$ rpki-client -vvf rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft File: YDUU_FCDUUDwM--oQ87pOWOWol0.mft (raw, json) Hash identifier: hu0H1bNpWKAabwW1vxSgmaGTCj4f3g/iEPhq4v7VQmQ= Subject key identifier: 41:20:33:0D:52:65:0C:36:F4:FB:C6:2B:E9:91:0F:86:42:E0:14:A2 Authority key identifier: 60:35:14:FC:50:83:51:40:F0:33:EF:A8:43:CE:E9:39:63:96:A2:5D Certificate issuer: /CN=A91118FA/serialNumber=603514FC50835140F033EFA843CEE9396396A25D Certificate serial: 0B41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft Manifest number: 0B3A Signing time: Fri 22 Aug 2025 19:18:32 +0000 Manifest this update: Fri 22 Aug 2025 19:18:31 +0000 Manifest next update: Fri 29 Aug 2025 19:18:31 +0000 Files and hashes: 1: YDUU_FCDUUDwM--oQ87pOWOWol0.crl (hash: NX2UHyzgL3dlskRBuvxmYsDIPybwE9hIhGBdnpS69LM=) 2: 42EE36A240EC11EA875BC545C4F9AE02.roa (hash: oB4ONhIoOVHFLHE+zKePSEzncY8zQatFoaGKjLj9U3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.crl rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91118FA, serialNumber=603514FC50835140F033EFA843CEE9396396A25D Validity Not Before: Aug 22 19:18:31 2025 GMT Not After : Aug 29 19:18:31 2025 GMT Subject: CN=68a8c287-20ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:91:c9:de:f8:a6:d3:c2:d4:0b:6b:16:58:f2: f3:4a:35:f0:77:24:2a:f3:b9:b0:98:aa:d8:41:65: 57:8e:50:79:bc:83:12:c0:67:73:81:c7:3b:71:ea: 95:00:ce:4f:97:9b:1c:02:02:78:1f:94:c7:cc:1b: cd:14:26:b2:ad:53:c9:6c:26:41:5e:8b:a9:7c:ce: 20:f1:09:ac:64:80:ee:e2:7e:18:ed:03:28:a7:db: c5:1a:e6:48:6e:0d:39:a4:2e:19:f3:a4:7a:6a:4b: 14:3b:7c:43:4a:16:ba:23:8e:ad:8d:de:07:a8:19: 43:e3:26:e0:9e:50:16:13:cd:25:b8:47:98:30:91: 2d:48:4b:47:e3:ab:49:00:c4:c3:28:68:05:c7:c6: 49:0d:9d:b0:47:f1:78:98:a3:0e:9f:3e:23:94:77: 88:d4:09:37:9e:1e:da:75:49:5c:89:a2:d0:3b:c8: a9:72:8b:46:95:0f:99:79:25:9a:80:f7:37:40:e3: 5e:ad:82:cb:87:4c:7f:7b:2e:d1:5b:1d:ce:eb:be: c3:c1:10:a6:ff:a6:66:f2:d2:85:a6:fd:3e:de:f3: 21:d4:2e:6f:62:a0:4d:d9:d5:20:a3:84:72:e2:a2: 68:5a:09:e1:43:54:49:a6:0c:0c:98:a4:99:f7:06: 59:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:20:33:0D:52:65:0C:36:F4:FB:C6:2B:E9:91:0F:86:42:E0:14:A2 X509v3 Authority Key Identifier: keyid:60:35:14:FC:50:83:51:40:F0:33:EF:A8:43:CE:E9:39:63:96:A2:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:4a:2b:12:62:64:e9:23:f8:aa:9b:5d:fc:f1:1f:81:8d:73: 