$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft File: yZ1gB81HfYmzWcM8k8qptbsQYBo.mft (raw, json) Hash identifier: PeeaTrU2vNAQqY9pLNyz/T3m2zkloNOmyUNBwJtIJxs= Subject key identifier: 7D:34:37:FF:A3:97:16:52:77:F8:BE:88:67:01:00:07:24:D6:33:5E Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A Certificate issuer: /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft Manifest number: 0C43 Signing time: Fri 08 Aug 2025 18:50:32 +0000 Manifest this update: Fri 08 Aug 2025 18:50:32 +0000 Manifest next update: Fri 15 Aug 2025 18:50:32 +0000 Files and hashes: 1: yZ1gB81HfYmzWcM8k8qptbsQYBo.crl (hash: fwrVQIqDESq+hWEqzVy2Mo7XOlOnnGXki/dLNVRcEfk=) 2: 1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa (hash: KCbvW2+iTb2FhCUJSCAthuyvDnx7MU5+U8PZ8z1pu+g=) 3: 7D16D03C861A11EF99D32B66C4F9AE02.roa (hash: LFZ6uBkW6voau17buZXmD8B1WuozeZe536RV9ixDxuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F03, serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Validity Not Before: Aug 8 18:50:32 2025 GMT Not After : Aug 15 18:50:32 2025 GMT Subject: CN=689646f8-5216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:3f:15:b3:ac:17:d7:e9:95:86:b2:a1:d1: e5:ae:7a:07:b2:f9:1a:1d:fa:5d:a7:70:ce:04:94: 14:31:28:19:f6:27:95:5e:3f:59:e9:74:cf:48:00: 48:2a:c8:8d:ff:ad:b1:7f:b5:73:d8:c0:75:a5:46: d2:16:33:91:38:06:72:b0:b3:0a:2b:3b:98:80:76: b1:39:1f:e6:a1:e8:bf:98:80:4a:08:83:07:77:4b: bf:f7:ef:07:1f:ab:64:d3:4e:f8:c8:90:55:0d:2b: 9f:88:4d:f3:a0:dc:a9:b2:40:2f:ea:35:db:a4:1e: b3:63:8a:6f:db:f2:1b:83:cd:50:9b:e4:f0:f1:c7: e8:87:18:3f:8c:23:ff:94:0e:f3:69:96:f7:b6:a7: 4b:ad:7b:1d:fd:22:f8:0a:e5:84:ef:6a:d2:16:0f: 2b:87:85:b0:74:af:98:e2:c9:2d:dd:a0:74:e8:aa: 08:e1:ef:04:c2:32:6d:64:da:ce:ee:70:ea:32:c1: ab:21:02:73:0c:fa:37:96:5c:4c:af:7f:ac:dc:50: 69:89:86:60:40:63:36:86:b7:69:1d:a9:a0:72:c7: e7:5c:bc:1b:59:24:79:c8:14:46:6f:9b:4f:ee:e4: 14:c2:ba:57:10:1c:2e:25:66:cc:0e:83:a2:69:37: a2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:34:37:FF:A3:97:16:52:77:F8:BE:88:67:01:00:07:24:D6:33:5E X509v3 Authority Key Identifier: keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:11:db:3e:23:2b:25:33:2d:71:b6:2d:6b:fb:fb:42:d9:ab: 64:48:04:e5:d1:9a:e7:66:8d:a0:cf:0b:bd:f8:2d:be:7d:a9: 3e:89:d9:fd:c9:93:31:dc:aa:6d:58:4f:81:a6:e1:c2:46:e7: 09:cf:17:96:e2:c7:aa:6b:f0:a4:39:ec:7b:1f:f4:12:db:7b: 0f:df:20:bc:bc:7e:2b:3f:2e:a5:d4:9b:21:ed:a8:a5:35:54: 30:6d:4b:66:32:14:bf:6e:cb:67:60:e2:fa:38:f8:55:e8:c8: 15:a5:cb:e9:c9:dd:02:0a:af:4b:79:27:78:cb:1a:27:1f:93: f4:b0:38:5e:6e:77:5d:7b:fb:db:25:3e:b9:a0:52:aa:9f:33: 9d:f3:7d:d5:f4:8e:a3:17:8e:ae:92:00:c8:66:dd:0c:3d:c4: 21:63:f5:6f:95:42:c6:d0:9c:3b:1f:ea:52:f9:99:17:9d:3e: e5:d3:ad:cf:cd:12:31:56:54:f4:97:12:f8:f6:0c:2c:cf:f7: 7d:b0:9a:76:fa:42:42:53:9c:9e:64:6a:e0:48:54:d8:17:78: 17:99:bf:a7:f2:cc:be:c8:16:7f:de:c4:c4:72:8c:f0:d6:28: b9:43:04:7e:05:ef:9a:76:6b:e1:06:15:c4:5e:83:16:c5:2f: aa:63:dc:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGMDMxMTAvBgNVBAUTKEM5OUQ2MDA3Q0Q0NzdEODlCMzU5QzMzQzkzQ0FBOUI1 QkIxMDYwMUEwHhcNMjUwODA4MTg1MDMyWhcNMjUwODE1MTg1MDMyWjAYMRYwFAYD VQQDEw02ODk2NDZmOC01MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cM/FbOsF9fplYayodHlrnoHsvkaHfpdp3DOBJQUMSgZ9ieVXj9Z6XTPSABI KsiN/62xf7Vz2MB1pUbSFjOROAZysLMKKzuYgHaxOR/moei/mIBKCIMHd0u/9+8H H6tk0074yJBVDSufiE3zoNypskAv6jXbpB6zY4pv2/Ibg81Qm+Tw8cfohxg/jCP/ lA7zaZb3tqdLrXsd/SL4CuWE72rSFg8rh4WwdK+Y4skt3aB06KoI4e8EwjJtZNrO 7nDqMsGrIQJzDPo3llxMr3+s3FBpiYZgQGM2hrdpHamgcsfnXLwbWSR5yBRGb5tP 7uQUwrpXEBwuJWbMDoOiaTeiyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH00N/+j lxZSd/i+iGcBAAck1jNeMB8GA1UdIwQYMBaAFMmdYAfNR32Js1nDPJPKqbW7EGAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0YwMy82NEY2QzI4RTBE RTExMUVBOTk2Njk4ODVDNEY5QUUwMi95WjFnQjgxSGZZbXpXY004azhxcHRic1FZ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laMWdCODFIZllteldjTThrOHFwdGJzUVlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0YwMy82NEY2QzI4RTBERTExMUVBOTk2Njk4ODVDNEY5QUUwMi95WjFnQjgxSGZZ bXpXY004azhxcHRic1FZQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCREds+IyslMy1xti1r+/tC2atkSATl0ZrnZo2gzwu9+C2+fak+idn9 yZMx3KptWE+BpuHCRucJzxeW4seqa/CkOex7H/QS23sP3yC8vH4rPy6l1Jsh7ail NVQwbUtmMhS/bstnYOL6OPhV6MgVpcvpyd0CCq9LeSd4yxonH5P0sDhebndde/vb JT65oFKqnzOd833V9I6jF46ukgDIZt0MPcQhY/VvlULG0Jw7H+pS+ZkXnT7l063P zRIxVlT0lxL49gwsz/d9sJp2+kJCU5yeZGrgSFTYF3gXmb+n8sy+yBZ/3sTEcozw 1ii5QwR+Be+admvhBhXEXoMWxS+qY9y4 -----END CERTIFICATE-----Generated at Sun Aug 10 18:59:16 2025 by rpki-client