$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft File: YBC8xly5zPAs9-0p7HXk1iK98_A.mft (raw, json) Hash identifier: GrhOW+Eh3DQNR1qeePExgK1ga8uf/0yd5FRKGNmgnCM= Subject key identifier: F4:90:20:42:2F:49:37:E4:5D:59:64:2E:FF:35:DE:87:6B:C2:45:FB Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 Certificate issuer: /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Certificate serial: 04BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft Manifest number: 04BA Signing time: Mon 11 Aug 2025 00:01:32 +0000 Manifest this update: Mon 11 Aug 2025 00:01:31 +0000 Manifest next update: Mon 18 Aug 2025 00:01:31 +0000 Files and hashes: 1: YBC8xly5zPAs9-0p7HXk1iK98_A.crl (hash: X03dqXWRmndGJ9MbQDDPuqGyd4XFMFjoETJ89XD6pCM=) 2: E225E68E397411EC8120D135C4F9AE02.roa (hash: GWZiL4+KkXKacwwHdWBVfV3QtoEcyH45HgJbisXMlBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F45, serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Validity Not Before: Aug 11 00:01:31 2025 GMT Not After : Aug 18 00:01:31 2025 GMT Subject: CN=689932db-3d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:68:e4:87:b0:7e:fa:d9:bb:ff:94:fe:24: 3d:7b:27:15:d1:98:6d:62:66:4e:62:10:68:70:c2: d3:71:ee:6c:63:89:25:1a:6a:3f:dc:db:fc:10:3a: 97:a7:ce:0b:a0:0e:2f:b5:5b:44:24:b4:ad:87:37: 39:e5:ad:09:7f:52:3d:3d:fe:c8:cd:d8:af:9d:49: d8:be:b9:d0:c3:47:37:88:2a:f8:db:b6:17:0e:a8: e8:06:26:27:ab:11:48:9e:c9:a9:e7:d3:93:65:28: 4d:31:20:7b:15:57:74:fa:11:4b:c2:1a:a5:22:43: b0:b1:4b:2f:a8:e0:36:33:4b:de:be:6a:84:72:f4: be:6e:37:4d:2e:1f:5e:5e:fe:b6:55:18:a0:5a:d6: 9b:0f:82:3f:3f:a8:b8:a3:b9:e5:15:d6:35:9b:c4: c1:40:c5:30:c6:e9:6b:1d:e0:1c:2c:19:02:4b:8f: 92:fa:61:cc:a9:ae:0b:36:1f:9b:2a:3d:c7:d1:42: 93:da:c4:10:3d:f7:c2:35:12:83:ec:93:25:20:24: a2:a7:6a:ed:97:4b:38:80:a2:4a:dc:f0:86:90:7e: 4a:de:7d:f8:31:08:72:b0:95:5f:10:60:e1:57:69: d9:46:3e:fa:38:58:ba:87:6d:51:40:7c:6e:ca:22: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:90:20:42:2F:49:37:E4:5D:59:64:2E:FF:35:DE:87:6B:C2:45:FB X509v3 Authority Key Identifier: keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:58:6c:4d:40:8f:1e:b1:7a:c6:94:0f:e4:37:68:66:75:a9: 89:74:2b:bb:8d:1a:a9:c9:0b:a5:52:21:34:08:41:4b:18:3c: a8:b1:75:a8:f0:7c:87:9b:dc:aa:2f:0a:53:b6:20:20:4a:7f: 6c:c6:85:5b:c2:a7:66:ae:37:db:e4:e0:50:06:5e:d1:2f:50: e2:25:ed:df:60:02:30:8b:e8:c3:0d:d2:84:24:7c:04:9b:7b: 78:8d:50:24:b9:46:bc:d2:62:37:48:33:a6:c5:87:22:3f:46: cd:b8:13:eb:7a:47:a4:21:54:2f:ad:5e:0c:17:64:3f:22:5f: b2:35:6f:c0:4d:ad:6a:b1:c9:53:9d:24:ba:0f:41:88:12:3f: ec:7e:d4:0b:d2:c7:80:e8:41:64:10:87:69:fb:1d:05:26:08: fe:ad:ed:6f:ae:3a:3b:aa:16:7f:38:3f:ed:2c:34:3b:d9:90: ff:0d:94:b0:be:65:b4:63:4b:cb:fe:3a:68:e2:52:a4:33:68: d6:ef:60:ed:ad:11:cd:a7:34:13:42:27:ca:36:49:fd:63:ff: 54:b6:7b:12:c8:df:b0:b4:b7:7b:59:44:f0:4f:1e:dc:50:6b: 49:2c:62:3a:4c:93:8e:37:c9:9d:a8:ce:7f:6a:76:19:d5:00: bd:72:26:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNDUxMTAvBgNVBAUTKDYwMTBCQ0M2NUNCOUNDRjAyQ0Y3RUQyOUVDNzVFNEQ2 MjJCREYzRjAwHhcNMjUwODExMDAwMTMxWhcNMjUwODE4MDAwMTMxWjAYMRYwFAYD VQQDEw02ODk5MzJkYi0zZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonho5IewfvrZu/+U/iQ9eycV0ZhtYmZOYhBocMLTce5sY4klGmo/3Nv8EDqX p84LoA4vtVtEJLSthzc55a0Jf1I9Pf7IzdivnUnYvrnQw0c3iCr427YXDqjoBiYn qxFInsmp59OTZShNMSB7FVd0+hFLwhqlIkOwsUsvqOA2M0vevmqEcvS+bjdNLh9e Xv62VRigWtabD4I/P6i4o7nlFdY1m8TBQMUwxulrHeAcLBkCS4+S+mHMqa4LNh+b Kj3H0UKT2sQQPffCNRKD7JMlICSip2rtl0s4gKJK3PCGkH5K3n34MQhysJVfEGDh V2nZRj76OFi6h21RQHxuyiLNRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSQIEIv STfkXVlkLv813odrwkX7MB8GA1UdIwQYMBaAFGAQvMZcuczwLPftKex15NYivfPw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY0NS9ENzZGRjA0NDM5 NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQQXM5LTBwN0hYazFpSzk4 X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCQzh4bHk1elBBczktMHA3SFhrMWlLOThfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY0NS9ENzZGRjA0NDM5NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQ QXM5LTBwN0hYazFpSzk4X0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYWGxNQI8esXrGlA/kN2hmdamJdCu7jRqpyQulUiE0CEFLGDyosXWo 8HyHm9yqLwpTtiAgSn9sxoVbwqdmrjfb5OBQBl7RL1DiJe3fYAIwi+jDDdKEJHwE m3t4jVAkuUa80mI3SDOmxYciP0bNuBPrekekIVQvrV4MF2Q/Il+yNW/ATa1qsclT nSS6D0GIEj/sftQL0seA6EFkEIdp+x0FJgj+re1vrjo7qhZ/OD/tLDQ72ZD/DZSw vmW0Y0vL/jpo4lKkM2jW72DtrRHNpzQTQifKNkn9Y/9UtnsSyN+wtLd7WUTwTx7c UGtJLGI6TJOON8mdqM5/anYZ1QC9ciY4 -----END CERTIFICATE-----Generated at Mon Aug 11 06:20:02 2025 by rpki-client