$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft File: yCt7N51v7So8MMRTfg-HzLYIIus.mft (raw, json) Hash identifier: oIlQswsFChTEKVZa6neBrJhkAVMn8x6Rwag2mz4IBsc= Subject key identifier: 19:88:BA:2D:5B:12:F6:C5:D0:C7:43:1F:18:A7:38:44:3F:8F:AF:AA Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB Certificate issuer: /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft Manifest number: 019D Signing time: Wed 17 Sep 2025 03:51:22 +0000 Manifest this update: Wed 17 Sep 2025 03:51:22 +0000 Manifest next update: Wed 24 Sep 2025 03:51:22 +0000 Files and hashes: 1: yCt7N51v7So8MMRTfg-HzLYIIus.crl (hash: MDBvgQwi1h9TDu743tBm8/SjGV+bh5Qw+pxEzr/737k=) 2: B50ECD32A57E11EEB4533738C4F9AE02.roa (hash: 1HSPz5fptSUhMZGOqCo4GWHbK/jQcYLJDQgsd3l//0k=) 3: 348BAEE41C2D11EEB362491FC4F9AE02.roa (hash: qxrX+Z3cG6vZ3aS4ZRQYNGD9CmXUX4wxNipZHWRT9gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB96, serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB Validity Not Before: Sep 17 03:51:22 2025 GMT Not After : Sep 24 03:51:22 2025 GMT Subject: CN=68ca303a-62be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:f5:47:39:21:f0:6e:75:87:2c:43:a7:69: 96:59:7d:2f:19:2e:8a:c7:ee:e3:41:7f:5e:ed:52: fc:9b:d8:73:32:7b:e5:c4:1d:59:63:25:b6:e5:65: 34:2b:b1:56:21:2a:f5:b0:dc:0e:24:65:45:8a:81: 72:9d:86:a8:19:d5:13:1b:12:c0:8c:5f:14:8e:a8: b0:07:0a:ca:09:46:5c:50:a5:a1:4f:6a:d7:5c:3c: 2f:ff:49:c6:a0:51:fe:65:c0:d3:c4:55:68:32:90: 4b:21:82:02:e9:af:f6:f2:6d:be:05:a5:99:1a:a2: d7:a5:e7:0d:3c:87:c1:88:8b:42:02:af:79:47:87: b9:a8:37:42:ad:b5:89:37:da:8c:ca:56:6d:93:ce: 43:88:5a:49:50:5f:c2:cb:bb:16:58:c5:84:2c:5c: d4:87:73:9d:7c:96:02:1b:8f:76:c4:1e:de:dc:ec: 63:23:71:db:b7:69:9a:8c:24:ce:28:65:99:81:13: 03:b0:43:9c:ba:68:0c:80:1b:45:18:e2:a3:be:77: 49:69:86:a4:92:10:40:c8:40:8a:c7:06:c8:92:31: 77:d8:b8:60:af:5c:ba:62:11:0d:be:65:aa:cf:e2: fc:bd:e6:a5:f8:d3:58:ac:85:e4:02:16:76:87:dc: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:88:BA:2D:5B:12:F6:C5:D0:C7:43:1F:18:A7:38:44:3F:8F:AF:AA X509v3 Authority Key Identifier: keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0a:2c:ce:a2:03:6d:4f:10:5a:6d:4e:5c:92:78:02:1c:b0: 46:f0:ab:70:6e:21:93:bf:5d:31:8a:2b:e5:7e:97:b5:bc:5b: ba:f1:33:1f:f1:b2:c5:c4:44:4e:df:25:40:34:38:26:89:dc: 4d:1a:2f:a4:96:77:ab:4e:3d:ee:e7:02:e9:7e:5f:62:5d:d5: fd:b0:15:35:f9:44:9e:52:90:7f:53:98:fc:16:d7:c7:b4:3e: f8:67:11:13:6e:c7:2b:00:44:74:2b:5a:d0:ef:ae:c6:0a:5e: c4:e2:9d:0f:11:ba:b4:9c:12:6d:1e:76:ef:ef:0b:fe:6f:b5: f7:41:94:f3:b2:96:d3:ee:2e:69:88:38:1d:96:14:30:5e:93: ce:93:f0:d5:6b:c7:31:de:24:e1:6c:1e:a7:d2:3a:34:97:9d: 8c:fd:40:50:ab:38:74:e6:69:c8:94:80:73:7a:54:a4:04:a5: 79:fd:33:d0:b2:93:66:05:fd:64:68:e7:10:2a:ed:68:c4:02: b5:0b:44:6d:2a:4c:ac:e0:c5:66:47:90:96:c8:99:de:8b:64: df:e5:1a:c0:6d:1e:93:bb:62:67:0a:cc:3e:a1:db:b2:34:0b: 7e:f4:7c:c6:ba:5a:52:b0:df:b6:ca:30:23:ad:93:17:18:08: dc:4c:aa:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCOTYxMTAvBgNVBAUTKEM4MkI3QjM3OUQ2RkVEMkEzQzMwQzQ1MzdFMEY4N0ND QjYwODIyRUIwHhcNMjUwOTE3MDM1MTIyWhcNMjUwOTI0MDM1MTIyWjAYMRYwFAYD VQQDEw02OGNhMzAzYS02MmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY31Rzkh8G51hyxDp2mWWX0vGS6Kx+7jQX9e7VL8m9hzMnvlxB1ZYyW25WU0 K7FWISr1sNwOJGVFioFynYaoGdUTGxLAjF8UjqiwBwrKCUZcUKWhT2rXXDwv/0nG oFH+ZcDTxFVoMpBLIYIC6a/28m2+BaWZGqLXpecNPIfBiItCAq95R4e5qDdCrbWJ N9qMylZtk85DiFpJUF/Cy7sWWMWELFzUh3OdfJYCG492xB7e3OxjI3Hbt2majCTO KGWZgRMDsEOcumgMgBtFGOKjvndJaYakkhBAyECKxwbIkjF32Lhgr1y6YhENvmWq z+L8veal+NNYrIXkAhZ2h9ynkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmIui1b EvbF0MdDHxinOEQ/j6+qMB8GA1UdIwQYMBaAFMgrezedb+0qPDDEU34Ph8y2CCLr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUI5Ni82NEQ2QkRDQzFD MjkxMUVFOUQwNkY5MEFDNEY5QUUwMi95Q3Q3TjUxdjdTbzhNTVJUZmctSHpMWUlJ dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDdDdONTF2N1NvOE1NUlRmZy1IekxZSUl1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUI5Ni82NEQ2QkRDQzFDMjkxMUVFOUQwNkY5MEFDNEY5QUUwMi95Q3Q3TjUxdjdT bzhNTVJUZmctSHpMWUlJdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRCizOogNtTxBabU5ckngCHLBG8KtwbiGTv10xiivlfpe1vFu68TMf 8bLFxERO3yVANDgmidxNGi+klnerTj3u5wLpfl9iXdX9sBU1+USeUpB/U5j8FtfH tD74ZxETbscrAER0K1rQ767GCl7E4p0PEbq0nBJtHnbv7wv+b7X3QZTzspbT7i5p iDgdlhQwXpPOk/DVa8cx3iThbB6n0jo0l52M/UBQqzh05mnIlIBzelSkBKV5/TPQ spNmBf1kaOcQKu1oxAK1C0RtKkys4MVmR5CWyJnei2Tf5RrAbR6Tu2JnCsw+oduy NAt+9HzGulpSsN+2yjAjrZMXGAjcTKpf -----END CERTIFICATE-----Generated at Thu Sep 18 07:10:55 2025 by rpki-client