$ rpki-client -vvf rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft File: yiPsANw26PNUZ_BZkXTqC-_bQfk.mft (raw, json) Hash identifier: tFbKMnFEC+rMS0HlANNCQeZh4Zqtbi2unM0XXtRmc58= Subject key identifier: 40:92:88:18:23:10:52:89:FF:BE:53:EC:F6:CC:FD:00:54:DB:EF:8C Authority key identifier: CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9 Certificate issuer: /CN=A9142182/serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9 Certificate serial: 083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft Manifest number: 082E Signing time: Fri 08 Aug 2025 21:09:05 +0000 Manifest this update: Fri 08 Aug 2025 21:09:05 +0000 Manifest next update: Fri 15 Aug 2025 21:09:05 +0000 Files and hashes: 1: yiPsANw26PNUZ_BZkXTqC-_bQfk.crl (hash: xoY+oRvdgALkKFLgykxgv3tSMvM4xt2snP0DvTcymH8=) 2: 584ED0CCDD1A11EA96723D11C4F9AE02.roa (hash: 5kUDYmJ4yH0CUdMpxOxfk0FcArn01dfqkN25Zg1CXyk=) 3: 180F88DEDD1611EABA2F7C82C4F9AE02.roa (hash: t4Mlw7tJOEB0j00nJw/m4xLHs7JGJvrbxajz+Hi3W7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142182, serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9 Validity Not Before: Aug 8 21:09:05 2025 GMT Not After : Aug 15 21:09:05 2025 GMT Subject: CN=68966771-a2b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:4d:29:e8:3d:de:97:76:41:15:ad:98:91: 13:3b:87:92:4f:78:5d:14:dc:64:24:5a:d7:ee:b0: 44:6e:8f:14:0f:36:6f:57:3f:9c:b8:64:c8:64:25: 8e:2d:f8:59:00:7b:a5:55:a6:1b:08:cc:8e:25:e4: 70:43:20:65:33:87:2d:d7:03:a4:05:53:10:be:d0: e8:97:e9:26:fb:5f:cd:69:1b:5a:9e:01:4f:24:84: d4:42:b8:18:e6:cc:56:c1:fd:ce:39:05:a2:0f:a2: 8f:f5:9f:13:61:9c:53:73:d3:54:2d:6d:1a:00:77: 1f:1b:24:d2:03:5e:75:40:5d:87:cf:2a:9c:a1:dc: 06:13:90:73:57:94:35:04:10:70:75:eb:cc:21:a9: 0d:47:d0:b9:a2:da:9f:c5:11:a9:34:5c:12:d7:a5: d6:62:28:c5:2e:57:bb:b0:4b:02:d7:08:c7:dd:f2: f8:f2:10:90:6a:ef:f6:ef:1c:b5:9e:b7:e3:fd:df: 79:c2:78:35:ab:6d:c7:a4:e7:73:39:55:36:33:00: 25:c1:65:99:05:bf:c1:94:5c:87:de:25:b9:bf:c0: 9b:78:23:b4:36:94:81:cb:93:10:7e:e4:73:3a:a5: ea:be:97:2b:5f:f2:a9:c0:42:43:57:96:4d:94:2e: 58:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:92:88:18:23:10:52:89:FF:BE:53:EC:F6:CC:FD:00:54:DB:EF:8C X509v3 Authority Key Identifier: keyid:CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:17:bf:95:64:4c:47:c9:7d:06:d5:27:94:2d:aa:01:41:d1: