$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft File: Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft (raw, json) Hash identifier: bNKisyfpFsgg8SswoC4tLzNBsMGRbzoEOW/rs98OLto= Subject key identifier: 11:57:D7:71:4C:0D:4B:08:B1:89:FB:EF:4F:06:95:88:B0:62:C4:7F Authority key identifier: 63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1 Certificate issuer: /CN=A9178F62/serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft Manifest number: 1C Signing time: Sat 23 Aug 2025 08:11:49 +0000 Manifest this update: Sat 23 Aug 2025 08:11:48 +0000 Manifest next update: Sat 30 Aug 2025 08:11:48 +0000 Files and hashes: 1: Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl (hash: kemWoGGkSmp3DqET3uu/FwmuI4ZhNrC6JZzxoa4g2dg=) 2: 14798B705DFE11F0884D684CC4F9AE02.roa (hash: LemiH8pfsweC82Hjr0VqZWkC1AnqngCYZh5w6GyY1xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178F62, serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1 Validity Not Before: Aug 23 08:11:48 2025 GMT Not After : Aug 30 08:11:48 2025 GMT Subject: CN=68a977c4-054d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:0b:46:9b:16:a2:ea:9b:4e:3a:d4:2e:75: 88:a7:2f:86:08:6c:96:40:62:9c:93:5e:94:8f:4c: 70:e2:82:66:c9:69:80:cd:f8:40:78:37:bb:9b:10: 7a:38:90:2b:ef:cc:92:6e:c7:e9:2f:f7:2c:f5:ba: 49:d6:11:b9:4e:2e:2d:3f:b7:34:73:ea:7b:12:62: e6:c7:1f:b8:5f:1c:df:30:53:0a:4a:1d:ac:4b:34: bf:4b:b5:af:4d:49:81:17:aa:e2:9d:90:74:2d:47: 96:51:18:20:e7:77:d6:b6:23:b7:76:39:ad:71:57: 45:02:97:1d:f0:d3:83:30:6a:e4:ec:fd:28:97:dd: 45:ec:7f:8c:fd:9c:f6:d2:f0:31:c3:22:ad:9e:5e: ad:14:40:6f:de:7c:ad:31:84:a3:ea:b8:28:90:a5: 8a:d5:06:af:35:e0:97:78:1e:03:05:28:ab:08:ba: c8:93:8e:f9:7e:66:43:be:af:fd:4e:22:7b:9f:1f: a7:ba:fe:27:f0:4d:de:4a:93:d6:96:4b:26:2c:d8: 14:c0:2e:e2:4c:c0:72:c8:3e:a6:f1:53:ed:6f:36: 87:ac:41:d1:e0:1c:73:5b:fc:f0:6f:22:7b:da:6d: 19:b7:c7:26:ee:46:b9:03:d3:1d:dd:02:22:9b:63: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:57:D7:71:4C:0D:4B:08:B1:89:FB:EF:4F:06:95:88:B0:62:C4:7F X509v3 Authority Key Identifier: keyid:63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d2:64:34:23:88:dd:1f:11:bd:f0:e8:05:6f:9f:51:ac:06: 56:40:a0:6a:e0:4e:c4:6d:54:4d:1e:c8:5c:5e:6c:d6:e8:c1: 39:aa:85:96:e0:1f:09:cd:2a:50:2b:91:3f:49:69:9d:bf:25: 19:81:33:11:6f:79:36:6b:34:ce:05:c8:80:4b:3a:6f:eb:5f: 54:ea:18:8a:81:26:34:4f:b8:f6:01:c1:b1:7b:62:47:f2:7f: c4:fe:a8:cb:42:d2:ae:ac:ef:12:b0:b5:80:5c:9a:87:f9:3d: 5d:88:77:0a:01:e6:f8:1f:2a:46:85:b6:5e:6a:7b:7f:c4:7a: fa:5e:c3:37:80:85:b9:45:4c:14:12:45:0d:88:38:e5:87:26: 7b:5c:2c:40:d2:b6:2e:6f:89:2c:8d:08:36:d6:1a:eb:0f:30: 52:09:d3:df:b7:9c:52:86:67:c5:bf:52:ae:12:63:50:e5:e4: 73:1f:09:6b:4f:93:ed:30:cc:f6:f8:fd:b8:70:89:a2:3e:8b: 3c:a9:f5:40:80:3a:ba:a0:fc:35:cd:23:7a:c1:b2:84:68:d3: 8e:26:72:e1:3a:37:29:cd:74:a0:24:d6:c2:af:f7:48:c6:25: 34:f9:c1:aa:da:c5:f4:af:87:e0:ee:89:00:39:1e:d6:71:2c: 68:29:fa:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEY2MjExMC8GA1UEBRMoNjNGQTAwMDYyNjFEOUU0Q0Q0OTA1OTA2RTU0Mzk2OTRC RTYyN0JCMTAeFw0yNTA4MjMwODExNDhaFw0yNTA4MzAwODExNDhaMBgxFjAUBgNV BAMTDTY4YTk3N2M0LTA1NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWggtGmxai6ptOOtQudYinL4YIbJZAYpyTXpSPTHDigmbJaYDN+EB4N7ubEHo4 kCvvzJJux+kv9yz1uknWEblOLi0/tzRz6nsSYubHH7hfHN8wUwpKHaxLNL9Lta9N SYEXquKdkHQtR5ZRGCDnd9a2I7d2Oa1xV0UClx3w04MwauTs/SiX3UXsf4z9nPbS 8DHDIq2eXq0UQG/efK0xhKPquCiQpYrVBq814Jd4HgMFKKsIusiTjvl+ZkO+r/1O InufH6e6/ifwTd5Kk9aWSyYs2BTALuJMwHLIPqbxU+1vNoesQdHgHHNb/PBvInva bRm3xybuRrkD0x3dAiKbYzh7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEVfXcUwN SwixifvvTwaViLBixH8wHwYDVR0jBBgwFoAUY/oABiYdnkzUkFkG5UOWlL5ie7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4RjYyL0I4NzhDMkM4NURG RDExRjBCNUMwN0I0QkM0RjlBRTAyL1lfb0FCaVlkbmt6VWtGa0c1VU9XbEw1aWU3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWV9vQUJpWWRua3pVa0ZrRzVVT1dsTDVpZTdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 RjYyL0I4NzhDMkM4NURGRDExRjBCNUMwN0I0QkM0RjlBRTAyL1lfb0FCaVlkbmt6 VWtGa0c1VU9XbEw1aWU3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFbSZDQjiN0fEb3w6AVvn1GsBlZAoGrgTsRtVE0eyFxebNbowTmqhZbg HwnNKlArkT9JaZ2/JRmBMxFveTZrNM4FyIBLOm/rX1TqGIqBJjRPuPYBwbF7Ykfy f8T+qMtC0q6s7xKwtYBcmof5PV2IdwoB5vgfKkaFtl5qe3/EevpewzeAhblFTBQS RQ2IOOWHJntcLEDSti5viSyNCDbWGusPMFIJ09+3nFKGZ8W/Uq4SY1Dl5HMfCWtP k+0wzPb4/bhwiaI+izyp9UCAOrqg/DXNI3rBsoRo044mcuE6NynNdKAk1sKv90jG JTT5waraxfSvh+DuiQA5HtZxLGgp+ns= -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:08 2025 by rpki-client