$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft File: yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json) Hash identifier: iSepShZhHKw1bUmEupRJ24Vo6/b811gTQK2/azZWnw8= Subject key identifier: AB:A7:F8:38:9A:19:52:98:C4:53:2D:38:C5:E1:70:A1:23:E7:B5:4D Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Certificate serial: 149C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft Manifest number: 149A Signing time: Tue 12 Aug 2025 16:58:57 +0000 Manifest this update: Tue 12 Aug 2025 16:58:56 +0000 Manifest next update: Tue 19 Aug 2025 16:58:56 +0000 Files and hashes: 1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: pbjz6ZZkvsA1zIjsp0yrwx0isPEVYWdxxgk0wwPPDdU=) 2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: 9CCdXAmyhsUIKZ6n8Wk1KKSvrNfp24roJJogpEjyBYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5276 (0x149c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Validity Not Before: Aug 12 16:58:56 2025 GMT Not After : Aug 19 16:58:56 2025 GMT Subject: CN=689b72d1-cbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a0:e8:76:c6:e2:37:2d:31:17:5c:ed:02:18: cc:0b:53:ca:dd:33:00:0e:fe:fc:5c:fe:46:f4:a3: a1:8d:63:90:c2:45:2d:e7:aa:f7:7b:cb:e5:3e:5a: 79:64:cc:e1:f8:fa:b2:9a:97:4f:3b:aa:c7:79:b1: 07:b2:88:f2:f0:24:8e:35:06:7c:b8:e5:a9:2e:7a: 15:52:2f:b0:24:47:1a:73:f3:8c:5a:a5:12:6f:bd: 6b:cc:ed:9d:0b:16:cb:ac:86:4d:4d:63:ad:f5:b9: 45:0d:a6:15:86:a6:34:61:17:94:11:3b:3b:e2:c2: d2:ce:ec:cc:da:4a:ac:77:89:78:6b:6b:3d:6d:6d: 2c:99:e6:bc:51:a3:0e:7c:38:7d:d2:7a:34:f6:54: b5:c5:e8:70:1c:be:4c:d1:47:89:12:72:0b:83:76: 49:98:74:69:63:86:ed:00:7f:9c:75:a0:ae:74:59: 97:57:2b:bf:6e:c6:1a:2b:1c:ed:fa:92:5a:ec:69: 7d:3b:f2:03:80:dc:2f:ac:7c:c8:72:5a:03:7d:0f: 39:0f:9f:9e:65:6b:40:00:b1:45:76:80:b0:2f:f0: c0:58:27:ba:9a:1a:ae:71:9d:e3:5a:72:4c:14:dc: 4c:74:f3:59:82:b9:ac:97:04:52:00:4d:28:b9:49: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A7:F8:38:9A:19:52:98:C4:53:2D:38:C5:E1:70:A1:23:E7:B5:4D X509v3 Authority Key Identifier: keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:30:30:4a:9b:53:53:78:08:e0:54:7b:39:97:33:73:ec:a5: 09:88:8e:0e:0e:81:4c:8f:3e:5c:16:77:2e:54:80:e2:8a:92: db:3e:bb:c1:ed:5f:26:bc:d4:82:fd:91:a0:1e:32:48:83:40: 15:3b:a8:3c:9f:0e:22:9e:2f:83:07:cc:7c:ef:4c:c4:74:31: dc:d9:cb:2d:a9:d2:c4:50:e8:9f:f5:86:5e:1f:74:1c:cd:65: ad:36:e5:db:fa:49:0e:a6:fe:b8:f0:3f:92:a1:bb:24:75:17: b7:a8:d9:58:71:c9:18:ce:a0:e6:a4:bc:25:85:fd:a4:a9:fe: c5:74:ab:2d:22:d1:dc:76:ce:90:a7:d1:20:6a:6d:f5:7f:34: b7:fc:5c:fe:ae:d2:3c:f6:6f:19:ce:fe:81:ce:92:88:24:11: d0:93:0c:b1:05:66:43:97:d9:ba:bb:6e:b9:0b:f4:e2:00:90: c4:a0:a9:f1:79:a1:2e:9f:42:10:8b:07:64:9b:c9:bf:b4:b3: 3d:44:cc:d8:1a:6d:b0:41:75:e6:a7:e1:f0:44:bb:3f:fa:ce: 9f:33:e3:f9:74:2e:7c:65:02:5b:67:12:24:6f:3f:03:bc:f4: 64:71:7a:5a:40:0a:0d:93:42:37:f0:e8:57:21:34:a5:b2:6c: ee:78:71:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEM5NEEwMzUwRTcwOUY1NkMyMzk2RTMwQjQ3MEM4QjVF MURGQjE3MDAwHhcNMjUwODEyMTY1ODU2WhcNMjUwODE5MTY1ODU2WjAYMRYwFAYD VQQDEw02ODliNzJkMS1jYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KDodsbiNy0xF1ztAhjMC1PK3TMADv78XP5G9KOhjWOQwkUt56r3e8vlPlp5 ZMzh+PqympdPO6rHebEHsojy8CSONQZ8uOWpLnoVUi+wJEcac/OMWqUSb71rzO2d CxbLrIZNTWOt9blFDaYVhqY0YReUETs74sLSzuzM2kqsd4l4a2s9bW0smea8UaMO fDh90no09lS1xehwHL5M0UeJEnILg3ZJmHRpY4btAH+cdaCudFmXVyu/bsYaKxzt +pJa7Gl9O/IDgNwvrHzIcloDfQ85D5+eZWtAALFFdoCwL/DAWCe6mhqucZ3jWnJM FNxMdPNZgrmslwRSAE0ouUmcvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKun+Dia GVKYxFMtOMXhcKEj57VNMB8GA1UdIwQYMBaAFMlKA1DnCfVsI5bjC0cMi14d+xcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8wMjMyODM0ODY3 Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlXd2psdU1MUnd5TFhoMzdG d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVb0RVT2NKOVd3amx1TUxSd3lMWGgzN0Z3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8wMjMyODM0ODY3Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlX d2psdU1MUnd5TFhoMzdGd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIMDBKm1NTeAjgVHs5lzNz7KUJiI4ODoFMjz5cFncuVIDiipLbPrvB 7V8mvNSC/ZGgHjJIg0AVO6g8nw4ini+DB8x870zEdDHc2cstqdLEUOif9YZeH3Qc zWWtNuXb+kkOpv648D+SobskdRe3qNlYcckYzqDmpLwlhf2kqf7FdKstItHcds6Q p9Egam31fzS3/Fz+rtI89m8Zzv6BzpKIJBHQkwyxBWZDl9m6u265C/TiAJDEoKnx eaEun0IQiwdkm8m/tLM9RMzYGm2wQXXmp+HwRLs/+s6fM+P5dC58ZQJbZxIkbz8D vPRkcXpaQAoNk0I38OhXITSlsmzueHGQ -----END CERTIFICATE-----Generated at Wed Aug 13 00:33:19 2025 by rpki-client