$ rpki-client -vvf rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft File: yVDnh1o97uCC2cxQNQC_3ndwhuE.mft (raw, json) Hash identifier: drn5IthSRnD/tvhVzXSWKRKzIO95N61a4W58gR9XtI0= Subject key identifier: E4:CB:4B:FC:AD:7C:74:C2:98:AE:21:22:BE:9F:8A:A2:A1:CC:05:58 Authority key identifier: C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1 Certificate issuer: /CN=A9153766/serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft Manifest number: 0191 Signing time: Sat 23 Aug 2025 03:33:09 +0000 Manifest this update: Sat 23 Aug 2025 03:33:08 +0000 Manifest next update: Sat 30 Aug 2025 03:33:08 +0000 Files and hashes: 1: yVDnh1o97uCC2cxQNQC_3ndwhuE.crl (hash: JPK578vCUuJRw6kgqWIpuuvaumrphsgJmoSnJ9ZELck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153766, serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1 Validity Not Before: Aug 23 03:33:08 2025 GMT Not After : Aug 30 03:33:08 2025 GMT Subject: CN=68a93674-db7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e9:d0:88:5e:ca:3f:e7:e9:bc:04:e2:a1:a2: 9e:fd:ea:48:a9:40:be:a2:6a:89:e4:b0:72:46:25: b4:4d:a3:a7:25:ae:63:7e:1c:a6:b8:72:77:3f:7f: 22:87:3d:25:34:a7:7d:9d:96:17:03:bd:64:5d:43: a5:28:0b:e5:e4:67:2d:4e:a6:15:f7:e3:b6:6c:6f: c5:1c:b6:6e:16:ef:32:76:9e:6c:8a:f1:d9:cb:60: 59:26:a6:9a:e5:6c:fc:c9:73:46:ec:ad:69:01:94: 2c:bb:05:4a:0b:c4:40:c7:ec:8e:85:27:2b:45:92: 63:c6:ec:37:21:a3:46:de:cb:02:09:22:94:f0:80: 38:ec:ca:ea:8a:1e:af:84:a4:dc:ac:3b:3b:79:0f: bf:da:af:bb:dd:ab:2c:ee:63:22:6c:1d:00:fa:19: 14:f7:33:96:b1:19:05:31:6e:87:04:db:a8:a0:5d: 87:b2:bd:ee:2e:dc:4e:c6:cf:65:35:45:0b:e3:ed: 54:42:f8:6d:4c:f6:69:08:e6:97:8c:c3:a0:37:65: 28:2e:ac:f6:cb:24:00:81:f9:6d:35:57:03:91:be: 4e:cf:6a:a7:e7:ab:b0:12:34:47:91:8c:b8:0a:39: f2:f5:7f:13:d6:ea:6f:b2:70:bc:87:28:9f:97:29: 06:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CB:4B:FC:AD:7C:74:C2:98:AE:21:22:BE:9F:8A:A2:A1:CC:05:58 X509v3 Authority Key Identifier: keyid:C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:96:3b:62:e9:ad:ee:2e:34:cc:6c:15:13:ee:41:da:05:17: 90:dc:ff:5f:c4:76:45:8b:b9:73:56:9f:fa:34:7a:2d:a8:85: f2:3b:6b:55:f6:2a:94:65:55:e6:af:5a:70:42:d2:49:11:f6: 35:e6:2a:37:07:64:23:00:5f:cc:9e:b6:7c:a4:dd:c1:eb:ba: d2:db:24:ce:18:34:3f:37:69:80:4b:3b:84:7f:8f:7a:62:c8: 93:4c:7d:6d:54:70:ac:8d:92:2e:ad:e1:63:98:b0:aa:17:95: 4f:30:0d:75:c1:20:f8:8c:04:01:d1:0c:06:bf:30:5c:87:45: 5d:eb:5e:2d:24:0b:7a:06:ba:27:ef:85:6c:78:60:fd:bc:7b: 42:dd:03:6c:09:6f:1a:fc:e3:33:96:bd:aa:e1:4b:14:44:0d: e1:0c:55:c1:a2:d2:00:6e:ad:c0:e6:10:b4:51:b4:c6:52:00: e2:f8:76:b8:22:2b:38:4b:c1:5e:9d:ba:2b:17:3e:c0:2b:e6: e3:ea:fc:9b:47:77:24:1a:e1:b6:b6:57:b1:5b:91:5a:33:18: d9:44:d4:d2:88:1e:de:99:e9:a7:c3:fe:bb:68:be:01:55:f9: 11:82:9b:a0:53:fe:54:08:0d:10:22:ae:90:b5:43:61:d7:02: 92:ea:ea:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3NjYxMTAvBgNVBAUTKEM5NTBFNzg3NUEzREVFRTA4MkQ5Q0M1MDM1MDBCRkRF Nzc3MDg2RTEwHhcNMjUwODIzMDMzMzA4WhcNMjUwODMwMDMzMzA4WjAYMRYwFAYD VQQDEw02OGE5MzY3NC1kYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmunQiF7KP+fpvATioaKe/epIqUC+omqJ5LByRiW0TaOnJa5jfhymuHJ3P38i hz0lNKd9nZYXA71kXUOlKAvl5GctTqYV9+O2bG/FHLZuFu8ydp5sivHZy2BZJqaa 5Wz8yXNG7K1pAZQsuwVKC8RAx+yOhScrRZJjxuw3IaNG3ssCCSKU8IA47Mrqih6v hKTcrDs7eQ+/2q+73ass7mMibB0A+hkU9zOWsRkFMW6HBNuooF2Hsr3uLtxOxs9l NUUL4+1UQvhtTPZpCOaXjMOgN2UoLqz2yyQAgfltNVcDkb5Oz2qn56uwEjRHkYy4 Cjny9X8T1upvsnC8hyiflykGMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTLS/yt fHTCmK4hIr6fiqKhzAVYMB8GA1UdIwQYMBaAFMlQ54daPe7ggtnMUDUAv953cIbh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzc2Ni9EQjdDRDg4NDE2 NzExMUVFODExOTYyNDdDNEY5QUUwMi95VkRuaDFvOTd1Q0MyY3hRTlFDXzNuZHdo dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWRG5oMW85N3VDQzJjeFFOUUNfM25kd2h1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mzc2Ni9EQjdDRDg4NDE2NzExMUVFODExOTYyNDdDNEY5QUUwMi95VkRuaDFvOTd1 Q0MyY3hRTlFDXzNuZHdodUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMljti6a3uLjTMbBUT7kHaBReQ3P9fxHZFi7lzVp/6NHotqIXyO2tV 9iqUZVXmr1pwQtJJEfY15io3B2QjAF/MnrZ8pN3B67rS2yTOGDQ/N2mASzuEf496 YsiTTH1tVHCsjZIureFjmLCqF5VPMA11wSD4jAQB0QwGvzBch0Vd614tJAt6Bron 74VseGD9vHtC3QNsCW8a/OMzlr2q4UsURA3hDFXBotIAbq3A5hC0UbTGUgDi+Ha4 Iis4S8FenborFz7AK+bj6vybR3ckGuG2tlexW5FaMxjZRNTSiB7ememnw/67aL4B VfkRgpugU/5UCA0QIq6QtUNh1wKS6urh -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:30 2025 by rpki-client