$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft File: YsDafzAgXhQZA4UrhjIw-eHi-c0.mft (raw, json) Hash identifier: Fm5zZwCupnaktZNEErmx6hdTBZ9l0VWawPxknWQUjkA= Subject key identifier: C3:26:56:4E:3A:D9:6A:31:E4:1C:A2:3B:27:BC:CC:02:58:0B:A7:14 Authority key identifier: 62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD Certificate issuer: /CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft Manifest number: 0166 Signing time: Sat 09 Aug 2025 04:19:11 +0000 Manifest this update: Sat 09 Aug 2025 04:19:10 +0000 Manifest next update: Sat 16 Aug 2025 04:19:10 +0000 Files and hashes: 1: YsDafzAgXhQZA4UrhjIw-eHi-c0.crl (hash: 0Syyn/NtFhHfhukc1pb2VvUPTyhUHCSBvAom3ge2PBc=) 2: 0EB2F53A59A711EE9419DA2DC4F9AE02.roa (hash: SEbumSKURIV/eHCI58ieU83y5eYeF9FfOCAWx1SOX3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175C2B, serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD Validity Not Before: Aug 9 04:19:10 2025 GMT Not After : Aug 16 04:19:10 2025 GMT Subject: CN=6896cc3e-e049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:15:c8:04:0f:92:d6:57:bd:6f:3f:3c:f0:8b: 18:2e:b0:1a:30:c7:0e:cb:49:80:b5:0b:4a:4f:2a: 51:b1:fd:52:e0:92:6e:31:92:56:2c:0d:13:0c:67: e7:7a:cc:72:48:b4:5c:01:de:86:a0:35:45:8f:54: 70:c4:f8:2f:14:56:6d:6a:52:69:9a:3a:06:6b:a3: 88:93:1a:c0:4d:49:18:34:0a:3e:d5:63:cb:e7:42: 0c:90:9f:e3:aa:67:fe:37:56:f1:93:f1:72:77:10: aa:eb:74:c6:2f:35:7d:9c:81:23:6a:9d:71:3d:a1: 6e:46:a5:8b:27:99:39:4a:ea:cd:0d:0d:bf:a0:94: 6e:4f:e7:fa:6a:73:fa:6d:d2:2b:95:d8:63:4e:79: c1:59:13:97:3f:5f:f5:1b:ab:61:45:74:9f:0d:55: 6e:9b:ea:30:8b:c6:2d:be:e3:66:0b:c9:84:8a:90: 52:d6:26:eb:d3:c5:3c:b3:6b:19:4c:97:e2:f3:46: 80:b0:7c:13:94:27:aa:63:a9:f3:94:dc:c5:ab:6a: f6:00:35:c2:ab:67:39:62:e3:a1:82:f5:c4:e9:75: eb:75:e2:5c:e0:ed:82:39:07:f9:28:7d:57:79:88: 06:cd:6a:79:06:83:60:1c:18:e9:e9:c4:8d:e9:42: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:26:56:4E:3A:D9:6A:31:E4:1C:A2:3B:27:BC:CC:02:58:0B:A7:14 X509v3 Authority Key Identifier: keyid:62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:3a:d3:17:c7:e2:7c:3c:77:e4:79:66:c1:d7:35:89:d0:b4: 5b:aa:fa:72:39:4b:4d:2f:89:6b:33:72:e8:08:b8:c5:9c:04: 1e:15:1c:5c:2d:69:0c:f3:2e:c0:d7:b1:f5:3e:a5:13:06:49: 3c:43:24:d2:52:55:59:b0:05:5b:5d:a3:a3:7c:b2:e4:bb:9e: e0:f3:ca:e9:51:1a:c8:50:29:58:b5:97:52:83:bd:79:82:8c: 1c:23:d8:8e:b3:b6:61:03:3c:e1:5b:cd:a1:8c:1a:72:0a:09: 61:39:b3:df:51:7e:ae:21:5e:8d:a8:74:65:e0:97:8a:fa:66: 59:62:c5:81:ae:e0:99:66:9d:34:c6:42:b3:24:d5:7a:9d:ba: 48:f1:fc:87:d2:8b:09:b1:c9:1b:78:f4:7c:a4:c0:44:1e:3f: 92:08:68:0c:0d:ce:e2:38:16:56:a9:28:ce:ef:4b:e1:ef:2c: 49:21:bc:bf:07:03:82:74:53:a3:9d:80:8b:f2:91:ad:3d:f3: 2f:e7:90:a3:60:62:ec:9f:85:a1:15:08:d6:7b:0d:2d:2c:e8: de:be:67:88:91:23:af:bc:d9:4b:21:d2:3f:d0:46:8b:5c:08: 77:29:8b:71:d8:36:13:4a:1e:18:87:ac:10:15:95:ad:46:d5: 5a:9b:e3:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVDMkIxMTAvBgNVBAUTKDYyQzBEQTdGMzAyMDVFMTQxOTAzODUyQjg2MzIzMEY5 RTFFMkY5Q0QwHhcNMjUwODA5MDQxOTEwWhcNMjUwODE2MDQxOTEwWjAYMRYwFAYD VQQDEw02ODk2Y2MzZS1lMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RXIBA+S1le9bz888IsYLrAaMMcOy0mAtQtKTypRsf1S4JJuMZJWLA0TDGfn esxySLRcAd6GoDVFj1RwxPgvFFZtalJpmjoGa6OIkxrATUkYNAo+1WPL50IMkJ/j qmf+N1bxk/FydxCq63TGLzV9nIEjap1xPaFuRqWLJ5k5SurNDQ2/oJRuT+f6anP6 bdIrldhjTnnBWROXP1/1G6thRXSfDVVum+owi8YtvuNmC8mEipBS1ibr08U8s2sZ TJfi80aAsHwTlCeqY6nzlNzFq2r2ADXCq2c5YuOhgvXE6XXrdeJc4O2COQf5KH1X eYgGzWp5BoNgHBjp6cSN6ULANwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMmVk46 2Wox5ByiOye8zAJYC6cUMB8GA1UdIwQYMBaAFGLA2n8wIF4UGQOFK4YyMPnh4vnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUMyQi9FRUJCQzExNjUz NTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1hoUVpBNFVyaGpJdy1lSGkt YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzRGFmekFnWGhRWkE0VXJoakl3LWVIaS1jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUMyQi9FRUJCQzExNjUzNTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1ho UVpBNFVyaGpJdy1lSGktYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIOtMXx+J8PHfkeWbB1zWJ0LRbqvpyOUtNL4lrM3LoCLjFnAQeFRxc LWkM8y7A17H1PqUTBkk8QyTSUlVZsAVbXaOjfLLku57g88rpURrIUClYtZdSg715 gowcI9iOs7ZhAzzhW82hjBpyCglhObPfUX6uIV6NqHRl4JeK+mZZYsWBruCZZp00 xkKzJNV6nbpI8fyH0osJsckbePR8pMBEHj+SCGgMDc7iOBZWqSjO70vh7yxJIby/ BwOCdFOjnYCL8pGtPfMv55CjYGLsn4WhFQjWew0tLOjevmeIkSOvvNlLIdI/0EaL XAh3KYtx2DYTSh4Yh6wQFZWtRtVam+N+ -----END CERTIFICATE-----Generated at Sun Aug 10 05:37:29 2025 by rpki-client