$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json) Hash identifier: z9GQCrfuxA5jUM3fBMPiUVpoUnoe0JFLfdAs2ivnNWs= Subject key identifier: C4:A1:93:B9:AC:85:1B:4D:63:41:95:A6:37:EC:1F:66:24:D8:E0:CD Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0C2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft Manifest number: 0C26 Signing time: Sun 10 Aug 2025 18:40:23 +0000 Manifest this update: Sun 10 Aug 2025 18:40:22 +0000 Manifest next update: Sun 17 Aug 2025 18:40:22 +0000 Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: XsQYFCwKkErUnKyzbKPaA7qe8VzDEZZ2SQqKU9acwgs=) 2: 9D9E8D0C11DC11EABC4FB55AC4F9AE02.roa (hash: E2q/ZEHSPXl1Ew87PC9tVYqM/dotHBquWrnE6mAYEbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: Aug 10 18:40:22 2025 GMT Not After : Aug 17 18:40:22 2025 GMT Subject: CN=6898e796-6134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:75:74:e0:62:9b:90:20:a2:b5:49:4a:ef: 14:26:15:4a:c8:78:51:17:4a:7b:80:29:9d:35:85: 64:34:dd:75:e6:27:45:fa:c1:50:0f:6d:2c:a2:c1: 6a:14:a0:9c:a3:9f:80:37:ca:5a:16:8b:8e:f4:8b: 2f:a7:64:20:08:d9:5c:f1:96:e6:fa:11:6a:60:29: e3:07:4d:85:f6:4b:65:93:b2:46:17:4e:bd:2d:dc: ca:9b:c4:98:26:91:b6:da:b6:22:21:8d:d6:c2:27: 83:93:12:43:8e:32:dd:d2:5a:cd:0f:5d:d3:53:a9: db:db:76:7a:b3:d8:fc:65:a7:4d:42:71:7f:a9:a3: f7:29:4c:a5:1b:70:20:22:46:32:69:9c:41:59:a9: 4f:89:12:9c:f4:db:53:43:c0:9a:c0:9a:67:50:fe: 3e:88:b1:ff:b9:36:d1:72:ec:8d:0b:18:ae:83:47: a1:bd:56:88:13:7d:f4:2b:07:ac:e8:d7:e2:6e:d4: 51:e6:5d:11:0b:1a:e4:1e:fb:e6:e5:14:54:61:6a: dc:97:b9:4b:7f:be:a0:f4:76:25:08:42:d8:c0:b3: 8b:c6:1f:99:d4:ce:1d:2c:fe:b1:c6:ef:14:c0:74: 38:2d:c7:9f:57:65:a4:af:5e:40:db:b3:3c:d6:16: 60:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A1:93:B9:AC:85:1B:4D:63:41:95:A6:37:EC:1F:66:24:D8:E0:CD X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:cc:e5:8e:09:df:b0:42:43:56:16:20:4e:88:1b:b2:97: 84:6f:f3:89:8b:f0:d3:c3:a8:87:f8:e0:ca:6b:90:b8:c8:80: 22:ab:72:4f:5c:f6:65:4f:33:90:89:71:e7:30:5b:ad:37:34: 5b:94:47:d9:57:2a:2e:92:03:d3:fe:22:6d:c8:82:1e:61:63: c7:d1:69:27:13:47:8f:5d:7a:c5:e0:75:ee:28:f2:b5:cf:4b: 09:b1:e8:df:8a:cc:a8:7f:1b:08:1b:5c:88:a6:4d:4f:db:9a: 8e:4f:ac:16:0e:a7:0c:ef:85:2f:39:36:b0:1e:71:5f:00:71: 4d:da:bf:a5:c3:b0:f1:6f:08:48:80:6b:a5:04:62:30:88:76: dc:54:7b:c5:ea:e9:45:48:30:b7:50:4c:40:79:00:32:d5:63: 24:06:c8:14:1e:42:12:ca:ea:71:56:8f:b0:0a:eb:69:f1:d0: 39:a4:6f:65:89:ae:df:eb:ba:05:4b:4c:2f:91:a3:0f:2d:74: 3f:7a:b0:9d:21:fa:5d:12:44:08:91:63:1c:00:ad:91:57:8d: af:0f:df:ec:1e:5f:80:39:b5:cf:45:cd:a0:b5:60:b2:77:68: 12:3b:d7:48:18:05:c6:63:7c:1f:d8:9f:96:94:87:d3:00:3a: 5f:65:f9:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjUwODEwMTg0MDIyWhcNMjUwODE3MTg0MDIyWjAYMRYwFAYD VQQDEw02ODk4ZTc5Ni02MTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudp1dOBim5AgorVJSu8UJhVKyHhRF0p7gCmdNYVkNN115idF+sFQD20sosFq FKCco5+AN8paFouO9Isvp2QgCNlc8Zbm+hFqYCnjB02F9ktlk7JGF069LdzKm8SY JpG22rYiIY3WwieDkxJDjjLd0lrND13TU6nb23Z6s9j8ZadNQnF/qaP3KUylG3Ag IkYyaZxBWalPiRKc9NtTQ8CawJpnUP4+iLH/uTbRcuyNCxiug0ehvVaIE330Kwes 6NfibtRR5l0RCxrkHvvm5RRUYWrcl7lLf76g9HYlCELYwLOLxh+Z1M4dLP6xxu8U wHQ4LcefV2Wkr15A27M81hZg0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMShk7ms hRtNY0GVpjfsH2Yk2ODNMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTRBQS82NzRDQTI5RTExREIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5 M2F3NWgtU0VfUjFuTFpPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHSczljgnfsEJDVhYgTogbspeEb/OJi/DTw6iH+ODKa5C4yIAiq3JP XPZlTzOQiXHnMFutNzRblEfZVyoukgPT/iJtyIIeYWPH0WknE0ePXXrF4HXuKPK1 z0sJsejfisyofxsIG1yIpk1P25qOT6wWDqcM74UvOTawHnFfAHFN2r+lw7DxbwhI gGulBGIwiHbcVHvF6ulFSDC3UExAeQAy1WMkBsgUHkISyupxVo+wCutp8dA5pG9l ia7f67oFS0wvkaMPLXQ/erCdIfpdEkQIkWMcAK2RV42vD9/sHl+AObXPRc2gtWCy d2gSO9dIGAXGY3wf2J+WlIfTADpfZfmg -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:47 2025 by rpki-client