$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft File: yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json) Hash identifier: L8P3KuFO1w5Nfafchb/UCGNLXnSGk7t3XnjQXburfXI= Subject key identifier: 28:1B:F7:4B:FF:D0:1F:EA:AA:BB:6C:E1:12:5E:2F:8C:4A:B4:68:59 Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Certificate serial: 043C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft Manifest number: 0437 Signing time: Sat 09 Aug 2025 00:48:28 +0000 Manifest this update: Sat 09 Aug 2025 00:48:27 +0000 Manifest next update: Sat 16 Aug 2025 00:48:27 +0000 Files and hashes: 1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: OEnO4yxNn25QNYj89tKrYXk9yois95Jsqe+RhCbuKho=) 2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: kw8NlMSw+Nqcx4jBYDikGpkNhg4pIHl7KmPwkj2eC0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Validity Not Before: Aug 9 00:48:27 2025 GMT Not After : Aug 16 00:48:27 2025 GMT Subject: CN=68969adb-d228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:99:bd:69:d3:d3:cf:01:28:86:35:63:04: 25:b2:69:ff:d2:88:cd:36:10:82:08:e9:fb:2a:83: fd:3c:3c:94:51:9c:32:8c:31:e3:af:26:02:dc:9d: 7e:5b:a1:64:b3:93:59:64:86:b4:c9:21:6a:d6:d2: 6f:2a:a7:ce:9c:35:47:8e:96:45:d6:9f:d5:e7:ad: f9:67:40:03:fb:4f:73:cf:03:17:7a:0c:45:0c:9b: ec:aa:87:6d:66:a5:73:da:a3:c2:ee:14:e4:88:52: 7b:91:f6:af:73:f5:a5:f8:aa:fb:db:82:ac:65:86: cc:37:76:d7:f0:09:c8:4c:fa:ed:79:26:d6:00:23: e3:58:f8:72:b6:1e:87:5f:1b:7b:45:98:e7:c8:3a: a7:35:cf:48:87:df:61:e7:cd:99:9d:83:0e:42:ec: 7a:58:9b:a7:58:b0:0f:6e:10:9c:b4:c3:e9:c4:be: 17:13:49:9d:12:f8:1a:1f:61:43:b9:89:78:a9:23: db:37:bd:97:d8:6d:38:0d:7f:8b:22:5a:8c:ad:6d: 22:2f:ff:59:72:c7:ce:d6:c0:60:6b:c4:6f:30:96: 8b:44:c4:56:56:c0:7a:ca:ea:92:4d:ef:0e:db:b1: 85:97:92:cb:fa:62:a9:0b:41:df:38:b5:c2:48:8b: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1B:F7:4B:FF:D0:1F:EA:AA:BB:6C:E1:12:5E:2F:8C:4A:B4:68:59 X509v3 Authority Key Identifier: keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:43:f6:91:2c:b5:0f:ba:91:2b:fe:e1:d5:62:bd:ee:38:91: f9:1d:85:f7:51:09:f8:3b:a0:bd:e3:95:d6:7b:28:55:7f:4b: b1:a5:94:eb:bf:31:ba:ab:cf:d2:60:d6:3b:25:e9:83:aa:f1: df:90:8a:55:24:09:35:f8:43:13:cf:92:29:f4:99:36:fb:15: 8c:db:3b:05:38:45:1c:8c:c1:96:1c:0d:50:26:ed:86:4c:c2: 9a:f2:fa:15:fe:ad:dd:e7:c9:0e:46:71:60:4a:9d:be:b9:d5: a6:96:ea:9f:2f:68:bf:24:b8:95:82:9b:0d:9a:7f:b4:dd:d9: e5:34:1f:06:6f:20:13:00:df:49:fc:10:f8:15:5b:13:70:59: cd:c6:16:00:ce:a6:a3:53:79:3b:ed:21:fe:b0:ef:66:04:7d: 17:16:e8:a7:53:85:c8:2a:eb:b6:b2:12:a5:e9:96:25:43:eb: ad:a8:34:8a:00:c2:2e:12:42:2e:76:99:d0:17:d7:3b:79:45: fa:b9:71:63:68:f8:8c:ac:71:f5:bf:09:5f:21:4b:09:46:bf: fd:4f:44:9b:f9:7a:60:f6:5d:8e:bc:e4:65:fc:0b:38:96:03: cf:77:08:f6:d5:a8:46:67:24:f9:28:3b:cd:89:38:bf:3e:0b: 08:e4:b6:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTkxMTAvBgNVBAUTKEM5RDc2RUUzNjlDQzFDRjBFNjI5QzUxMEE0QkFGNDY1 RTE1RkI1RTEwHhcNMjUwODA5MDA0ODI3WhcNMjUwODE2MDA0ODI3WjAYMRYwFAYD VQQDEw02ODk2OWFkYi1kMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D+ZvWnT088BKIY1YwQlsmn/0ojNNhCCCOn7KoP9PDyUUZwyjDHjryYC3J1+ W6Fks5NZZIa0ySFq1tJvKqfOnDVHjpZF1p/V5635Z0AD+09zzwMXegxFDJvsqodt ZqVz2qPC7hTkiFJ7kfavc/Wl+Kr724KsZYbMN3bX8AnITPrteSbWACPjWPhyth6H Xxt7RZjnyDqnNc9Ih99h582ZnYMOQux6WJunWLAPbhCctMPpxL4XE0mdEvgaH2FD uYl4qSPbN72X2G04DX+LIlqMrW0iL/9ZcsfO1sBga8RvMJaLRMRWVsB6yuqSTe8O 27GFl5LL+mKpC0HfOLXCSIuMXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgb90v/ 0B/qqrts4RJeL4xKtGhZMB8GA1UdIwQYMBaAFMnXbuNpzBzw5inFEKS69GXhX7Xh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1OS9BQjYxMTFCNDZD NjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQRG1LY1VRcExyMFplRmZ0 ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lkZHU0Mm5NSFBEbUtjVVFwTHIwWmVGZnRlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1OS9BQjYxMTFCNDZDNjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQ RG1LY1VRcExyMFplRmZ0ZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFQ/aRLLUPupEr/uHVYr3uOJH5HYX3UQn4O6C945XWeyhVf0uxpZTr vzG6q8/SYNY7JemDqvHfkIpVJAk1+EMTz5Ip9Jk2+xWM2zsFOEUcjMGWHA1QJu2G TMKa8voV/q3d58kORnFgSp2+udWmluqfL2i/JLiVgpsNmn+03dnlNB8GbyATAN9J /BD4FVsTcFnNxhYAzqajU3k77SH+sO9mBH0XFuinU4XIKuu2shKl6ZYlQ+utqDSK AMIuEkIudpnQF9c7eUX6uXFjaPiMrHH1vwlfIUsJRr/9T0Sb+Xpg9l2OvORl/As4 lgPPdwj21ahGZyT5KDvNiTi/PgsI5LbH -----END CERTIFICATE-----Generated at Sat Aug 9 15:15:14 2025 by rpki-client