$ rpki-client -vvf rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft File: yizBAkNd6FHdppmDFZEvBvQQTrE.mft (raw, json) Hash identifier: CpiT1YI33xflBgi7qBePreKsEVWyYw1nMuFTuqgm2Lc= Subject key identifier: A9:1D:80:4D:19:9E:19:D8:CE:33:AA:49:14:4D:E2:6A:F1:31:0B:C8 Authority key identifier: CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1 Certificate issuer: /CN=A9177562/serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1 Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft Manifest number: 0549 Signing time: Tue 16 Sep 2025 23:49:23 +0000 Manifest this update: Tue 16 Sep 2025 23:49:23 +0000 Manifest next update: Tue 23 Sep 2025 23:49:23 +0000 Files and hashes: 1: yizBAkNd6FHdppmDFZEvBvQQTrE.crl (hash: 4FXU6wcteuDnpRgHzlX/9MAnFgvf41qyLH7c4RJObSY=) 2: 973E6B76107C11ECB1F7DE5DC4F9AE02.roa (hash: SQGdKb1vFGjNIUOuBUka92JYyHUgvE8twdlpTLjrdUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177562, serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1 Validity Not Before: Sep 16 23:49:23 2025 GMT Not After : Sep 23 23:49:23 2025 GMT Subject: CN=68c9f783-e6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b8:51:be:c5:d4:a6:76:2c:58:e8:7c:fe:84: 5b:b5:19:a3:02:0e:3b:b8:96:6b:98:14:41:ac:2e: 0b:6c:6f:31:ed:4f:d4:c6:f4:10:96:c0:74:08:22: 0f:8f:69:ab:41:68:0d:eb:9a:75:59:a2:99:81:c2: 5d:f8:9e:9c:22:2d:ff:f4:62:9f:84:e0:4f:90:3d: 4c:48:ec:28:2a:cf:29:2a:04:8d:65:e7:92:a2:f2: b3:47:3d:3f:c7:21:6d:af:7f:f2:08:32:9b:dd:83: 33:3a:f3:46:24:fc:bb:dc:11:59:a2:a3:23:c3:72: 1f:48:d9:d0:60:d0:a5:7e:c8:b8:fe:cc:13:02:22: 39:77:4c:fe:c6:e5:f2:a5:fb:ef:85:c9:24:fa:cf: 1e:c9:56:18:ff:37:00:82:a2:4a:05:ea:87:2e:f3: ae:8a:91:fb:15:a7:d3:c6:e9:17:0e:d0:0e:50:69: 63:13:5b:d2:f3:26:a0:f8:b3:8a:d0:c5:f8:02:00: a2:eb:10:9b:f6:4f:e9:61:58:f7:52:4e:b7:67:33: 8a:74:18:88:8b:cc:96:0b:5f:34:f6:40:c1:a6:4f: 21:70:b4:9f:86:3a:f2:15:02:3a:06:53:c5:43:6c: 91:8e:d6:ee:bb:79:94:93:4d:ef:ff:00:af:88:23: 9f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1D:80:4D:19:9E:19:D8:CE:33:AA:49:14:4D:E2:6A:F1:31:0B:C8 X509v3 Authority Key Identifier: keyid:CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:15:15:c6:c4:41:58:0c:79:49:33:46:c7:36:a9:2c:b7:b6: df:8b:ec:23:6b:cb:01:47:91:57:a3:34:1b:f0:43:59:a8:30: 28:af:5a:da:cb:18:3f:71:75:c1:a6:f5:d7:59:7b:27:79:5d: 4c:4e:42:05:3d:63:69:74:c3:9e:78:47:98:9a:5d:a2:dc:99: 51:dd:a9:26:99:d9:4c:f5:7b:77:5f:5b:b6:4f:fe:a2:e7:1f: 89:45:e6:e4:ac:f1:60:95:7d:58:dc:34:b3:03:de:03:f1:df: 43:38:d1:8f:30:b0:48:0e:11:e0:da:c4:6e:f7:73:af:23:dd: 9d:13:ca:dc:37:55:e7:f6:99:eb:8b:da:cb:ba:25:25:3f:cc: 14:1a:aa:03:a2:5b:fc:8a:20:70:01:fd:2b:b8:a4:46:79:b7: c4:09:af:8f:88:3e:4d:dc:21:f9:71:43:5d:57:f9:89:3b:e2: ad:49:99:05:eb:bc:37:7b:d7:f8:47:9d:7f:29:3d:91:1e:8c: 87:26:e1:cd:a7:74:1e:19:be:3e:01:de:f2:29:af:b8:4a:29: 13:68:a5:de:be:be:b1:9a:78:69:94:be:27:db:16:c9:ef:38: 11:93:1e:0d:7d:4f:89:38:92:a8:fa:33:11:ad:5c:8a:dd:35: b6:39:36:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1NjIxMTAvBgNVBAUTKENBMkNDMTAyNDM1REU4NTFEREE2OTk4MzE1OTEyRjA2 RjQxMDRFQjEwHhcNMjUwOTE2MjM0OTIzWhcNMjUwOTIzMjM0OTIzWjAYMRYwFAYD VQQDEw02OGM5Zjc4My1lNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7hRvsXUpnYsWOh8/oRbtRmjAg47uJZrmBRBrC4LbG8x7U/UxvQQlsB0CCIP j2mrQWgN65p1WaKZgcJd+J6cIi3/9GKfhOBPkD1MSOwoKs8pKgSNZeeSovKzRz0/ xyFtr3/yCDKb3YMzOvNGJPy73BFZoqMjw3IfSNnQYNClfsi4/swTAiI5d0z+xuXy pfvvhckk+s8eyVYY/zcAgqJKBeqHLvOuipH7FafTxukXDtAOUGljE1vS8yag+LOK 0MX4AgCi6xCb9k/pYVj3Uk63ZzOKdBiIi8yWC1809kDBpk8hcLSfhjryFQI6BlPF Q2yRjtbuu3mUk03v/wCviCOfgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkdgE0Z nhnYzjOqSRRN4mrxMQvIMB8GA1UdIwQYMBaAFMoswQJDXehR3aaZgxWRLwb0EE6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzU2Mi82QTNGOTIxQzA3 MzAxMUVDQjEyNDk4NDFDNEY5QUUwMi95aXpCQWtOZDZGSGRwcG1ERlpFdkJ2UVFU ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lpekJBa05kNkZIZHBwbURGWkV2QnZRUVRyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzU2Mi82QTNGOTIxQzA3MzAxMUVDQjEyNDk4NDFDNEY5QUUwMi95aXpCQWtOZDZG SGRwcG1ERlpFdkJ2UVFUckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyFRXGxEFYDHlJM0bHNqkst7bfi+wja8sBR5FXozQb8ENZqDAor1ra yxg/cXXBpvXXWXsneV1MTkIFPWNpdMOeeEeYml2i3JlR3akmmdlM9Xt3X1u2T/6i 5x+JRebkrPFglX1Y3DSzA94D8d9DONGPMLBIDhHg2sRu93OvI92dE8rcN1Xn9pnr i9rLuiUlP8wUGqoDolv8iiBwAf0ruKRGebfECa+PiD5N3CH5cUNdV/mJO+KtSZkF 67w3e9f4R51/KT2RHoyHJuHNp3QeGb4+Ad7yKa+4SikTaKXevr6xmnhplL4n2xbJ 7zgRkx4NfU+JOJKo+jMRrVyK3TW2OTZ+ -----END CERTIFICATE-----Generated at Fri Sep 19 01:01:23 2025 by rpki-client