$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: qLoINdAUPH6urPSB8WMqIhdrTF5jLaVDtcA8b3AReOQ= Subject key identifier: E5:04:CF:01:4F:B6:83:4F:4D:90:9C:E8:53:57:89:00:23:3A:DB:52 Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: F3 Signing time: Sun 07 Sep 2025 05:43:57 +0000 Manifest this update: Sun 07 Sep 2025 05:43:57 +0000 Manifest next update: Sun 14 Sep 2025 05:43:57 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: G6De7qwN8Ty/f5/dzxuQfSayI8Yz3+4b7l/cZxvDYdQ=) 2: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: bUpgZDyaaNx2o4Iq2csQK5MMpOoGsf0d7wS0X/AlYLQ=) 3: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: iGJZ5nKtqdpr8XQ5xRp8ABn+d8XHdqoNNsqJjwgQg3Y=) 4: 680D797023E611EF8165F17BC4F9AE02.roa (hash: oa8frv8vlg1vBn275l50HRx0PnZyi1FiU/lJjWPqNdo=) 5: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: sopaYIQ7VXvlTBIzsDAOnSetWGJ3UTk1u9wD33/qnLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Sep 7 05:43:57 2025 GMT Not After : Sep 14 05:43:57 2025 GMT Subject: CN=68bd1b9d-2250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:ac:3d:89:58:67:f5:b3:d7:cd:05:2b:5d: 7f:65:ae:fb:f9:05:b4:dd:0b:2f:8f:7e:78:5a:75: df:0e:45:a7:ab:41:b9:29:80:ab:41:1c:4b:27:29: 55:97:96:fd:6e:cc:e5:df:37:7f:52:04:eb:9b:bc: 85:f4:29:35:41:94:ab:52:04:f3:e2:40:41:c4:88: 62:1d:1a:27:9b:e7:d0:c1:9f:4b:81:0e:b6:aa:d6: cc:95:27:a2:01:3b:58:39:18:0d:72:2f:8f:99:82: d2:13:ab:65:3c:c9:31:a3:63:c8:af:87:e9:0a:1a: 46:ac:4c:6f:d3:d4:48:bc:37:9d:a3:c3:f6:d3:b8: 63:f6:48:9e:1b:46:e6:38:2d:e9:0a:eb:b6:0b:85: ec:fc:7d:df:68:62:b8:b7:c7:fc:03:a5:85:56:a2: 5a:a2:80:2b:34:b0:e4:00:2c:9d:19:fa:36:61:60: 77:39:f3:2a:1d:e1:d2:95:e8:5c:d3:73:72:c3:2d: 9f:5e:3e:94:a0:9d:29:8e:2d:73:07:77:19:25:b5: 80:98:f4:6b:3e:c1:e4:4d:32:20:f5:71:53:cc:0d: 92:f7:79:17:c1:cc:a0:aa:2f:a4:91:d0:7f:28:a0: fe:f4:09:9e:c9:b9:dd:e3:9c:63:29:88:03:8d:ae: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:04:CF:01:4F:B6:83:4F:4D:90:9C:E8:53:57:89:00:23:3A:DB:52 X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:96:b3:7e:7f:6c:31:cc:15:a2:3b:1d:dc:05:d6:ee:2f:6a: 7d:5b:15:1c:47:4b:1e:ba:1a:55:4d:62:d3:72:09:18:50:d4: cf:6a:c9:0f:b0:58:43:68:01:2b:4f:19:97:62:8c:dd:0d:6a: e7:4f:04:fb:f4:02:3c:86:04:61:01:6e:1d:8e:6d:f8:57:36: a2:39:e5:57:6e:9c:a4:32:3d:b2:1e:40:24:41:e3:a2:ee:3d: 17:64:4b:48:29:4a:38:3a:23:8f:72:ac:28:b5:78:b2:26:50: 0f:1a:1f:18:3c:d2:35:41:2a:f6:6b:29:26:35:82:50:b6:a8: d0:5e:e5:19:05:0f:d0:e5:a7:76:8a:b6:0e:c3:b9:ed:2e:8b: c9:61:0a:2e:a1:67:34:46:60:01:05:6c:6e:6c:2c:16:a8:d0: d7:c1:d5:e8:88:bb:a0:a2:54:b0:f2:c6:8e:08:8a:87:8b:87: da:ac:52:e2:1b:8b:a6:70:c7:02:da:1c:13:67:74:23:b9:91: 84:92:b7:b1:ad:9f:ed:da:3d:6c:39:e8:c5:56:f4:85:f4:50: d5:05:68:31:54:34:c3:79:6d:2a:61:db:c8:dc:96:f9:12:93: 1c:8f:91:fa:95:dc:fe:1b:9d:f8:24:e3:5d:c7:17:02:0b:e2: ed:60:df:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2 NTQ0MDY3NzMwHhcNMjUwOTA3MDU0MzU3WhcNMjUwOTE0MDU0MzU3WjAYMRYwFAYD VQQDEw02OGJkMWI5ZC0yMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5esPYlYZ/Wz180FK11/Za77+QW03Qsvj354WnXfDkWnq0G5KYCrQRxLJylV l5b9bszl3zd/UgTrm7yF9Ck1QZSrUgTz4kBBxIhiHRonm+fQwZ9LgQ62qtbMlSei ATtYORgNci+PmYLSE6tlPMkxo2PIr4fpChpGrExv09RIvDedo8P207hj9kieG0bm OC3pCuu2C4Xs/H3faGK4t8f8A6WFVqJaooArNLDkACydGfo2YWB3OfMqHeHSlehc 03Nywy2fXj6UoJ0pji1zB3cZJbWAmPRrPsHkTTIg9XFTzA2S93kXwcygqi+kkdB/ KKD+9Ameybnd45xjKYgDja4WGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUEzwFP toNPTZCc6FNXiQAjOttSMB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0 dEVZeEFOc3VsYkJsUkFaM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGlrN+f2wxzBWiOx3cBdbuL2p9WxUcR0seuhpVTWLTcgkYUNTPaskP sFhDaAErTxmXYozdDWrnTwT79AI8hgRhAW4djm34VzaiOeVXbpykMj2yHkAkQeOi 7j0XZEtIKUo4OiOPcqwotXiyJlAPGh8YPNI1QSr2aykmNYJQtqjQXuUZBQ/Q5ad2 irYOw7ntLovJYQouoWc0RmABBWxubCwWqNDXwdXoiLugolSw8saOCIqHi4farFLi G4umcMcC2hwTZ3QjuZGEkrexrZ/t2j1sOejFVvSF9FDVBWgxVDTDeW0qYdvI3Jb5 EpMcj5H6ldz+G534JONdxxcCC+LtYN8M -----END CERTIFICATE-----Generated at Sun Sep 7 14:25:42 2025 by rpki-client