46:f5:70:1a:b5:2e:f2:41:e6:2e:9a:f1:23:b1:ea:5d:5d:d4: f2:e4:c2:8c:17:a4:ad:d0:53:0a:c6:8e:de:dd:65:86:85:ab: 83:7a:bc:1e:17:27:20:de:1a:1c:e1:87:f2:e3:dc:22:1d:c1: 97:ab:14:0e:d3:17:48:5d:24:2f:1e:21:39:6d:0b:86:48:71: 31:dd:b7:52:c8:ec:ff:a4:ff:c4:4f:8a:7b:eb:bb:3e:89:8c: 9b:77:bc:9c:24:84:f7:22:3e:29:b5:67:70:83:4e:3e:63:f9: 63:ca:a7:4d:2b:0d:19:be:fc:ed:a2:73:aa:b8:11:a8:3c:65: 3a:93:f4:4e:7f:65:09:b5:74:13:2b:4b:f8:8e:cd:8e:62:08: 6c:8e:f1:59:5a:e1:d3:8a:29:2d:82:c4:0e:12:ea:28:51:ce: a0:4e:01:61:92:dd:31:1a:6e:1f:94:61:5b:5b:69:d3:b6:fc: 2e:bb:4f:b8:5e:84:28:de:57:0f:6c:9c:ce:e3:4d:c4:ce:71: 00:e1:39:7d:fc:3a:77:8d:2d:64:be:bf:33:3d:42:dc:56:16: c6:e0:2b:73:bd:e7:85:cf:32:b6:89:7f:54:98:94:86:fc:c5: 52:f2:ae:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE4RkExMTAvBgNVBAUTKDYwMzUxNEZDNTA4MzUxNDBGMDMzRUZBODQzQ0VFOTM5 NjM5NkEyNUQwHhcNMjUwODIyMTkxODMxWhcNMjUwODI5MTkxODMxWjAYMRYwFAYD VQQDEw02OGE4YzI4Ny0yMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZHJ3vim08LUC2sWWPLzSjXwdyQq87mwmKrYQWVXjlB5vIMSwGdzgcc7ceqV AM5Pl5scAgJ4H5THzBvNFCayrVPJbCZBXoupfM4g8QmsZIDu4n4Y7QMop9vFGuZI bg05pC4Z86R6aksUO3xDSha6I46tjd4HqBlD4ybgnlAWE80luEeYMJEtSEtH46tJ AMTDKGgFx8ZJDZ2wR/F4mKMOnz4jlHeI1Ak3nh7adUlciaLQO8ipcotGlQ+ZeSWa gPc3QONerYLLh0x/ey7RWx3O677DwRCm/6Zm8tKFpv0+3vMh1C5vYqBN2dUgo4Ry 4qJoWgnhQ1RJpgwMmKSZ9wZZPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEgMw1S ZQw29PvGK+mRD4ZC4BSiMB8GA1UdIwQYMBaAFGA1FPxQg1FA8DPvqEPO6TljlqJd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMThGQS85ODQyNDQ5QzQw RUExMUVBQkIwMUJENDJDNEY5QUUwMi9ZRFVVX0ZDRFVVRHdNLS1vUTg3cE9XT1dv bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lEVVVfRkNEVVVEd00tLW9RODdwT1dPV29sMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MThGQS85ODQyNDQ5QzQwRUExMUVBQkIwMUJENDJDNEY5QUUwMi9ZRFVVX0ZDRFVV RHdNLS1vUTg3cE9XT1dvbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFSisSYmTpI/iqm1388R+BjXNG9XAatS7yQeYumvEjsepdXdTy5MKM F6St0FMKxo7e3WWGhauDerweFycg3hoc4Yfy49wiHcGXqxQO0xdIXSQvHiE5bQuG SHEx3bdSyOz/pP/ET4p767s+iYybd7ycJIT3Ij4ptWdwg04+Y/ljyqdNKw0Zvvzt onOquBGoPGU6k/ROf2UJtXQTK0v4js2OYghsjvFZWuHTiiktgsQOEuooUc6gTgFh kt0xGm4flGFbW2nTtvwuu0+4XoQo3lcPbJzO403EznEA4Tl9/Dp3jS1kvr8zPULc VhbG4CtzveeFzzK2iX9UmJSG/MVS8q5p -----END CERTIFICATE-----Generated at Sat Aug 23 21:36:46 2025 by rpki-client