:2c:e3:64:db:42:36:1b:26:56:cc:9d:b7:7d:78: c0:2c:51:5a:98:e6:fb:25:be:89:e6:51:2b:e9:3a:fe:ce:c1: 4e:43:ad:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKENCOURGRDcyQThERjUwRTA2NTAwNDM3ODA2QjZBMjAx OEVDQ0JERkQwHhcNMjUwODI0MTkwODE3WhcNMjUwODMxMTkwODE3WjAYMRYwFAYD VQQDEw02OGFiNjMyMS0zZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Cn/VBRNIN3s5GbewN/qaEF1t5qzT1kPZ5MVmxRHqykWLBpZtiL+RGdSUsrS V45Yo+FvpjmCDC355KnwBIbIJ7efj9Ca+QUDvV5NDpmPSdxwaA3frAUR0DP3Ry+8 qtdo/KOhtChU4y+ApcOEla4D0t6lI3sFTZmZ3v+WpyVHs2/XtfUFwpMs+XvYile3 Dzp3XNm9UA4kEc3mx+QRC6R9iumcea9D9weg5/fm60TrpRKcJu+NcfTOqSFRkXNH 4HxYiWSsLAMuyBfvGlux6WYl0iSFn0ZWp+pG4TfP4Sk+OKTK/qBJh2IIPAnbbXOA 8TgDv6+X1pzFnBkp0Ix2yp1LswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNh4HmQO FT3h0BXmYM/WmvpYEsJaMB8GA1UdIwQYMBaAFMud/XKo31DgZQBDeAa2ogGOzL39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVPQmxBRU40QnJhaUFZN012 ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MzljcWpmVU9CbEFFTjRCcmFpQVk3TXZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVP QmxBRU40QnJhaUFZN012ZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFEkw7GM06qjnfa0RbxtzXSompZSLH4RlH5zZcRKMGh5w0z4rbenQt 04hfovMWLhWRSj/9fIMGjkuEzvEi5BERJl1scrZVL/XMjaRjh60lBpUVDedGi87j Xc6fH/OePdC4/MbDx7lz+/ixvQmOnNlkIe1oonUZkQTrhK/lC8xLySAmDY/U1BuN /P5Lh7OOhz6Ox4vLubjzqLWiT2Bq/UpDRSBeChX261K53ezLWNBR15O5aChuemL4 ba71qGM3mX9Le7w59E7HOtzKvzhrkG0XqIoNn2BD1r1qMzwLLONk20I2GyZWzJ23 fXjALFFamOb7Jb6J5lEr6Tr+zsFOQ60E -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:36 2025 by rpki-client