$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json) Hash identifier: Fwzidtm8Cj5ssvVnxXcfV55w3bm1byNThvwctdBSi3g= Subject key identifier: 18:79:8E:97:1B:AA:FE:FF:EB:AA:CB:95:0B:F3:E3:6F:8F:9D:54:41 Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft Manifest number: 040F Signing time: Tue 05 Aug 2025 01:05:12 +0000 Manifest this update: Tue 05 Aug 2025 01:05:12 +0000 Manifest next update: Tue 12 Aug 2025 01:05:12 +0000 Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: B1RQ+/D8c7v+w0XHJc9WKzoRJ7jE8Fb3CnG3AcL1CjU=) 2: 7A5A3018369911EEA7B51070C4F9AE02.roa (hash: Og8kLNzaVhBQKU3tbt1hgn1OVRSVfiYrmCnuH8rD/SI=) 3: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: 4KCzf12m5fAdi6rZ7BIjlDcf4sO8cvFYO0DxyvvDdig=) 4: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: P7ML1zua1vWGcEbBxHBGy+N0awfVzYw0xfSbdU5Alt4=) 5: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 8be0KD35jIvGdXDMYzDTqhbhRPMsZm5zv5unHRRc5ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Validity Not Before: Aug 5 01:05:12 2025 GMT Not After : Aug 12 01:05:12 2025 GMT Subject: CN=689158c8-f587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:e3:03:76:49:df:8a:28:b6:68:e7:b9:83: d2:51:5c:b1:02:b8:cf:c9:26:70:02:d9:54:15:2f: a3:c4:66:f2:9e:35:67:86:77:68:2f:d5:84:30:ac: 7f:b9:34:79:85:fc:14:77:10:de:fa:8f:a0:e7:a8: bd:22:cb:9c:f1:02:57:e9:66:96:e3:44:ef:15:33: 61:3e:ab:79:8c:c3:85:fd:74:9a:54:19:86:0c:46: 70:8e:1d:59:0f:ea:f4:7e:e2:3b:c7:2c:81:34:63: 17:e7:cc:29:d8:ad:17:f9:a4:66:75:72:90:bc:85: 3c:46:fe:ed:28:fc:8c:c2:0b:89:9c:a5:64:ac:80: d3:75:96:96:06:85:2f:10:77:33:04:68:42:59:66: 20:bf:a2:d7:f2:fb:d8:b3:0c:75:89:a9:14:ea:0d: db:b6:93:a3:f4:b9:1e:88:d4:ab:cd:11:53:d0:cd: 9e:fd:ae:f8:9b:5c:fe:9f:16:62:f8:a9:6a:fb:ef: bd:47:19:d8:0b:22:49:29:1a:ec:30:5b:69:1e:26: f5:9f:12:cb:3a:07:55:21:fb:b4:eb:06:14:b5:d6: e9:2a:51:ff:47:09:ef:14:50:9f:33:88:f3:0d:a2: b8:e0:88:8c:26:a0:60:7c:0d:d6:80:36:21:57:25: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:79:8E:97:1B:AA:FE:FF:EB:AA:CB:95:0B:F3:E3:6F:8F:9D:54:41 X509v3 Authority Key Identifier: keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:54:e4:00:24:20:b9:9d:1c:a3:87:1e:ac:d0:53:c1:f6:d7: 12:d7:cc:c8:4a:2c:c3:eb:a0:34:a2:95:81:9e:5c:ec:88:2f: 01:57:31:a0:b4:48:99:19:fc:97:c7:1d:be:aa:13:7e:99:97: 81:db:65:34:28:25:a8:dc:66:7d:c9:e7:8c:ea:e5:57:b5:ea: a4:09:fd:d2:66:aa:0e:10:2d:4c:fe:e4:47:8f:f9:da:c1:b8: cd:5e:bc:a0:ff:50:c8:91:92:35:a1:e3:7f:d4:96:6b:e8:dd: 3d:65:a0:33:f4:af:eb:93:6d:91:c0:79:8a:16:63:1e:85:c4: a3:30:cf:15:1e:e9:90:47:8c:16:4e:de:a0:74:a3:68:20:c3: 18:5f:9a:30:54:f3:3d:93:08:e3:91:b8:44:3c:62:46:fc:16: c6:7e:71:01:f1:da:c5:d5:8c:4b:d7:c1:03:38:2e:60:a0:85: 0d:b9:f6:36:24:d6:fa:0e:73:54:d5:b3:7e:8f:f1:9a:3f:94: b5:20:43:16:21:17:7d:6b:5b:20:16:a2:83:3d:eb:a3:de:99: ea:0f:85:c9:5d:25:26:66:06:05:76:74:b0:c2:81:4a:fd:5f: 01:f2:e0:f8:cc:26:be:d0:ec:26:0a:0c:a2:4f:48:28:13:48: 9c:a1:11:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4 QzQ0Mzk4QjIwHhcNMjUwODA1MDEwNTEyWhcNMjUwODEyMDEwNTEyWjAYMRYwFAYD VQQDEw02ODkxNThjOC1mNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwELjA3ZJ34ootmjnuYPSUVyxArjPySZwAtlUFS+jxGbynjVnhndoL9WEMKx/ uTR5hfwUdxDe+o+g56i9Isuc8QJX6WaW40TvFTNhPqt5jMOF/XSaVBmGDEZwjh1Z D+r0fuI7xyyBNGMX58wp2K0X+aRmdXKQvIU8Rv7tKPyMwguJnKVkrIDTdZaWBoUv EHczBGhCWWYgv6LX8vvYswx1iakU6g3btpOj9LkeiNSrzRFT0M2e/a74m1z+nxZi +Klq+++9RxnYCyJJKRrsMFtpHib1nxLLOgdVIfu06wYUtdbpKlH/RwnvFFCfM4jz DaK44IiMJqBgfA3WgDYhVyXBHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBh5jpcb qv7/66rLlQvz42+PnVRBMB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY cHlwb192LWItMVdNUkRtTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCVOQAJCC5nRyjhx6s0FPB9tcS18zISizD66A0opWBnlzsiC8BVzGg tEiZGfyXxx2+qhN+mZeB22U0KCWo3GZ9yeeM6uVXteqkCf3SZqoOEC1M/uRHj/na wbjNXryg/1DIkZI1oeN/1JZr6N09ZaAz9K/rk22RwHmKFmMehcSjMM8VHumQR4wW Tt6gdKNoIMMYX5owVPM9kwjjkbhEPGJG/BbGfnEB8drF1YxL18EDOC5goIUNufY2 JNb6DnNU1bN+j/GaP5S1IEMWIRd9a1sgFqKDPeuj3pnqD4XJXSUmZgYFdnSwwoFK /V8B8uD4zCa+0OwmCgyiT0goE0icoREw -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:58 2025 by rpki-client