$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json) Hash identifier: xosH0xtrS2KmrfNKZwahLus2/ONSbzGSlKVpnWCwT0Y= Subject key identifier: 44:30:D8:FC:19:DB:A7:99:43:97:EB:69:92:A5:F8:F3:47:C4:00:8F Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft Manifest number: 0148 Signing time: Sat 09 Aug 2025 04:39:21 +0000 Manifest this update: Sat 09 Aug 2025 04:39:21 +0000 Manifest next update: Sat 16 Aug 2025 04:39:21 +0000 Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: 6xTvMzBiW5dd9kXPTrI+uFZXoesxyq6OY8O0yWxZ0Uw=) 2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: DePAWeNaPf050wbH02MB/3/H4o3AawPKYgaEsO6gzSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Validity Not Before: Aug 9 04:39:21 2025 GMT Not After : Aug 16 04:39:21 2025 GMT Subject: CN=6896d0f9-b5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:f0:33:cc:ea:aa:55:c0:8a:46:59:0f:28: 4d:82:86:a1:96:80:b1:73:00:d1:24:6c:3e:ec:56: 93:81:48:10:54:6e:8e:b9:cd:4c:3d:12:13:29:df: 0e:8c:34:e4:f8:e4:0f:99:d2:d1:38:ea:d2:1c:0a: e4:d0:20:91:ff:65:ed:8b:e9:ce:76:84:b9:5b:c5: d9:cf:cd:14:db:69:85:dc:99:ed:40:11:4f:56:2d: 41:6b:bc:a2:bf:c0:6e:be:9a:a4:bb:e1:24:57:8b: 5c:4e:4b:c9:f1:44:05:a8:99:07:0f:4f:3a:5e:66: 2f:35:de:f8:8f:47:58:f3:47:6a:0d:b2:ff:cd:3d: a2:f2:28:44:c8:d7:66:2a:cd:b8:dc:1b:eb:f6:ca: 3f:62:97:99:ce:a9:18:83:02:f1:89:aa:64:a5:c9: 0d:6d:6e:e1:1b:78:84:a5:bc:3e:9b:01:98:0f:2f: dc:a6:c1:0a:5c:9a:37:a6:7f:c5:27:6b:0f:23:6c: 9e:8e:89:2d:2f:a9:6b:61:81:60:ec:fe:38:eb:0b: 15:83:e5:c7:5d:ab:04:99:60:c9:09:26:83:ed:f7: e4:69:d0:20:f3:f1:65:f1:55:77:56:33:2f:99:f5: 1c:54:5a:7b:48:0d:ef:d6:c6:88:41:54:70:76:5f: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:30:D8:FC:19:DB:A7:99:43:97:EB:69:92:A5:F8:F3:47:C4:00:8F X509v3 Authority Key Identifier: keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:6d:7e:d9:54:5c:8f:f4:fb:b8:db:1f:91:76:a9:51:21:b8: b1:c2:b8:1e:a9:54:39:b0:56:86:b6:1a:01:f0:35:1e:0d:a8: 34:66:f3:48:4b:33:27:bd:95:58:ec:96:b1:3f:86:fd:1d:2c: 1d:db:e1:84:f8:02:fe:45:fa:eb:7f:78:75:42:79:d7:80:eb: 67:c9:3a:81:f7:f7:26:68:89:5e:06:e8:41:22:86:04:77:6b: c3:c0:20:8a:1d:87:92:65:1c:1f:85:91:6a:06:f0:99:fe:3b: b1:83:a5:15:e8:d2:ac:7a:73:9d:7e:c2:64:3e:21:fd:02:46: 1b:b9:22:75:7d:88:aa:ec:e2:90:bf:16:94:3a:73:1f:4d:3f: d2:4e:64:a4:6e:b4:00:db:ae:fd:1d:1d:e7:4a:5d:62:5b:a7: 2c:5c:28:e8:0a:f5:63:42:6b:b7:b0:9b:29:a7:3b:67:62:ad: d3:2e:89:f1:a7:72:34:e2:bc:5b:ae:1e:d4:0c:b2:46:38:d9: f9:01:b4:75:1b:8f:18:f1:13:f7:74:c5:8e:a1:bd:a7:64:7a: b8:a0:ce:38:10:64:77:15:c3:1e:c0:d8:98:f6:fe:c5:3b:c8: bf:00:ba:36:a9:96:89:81:f1:35:f0:73:9a:3a:20:ce:f9:ce: 5b:de:6b:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFMjMxMTAvBgNVBAUTKEM5NEE0QUJBMzMxNTg5MzM5QjQ2NTFDMDVCOTJGRkUw MUJDQjM0QzkwHhcNMjUwODA5MDQzOTIxWhcNMjUwODE2MDQzOTIxWjAYMRYwFAYD VQQDEw02ODk2ZDBmOS1iNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRTwM8zqqlXAikZZDyhNgoahloCxcwDRJGw+7FaTgUgQVG6Ouc1MPRITKd8O jDTk+OQPmdLROOrSHArk0CCR/2Xti+nOdoS5W8XZz80U22mF3JntQBFPVi1Ba7yi v8Buvpqku+EkV4tcTkvJ8UQFqJkHD086XmYvNd74j0dY80dqDbL/zT2i8ihEyNdm Ks243Bvr9so/YpeZzqkYgwLxiapkpckNbW7hG3iEpbw+mwGYDy/cpsEKXJo3pn/F J2sPI2yejoktL6lrYYFg7P446wsVg+XHXasEmWDJCSaD7ffkadAg8/Fl8VV3VjMv mfUcVFp7SA3v1saIQVRwdl9oywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQw2PwZ 26eZQ5fraZKl+PNHxACPMB8GA1UdIwQYMBaAFMlKSrozFYkzm0ZRwFuS/+AbyzTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0UyMy9CRTk3QjBBNjdE NjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlUT2JSbEhBVzVMXzRCdkxO TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVcEt1ak1WaVRPYlJsSEFXNUxfNEJ2TE5Nay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0UyMy9CRTk3QjBBNjdENjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlU T2JSbEhBVzVMXzRCdkxOTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzbX7ZVFyP9Pu42x+RdqlRIbixwrgeqVQ5sFaGthoB8DUeDag0ZvNI SzMnvZVY7JaxP4b9HSwd2+GE+AL+Rfrrf3h1QnnXgOtnyTqB9/cmaIleBuhBIoYE d2vDwCCKHYeSZRwfhZFqBvCZ/juxg6UV6NKsenOdfsJkPiH9AkYbuSJ1fYiq7OKQ vxaUOnMfTT/STmSkbrQA2679HR3nSl1iW6csXCjoCvVjQmu3sJsppztnYq3TLonx p3I04rxbrh7UDLJGONn5AbR1G48Y8RP3dMWOob2nZHq4oM44EGR3FcMewNiY9v7F O8i/ALo2qZaJgfE18HOaOiDO+c5b3mvm -----END CERTIFICATE-----Generated at Sat Aug 9 10:40:52 2025 by rpki-client