$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft File: YscfaukWKfhUypRkF2G2UizUgMM.mft (raw, json) Hash identifier: MNJThTIZmHcDcG8ZkxnKWmgVtfGQlTTgjckWB+Ytt88= Subject key identifier: 60:4B:1D:B1:15:30:41:F8:9F:D8:E7:A2:CB:E6:E9:FF:C1:B2:6E:5F Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 Certificate issuer: /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft Manifest number: 5B Signing time: Sun 07 Sep 2025 07:42:29 +0000 Manifest this update: Sun 07 Sep 2025 07:42:29 +0000 Manifest next update: Sun 14 Sep 2025 07:42:29 +0000 Files and hashes: 1: YscfaukWKfhUypRkF2G2UizUgMM.crl (hash: 9SEXc4Slbpf9ewrCvJz9tKKRBYS/3STUpm659AvhtQQ=) 2: 824FECA61EA811F0A4B9881EC4F9AE02.roa (hash: lnqtXsb2uQDyw+VqZesv3MnkaYFT+PyijHSiNS5QwcA=) 3: 6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (hash: 3CfNmrVRNEvPM//uIqEsifmOeeaUM9uVI7qqpW4aJQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Validity Not Before: Sep 7 07:42:29 2025 GMT Not After : Sep 14 07:42:29 2025 GMT Subject: CN=68bd3765-25cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:4b:86:81:5c:74:3a:b1:8b:11:7a:2c:99: dc:3e:af:7e:f0:9a:c9:bf:ef:e1:d1:3b:5e:a6:a6: 8d:a4:08:9d:fa:16:da:36:59:35:55:fe:c8:d7:5a: 6c:9b:a2:df:cc:5b:7e:23:31:19:7c:35:27:9c:7d: 6c:8a:71:a8:14:b3:c4:ce:32:92:aa:1c:d8:ae:b2: 9c:3c:f3:df:16:df:57:06:cf:6e:4b:8e:70:b8:9d: a2:0d:fc:2b:41:7b:36:5a:a4:02:86:f5:b4:74:c8: de:01:16:8c:e6:07:33:f4:f1:7b:a6:4a:fa:0c:04: 7c:9c:83:d7:e4:6e:46:f1:bf:08:9d:dd:4a:98:df: 47:b9:9e:03:34:ff:a9:6a:00:48:ce:32:be:d0:66: 2a:ef:e7:1a:e1:05:68:4c:ec:89:bd:5d:e4:2f:72: b2:78:6a:cd:4b:be:f2:91:dc:59:58:51:fc:91:1a: 68:36:28:ff:e5:05:24:42:bb:2b:28:6c:33:bf:1e: ee:00:11:48:fd:04:32:96:9d:99:72:ee:46:f0:21: 2e:df:2b:fb:b6:07:8b:52:c1:f0:5b:09:5d:47:98: 19:2c:f5:44:37:ff:fa:23:54:db:28:c3:a3:41:00: c9:05:df:cd:91:48:d3:37:0c:c5:24:69:0b:fd:52: 82:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4B:1D:B1:15:30:41:F8:9F:D8:E7:A2:CB:E6:E9:FF:C1:B2:6E:5F X509v3 Authority Key Identifier: keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:96:45:73:6d:9d:70:9e:00:de:aa:5f:b8:52:09:7f:cd:2d: 57:c0:64:91:62:4e:45:f5:7d:b6:b5:39:40:53:18:1f:45:8d: 7e:f0:69:d4:b4:75:b4:8b:b5:11:40:ba:0f:b1:78:61:88:bd: 39:d3:76:44:59:a0:dc:9e:e5:c4:f9:71:a1:5c:cb:a3:aa:48: f7:43:2d:78:c0:b9:ae:e0:55:02:73:43:da:cd:25:25:e8:65: f7:40:99:40:1b:a7:c2:73:82:22:0e:2b:b9:71:0c:7b:6f:5e: a4:40:e8:e2:85:f2:f6:aa:7a:02:a4:b4:69:15:de:41:36:d1: 82:ab:f1:3d:2a:14:49:79:f6:10:9c:f8:12:6c:5a:da:eb:32: 23:c1:93:21:13:79:93:0b:d7:90:b0:29:fc:0a:2a:63:ce:f4: 57:19:ee:ea:ad:b1:3c:0d:a3:97:47:6f:78:2d:c8:4f:bc:a0: d9:9f:7c:6e:7b:b3:ba:c1:22:64:58:80:a5:29:37:1c:e1:de: cd:47:90:27:c2:72:46:c8:c8:3e:04:14:35:16:c6:6b:a5:ae: b4:13:08:86:53:be:66:fc:15:f5:a7:97:0f:17:56:06:76:f7: f0:4b:53:f4:d8:46:b2:3c:45:03:bc:b0:dd:bf:42:1d:1c:0a: a2:cd:ca:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTE5RjExMC8GA1UEBRMoNjJDNzFGNkFFOTE2MjlGODU0Q0E5NDY0MTc2MUI2NTIy Q0Q0ODBDMzAeFw0yNTA5MDcwNzQyMjlaFw0yNTA5MTQwNzQyMjlaMBgxFjAUBgNV BAMTDTY4YmQzNzY1LTI1Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuskuGgVx0OrGLEXosmdw+r37wmsm/7+HRO16mpo2kCJ36Fto2WTVV/sjXWmyb ot/MW34jMRl8NSecfWyKcagUs8TOMpKqHNiuspw8898W31cGz25LjnC4naIN/CtB ezZapAKG9bR0yN4BFozmBzP08XumSvoMBHycg9fkbkbxvwid3UqY30e5ngM0/6lq AEjOMr7QZirv5xrhBWhM7Im9XeQvcrJ4as1LvvKR3FlYUfyRGmg2KP/lBSRCuyso bDO/Hu4AEUj9BDKWnZly7kbwIS7fK/u2B4tSwfBbCV1HmBks9UQ3//ojVNsow6NB AMkF382RSNM3DMUkaQv9UoJTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYEsdsRUw Qfif2Oeiy+bp/8Gybl8wHwYDVR0jBBgwFoAUYscfaukWKfhUypRkF2G2UizUgMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMTlGL0I5RUEwNEM2MDU5 NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXNjZmF1a1dLZmhVeXBSa0YyRzJVaXpVZ01NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MTlGL0I5RUEwNEM2MDU5NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2Zo VXlwUmtGMkcyVWl6VWdNTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJOWRXNtnXCeAN6qX7hSCX/NLVfAZJFiTkX1fba1OUBTGB9FjX7wadS0 dbSLtRFAug+xeGGIvTnTdkRZoNye5cT5caFcy6OqSPdDLXjAua7gVQJzQ9rNJSXo ZfdAmUAbp8JzgiIOK7lxDHtvXqRA6OKF8vaqegKktGkV3kE20YKr8T0qFEl59hCc +BJsWtrrMiPBkyETeZML15CwKfwKKmPO9FcZ7uqtsTwNo5dHb3gtyE+8oNmffG57 s7rBImRYgKUpNxzh3s1HkCfCckbIyD4EFDUWxmulrrQTCIZTvmb8FfWnlw8XVgZ2 9/BLU/TYRrI8RQO8sN2/Qh0cCqLNymM= -----END CERTIFICATE-----Generated at Sun Sep 7 14:54:45 2025 by rpki-client