$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: l1Kj0MLoLyVmq8dBve2FCX2rCAQIGHo8PD8B0s4AbMs= Subject key identifier: EE:20:59:32:8B:42:6A:48:CA:69:56:77:1D:DA:2E:8A:9B:CD:2C:79 Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 2519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 24FE Signing time: Sun 10 Aug 2025 15:43:08 +0000 Manifest this update: Sun 10 Aug 2025 15:43:08 +0000 Manifest next update: Sun 17 Aug 2025 15:43:08 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: a/cCEyJZiPDt7UwOb9yNqTn5rB19lZMyEZAU3l8lZdo=) 2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: yJwIYH0HnsFs9Iy2kQBVrjVIvfYou5TYh0Yox/p0ekY=) 3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: bQ3KvLtmzclqglCfQCTMWY9jEZJ/oqjU8/5vFJyfH5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9497 (0x2519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Aug 10 15:43:08 2025 GMT Not After : Aug 17 15:43:08 2025 GMT Subject: CN=6898be0c-311f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:63:38:e7:68:b6:62:21:41:a6:f9:b1:1a: e4:38:46:69:d9:05:aa:6c:85:ad:78:60:dd:d5:01: ef:74:ea:81:83:d8:bb:82:21:c9:c0:7c:da:0f:7a: 3a:59:09:c6:06:f8:b1:26:53:47:fd:54:96:da:4c: b2:10:eb:1c:0c:51:2c:ea:08:35:73:bd:10:0b:90: a5:a4:05:d8:5f:39:75:44:6c:3a:28:31:3e:0b:05: 2b:9a:84:1e:f4:23:df:43:1f:dc:eb:d0:43:9c:2e: b2:33:c9:10:9f:d2:d3:d7:62:a3:a3:49:04:4e:1f: c6:56:69:d5:e8:7f:33:b7:64:99:86:66:79:08:e5: b2:92:fe:ee:79:9a:ad:e6:5d:7f:0f:fa:55:bc:e4: 06:db:89:a9:f0:de:84:83:4e:cf:4c:8f:96:c5:b7: e6:57:c4:a6:3a:a2:76:5f:09:57:cd:30:c2:5e:03: c4:95:84:68:ec:8b:6c:3e:c9:34:0a:04:bf:c4:83: 0b:b3:61:b0:46:a4:32:4f:fb:e9:64:a3:79:73:f5: dd:90:5b:6e:f0:a3:12:de:e6:bd:5e:ae:9e:14:30: 08:2f:2d:17:c5:e5:c5:aa:ae:71:a8:8f:c2:6b:d9: db:94:fd:95:c6:5e:be:2c:54:b3:29:3c:16:f6:f7: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:20:59:32:8B:42:6A:48:CA:69:56:77:1D:DA:2E:8A:9B:CD:2C:79 X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:fb:fc:66:42:e3:01:1b:af:7a:a6:03:10:df:69:58:7a:83: 52:3f:0c:3c:f9:3c:0d:cd:16:f0:b6:fe:bf:79:25:0a:ab:ab: f3:ff:f9:6a:ad:42:39:45:0a:a8:b7:d1:bb:24:0a:37:de:9d: c8:45:4a:4f:25:10:81:74:8a:fc:f8:90:53:94:35:fb:31:f8: 33:3c:22:75:e0:da:3d:89:bb:ff:0e:b2:c6:32:14:c9:bc:8f: a9:30:75:d3:96:81:f7:fe:d5:33:d1:e6:62:b6:d8:ae:83:32: df:92:eb:fc:68:5c:03:be:79:53:ab:7e:dd:4e:2a:fe:2f:31: 5a:d9:71:20:17:b2:6c:70:09:41:ff:5e:64:2d:70:88:5a:82: 4e:ba:83:41:54:fe:47:86:9d:a6:04:4c:6c:da:f1:09:cd:ef: 7a:8d:17:74:7f:45:bb:c2:a6:eb:e5:7c:2d:ed:6a:50:13:aa: 3c:89:10:b0:78:a3:87:46:15:cc:43:d4:cf:28:29:64:cb:5c: 47:18:27:42:24:51:32:a5:a9:5d:a5:c0:d3:1f:f7:ae:c6:31: 2c:29:e4:b3:2c:0d:65:84:3f:9f:f7:d5:7f:66:dd:9b:3c:68: 31:f2:4a:fd:dc:8f:f4:95:86:77:47:df:5c:fa:f0:d6:66:a3: 51:64:f4:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUwODEwMTU0MzA4WhcNMjUwODE3MTU0MzA4WjAYMRYwFAYD VQQDEw02ODk4YmUwYy0zMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuABjOOdotmIhQab5sRrkOEZp2QWqbIWteGDd1QHvdOqBg9i7giHJwHzaD3o6 WQnGBvixJlNH/VSW2kyyEOscDFEs6gg1c70QC5ClpAXYXzl1RGw6KDE+CwUrmoQe 9CPfQx/c69BDnC6yM8kQn9LT12Kjo0kETh/GVmnV6H8zt2SZhmZ5COWykv7ueZqt 5l1/D/pVvOQG24mp8N6Eg07PTI+WxbfmV8SmOqJ2XwlXzTDCXgPElYRo7ItsPsk0 CgS/xIMLs2GwRqQyT/vpZKN5c/XdkFtu8KMS3ua9Xq6eFDAILy0XxeXFqq5xqI/C a9nblP2Vxl6+LFSzKTwW9vcfvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4gWTKL QmpIymlWdx3aLoqbzSx5MB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz+/xmQuMBG696pgMQ32lYeoNSPww8+TwNzRbwtv6/eSUKq6vz//lq rUI5RQqot9G7JAo33p3IRUpPJRCBdIr8+JBTlDX7MfgzPCJ14No9ibv/DrLGMhTJ vI+pMHXTloH3/tUz0eZittiugzLfkuv8aFwDvnlTq37dTir+LzFa2XEgF7JscAlB /15kLXCIWoJOuoNBVP5Hhp2mBExs2vEJze96jRd0f0W7wqbr5Xwt7WpQE6o8iRCw eKOHRhXMQ9TPKClky1xHGCdCJFEypaldpcDTH/euxjEsKeSzLA1lhD+f99V/Zt2b PGgx8kr93I/0lYZ3R99c+vDWZqNRZPRY -----END CERTIFICATE-----Generated at Mon Aug 11 02:03:49 2025 by rpki-client