$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft File: pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json) Hash identifier: 028RlU3FpJs8iyelol8+bBoDvAmIQ0uv4fP1JbrMzxM= Subject key identifier: C1:FD:53:9E:16:E6:A5:C3:BD:57:F2:9A:37:E5:F5:31:B2:44:50:08 Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 Certificate issuer: /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Certificate serial: 040B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft Manifest number: 0405 Signing time: Fri 19 Sep 2025 00:50:05 +0000 Manifest this update: Fri 19 Sep 2025 00:50:04 +0000 Manifest next update: Fri 26 Sep 2025 00:50:04 +0000 Files and hashes: 1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: tPBAL1Xb2mkzMIoVSjXKoShOslLwK4ubnulhCJqUbjc=) 2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: XoAJoR31rueqw0a2nwDJzng/mfgTR8dQxHSL0vNo72U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Validity Not Before: Sep 19 00:50:04 2025 GMT Not After : Sep 26 00:50:04 2025 GMT Subject: CN=68cca8bc-eb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:df:6d:ef:07:5a:10:75:97:d8:b3:58:ec: 04:b8:d0:e7:b2:ec:60:02:fb:a0:68:ed:9e:8e:6f: d3:48:19:00:97:cd:73:ac:cc:e5:bc:06:2a:60:f9: 19:84:f9:f7:ff:80:61:f2:2b:0e:af:c5:8f:60:e7: c3:66:3e:f2:67:21:d3:ab:88:43:ff:46:a8:8c:34: d0:4b:97:1d:b2:98:8b:be:a2:a4:55:25:f8:df:9d: d7:f1:45:3d:9a:c3:61:09:c4:f5:06:f3:6d:b5:2e: 1d:88:f3:aa:1f:7f:f6:7f:f3:10:e7:36:e9:b0:c0: 05:96:ac:2a:f4:a2:ba:1d:0d:6a:0a:4c:7c:db:c4: 1a:1e:50:09:d6:6c:f0:c6:42:19:9f:5e:5b:26:c6: f2:1c:36:75:52:54:52:b0:fc:51:52:a7:68:8b:01: 50:d7:8c:56:5a:b7:81:3b:8b:d3:a3:42:7d:dd:d0: 46:01:4e:f0:47:de:27:8c:88:c7:11:c6:13:ef:43: a1:55:f5:68:1f:60:7e:32:6b:29:bf:c6:3f:00:fc: 08:62:b2:9b:e7:07:48:7a:81:b4:24:20:4f:5f:9b: ab:e3:63:52:bc:97:ed:f9:17:25:67:3d:4e:30:14: c1:84:72:f9:f8:4e:37:4a:2d:13:66:9c:bc:cc:2e: 70:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FD:53:9E:16:E6:A5:C3:BD:57:F2:9A:37:E5:F5:31:B2:44:50:08 X509v3 Authority Key Identifier: keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:35:3f:4e:c0:05:71:95:ee:94:b8:18:6b:d2:23:e2:03:ba: d2:3f:b6:3d:d1:79:87:63:34:e0:63:e8:4c:26:88:22:0f:a6: 56:09:7d:c9:16:e9:2f:d1:f8:25:41:02:34:1b:f8:28:f7:69: 4b:b1:1a:2f:f2:85:44:48:68:af:e2:1a:a5:ef:4f:7b:00:c1: 3b:28:d2:36:65:e1:2f:e6:be:8c:aa:6f:9e:1d:3a:0a:06:5e: 7b:59:fa:d7:4d:63:bc:ba:e9:82:22:ac:f0:0a:fc:90:6b:ad: ee:f4:53:25:d7:42:1e:b3:28:51:ae:f8:34:59:15:70:5f:22: 2c:19:4b:fb:97:31:73:8a:2d:25:e2:43:54:ac:d2:13:ad:3c: 7f:0c:a7:4d:70:bd:d0:f9:18:1d:a5:a6:49:74:f1:aa:f0:44: 80:32:f2:e8:bc:7a:4b:81:12:66:33:6c:f3:8b:57:3c:58:91: 20:00:4a:60:c0:20:e1:f8:be:f2:ea:8b:03:68:27:a0:23:db: bb:b4:48:6d:14:d0:9f:cb:7a:18:0b:97:65:26:76:d2:fa:1a: d7:71:31:0a:58:e6:b6:bd:b6:c1:0d:ef:6a:9d:73:ba:e3:df: 74:6d:62:83:dd:58:19:54:2e:1f:69:58:39:3b:16:4a:eb:fc: 9a:e1:56:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMDQxMTAvBgNVBAUTKEE1ODI1MEFFQUIxM0I4RDNEMzI3OUUzMjJFMTgxMkZE QUQ0NkQ2MjkwHhcNMjUwOTE5MDA1MDA0WhcNMjUwOTI2MDA1MDA0WjAYMRYwFAYD VQQDEw02OGNjYThiYy1lYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwynfbe8HWhB1l9izWOwEuNDnsuxgAvugaO2ejm/TSBkAl81zrMzlvAYqYPkZ hPn3/4Bh8isOr8WPYOfDZj7yZyHTq4hD/0aojDTQS5cdspiLvqKkVSX4353X8UU9 msNhCcT1BvNttS4diPOqH3/2f/MQ5zbpsMAFlqwq9KK6HQ1qCkx828QaHlAJ1mzw xkIZn15bJsbyHDZ1UlRSsPxRUqdoiwFQ14xWWreBO4vTo0J93dBGAU7wR94njIjH EcYT70OhVfVoH2B+Mmspv8Y/APwIYrKb5wdIeoG0JCBPX5ur42NSvJft+RclZz1O MBTBhHL5+E43Si0TZpy8zC5wgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMH9U54W 5qXDvVfymjfl9TGyRFAIMB8GA1UdIwQYMBaAFKWCUK6rE7jT0yeeMi4YEv2tRtYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIwNC82NDJFMDdEQzg4 QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVOUFRKNTR5TGhnU19hMUcx aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZSlFycXNUdU5QVEo1NHlMaGdTX2ExRzFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIwNC82NDJFMDdEQzg4QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVO UFRKNTR5TGhnU19hMUcxaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJNT9OwAVxle6UuBhr0iPiA7rSP7Y90XmHYzTgY+hMJogiD6ZWCX3J Fukv0fglQQI0G/go92lLsRov8oVESGiv4hql7097AME7KNI2ZeEv5r6Mqm+eHToK Bl57WfrXTWO8uumCIqzwCvyQa63u9FMl10IesyhRrvg0WRVwXyIsGUv7lzFzii0l 4kNUrNITrTx/DKdNcL3Q+RgdpaZJdPGq8ESAMvLovHpLgRJmM2zzi1c8WJEgAEpg wCDh+L7y6osDaCegI9u7tEhtFNCfy3oYC5dlJnbS+hrXcTEKWOa2vbbBDe9qnXO6 4990bWKD3VgZVC4faVg5OxZK6/ya4VaK -----END CERTIFICATE-----Generated at Fri Sep 19 06:55:25 2025 by rpki-client