$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json) Hash identifier: T/ofbzZ27q3jfkH824j5/lalOFhAVy2li9sQRHDJzEU= Subject key identifier: D0:29:41:56:0B:03:EA:68:D5:95:D3:89:1F:5E:FD:5F:2B:70:27:99 Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Certificate serial: 042F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft Manifest number: 042B Signing time: Wed 13 Aug 2025 00:50:08 +0000 Manifest this update: Wed 13 Aug 2025 00:50:08 +0000 Manifest next update: Wed 20 Aug 2025 00:50:08 +0000 Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: BvpoVEMZTRhfzGz/VM3TZeabfD2f7BR9OpgQY0JpVPg=) 2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: VxhE0yOw2UpFEmn9cUfGr5NqfhjBpOy+NCMi8LSn31o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 00:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1071 (0x42f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BA8, serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Validity Not Before: Aug 13 00:50:08 2025 GMT Not After : Aug 20 00:50:08 2025 GMT Subject: CN=689be140-126c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:88:b5:ab:f1:32:1b:60:2a:ef:00:fa:6f: 3d:82:c6:b1:48:cf:87:3a:72:93:5b:2d:5d:46:57: 63:2d:d2:2c:f3:89:52:d3:3f:e3:a5:7a:8e:11:e8: 24:ae:dd:1f:67:e6:8c:91:32:0f:76:48:3e:86:0c: ef:68:da:9b:69:9e:b8:34:1b:da:8e:d5:0f:91:8c: 89:9f:63:85:56:36:d5:91:5c:bb:da:06:7a:32:72: 92:ae:95:2c:86:03:94:69:3f:f8:81:ba:d4:73:39: 05:bc:11:fa:96:bb:93:c7:d2:5b:92:84:3a:c3:91: 78:58:48:51:a7:4e:16:ce:d6:99:bd:03:0a:72:2a: fc:4c:02:6c:69:39:20:c9:4b:67:2b:50:d2:f1:ea: ad:31:5a:ad:a4:c5:11:93:77:74:43:53:6a:07:52: 62:af:a1:af:51:ef:b9:f7:14:18:1c:8c:c5:d8:04: 52:4c:27:24:a9:2b:6c:cc:e3:20:82:de:fe:4b:8e: c3:ff:98:0c:0e:53:e2:ef:f3:27:85:9c:7b:00:c8: 80:5f:e3:5c:ce:a8:94:1c:8b:44:f9:a1:50:6f:d4: c2:52:b1:af:f5:40:24:38:6f:98:f9:53:14:27:f8: 99:ed:cf:6c:a3:fb:10:4e:1e:46:82:a9:76:53:20: 87:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:29:41:56:0B:03:EA:68:D5:95:D3:89:1F:5E:FD:5F:2B:70:27:99 X509v3 Authority Key Identifier: keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:1f:42:cd:39:47:47:2c:b1:42:39:c1:5d:89:1b:a7:45:e6: d3:26:5a:f2:50:47:46:a7:3e:fe:49:0e:0c:f5:ae:99:7e:55: ce:7f:99:1c:67:d5:55:9b:49:e6:19:d7:11:a9:d3:37:6d:a2: f0:8e:d2:52:cf:cb:d0:9f:a3:6a:6f:2f:d1:c7:db:2d:a3:bc: e5:c3:52:af:24:d8:18:b0:03:cc:ce:1b:03:03:15:b1:12:fb: 85:9a:be:ad:22:5c:1c:e1:d1:a2:1b:ac:f7:bb:96:4d:1f:63: 8e:d6:b4:f3:8b:0a:44:d7:21:6d:b5:d2:82:37:93:6f:b1:e6: 35:bc:c0:d2:5c:4e:ef:42:e5:e5:e2:9b:5c:e5:6e:cd:20:59: 31:f5:85:ff:4e:39:f5:44:0b:93:19:e0:f6:c9:33:4c:79:c7: 7a:d6:b7:d4:2a:ac:b9:7f:85:e6:e3:4d:b6:ec:da:29:f6:9d: ed:33:7f:76:be:b6:b4:2f:73:ab:e0:23:cf:c0:cf:28:a4:5d: b5:b6:13:84:22:01:57:28:fa:ed:d3:a8:71:65:76:90:c9:af: 11:66:3b:60:6c:55:d0:24:07:08:95:a0:b5:e7:41:ac:a7:2b: a1:d8:58:f7:05:5e:12:d1:0a:53:28:66:6b:e3:58:ea:61:3b: a4:3e:6b:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQTgxMTAvBgNVBAUTKENBNTU5NDEyRTJBMjM4MDIxQTk0RUYyNzE4RURCMDAx RUY5NkVBODUwHhcNMjUwODEzMDA1MDA4WhcNMjUwODIwMDA1MDA4WjAYMRYwFAYD VQQDEw02ODliZTE0MC0xMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiuItavxMhtgKu8A+m89gsaxSM+HOnKTWy1dRldjLdIs84lS0z/jpXqOEegk rt0fZ+aMkTIPdkg+hgzvaNqbaZ64NBvajtUPkYyJn2OFVjbVkVy72gZ6MnKSrpUs hgOUaT/4gbrUczkFvBH6lruTx9JbkoQ6w5F4WEhRp04WztaZvQMKcir8TAJsaTkg yUtnK1DS8eqtMVqtpMURk3d0Q1NqB1Jir6GvUe+59xQYHIzF2ARSTCckqStszOMg gt7+S47D/5gMDlPi7/MnhZx7AMiAX+NczqiUHItE+aFQb9TCUrGv9UAkOG+Y+VMU J/iZ7c9so/sQTh5Ggql2UyCHIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNApQVYL A+po1ZXTiR9e/V8rcCeZMB8GA1UdIwQYMBaAFMpVlBLiojgCGpTvJxjtsAHvluqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJBOC9ERTc4RDU4Qzcy MDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9BSWFsTzhuR08yd0FlLVc2 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsV1VFdUtpT0FJYWxPOG5HTzJ3QWUtVzZvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJBOC9ERTc4RDU4QzcyMDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9B SWFsTzhuR08yd0FlLVc2b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCH0LNOUdHLLFCOcFdiRunRebTJlryUEdGpz7+SQ4M9a6ZflXOf5kc Z9VVm0nmGdcRqdM3baLwjtJSz8vQn6Nqby/Rx9sto7zlw1KvJNgYsAPMzhsDAxWx EvuFmr6tIlwc4dGiG6z3u5ZNH2OO1rTziwpE1yFttdKCN5NvseY1vMDSXE7vQuXl 4ptc5W7NIFkx9YX/Tjn1RAuTGeD2yTNMecd61rfUKqy5f4Xm40227Nop9p3tM392 vra0L3Or4CPPwM8opF21thOEIgFXKPrt06hxZXaQya8RZjtgbFXQJAcIlaC150Gs pyuh2Fj3BV4S0QpTKGZr41jqYTukPmtV -----END CERTIFICATE-----Generated at Wed Aug 13 05:33:43 2025 by rpki-client