$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft File: yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json) Hash identifier: Tt2GQ54JD1pIjqPXwSQMJkHN8omGsMP8w0xMLl0ZCVc= Subject key identifier: 1C:24:3F:33:E7:F9:05:54:AD:6F:F9:3D:D0:0F:08:30:71:04:CB:32 Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 080C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft Manifest number: 0807 Signing time: Fri 22 Aug 2025 21:01:21 +0000 Manifest this update: Fri 22 Aug 2025 21:01:21 +0000 Manifest next update: Fri 29 Aug 2025 21:01:21 +0000 Files and hashes: 1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: MhjDiMAzM7KtwyNRkhE2xof9ltwhmuE/aZJsk/OQ+Cw=) 2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: a2yAAw5TgVOmiE8atuw12IZTou56LGQZcdiOcAtiW0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: Aug 22 21:01:21 2025 GMT Not After : Aug 29 21:01:21 2025 GMT Subject: CN=68a8daa1-8158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:7e:4d:ae:28:6e:fc:02:f8:d3:9b:57:f7: 19:9e:ec:27:2b:71:b7:96:cb:c8:54:95:95:db:b1: 89:8d:cf:50:b4:bb:2a:92:09:c1:ba:b8:f5:21:27: 18:d0:72:18:0c:c7:53:de:11:b4:5a:20:1a:10:d2: 05:93:f9:c9:7b:72:bf:fe:64:20:bb:cb:92:41:92: 1c:47:b3:75:61:62:b5:df:b0:44:d6:ba:ea:15:60: 62:1a:36:11:19:cc:5f:e3:83:8a:ff:01:6c:f0:2e: 49:65:67:49:db:d5:ff:e3:a8:b1:55:fd:be:71:67: c8:df:e4:c8:9e:59:f6:7f:81:7a:80:53:f0:67:e7: f3:8d:6e:21:cc:e7:30:99:f3:f8:44:ae:85:34:6d: 89:a4:a7:e9:14:4d:eb:c1:74:14:5c:c0:ff:27:8f: db:8c:7b:c2:4d:5f:00:8a:5e:f9:3c:23:09:48:ec: f4:2b:cf:d7:b3:75:02:1c:49:92:0d:78:b8:5b:1e: 9b:b4:5d:29:04:80:02:1a:d1:fc:0f:80:7a:b8:4b: c0:af:b6:d1:d9:28:70:2c:ab:7e:ce:6f:bc:ce:c4: a0:15:22:49:09:9e:58:a4:88:82:17:2b:85:0c:9b: 74:dd:87:d1:49:3d:d1:eb:99:03:f1:e4:de:0a:1a: 2a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:24:3F:33:E7:F9:05:54:AD:6F:F9:3D:D0:0F:08:30:71:04:CB:32 X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:65:7c:4c:96:c4:64:22:8e:42:43:c6:63:dc:25:e3:f8:5b: f3:e5:f8:40:e1:9e:bd:82:5f:80:ff:7b:94:a3:04:0c:96:96: b2:92:46:fa:ed:37:82:13:e7:c8:f2:22:89:5a:44:f5:3d:7c: b7:5d:cf:7f:17:c2:5c:50:8c:ee:1c:42:18:84:3a:97:26:6b: 23:a8:19:03:f4:09:63:ae:6b:b4:19:c6:69:df:d8:97:68:d9: 42:c4:1d:67:c3:85:e1:5f:8b:e7:77:bb:d3:7d:8f:7f:1f:6c: b3:1d:fe:7a:08:2c:ff:7d:a8:4e:4c:dc:9f:53:c8:96:2a:1c: 16:29:1f:6f:90:6b:89:11:32:0e:1a:e7:2e:9d:df:83:f3:9a: 3e:02:18:d7:21:b7:24:57:ea:aa:44:93:a7:3a:cb:e0:2e:f8: a3:e4:c5:83:b5:d7:48:55:c0:e0:54:39:1a:bb:a7:84:fe:88: 81:8f:5f:48:28:6f:2d:5c:9f:63:77:4c:18:0f:ba:df:cc:c6: 44:d3:b4:08:02:0a:3f:7c:53:0a:6f:6f:7a:dd:bf:fe:ef:be: 7f:12:3c:05:c4:8d:5a:b8:80:78:e6:9a:77:81:09:7a:c4:8f: b5:37:7c:8c:12:2e:40:c4:2b:b5:c7:d5:d7:96:5e:2c:16:4e: 48:a6:ef:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjUwODIyMjEwMTIxWhcNMjUwODI5MjEwMTIxWjAYMRYwFAYD VQQDEw02OGE4ZGFhMS04MTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDJ+Ta4obvwC+NObV/cZnuwnK3G3lsvIVJWV27GJjc9QtLsqkgnBurj1IScY 0HIYDMdT3hG0WiAaENIFk/nJe3K//mQgu8uSQZIcR7N1YWK137BE1rrqFWBiGjYR Gcxf44OK/wFs8C5JZWdJ29X/46ixVf2+cWfI3+TInln2f4F6gFPwZ+fzjW4hzOcw mfP4RK6FNG2JpKfpFE3rwXQUXMD/J4/bjHvCTV8Ail75PCMJSOz0K8/Xs3UCHEmS DXi4Wx6btF0pBIACGtH8D4B6uEvAr7bR2ShwLKt+zm+8zsSgFSJJCZ5YpIiCFyuF DJt03YfRST3R65kD8eTeChoqRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwkPzPn +QVUrW/5PdAPCDBxBMsyMB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEU5OC8wRUIxMkI0MEVDQzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExu WVF5RXNDNW1ITDh6Yl9yMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkZXxMlsRkIo5CQ8Zj3CXj+Fvz5fhA4Z69gl+A/3uUowQMlpaykkb6 7TeCE+fI8iKJWkT1PXy3Xc9/F8JcUIzuHEIYhDqXJmsjqBkD9Aljrmu0GcZp39iX aNlCxB1nw4XhX4vnd7vTfY9/H2yzHf56CCz/fahOTNyfU8iWKhwWKR9vkGuJETIO Gucund+D85o+AhjXIbckV+qqRJOnOsvgLvij5MWDtddIVcDgVDkau6eE/oiBj19I KG8tXJ9jd0wYD7rfzMZE07QIAgo/fFMKb2963b/+775/EjwFxI1auIB45pp3gQl6 xI+1N3yMEi5AxCu1x9XXll4sFk5Ipu+e -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:12 2025 by rpki-client