$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft File: YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json) Hash identifier: G+8Y1RdZvzzgWAje1mzA2lvdyRmp+ZBLqPNfJ7WKbYk= Subject key identifier: D7:33:4B:EC:42:90:E9:71:47:EE:26:1A:5C:00:2B:73:13:D4:C6:9E Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 Certificate issuer: /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft Manifest number: 0198 Signing time: Mon 11 Aug 2025 03:32:12 +0000 Manifest this update: Mon 11 Aug 2025 03:32:12 +0000 Manifest next update: Mon 18 Aug 2025 03:32:12 +0000 Files and hashes: 1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: Iw9rpr+LxkM+4uW4sMUHLp1P72q9Aod+VO2H5d83M2Y=) 2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: fc1mmSSRqzCuGE7h3o2YcW/Wc0vCR2x5Y/Ca8guGROk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Validity Not Before: Aug 11 03:32:12 2025 GMT Not After : Aug 18 03:32:12 2025 GMT Subject: CN=6899643c-0e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:13:9b:e9:f7:d0:c6:8f:e4:70:45:74:f2: 10:37:74:b7:8e:97:4b:5a:9e:19:87:4b:5a:8f:74: e7:19:36:d7:bf:6c:36:e1:1c:c8:d9:7a:66:b2:b6: de:b6:f9:e1:e9:c0:f9:27:01:59:bd:68:4f:d4:66: e8:0c:ac:c9:bf:f1:f4:22:23:d1:dd:a8:b3:b7:96: c0:dc:3f:d6:b5:a7:27:cb:ab:dc:c4:25:14:cd:f3: 9f:ed:8a:b4:67:d0:e0:6a:b6:2a:83:c8:3c:63:fc: a6:8a:0f:37:17:64:5f:91:5f:0f:a3:da:5b:6f:90: 72:e1:d3:b3:08:13:8d:02:62:21:22:85:45:e2:24: a8:b6:fd:19:a8:0f:71:a9:d4:89:b3:ea:0b:0f:5f: 8b:7c:e0:ce:90:7c:3f:78:17:9c:e8:20:81:b0:dc: 89:87:e0:9e:35:9d:73:82:a5:75:40:95:60:76:86: 67:15:f4:1e:a8:ef:1d:ff:3a:68:a5:3e:cd:92:40: 7e:41:d6:30:7b:88:fc:9c:b3:de:88:f4:82:9f:32: 7b:3e:8c:77:b2:ad:73:3e:38:7d:d7:98:02:26:48: ae:4e:d8:ef:4d:9d:b5:84:d2:e0:93:90:1b:2c:6e: a0:a7:1f:ed:d7:0b:9a:3b:c5:be:34:96:cc:48:11: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:33:4B:EC:42:90:E9:71:47:EE:26:1A:5C:00:2B:73:13:D4:C6:9E X509v3 Authority Key Identifier: keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:33:4f:e6:b0:29:d8:9a:5d:79:88:60:de:7f:6e:3e:1d:2a: 34:6a:21:1d:90:fd:25:98:0c:80:29:3a:74:7f:8a:4a:a9:bc: b0:9a:e7:b9:ce:d1:8a:a1:ee:e9:a8:a0:e3:ae:de:4b:80:8b: 0a:0d:b7:ef:ac:d9:06:ee:dd:f1:b5:36:68:e7:5f:d2:61:9b: 97:8e:6e:e8:62:c6:2b:3d:e7:f4:a3:70:4b:d9:0f:2d:ae:6e: 08:93:51:29:eb:63:f5:7a:0d:c6:70:d2:c3:9d:9f:cf:64:bb: ca:d7:4f:59:42:af:10:6b:2e:d9:bc:4d:16:68:1f:9c:49:9a: 33:26:1d:65:46:38:f9:3e:4e:22:15:29:5a:8b:12:f4:d2:13: 9a:18:48:97:da:06:f5:d4:71:1d:af:fe:6a:cb:5b:3e:08:57: 53:8a:92:54:bf:90:36:ab:3c:ff:77:ff:d8:4d:bf:90:1b:80: a5:66:17:c2:7c:fe:25:35:f4:8e:7a:53:91:e3:03:d3:3a:c7: c7:e4:34:97:ec:ad:ad:5e:ac:e0:7e:3c:52:6d:20:3d:be:a8: 9e:5b:67:64:d0:63:23:2e:0b:4d:96:65:85:de:33:7d:0d:50: c0:a0:25:0c:60:0b:5e:79:99:6a:4c:bf:56:5e:59:19:1a:74: be:93:d6:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERFRjAxMTAvBgNVBAUTKDYxMTQxQUI1M0ZENEFGMURCMkE4NkFGRTdFQzhGRUM5 N0Q1RUExRDUwHhcNMjUwODExMDMzMjEyWhcNMjUwODE4MDMzMjEyWjAYMRYwFAYD VQQDEw02ODk5NjQzYy0wZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbcTm+n30MaP5HBFdPIQN3S3jpdLWp4Zh0taj3TnGTbXv2w24RzI2Xpmsrbe tvnh6cD5JwFZvWhP1GboDKzJv/H0IiPR3aizt5bA3D/Wtacny6vcxCUUzfOf7Yq0 Z9DgarYqg8g8Y/ymig83F2RfkV8Po9pbb5By4dOzCBONAmIhIoVF4iSotv0ZqA9x qdSJs+oLD1+LfODOkHw/eBec6CCBsNyJh+CeNZ1zgqV1QJVgdoZnFfQeqO8d/zpo pT7NkkB+QdYwe4j8nLPeiPSCnzJ7Pox3sq1zPjh915gCJkiuTtjvTZ21hNLgk5Ab LG6gpx/t1wuaO8W+NJbMSBE9aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNczS+xC kOlxR+4mGlwAK3MT1MaeMB8GA1UdIwQYMBaAFGEUGrU/1K8dsqhq/n7I/sl9XqHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REVGMC84MjAzMDlDMjBB NUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4MnlxR3ItZnNqLXlYMWVv ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSUWF0VF9VcngyeXFHci1mc2oteVgxZW9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REVGMC84MjAzMDlDMjBBNUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4 MnlxR3ItZnNqLXlYMWVvZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4M0/msCnYml15iGDef24+HSo0aiEdkP0lmAyAKTp0f4pKqbywmue5 ztGKoe7pqKDjrt5LgIsKDbfvrNkG7t3xtTZo51/SYZuXjm7oYsYrPef0o3BL2Q8t rm4Ik1Ep62P1eg3GcNLDnZ/PZLvK109ZQq8Qay7ZvE0WaB+cSZozJh1lRjj5Pk4i FSlaixL00hOaGEiX2gb11HEdr/5qy1s+CFdTipJUv5A2qzz/d//YTb+QG4ClZhfC fP4lNfSOelOR4wPTOsfH5DSX7K2tXqzgfjxSbSA9vqieW2dk0GMjLgtNlmWF3jN9 DVDAoCUMYAteeZlqTL9WXlkZGnS+k9b2 -----END CERTIFICATE-----Generated at Mon Aug 11 07:38:24 2025 by rpki-client