$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: b2AfxH7dptJUrU9eZgUg+4nCn701rm5LKB4YT7anrvI= Subject key identifier: 53:CE:CB:99:44:B1:B7:CB:26:0D:10:51:36:74:39:9F:3D:38:B4:51 Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: 6D Signing time: Sat 09 Aug 2025 07:23:27 +0000 Manifest this update: Sat 09 Aug 2025 07:23:26 +0000 Manifest next update: Sat 16 Aug 2025 07:23:26 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: 7ei5qVjEGeJGMaEjYP9x9NY55LlCKakof3cI7z6o0HU=) 2: C4B41888CF3911EFBA26F564C4F9AE02.roa (hash: PeoexpeZuhtxvOaSUXuGABP7Es0mdREYJbAZJzL28uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Aug 9 07:23:26 2025 GMT Not After : Aug 16 07:23:26 2025 GMT Subject: CN=6896f76e-a789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:6f:7c:f3:97:5a:9f:76:4a:88:99:c4:1c: d5:2c:cb:32:4f:ec:80:30:1f:35:b1:33:41:18:cb: 53:a8:18:24:fd:ed:32:90:4c:ac:78:ba:ed:65:0f: c9:ac:06:c3:47:40:68:85:b6:7c:4c:65:3f:86:9e: 64:0f:36:32:d9:c3:70:5e:a9:08:1f:5b:61:09:07: e8:9d:ff:c8:0b:61:25:b1:d7:f2:6f:ed:71:ed:bc: 75:2d:3e:1c:6e:c9:97:48:92:53:37:88:3a:0b:4c: 16:a9:96:9d:e4:61:df:63:f6:65:ae:c3:37:13:43: 78:e2:04:b4:db:36:8d:fd:ee:f9:83:37:54:30:f8: 2b:d7:9f:2f:da:30:be:84:3b:ed:dd:7b:b7:a1:be: 4d:9e:4f:5f:97:e1:45:22:a6:1d:5e:61:fc:d7:9f: 85:d4:0b:1a:69:5e:8c:b1:ea:2a:95:5f:08:12:57: 16:a3:d1:9a:10:2a:26:dc:d4:d3:34:82:b2:35:18: 31:b8:0a:c6:ea:2c:1e:dc:40:d0:ff:00:21:a4:a7: c0:29:ab:3b:55:99:86:2b:09:c2:43:0c:bd:9c:2f: d0:0d:a2:be:a2:ab:97:4e:e1:8d:85:30:0b:02:c9: 86:81:f1:13:f0:2d:49:60:61:a2:a4:dc:91:90:07: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CE:CB:99:44:B1:B7:CB:26:0D:10:51:36:74:39:9F:3D:38:B4:51 X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:7e:13:a7:bc:dd:54:3a:82:cb:b4:dd:63:a6:73:29:1c:21: c2:62:df:52:dc:61:4a:ff:f9:9f:79:a4:f2:c6:b4:e0:3e:c9: fc:d4:5e:b4:70:ee:91:18:2e:09:d9:00:17:13:20:cc:9a:27: 0b:0e:01:87:16:cb:52:b1:7a:4d:bc:23:d7:74:07:78:5e:2f: 68:11:13:88:0c:d7:96:d0:ee:cf:a5:9b:71:63:f4:14:d4:d0: 13:47:31:f1:cf:34:26:bc:e9:a0:d3:9f:d7:61:c6:5f:c6:2f: 5c:86:f7:21:30:4c:0c:f6:bd:8a:12:31:ed:7d:40:37:c8:8e: 39:02:0e:09:f1:b7:6a:55:9b:4d:48:f7:8a:27:7c:12:23:ae: 1b:44:f3:a4:bf:6a:2a:3f:67:11:83:6d:64:54:9f:6c:3b:9c: a7:e2:c9:0b:e0:a1:21:b7:d8:4e:3d:95:1c:19:c4:27:56:83: f3:0e:29:8b:e2:13:45:52:8f:f6:59:92:6c:67:b1:69:fb:13: 10:93:e2:ee:d0:71:80:ed:1f:ea:f2:3b:e6:eb:ae:95:39:66: 23:2e:29:5c:da:97:96:a9:98:9b:1a:59:c9:ab:70:b1:a5:dc: 3c:e8:e8:74:84:64:9c:d2:00:88:0c:82:52:70:eb:ba:d3:d4: b6:cd:03:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0I0QjExMC8GA1UEBRMoQzg3N0NERjIyRDI1QjZFMzNGQzVFNDk1QkU1NUU1OUQw QTk0OTg3RTAeFw0yNTA4MDkwNzIzMjZaFw0yNTA4MTYwNzIzMjZaMBgxFjAUBgNV BAMTDTY4OTZmNzZlLWE3ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5TW9885dan3ZKiJnEHNUsyzJP7IAwHzWxM0EYy1OoGCT97TKQTKx4uu1lD8ms BsNHQGiFtnxMZT+GnmQPNjLZw3BeqQgfW2EJB+id/8gLYSWx1/Jv7XHtvHUtPhxu yZdIklM3iDoLTBaplp3kYd9j9mWuwzcTQ3jiBLTbNo397vmDN1Qw+CvXny/aML6E O+3de7ehvk2eT1+X4UUiph1eYfzXn4XUCxppXoyx6iqVXwgSVxaj0ZoQKibc1NM0 grI1GDG4CsbqLB7cQND/ACGkp8ApqztVmYYrCcJDDL2cL9ANor6iq5dO4Y2FMAsC yYaB8RPwLUlgYaKk3JGQB4uDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU87LmUSx t8smDRBRNnQ5nz04tFEwHwYDVR0jBBgwFoAUyHfN8i0ltuM/xeSVvlXlnQqUmH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QjRCL0UxNTZBMDRDQ0Yz ODExRUY4NDg0RTkyRkM0RjlBRTAyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1I NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUhmTjhpMGx0dU1feGVTVnZsWGxuUXFVbUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 QjRCL0UxNTZBMDRDQ0YzODExRUY4NDg0RTkyRkM0RjlBRTAyL3lIZk44aTBsdHVN X3hlU1Z2bFhsblFxVW1INC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJF+E6e83VQ6gsu03WOmcykcIcJi31LcYUr/+Z95pPLGtOA+yfzUXrRw 7pEYLgnZABcTIMyaJwsOAYcWy1Kxek28I9d0B3heL2gRE4gM15bQ7s+lm3Fj9BTU 0BNHMfHPNCa86aDTn9dhxl/GL1yG9yEwTAz2vYoSMe19QDfIjjkCDgnxt2pVm01I 94onfBIjrhtE86S/aio/ZxGDbWRUn2w7nKfiyQvgoSG32E49lRwZxCdWg/MOKYvi E0VSj/ZZkmxnsWn7ExCT4u7QcYDtH+ryO+brrpU5ZiMuKVzal5apmJsaWcmrcLGl 3Dzo6HSEZJzSAIgMglJw67rT1LbNAwo= -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:12 2025 by rpki-client