e3:fa:e7:4e:c9:54:2f:e6:eb:15:37:8f:d2:8c:34:ae:de:d1: eb:26:e6:24:9a:0f:97:e5:33:21:bf:f1:76:82:63:a3:14:21: 88:d4:05:7d:aa:bc:ee:de:54:f0:11:17:be:36:af:f5:c7:97: 3f:cc:90:de:04:2d:05:79:89:e3:eb:88:19:f1:c7:91:db:5c: 1d:db:0a:2c:27:b7:d3:f7:88:06:73:5a:c5:94:96:42:08:9f: e1:94:f9:33:fe:d7:dc:b2:f9:0f:fe:c3:5a:33:03:3b:d3:74: e0:60:85:2c:2c:cb:f4:81:db:25:e0:f0:1c:f7:26:bf:17:38: 50:1d:c0:76:66:11:69:3e:9d:6c:0d:32:76:7c:d8:61:3d:0b: cd:04:86:e3:04:73:e8:d0:c3:a1:8c:1f:e3:3c:3e:28:80:c7: c3:3c:fb:ca:61:a0:22:c0:c6:77:54:89:71:41:ca:33:29:53: d1:15:aa:76:39:e3:0f:3d:10:b0:55:97:f9:f9:28:e1:b6:55: a4:37:0d:46:37:65:7f:63:0f:fc:85:62:e8:f4:34:56:a6:06: 4c:c1:d3:1e:c0:9f:01:c8:4e:7b:08:72:b0:64:ce:87:ce:08: 5d:6a:4d:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxODIxMTAvBgNVBAUTKENBMjNFQzAwREMzNkU4RjM1NDY3RjA1OTkxNzRFQTBC RUZEQjQxRjkwHhcNMjUwODA4MjEwOTA1WhcNMjUwODE1MjEwOTA1WjAYMRYwFAYD VQQDEw02ODk2Njc3MS1hMmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqZNKeg93pd2QRWtmJETO4eST3hdFNxkJFrX7rBEbo8UDzZvVz+cuGTIZCWO LfhZAHulVaYbCMyOJeRwQyBlM4ct1wOkBVMQvtDol+km+1/NaRtangFPJITUQrgY 5sxWwf3OOQWiD6KP9Z8TYZxTc9NULW0aAHcfGyTSA151QF2HzyqcodwGE5BzV5Q1 BBBwdevMIakNR9C5otqfxRGpNFwS16XWYijFLle7sEsC1wjH3fL48hCQau/27xy1 nrfj/d95wng1q23HpOdzOVU2MwAlwWWZBb/BlFyH3iW5v8CbeCO0NpSBy5MQfuRz OqXqvpcrX/KpwEJDV5ZNlC5YuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECSiBgj EFKJ/75T7PbM/QBU2++MMB8GA1UdIwQYMBaAFMoj7ADcNujzVGfwWZF06gvv20H5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjE4Mi8xNjJEREQ5MkRE MTQxMUVBQkZEMkI0N0RDNEY5QUUwMi95aVBzQU53MjZQTlVaX0Jaa1hUcUMtX2JR ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lpUHNBTncyNlBOVVpfQlprWFRxQy1fYlFmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjE4Mi8xNjJEREQ5MkREMTQxMUVBQkZEMkI0N0RDNEY5QUUwMi95aVBzQU53MjZQ TlVaX0Jaa1hUcUMtX2JRZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+F7+VZExHyX0G1SeULaoBQdHj+udOyVQv5usVN4/SjDSu3tHrJuYk mg+X5TMhv/F2gmOjFCGI1AV9qrzu3lTwERe+Nq/1x5c/zJDeBC0FeYnj64gZ8ceR 21wd2wosJ7fT94gGc1rFlJZCCJ/hlPkz/tfcsvkP/sNaMwM703TgYIUsLMv0gdsl 4PAc9ya/FzhQHcB2ZhFpPp1sDTJ2fNhhPQvNBIbjBHPo0MOhjB/jPD4ogMfDPPvK YaAiwMZ3VIlxQcozKVPRFap2OeMPPRCwVZf5+SjhtlWkNw1GN2V/Yw/8hWLo9DRW pgZMwdMewJ8ByE57CHKwZM6Hzghdak2J -----END CERTIFICATE-----Generated at Sun Aug 10 05:39:32 2025 by rpki-client