$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft File: YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json) Hash identifier: mgBZvPw3HFb69I3vFl+uFY6d2REgnFToC/qlKm2YoWg= Subject key identifier: 45:D2:77:E7:69:BE:37:3D:EA:AD:79:ED:C4:0B:40:3B:B4:57:8E:D2 Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D Certificate issuer: /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Certificate serial: 04A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft Manifest number: 049E Signing time: Thu 21 Aug 2025 00:06:05 +0000 Manifest this update: Thu 21 Aug 2025 00:06:05 +0000 Manifest next update: Thu 28 Aug 2025 00:06:05 +0000 Files and hashes: 1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: C+jqTW+x140sY+uoUcSDw1ySMMeshhP5ZoICeauMDjI=) 2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: QChsCdLxNdJADtEotr2ALhheVziebQBBztLPRul6Vhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Validity Not Before: Aug 21 00:06:05 2025 GMT Not After : Aug 28 00:06:05 2025 GMT Subject: CN=68a662ed-93c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d6:f8:0d:e5:63:26:a1:12:d3:51:a4:1f:98: 94:7d:9e:5f:08:82:e2:66:b0:51:a9:e3:8a:5b:de: 56:ef:63:a5:40:bf:de:8b:40:35:d9:a1:f1:10:2a: 4e:33:a6:29:3c:68:b7:84:71:8f:18:ae:6e:4d:74: d2:fb:66:9e:03:19:b9:78:84:38:a4:87:91:5a:5e: 02:26:80:88:e3:2c:6a:2e:63:88:a4:fd:5d:63:39: 88:a7:24:4c:33:74:00:4a:60:2d:cb:e3:27:6c:96: 5c:75:90:30:88:04:e6:92:53:ca:93:0a:d7:ed:3f: e7:9c:ba:99:b2:21:93:be:57:f8:ee:76:18:f1:5c: 29:b4:f1:76:c8:09:8d:e1:50:91:c0:2a:47:c3:20: 79:7c:55:f4:f2:74:23:fc:1c:f9:a0:0b:0c:7b:26: 9a:4d:95:76:6a:12:ba:75:81:fa:fa:d3:61:3d:77: e6:86:57:1f:7b:8c:61:90:b9:99:a4:a7:d4:77:d8: 87:76:24:30:a4:4d:b1:68:70:9b:54:43:96:81:33: 20:eb:2b:14:f0:ff:6d:07:cf:7f:da:ea:99:ed:a4: ae:b4:96:28:91:36:f5:39:28:83:5b:5a:39:f1:42: 6d:32:38:90:a6:a9:d6:79:b5:c4:3c:5c:b2:af:c9: fd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D2:77:E7:69:BE:37:3D:EA:AD:79:ED:C4:0B:40:3B:B4:57:8E:D2 X509v3 Authority Key Identifier: keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:3e:0f:ae:81:80:57:f5:5a:87:aa:58:2e:fe:bc:9a:05:92: b1:9c:bf:dc:86:06:70:5a:1f:b9:ea:89:29:83:32:67:c6:78: 6c:8d:3f:90:d6:31:b1:d5:69:18:55:bb:6e:f1:dc:26:a4:18: 5d:95:9d:ae:15:bd:b8:fc:12:7b:8b:4a:3b:fb:30:0e:a9:05: 9b:fc:af:2a:0a:75:de:0e:5f:66:cd:8b:8c:fb:28:84:e5:93: c1:f8:1e:cb:1e:55:39:b4:53:2f:67:6d:98:00:26:ff:c2:d2: b4:e3:6a:43:7e:02:49:ae:9b:d9:e4:b7:9e:2d:04:28:ee:d7: 2d:28:ad:2b:2d:36:cb:dd:14:0d:28:e1:54:fb:d7:3d:a0:6a: 1e:31:b3:2b:6a:72:6e:42:97:dd:5a:a8:3c:3e:a9:c6:3e:9d: 14:36:f2:e3:26:66:5b:83:96:6d:2c:f3:7c:3c:6c:94:f3:0d: db:4b:1c:06:01:c6:c8:af:1a:74:8a:c1:5a:f6:c7:7c:dc:48: 34:40:e8:c3:da:b6:b4:45:e6:dc:84:e0:23:fc:94:e4:3d:23: 5e:a9:7c:c8:2d:92:ae:76:47:d5:43:89:31:35:89:61:f1:fe: 0a:05:92:67:7c:9c:36:50:9f:18:d7:af:73:4b:af:d6:af:c6: 01:58:a1:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQyODIxMTAvBgNVBAUTKDYxNjNEQ0I1RDUzQjQ4NzJFMTU5NTYzRTkwRkM1RTQx QUQwMDJDMkQwHhcNMjUwODIxMDAwNjA1WhcNMjUwODI4MDAwNjA1WjAYMRYwFAYD VQQDEw02OGE2NjJlZC05M2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tb4DeVjJqES01GkH5iUfZ5fCILiZrBRqeOKW95W72OlQL/ei0A12aHxECpO M6YpPGi3hHGPGK5uTXTS+2aeAxm5eIQ4pIeRWl4CJoCI4yxqLmOIpP1dYzmIpyRM M3QASmAty+MnbJZcdZAwiATmklPKkwrX7T/nnLqZsiGTvlf47nYY8VwptPF2yAmN 4VCRwCpHwyB5fFX08nQj/Bz5oAsMeyaaTZV2ahK6dYH6+tNhPXfmhlcfe4xhkLmZ pKfUd9iHdiQwpE2xaHCbVEOWgTMg6ysU8P9tB89/2uqZ7aSutJYokTb1OSiDW1o5 8UJtMjiQpqnWebXEPFyyr8n9tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXSd+dp vjc96q157cQLQDu0V47SMB8GA1UdIwQYMBaAFGFj3LXVO0hy4VlWPpD8XkGtACwt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI4Mi85NzE0MzM3NjQ3 OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NITGhXVlkta1B4ZVFhMEFM QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lXUGN0ZFU3U0hMaFdWWS1rUHhlUWEwQUxDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDI4Mi85NzE0MzM3NjQ3OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NI TGhXVlkta1B4ZVFhMEFMQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlPg+ugYBX9VqHqlgu/ryaBZKxnL/chgZwWh+56okpgzJnxnhsjT+Q 1jGx1WkYVbtu8dwmpBhdlZ2uFb24/BJ7i0o7+zAOqQWb/K8qCnXeDl9mzYuM+yiE 5ZPB+B7LHlU5tFMvZ22YACb/wtK042pDfgJJrpvZ5LeeLQQo7tctKK0rLTbL3RQN KOFU+9c9oGoeMbMranJuQpfdWqg8PqnGPp0UNvLjJmZbg5ZtLPN8PGyU8w3bSxwG AcbIrxp0isFa9sd83Eg0QOjD2ra0RebchOAj/JTkPSNeqXzILZKudkfVQ4kxNYlh 8f4KBZJnfJw2UJ8Y169zS6/Wr8YBWKHt -----END CERTIFICATE-----Generated at Fri Aug 22 16:23:01 2025 by rpki-client