$ rpki-client -vvf rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft File: ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft (raw, json) Hash identifier: QEsErFTG2vlfaWRLbpEyPmkBteJ28XPw+EOBqqhXERo= Subject key identifier: 43:07:0F:60:39:08:9D:01:A6:E2:B0:FD:E8:CE:06:96:E1:93:CC:F4 Authority key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6 Certificate issuer: /CN=A9199656/serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft Manifest number: 35 Signing time: Sat 09 Aug 2025 08:06:08 +0000 Manifest this update: Sat 09 Aug 2025 08:06:07 +0000 Manifest next update: Sat 16 Aug 2025 08:06:07 +0000 Files and hashes: 1: ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl (hash: LDMEQgyUVD9cjQKV0nncTU/WHVXOxcBGT8y5bj4x6zE=) 2: 45D237A423E211F0A5DCED27C4F9AE02.roa (hash: 3wfdkAiEkFODU6B4YeHm0vdAyiuwr8rUvXL2nV5+auc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6 Validity Not Before: Aug 9 08:06:07 2025 GMT Not After : Aug 16 08:06:07 2025 GMT Subject: CN=68970170-4e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ba:14:3e:31:a3:e1:4f:8a:98:a1:57:cb:6f: ee:1e:a6:91:82:50:53:9a:a9:f1:ab:e5:22:34:b6: 4e:6c:16:80:83:b5:dd:21:78:c1:27:cf:25:7d:40: 7e:7b:df:b0:6a:95:8c:bc:88:c6:4d:2f:18:ac:a9: 9c:e3:66:50:cd:b9:fc:27:34:ed:b2:6c:eb:60:6a: fc:6e:77:19:4a:72:22:21:66:04:f7:ce:50:59:be: fc:31:45:65:ce:4b:3e:f1:03:84:6e:bd:89:a3:dc: 59:eb:89:b2:fb:83:fa:6a:9a:69:1f:50:cb:5d:1c: a0:11:ee:87:7b:f7:ad:f6:7d:35:07:88:0a:43:2a: 6e:f9:17:6f:2e:7d:2a:74:c0:b0:d4:e3:17:c9:d6: 0c:6c:e8:0f:b4:97:2b:bc:1d:01:47:66:60:cd:c6: f2:00:c6:c6:46:59:ea:50:8c:ed:6c:90:ff:cf:2f: b1:81:b9:03:73:c1:82:4d:cb:25:86:01:12:f0:11: a3:3b:63:e7:a2:87:68:85:70:f5:38:78:31:77:7e: 0c:a2:f2:bb:4f:ce:09:6c:52:5d:08:18:f6:08:bb: 48:7d:ba:68:54:d9:94:ee:be:80:ec:11:48:f8:49: 89:b5:f2:82:40:a9:94:a1:74:d8:fa:be:4f:22:24: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:07:0F:60:39:08:9D:01:A6:E2:B0:FD:E8:CE:06:96:E1:93:CC:F4 X509v3 Authority Key Identifier: keyid:C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:60:f4:4a:66:60:92:be:39:3b:58:ee:a9:d7:b0:e8:bc:db: 90:bc:dd:eb:ce:6f:bb:68:cf:d2:cc:21:72:04:77:b6:b7:69: 0a:e9:d2:90:de:be:9a:f0:15:4e:a9:b3:32:21:9b:6b:23:2c: 01:e8:29:dc:e0:c8:6f:a4:e5:c7:05:ce:48:ab:cd:59:b0:c9: b4:37:28:fb:3b:fe:c2:3a:4c:bc:b8:25:54:1f:a1:b6:a2:35: 95:47:10:1c:f5:11:67:56:c2:00:89:a7:6c:59:fc:fa:7c:98: b8:73:0d:a6:f8:15:6f:41:26:7f:eb:d9:92:6d:8b:fd:b2:29: c6:d4:cb:2e:9e:2b:2a:35:9d:c0:8f:4e:70:d0:7c:95:b1:86: 85:7c:9b:67:05:ba:59:c4:3d:7c:05:bf:73:74:eb:1a:7d:be: 17:d6:af:34:de:15:87:e1:b5:38:33:de:21:ea:c2:6b:4e:19: b7:af:62:03:6a:f1:b4:70:96:5c:f9:e6:91:f0:d3:84:4c:c9: 33:49:03:d4:b0:49:ec:40:2a:b3:06:36:c6:43:90:23:a0:22: dd:b3:c8:bc:4c:1b:2b:0f:0e:c8:ed:1d:8f:91:05:3a:e5:8c: 0a:63:24:a8:04:34:ba:f5:85:f2:a6:61:ee:3f:d8:b1:9b:c1: 2a:68:19:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTY1NjExMC8GA1UEBRMoQzlDMzBCN0M1N0UyRjAxNkRCMUYwMUMwOUU1OTJFMDUw NDc0QzlBNjAeFw0yNTA4MDkwODA2MDdaFw0yNTA4MTYwODA2MDdaMBgxFjAUBgNV BAMTDTY4OTcwMTcwLTRlNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRuhQ+MaPhT4qYoVfLb+4eppGCUFOaqfGr5SI0tk5sFoCDtd0heMEnzyV9QH57 37BqlYy8iMZNLxisqZzjZlDNufwnNO2ybOtgavxudxlKciIhZgT3zlBZvvwxRWXO Sz7xA4RuvYmj3FnribL7g/pqmmkfUMtdHKAR7od79632fTUHiApDKm75F28ufSp0 wLDU4xfJ1gxs6A+0lyu8HQFHZmDNxvIAxsZGWepQjO1skP/PL7GBuQNzwYJNyyWG ARLwEaM7Y+eih2iFcPU4eDF3fgyi8rtPzglsUl0IGPYIu0h9umhU2ZTuvoDsEUj4 SYm18oJAqZShdNj6vk8iJAkrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQwcPYDkI nQGm4rD96M4GluGTzPQwHwYDVR0jBBgwFoAUycMLfFfi8BbbHwHAnlkuBQR0yaYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NjU2L0E1RTdDRDc2MjNF MTExRjBBNjUwRUEyM0M0RjlBRTAyL3ljTUxmRmZpOEJiYkh3SEFubGt1QlFSMHlh WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWNNTGZGZmk4QmJiSHdIQW5sa3VCUVIweWFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 NjU2L0E1RTdDRDc2MjNFMTExRjBBNjUwRUEyM0M0RjlBRTAyL3ljTUxmRmZpOEJi Ykh3SEFubGt1QlFSMHlhWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGpg9EpmYJK+OTtY7qnXsOi825C83evOb7toz9LMIXIEd7a3aQrp0pDe vprwFU6pszIhm2sjLAHoKdzgyG+k5ccFzkirzVmwybQ3KPs7/sI6TLy4JVQfobai NZVHEBz1EWdWwgCJp2xZ/Pp8mLhzDab4FW9BJn/r2ZJti/2yKcbUyy6eKyo1ncCP TnDQfJWxhoV8m2cFulnEPXwFv3N06xp9vhfWrzTeFYfhtTgz3iHqwmtOGbevYgNq 8bRwllz55pHw04RMyTNJA9SwSexAKrMGNsZDkCOgIt2zyLxMGysPDsjtHY+RBTrl jApjJKgENLr1hfKmYe4/2LGbwSpoGTA= -----END CERTIFICATE-----Generated at Sat Aug 9 10:44:33 2025 by rpki-client