$ rpki-client -vvf rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft File: yyTPMxKhYnFYzDraiI5bywxnzqE.mft (raw, json) Hash identifier: Whv+U4TOAib6ENYEvR4LNcPX33XzCEz6xrWMJbD5ifY= Subject key identifier: 63:56:B6:7C:8D:5E:B9:65:D3:8E:80:9A:9F:E6:3E:79:B2:A4:B7:A0 Authority key identifier: CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1 Certificate issuer: /CN=A9122342/serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1 Certificate serial: 09AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft Manifest number: 09A8 Signing time: Sun 10 Aug 2025 20:03:08 +0000 Manifest this update: Sun 10 Aug 2025 20:03:07 +0000 Manifest next update: Sun 17 Aug 2025 20:03:07 +0000 Files and hashes: 1: yyTPMxKhYnFYzDraiI5bywxnzqE.crl (hash: 2REGRdSjSnfeG3Pne9gfrjdSbDkJ1xL7Ec+rE/J3/Mc=) 2: 4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa (hash: lg62QlYMqjfdPrlhdfFEapPKxJAEOZfWw6bA0op19ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 20:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2479 (0x9af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122342, serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1 Validity Not Before: Aug 10 20:03:07 2025 GMT Not After : Aug 17 20:03:07 2025 GMT Subject: CN=6898fafb-a4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:9b:02:78:06:c2:13:ad:2b:c4:63:2d:b4: 32:11:aa:dd:6e:a7:b5:df:11:b2:4e:81:84:32:9e: a5:b0:e1:2d:8c:52:29:6c:2e:5e:a4:81:28:74:06: c1:20:77:06:90:fe:0f:03:91:3f:90:e5:89:82:8c: 7a:78:cc:b0:eb:92:93:9d:97:04:08:a8:38:ae:e4: 68:3f:e1:ad:a0:7e:20:1c:62:1c:c8:1d:9e:0e:9e: e0:41:2d:4a:ff:e8:ab:e4:e7:2c:2e:74:09:4c:b2: e8:ca:71:e3:af:5e:4a:94:79:4f:e3:dd:24:06:0a: 03:bb:e8:db:d9:04:00:69:3c:15:fb:d1:8c:50:39: 80:0e:ff:91:3c:76:4e:8d:c9:00:cc:2e:39:0f:f2: f4:36:07:80:96:83:38:53:1e:e3:d0:01:0a:76:0e: 9d:4c:ca:41:f2:00:6e:95:fe:6b:90:00:50:4d:6e: 8f:a4:0b:de:51:b1:c2:0c:80:ea:63:59:ee:9c:7b: 32:4a:6c:4b:ff:c9:a9:cb:ca:4a:ad:30:7d:98:4b: 50:77:1e:91:50:10:1e:c0:3f:95:1f:b4:87:b4:0f: 4d:ea:84:f0:8c:ff:d9:7c:4a:a9:ac:de:c4:a9:f9: e3:c6:95:4e:81:ec:42:de:ed:1a:e7:af:27:88:02: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:56:B6:7C:8D:5E:B9:65:D3:8E:80:9A:9F:E6:3E:79:B2:A4:B7:A0 X509v3 Authority Key Identifier: keyid:CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ed:ee:e4:5e:f1:fe:6f:a4:0d:c9:3a:50:99:9f:89:f3:0a: bb:72:6d:7b:2b:8d:05:e7:da:2f:d8:19:51:4c:de:d2:ba:bf: 7a:e3:25:72:73:75:22:8b:31:b6:1a:3c:5f:27:d7:7f:ad:81: 7d:38:05:57:8b:a6:d5:60:5b:11:48:d5:a0:4f:d0:9f:a9:c6: d6:9b:29:23:a7:23:96:02:6b:6f:a3:80:07:b0:c4:63:a1:62: 38:a5:73:ed:8b:64:1e:37:f2:b4:1c:30:c7:ee:00:75:3a:a4: da:72:3d:f3:7a:10:33:12:23:52:80:5e:94:44:0d:9c:80:72: 3d:75:46:64:f1:41:d7:8a:fc:3e:b4:38:73:93:80:b2:c3:b5: 7a:38:a8:f2:78:8b:2b:4a:43:8a:00:a3:9a:f0:38:44:e5:79: 07:fe:31:dc:d8:da:3d:ed:3e:75:77:2e:7d:fb:d1:bd:7e:55: 77:1e:e2:a1:54:42:c0:d2:bb:12:92:4a:c6:1b:29:91:ee:05: d6:4d:78:12:46:75:07:90:ae:9f:c9:d3:6b:5c:a5:fa:62:08: ac:28:0b:5d:91:8f:b4:70:7b:30:eb:80:96:e6:1c:55:f3:8d: c0:5a:8a:12:48:06:0b:d7:9a:e3:78:7a:f7:b4:dc:1e:f4:ef: c6:89:fd:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIzNDIxMTAvBgNVBAUTKENCMjRDRjMzMTJBMTYyNzE1OENDM0FEQTg4OEU1QkNC MEM2N0NFQTEwHhcNMjUwODEwMjAwMzA3WhcNMjUwODE3MjAwMzA3WjAYMRYwFAYD VQQDEw02ODk4ZmFmYi1hNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwSbAngGwhOtK8RjLbQyEardbqe13xGyToGEMp6lsOEtjFIpbC5epIEodAbB IHcGkP4PA5E/kOWJgox6eMyw65KTnZcECKg4ruRoP+GtoH4gHGIcyB2eDp7gQS1K /+ir5OcsLnQJTLLoynHjr15KlHlP490kBgoDu+jb2QQAaTwV+9GMUDmADv+RPHZO jckAzC45D/L0NgeAloM4Ux7j0AEKdg6dTMpB8gBulf5rkABQTW6PpAveUbHCDIDq Y1nunHsySmxL/8mpy8pKrTB9mEtQdx6RUBAewD+VH7SHtA9N6oTwjP/ZfEqprN7E qfnjxpVOgexC3u0a568niAIa8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNWtnyN Xrll046Amp/mPnmypLegMB8GA1UdIwQYMBaAFMskzzMSoWJxWMw62oiOW8sMZ86h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM0Mi8wQjQxMDBDMDhF OEMxMUVBQkQzNDU4MTFDNEY5QUUwMi95eVRQTXhLaFluRll6RHJhaUk1Ynl3eG56 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5VFBNeEtoWW5GWXpEcmFpSTVieXd4bnpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjM0Mi8wQjQxMDBDMDhFOEMxMUVBQkQzNDU4MTFDNEY5QUUwMi95eVRQTXhLaFlu Rll6RHJhaUk1Ynl3eG56cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg7e7kXvH+b6QNyTpQmZ+J8wq7cm17K40F59ov2BlRTN7Sur964yVy c3UiizG2GjxfJ9d/rYF9OAVXi6bVYFsRSNWgT9CfqcbWmykjpyOWAmtvo4AHsMRj oWI4pXPti2QeN/K0HDDH7gB1OqTacj3zehAzEiNSgF6URA2cgHI9dUZk8UHXivw+ tDhzk4Cyw7V6OKjyeIsrSkOKAKOa8DhE5XkH/jHc2No97T51dy59+9G9flV3HuKh VELA0rsSkkrGGymR7gXWTXgSRnUHkK6fydNrXKX6YgisKAtdkY+0cHsw64CW5hxV 843AWooSSAYL15rjeHr3tNwe9O/Gif1K -----END CERTIFICATE-----Generated at Tue Aug 12 13:36:57 2025 by rpki-client