$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json) Hash identifier: FY4UGKUMurhMexZBTBxX2O+ak+W695Njzn5XbmdiZFE= Subject key identifier: 0A:63:E2:2B:D2:82:8D:13:ED:38:6F:49:94:39:C3:97:1C:1E:C5:CC Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft Manifest number: 065C Signing time: Sat 09 Aug 2025 00:13:24 +0000 Manifest this update: Sat 09 Aug 2025 00:13:24 +0000 Manifest next update: Sat 16 Aug 2025 00:13:24 +0000 Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: c7v5qwDxynRSd0KZ83AhJ2qXq/xkcBVFYLtACijzs1A=) 2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: znV1YV1R4QHmzxUCIkShtYBgrQBJHV87NrUXdKtqEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Validity Not Before: Aug 9 00:13:24 2025 GMT Not After : Aug 16 00:13:24 2025 GMT Subject: CN=689692a4-2065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:cb:7d:62:06:d4:95:ff:55:1a:07:e8:27: f0:f4:7d:85:ec:cd:f5:82:62:e2:5c:a9:93:d4:a3: 9c:ad:83:68:f6:47:aa:dd:a7:2d:ae:72:e6:b5:73: c5:c1:f8:52:54:81:12:2e:fe:f2:d4:86:96:1c:21: 05:23:e6:eb:76:02:5b:6c:f4:30:06:da:7a:4d:96: 1a:3e:e1:40:17:7a:61:08:db:6f:2f:a1:b1:02:1d: 23:39:d0:98:12:d0:4e:7c:25:ca:24:86:d4:ca:14: 1c:93:2a:a0:ca:72:09:c8:70:3f:06:bf:59:8d:33: 6a:44:53:9d:6d:43:a3:45:7e:91:bf:31:9d:13:03: d6:f6:cb:2b:72:e7:31:7e:e2:82:49:19:c2:63:fb: 83:1a:dd:bb:b6:e1:d5:28:ee:7b:f6:df:5c:47:01: 02:15:f6:90:94:e4:e9:f4:71:8f:cd:fd:12:11:0c: 20:f9:86:38:25:8a:2c:0f:43:aa:66:34:9f:c9:49: 65:ff:dc:ef:60:ca:45:ff:74:4d:d8:3c:38:df:20: d9:9a:91:c2:90:bb:08:c6:f9:a6:25:bc:cc:30:ee: 6e:d5:64:7a:13:da:57:68:1b:03:e2:b7:ac:10:c3: 9d:34:63:4c:d1:ae:a2:4d:ec:81:a8:6f:8e:25:d2: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:63:E2:2B:D2:82:8D:13:ED:38:6F:49:94:39:C3:97:1C:1E:C5:CC X509v3 Authority Key Identifier: keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:6c:7e:a2:de:f1:58:3e:f4:eb:9f:4b:39:40:82:b1:c3:3f: 59:49:a3:0f:9b:41:be:83:c5:f3:b2:83:ad:d9:38:0b:b5:a0: 8e:b2:d7:87:2e:eb:89:3a:e6:fd:8e:24:9c:16:3b:69:81:60: 88:b3:f5:e2:78:f8:24:5f:4a:bb:ee:94:af:48:83:07:82:b3: 84:f6:a7:74:02:aa:6c:59:5a:59:d5:66:61:87:11:9e:4a:41: dc:a4:dc:f1:d9:9b:1c:13:0d:d8:de:4e:c0:8e:25:78:b7:c6: e1:93:cd:6a:bb:c1:41:3c:6e:b7:4a:9a:88:46:d0:44:47:58: ab:5a:38:ba:d3:e3:2a:1d:2f:ea:b7:92:17:16:cf:81:72:b9: f0:3a:91:b7:89:09:b0:e4:b2:9b:04:db:6a:25:7d:38:5e:52: f0:84:21:8a:e0:83:36:6b:73:c5:7e:72:c7:fe:61:ea:e1:08: a7:20:bf:13:8c:e4:53:fb:43:eb:90:c5:fc:94:19:02:4f:b5: a2:83:da:c3:51:84:e7:bd:ee:14:17:bb:8a:31:d5:fa:b7:3b: 92:74:6c:c0:74:7e:49:0f:1f:a9:56:e1:ed:d2:6f:9b:a2:0b: 86:97:6f:24:5d:e5:39:f1:32:d1:15:83:7e:d7:1d:4c:ad:c8: 47:62:d8:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz NTkwRkIyN0EwHhcNMjUwODA5MDAxMzI0WhcNMjUwODE2MDAxMzI0WjAYMRYwFAYD VQQDEw02ODk2OTJhNC0yMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuILLfWIG1JX/VRoH6Cfw9H2F7M31gmLiXKmT1KOcrYNo9keq3actrnLmtXPF wfhSVIESLv7y1IaWHCEFI+brdgJbbPQwBtp6TZYaPuFAF3phCNtvL6GxAh0jOdCY EtBOfCXKJIbUyhQckyqgynIJyHA/Br9ZjTNqRFOdbUOjRX6RvzGdEwPW9ssrcucx fuKCSRnCY/uDGt27tuHVKO579t9cRwECFfaQlOTp9HGPzf0SEQwg+YY4JYosD0Oq ZjSfyUll/9zvYMpF/3RN2Dw43yDZmpHCkLsIxvmmJbzMMO5u1WR6E9pXaBsD4res EMOdNGNM0a6iTeyBqG+OJdLDPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApj4ivS go0T7ThvSZQ5w5ccHsXMMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAbH6i3vFYPvTrn0s5QIKxwz9ZSaMPm0G+g8XzsoOt2TgLtaCOsteH LuuJOub9jiScFjtpgWCIs/XiePgkX0q77pSvSIMHgrOE9qd0AqpsWVpZ1WZhhxGe SkHcpNzx2ZscEw3Y3k7AjiV4t8bhk81qu8FBPG63SpqIRtBER1irWji60+MqHS/q t5IXFs+BcrnwOpG3iQmw5LKbBNtqJX04XlLwhCGK4IM2a3PFfnLH/mHq4QinIL8T jORT+0PrkMX8lBkCT7Wig9rDUYTnve4UF7uKMdX6tzuSdGzAdH5JDx+pVuHt0m+b oguGl28kXeU58TLRFYN+1x1MrchHYtia -----END CERTIFICATE-----Generated at Sat Aug 9 23:22:03 2025 by rpki-client