$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft File: y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json) Hash identifier: CgFOD2JdLtuWfqkhCDYucJgZbXGPCopigcf1o9DluQs= Subject key identifier: 35:B1:C1:AB:6C:36:08:A8:9D:59:DE:65:AF:DE:88:18:61:10:38:9B Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 Certificate issuer: /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft Manifest number: 0199 Signing time: Wed 17 Sep 2025 03:54:07 +0000 Manifest this update: Wed 17 Sep 2025 03:54:06 +0000 Manifest next update: Wed 24 Sep 2025 03:54:06 +0000 Files and hashes: 1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: v6y4Te2cZtmz2zXm7l3+hKPpEnr8b5498tTlD2ZD9lU=) 2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: Ae2kzkiPbHsneEUo3gobHEERA3S8mH2dAIJpdvxeRck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Validity Not Before: Sep 17 03:54:06 2025 GMT Not After : Sep 24 03:54:06 2025 GMT Subject: CN=68ca30df-551c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:36:e0:3d:80:ed:df:4b:bc:b8:97:fb:36: 0c:75:1b:47:3b:f4:f1:53:a2:91:b5:aa:c3:58:48: 4d:91:47:f3:6c:96:d0:56:e6:51:49:42:90:0e:97: 10:b7:13:84:c5:0c:bc:51:00:f0:ac:df:5c:4b:1c: f7:c5:14:89:f5:54:36:6d:93:24:ca:c7:c8:c3:1b: 69:2a:36:89:3a:69:32:de:14:22:17:dd:11:89:90: c9:1f:18:47:87:0c:5e:a6:af:e8:6f:97:ef:e9:7e: f5:38:4d:b1:06:9b:37:41:10:f5:6c:73:03:fa:87: 05:e6:1a:c9:88:b4:cf:6b:b3:cf:6e:33:4c:35:ec: 7a:9c:b1:d0:0d:db:b4:55:80:f8:29:3b:49:7d:01: 20:13:e3:48:a0:52:63:d0:73:d0:93:26:d5:ab:b3: 02:fc:72:5d:ff:2c:a8:70:47:2c:40:81:f0:c7:35: ab:21:1b:05:7f:57:cf:7e:95:44:f7:37:dc:3c:ae: 95:9d:8d:cd:0b:41:03:34:d3:cd:8b:3c:bb:90:db: 61:7d:e6:17:fd:98:8c:ea:f0:ce:73:8b:97:d3:de: 01:0b:2c:b9:70:f6:13:32:fe:d6:c7:bd:b1:7a:e4: 83:6a:21:7b:2f:e6:3d:97:c2:a1:c0:5a:26:05:a4: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B1:C1:AB:6C:36:08:A8:9D:59:DE:65:AF:DE:88:18:61:10:38:9B X509v3 Authority Key Identifier: keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:97:25:e6:36:24:10:19:2f:de:dd:2a:f0:8a:e9:49:ca:c3: fb:89:cf:c6:07:7c:15:bc:d3:70:e7:6c:5e:d5:46:ee:47:d2: d4:91:9e:fd:ad:74:b8:c0:fe:e7:1d:ff:19:7b:9c:e0:72:c6: 15:bd:f4:ae:2a:b3:3f:fd:c0:f8:c8:94:a6:66:0a:f6:41:32: ed:15:a0:d7:63:7a:72:ee:bf:45:a8:39:b0:d6:6c:8f:ad:e5: 33:44:29:25:e8:c4:ec:81:2e:17:86:c2:3e:fb:9e:26:29:2f: a4:56:82:42:cc:f8:c1:4d:0f:f4:fa:09:96:a6:55:6c:78:82: 31:39:3a:1c:d5:c2:df:2c:bb:fd:0f:1c:44:55:4c:7f:31:fa: 6d:36:f3:79:ad:71:56:5b:fa:4c:34:e5:bf:64:a8:84:0e:f7: 65:43:d5:8b:06:11:4c:71:c8:70:73:a1:cf:68:66:63:4a:f0: 00:75:14:25:e5:0b:17:b2:ad:96:c1:de:69:26:d5:cd:9e:63: 60:8d:c2:23:d6:ff:95:78:dd:e1:6e:b5:8a:7c:5b:b8:4c:a0: a9:47:dc:75:fe:8e:b6:fc:ca:a7:0e:45:4f:e6:42:b1:81:aa: b8:94:f8:ce:61:9e:0c:a2:cf:60:18:f5:a7:79:fc:a4:f9:07: 0b:d4:92:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0NUIxMTAvBgNVBAUTKENCNzRENTYxM0Q3MzQyQ0ZCOUI3Rjc5REVGMEM5RkFE ODg1Qzc4MjIwHhcNMjUwOTE3MDM1NDA2WhcNMjUwOTI0MDM1NDA2WjAYMRYwFAYD VQQDEw02OGNhMzBkZi01NTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSE24D2A7d9LvLiX+zYMdRtHO/TxU6KRtarDWEhNkUfzbJbQVuZRSUKQDpcQ txOExQy8UQDwrN9cSxz3xRSJ9VQ2bZMkysfIwxtpKjaJOmky3hQiF90RiZDJHxhH hwxepq/ob5fv6X71OE2xBps3QRD1bHMD+ocF5hrJiLTPa7PPbjNMNex6nLHQDdu0 VYD4KTtJfQEgE+NIoFJj0HPQkybVq7MC/HJd/yyocEcsQIHwxzWrIRsFf1fPfpVE 9zfcPK6VnY3NC0EDNNPNizy7kNthfeYX/ZiM6vDOc4uX094BCyy5cPYTMv7Wx72x euSDaiF7L+Y9l8KhwFomBaSPnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWxwats NgionVneZa/eiBhhEDibMB8GA1UdIwQYMBaAFMt01WE9c0LPubf3ne8Mn62IXHgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQ1Qi85NzM2OUI0NjIx NzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFzLTV0X2VkN3d5ZnJZaGNl Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzVFZZVDF6UXMtNXRfZWQ3d3lmclloY2VDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQ1Qi85NzM2OUI0NjIxNzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFz LTV0X2VkN3d5ZnJZaGNlQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAslyXmNiQQGS/e3SrwiulJysP7ic/GB3wVvNNw52xe1UbuR9LUkZ79 rXS4wP7nHf8Ze5zgcsYVvfSuKrM//cD4yJSmZgr2QTLtFaDXY3py7r9FqDmw1myP reUzRCkl6MTsgS4XhsI++54mKS+kVoJCzPjBTQ/0+gmWplVseIIxOToc1cLfLLv9 DxxEVUx/MfptNvN5rXFWW/pMNOW/ZKiEDvdlQ9WLBhFMcchwc6HPaGZjSvAAdRQl 5QsXsq2Wwd5pJtXNnmNgjcIj1v+VeN3hbrWKfFu4TKCpR9x1/o62/MqnDkVP5kKx gaq4lPjOYZ4Mos9gGPWnefyk+QcL1JLu -----END CERTIFICATE-----Generated at Fri Sep 19 02:52:42 2025 by rpki-client