$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft File: ymSxcxGVIJPNTWDarxe2rKD3pRY.mft (raw, json) Hash identifier: aGxQ6wr29ingtAVqAIwpj6TELJKSbism1pDCR2pyMiI= Subject key identifier: 6B:A9:11:8E:CA:34:FD:A0:AE:ED:7A:DE:99:8A:AC:7E:F7:5E:5F:0D Authority key identifier: CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 Certificate issuer: /CN=A9112B24/serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft Manifest number: B9 Signing time: Thu 07 Aug 2025 06:32:35 +0000 Manifest this update: Thu 07 Aug 2025 06:32:34 +0000 Manifest next update: Thu 14 Aug 2025 06:32:34 +0000 Files and hashes: 1: ymSxcxGVIJPNTWDarxe2rKD3pRY.crl (hash: OiYJMoySh4z34nZyBHCr3JeXbR4Px27AmaFzP9lL2SQ=) 2: C384F0025BA011EFB7E79861C4F9AE02.roa (hash: aEdHvDNzBa4hPG2blWZSu2BBm178UoZmxvwcICwviec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112B24, serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Validity Not Before: Aug 7 06:32:34 2025 GMT Not After : Aug 14 06:32:34 2025 GMT Subject: CN=68944882-8bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:13:ac:3e:00:c8:86:9b:c9:3d:c8:89:34:ea: ea:8c:7b:71:17:08:bb:60:f9:4d:87:0a:f6:c8:de: bb:46:af:bc:bf:e5:f3:89:8b:3c:ca:83:87:ee:ab: fc:8b:5f:5a:a4:bd:22:84:e6:42:62:e1:4a:9b:f3: 46:33:9c:e8:3f:0b:28:22:40:aa:30:38:6a:01:29: aa:e3:89:95:44:46:ae:d9:32:bb:93:c7:e6:24:89: f2:1d:b1:b4:04:10:35:ae:28:31:a2:f9:e1:d4:85: 99:d9:1c:46:e2:a5:57:db:a2:7d:f5:70:29:3d:51: d2:eb:a8:ad:65:0f:df:3a:d9:de:e4:22:d3:78:cb: 16:f8:a8:1b:b7:bf:50:84:34:61:98:6f:59:6f:1f: 65:df:1e:12:2b:f0:46:bf:95:1f:bd:20:99:eb:67: bc:39:40:cf:a8:e6:43:d3:e0:fb:39:18:03:44:61: 7a:9b:c2:77:9f:b7:6b:09:35:01:45:eb:7c:41:77: 22:f8:3d:c9:f1:79:24:3a:24:8b:e3:19:75:8b:23: 20:c3:85:31:92:f3:8c:bb:b7:52:e3:47:c6:9a:53: 6f:8d:ee:8f:19:22:71:5b:7f:94:bd:d4:52:a2:cb: 6d:08:5b:2a:48:73:36:dd:db:74:e9:5e:3e:cc:54: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A9:11:8E:CA:34:FD:A0:AE:ED:7A:DE:99:8A:AC:7E:F7:5E:5F:0D X509v3 Authority Key Identifier: keyid:CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:73:61:a8:05:7d:ba:14:46:f7:ca:dc:7b:30:eb:32:e3:a3: 16:17:b4:a3:ac:a6:15:2e:d5:05:cc:ad:45:27:bb:30:41:c8: 7f:f0:e1:ba:0d:b2:67:6b:a7:74:fc:f1:2d:e5:a0:06:4e:35: 93:dc:70:46:db:0d:e2:bb:29:7b:75:cb:96:0a:ff:61:2c:25: 8e:f5:da:ef:be:f2:0a:40:c0:4e:40:b1:40:f4:4b:eb:c8:12: 4e:88:91:99:17:32:69:69:e6:03:00:ea:8b:0e:c2:dc:a9:09: 8f:40:00:5b:af:84:bf:32:28:75:62:be:9b:6f:7e:bf:68:5b: 8a:b2:ed:73:03:3a:24:3e:2c:71:2b:b4:04:4f:ec:9e:99:df: 56:0c:69:7d:bc:ca:a8:d6:cc:cf:77:ec:f8:5d:4d:ac:53:23: 96:5a:86:0c:fa:28:6b:95:e5:d5:2c:70:2b:8f:70:eb:17:b9: 58:9e:b0:09:72:a7:71:40:ce:c3:d1:a4:75:32:f9:3e:78:65: 01:ad:b2:fa:63:83:42:20:36:1e:02:3b:86:c9:98:e6:5f:c4: d7:70:b1:dc:65:5d:cf:d4:a2:1f:1e:10:43:0f:6e:69:86:51: 93:93:ee:84:0e:0f:a0:a6:e9:7c:b4:95:35:ed:8f:f7:4f:47: 36:16:ba:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCMjQxMTAvBgNVBAUTKENBNjRCMTczMTE5NTIwOTNDRDRENjBEQUFGMTdCNkFD QTBGN0E1MTYwHhcNMjUwODA3MDYzMjM0WhcNMjUwODE0MDYzMjM0WjAYMRYwFAYD VQQDEw02ODk0NDg4Mi04YmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+hOsPgDIhpvJPciJNOrqjHtxFwi7YPlNhwr2yN67Rq+8v+XziYs8yoOH7qv8 i19apL0ihOZCYuFKm/NGM5zoPwsoIkCqMDhqASmq44mVREau2TK7k8fmJInyHbG0 BBA1rigxovnh1IWZ2RxG4qVX26J99XApPVHS66itZQ/fOtne5CLTeMsW+Kgbt79Q hDRhmG9Zbx9l3x4SK/BGv5UfvSCZ62e8OUDPqOZD0+D7ORgDRGF6m8J3n7drCTUB Ret8QXci+D3J8XkkOiSL4xl1iyMgw4UxkvOMu7dS40fGmlNvje6PGSJxW3+UvdRS osttCFsqSHM23dt06V4+zFTKawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGupEY7K NP2gru163pmKrH73Xl8NMB8GA1UdIwQYMBaAFMpksXMRlSCTzU1g2q8Xtqyg96UW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkIyNC84QTE2RkY3MjVC QTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklKUE5UV0RhcnhlMnJLRDNw UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltU3hjeEdWSUpQTlRXRGFyeGUycktEM3BSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkIyNC84QTE2RkY3MjVCQTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklK UE5UV0RhcnhlMnJLRDNwUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkc2GoBX26FEb3ytx7MOsy46MWF7SjrKYVLtUFzK1FJ7swQch/8OG6 DbJna6d0/PEt5aAGTjWT3HBG2w3iuyl7dcuWCv9hLCWO9drvvvIKQMBOQLFA9Evr yBJOiJGZFzJpaeYDAOqLDsLcqQmPQABbr4S/Mih1Yr6bb36/aFuKsu1zAzokPixx K7QET+yemd9WDGl9vMqo1szPd+z4XU2sUyOWWoYM+ihrleXVLHArj3DrF7lYnrAJ cqdxQM7D0aR1Mvk+eGUBrbL6Y4NCIDYeAjuGyZjmX8TXcLHcZV3P1KIfHhBDD25p hlGTk+6EDg+gpul8tJU17Y/3T0c2FrpZ -----END CERTIFICATE-----Generated at Sat Aug 9 05:43:32 2025 by rpki-client