$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft File: YYQdHtq_n_D2AYxhEBevcZYnok0.mft (raw, json) Hash identifier: R+BKTtiT7LK9llshFLw1txT7+FW+QDzmhjMoHei7DJI= Subject key identifier: F9:D9:01:C7:3C:CB:3E:5B:48:2C:57:97:CE:2C:F3:A4:A6:5C:45:6A Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D Certificate issuer: /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft Manifest number: 0524 Signing time: Sat 09 Aug 2025 00:10:39 +0000 Manifest this update: Sat 09 Aug 2025 00:10:39 +0000 Manifest next update: Sat 16 Aug 2025 00:10:39 +0000 Files and hashes: 1: YYQdHtq_n_D2AYxhEBevcZYnok0.crl (hash: dAUIBm4GNqS6naONXyygoCQIvaenhKsufbDhrSAv6TM=) 2: E6F081CAB4D111EFB518113FC4F9AE02.roa (hash: gmtg83b40Tkb+D3gBbZ+Di+lUHrNe5TxNxrJ6h+P2/o=) 3: CF9E64BED65711EE8623B920C4F9AE02.roa (hash: KFSR8nqG2sOGDYAgAFeqv4yoVxNtWdp8vNs36B/HOmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117373, serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D Validity Not Before: Aug 9 00:10:39 2025 GMT Not After : Aug 16 00:10:39 2025 GMT Subject: CN=689691ff-663b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:cb:7b:3e:16:7f:e4:25:97:eb:2a:ea:d8: 53:0c:a2:a7:e7:7c:97:9b:cf:ce:fb:fe:da:d2:91: 0e:c9:6c:4b:3b:42:ac:86:b0:eb:5e:ea:67:71:11: e4:57:dc:01:b1:1d:7e:ef:42:d4:1f:8f:0a:07:42: 0c:81:0d:9f:61:12:38:9c:f3:ab:0c:0a:f4:40:4e: 17:73:f7:4b:9d:c5:80:cc:fb:20:4d:09:76:5a:95: 70:f7:fd:df:3c:48:58:3b:17:3e:87:ad:a1:52:03: f9:e8:66:c6:4e:9f:ef:8b:63:46:40:00:12:66:d4: 09:81:4a:0e:73:02:38:e8:9d:9a:30:95:20:06:61: 63:ff:fb:1b:2e:25:13:ef:0e:dc:ac:35:f0:3b:7c: fe:f9:ca:aa:d1:c3:a3:c1:31:e9:72:81:80:53:06: 77:12:45:c9:ac:75:9e:26:09:00:57:09:8d:25:c3: 76:00:67:55:79:fa:bf:88:05:4d:29:07:a5:d6:56: f2:3e:b3:df:5b:bc:b2:a7:71:e2:8d:90:28:76:a4: d1:77:02:0f:6a:07:39:3f:9e:d9:ac:73:e1:89:74: 0b:5c:bf:68:2c:5b:78:cf:a6:61:d5:87:8e:fd:bc: 7f:11:ce:2c:de:8a:3b:70:9c:3f:03:f7:f9:c7:1b: 27:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D9:01:C7:3C:CB:3E:5B:48:2C:57:97:CE:2C:F3:A4:A6:5C:45:6A X509v3 Authority Key Identifier: keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:61:12:69:45:50:e2:ca:9b:17:95:1c:1e:13:64:0b:f0:b4: f8:09:ed:93:cd:3a:a9:12:2e:1b:ff:12:cf:86:5e:d3:52:22: 6a:d9:b7:4f:ac:18:bc:42:64:d5:07:af:56:ae:5e:fc:35:f0: af:6a:c4:6b:cf:26:2a:4b:f0:cd:6c:db:85:2c:ae:e7:5c:bc: af:75:ce:b3:c9:f8:87:d1:df:2f:6f:84:30:c3:fd:bc:c1:2d: 74:fc:09:76:b0:bf:f1:1a:68:19:6c:22:a0:6a:ea:52:75:38: d8:a6:f6:9e:dc:7a:2a:f0:80:78:2a:64:38:de:71:59:59:e3: 2e:7f:b4:48:eb:2f:f8:95:6e:bc:49:11:6e:11:99:32:f2:1a: f6:5f:97:37:3a:02:96:1a:d3:90:19:3f:b0:e8:89:20:73:ab: 19:4b:dc:8d:28:19:21:6a:7f:7c:f7:bf:ef:f0:d2:41:a8:47: 5d:c3:b5:b9:30:c6:8a:af:49:b8:e2:b5:ab:8b:d2:b3:3f:08: f2:ca:74:aa:50:d7:9c:a3:ed:94:ff:ca:98:fe:54:ef:2d:26: 3e:83:4f:8a:16:a9:91:7e:3f:6d:a4:ca:9f:ca:10:7b:2c:9c: 77:15:87:d0:4f:8c:92:82:7b:a8:f3:bd:c8:f8:62:d9:b1:c7: 28:b7:21:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczNzMxMTAvBgNVBAUTKDYxODQxRDFFREFCRjlGRjBGNjAxOEM2MTEwMTdBRjcx OTYyN0EyNEQwHhcNMjUwODA5MDAxMDM5WhcNMjUwODE2MDAxMDM5WjAYMRYwFAYD VQQDEw02ODk2OTFmZi02NjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnDLez4Wf+Qll+sq6thTDKKn53yXm8/O+/7a0pEOyWxLO0KshrDrXupncRHk V9wBsR1+70LUH48KB0IMgQ2fYRI4nPOrDAr0QE4Xc/dLncWAzPsgTQl2WpVw9/3f PEhYOxc+h62hUgP56GbGTp/vi2NGQAASZtQJgUoOcwI46J2aMJUgBmFj//sbLiUT 7w7crDXwO3z++cqq0cOjwTHpcoGAUwZ3EkXJrHWeJgkAVwmNJcN2AGdVefq/iAVN KQel1lbyPrPfW7yyp3HijZAodqTRdwIPagc5P57ZrHPhiXQLXL9oLFt4z6Zh1YeO /bx/Ec4s3oo7cJw/A/f5xxsnoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnZAcc8 yz5bSCxXl84s86SmXEVqMB8GA1UdIwQYMBaAFGGEHR7av5/w9gGMYRAXr3GWJ6JN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM3My9CRkE5QzM2MjIz QUExMUVDQTgxMTZCMjdDNEY5QUUwMi9ZWVFkSHRxX25fRDJBWXhoRUJldmNaWW5v azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lZUWRIdHFfbl9EMkFZeGhFQmV2Y1pZbm9rMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzM3My9CRkE5QzM2MjIzQUExMUVDQTgxMTZCMjdDNEY5QUUwMi9ZWVFkSHRxX25f RDJBWXhoRUJldmNaWW5vazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0YRJpRVDiypsXlRweE2QL8LT4Ce2TzTqpEi4b/xLPhl7TUiJq2bdP rBi8QmTVB69Wrl78NfCvasRrzyYqS/DNbNuFLK7nXLyvdc6zyfiH0d8vb4Qww/28 wS10/Al2sL/xGmgZbCKgaupSdTjYpvae3Hoq8IB4KmQ43nFZWeMuf7RI6y/4lW68 SRFuEZky8hr2X5c3OgKWGtOQGT+w6Ikgc6sZS9yNKBkhan9897/v8NJBqEddw7W5 MMaKr0m44rWri9KzPwjyynSqUNeco+2U/8qY/lTvLSY+g0+KFqmRfj9tpMqfyhB7 LJx3FYfQT4ySgnuo873I+GLZsccotyHx -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:07 2025 by rpki-client