$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft File: yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json) Hash identifier: GBvTvJj0kXuCV3+s95TxgrURRwZwsRIrOwZq1tPaLKI= Subject key identifier: 5A:26:46:AE:9B:CE:9F:36:0A:F1:7C:25:31:98:2E:C8:80:C8:D6:57 Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 Certificate issuer: /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft Manifest number: 40 Signing time: Sat 23 Aug 2025 07:43:08 +0000 Manifest this update: Sat 23 Aug 2025 07:43:07 +0000 Manifest next update: Sat 30 Aug 2025 07:43:07 +0000 Files and hashes: 1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: SRD4IdBQZ7FkYS2r1hWY5bJpYjPekr/SJxWd63N6RNA=) 2: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: AsQWM+7HuozWTCBGDmXSa7QBPRIjHi4ee9IcaHPhl78=) 3: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: bD+Fep8IQgDA8vluXrT5vCvPbCgLZmMh8P2tGfHiM1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Validity Not Before: Aug 23 07:43:07 2025 GMT Not After : Aug 30 07:43:07 2025 GMT Subject: CN=68a9710c-d3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:f4:59:d1:cf:30:c6:4b:f5:7e:8a:ba:cf: 16:2b:2c:92:9d:95:52:e7:c8:ec:d1:50:3d:41:18: a4:27:ea:60:4f:35:86:9b:bf:66:fa:38:e1:39:f2: 67:9c:e2:92:e6:aa:6c:db:da:5d:51:28:44:5a:c4: 42:54:d8:6e:2e:99:52:e4:97:0d:a4:b8:12:f4:dc: 6d:78:f0:20:d3:0a:7a:80:b7:ef:3b:6a:9f:c3:33: 1b:30:65:ab:db:1a:16:6f:58:48:7a:cd:c6:be:03: d1:40:f6:97:98:64:6d:7b:62:04:76:6c:c9:7a:b3: a6:99:7a:73:a2:35:d8:0a:97:1c:d5:16:5c:a9:98: 18:84:f9:42:ad:a9:6b:af:f2:87:31:a0:df:4f:f7: e4:28:d8:fb:13:34:04:f9:4b:62:81:2c:a2:77:7f: 10:da:a4:69:29:47:f1:e1:0e:88:f9:8e:0f:91:2a: c5:f1:17:13:78:ce:56:6e:1e:3c:d6:c5:0d:85:cc: 4d:4a:f8:ce:8b:c1:bd:b4:0e:47:ff:95:94:65:29: f4:ba:90:e6:9f:48:2a:76:ed:6b:b2:ad:85:a7:77: 0b:1b:fe:f8:74:13:54:49:8c:61:13:34:35:0d:54: bf:ed:9a:38:c7:79:bb:af:89:f7:7c:f0:f8:88:11: c0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:26:46:AE:9B:CE:9F:36:0A:F1:7C:25:31:98:2E:C8:80:C8:D6:57 X509v3 Authority Key Identifier: keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f4:61:6e:34:1a:53:1a:24:5b:28:5f:96:21:e2:24:63:60:87: 0e:83:96:b1:12:7d:fb:6e:c0:2a:4b:77:f1:ab:42:66:dc:59: 24:a7:fb:eb:ca:fd:61:e0:e5:5c:ed:81:9e:51:73:f9:d7:b1: ae:41:6a:82:9c:42:ae:75:7d:eb:b3:00:92:a4:6a:8b:c2:15: 1d:80:d8:11:18:1c:aa:1c:13:4d:0d:a9:41:42:05:47:c8:84: 89:04:79:6b:e7:51:a5:fb:4b:e5:22:b9:62:91:1b:56:02:ac: 29:a0:cb:92:12:3d:70:ed:bf:81:7c:9c:38:89:0c:54:15:28: 00:a1:18:b5:da:2e:61:d7:1d:d7:fe:7f:5f:da:5b:dc:61:63: 8e:1e:4f:44:98:d0:b0:c9:dd:8b:68:2e:de:5e:1e:d8:f9:9f: 54:b8:a7:41:d0:a9:e9:3c:8a:46:59:51:f0:7e:50:d7:56:de: e8:77:5a:72:fd:0e:64:23:6f:b2:13:b4:70:03:6c:ff:1c:11: 04:80:83:e5:bb:ce:ed:bf:77:e1:b4:2e:e5:a2:25:d9:ef:10: 37:50:dd:82:9a:28:a1:cd:f9:1b:72:0d:12:13:66:20:93:00: d0:3a:36:48:6d:84:43:26:7c:da:65:a9:c0:df:d9:c6:9a:3f: ea:de:cd:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MzQ5MzExMC8GA1UEBRMoQzhCMkJDM0I4QUIxRUJBRTRBNzQzRjkwRDhDOEExREZE MUQ0Q0UxNzAeFw0yNTA4MjMwNzQzMDdaFw0yNTA4MzAwNzQzMDdaMBgxFjAUBgNV BAMTDTY4YTk3MTBjLWQzZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl9fRZ0c8wxkv1foq6zxYrLJKdlVLnyOzRUD1BGKQn6mBPNYabv2b6OOE58mec 4pLmqmzb2l1RKERaxEJU2G4umVLklw2kuBL03G148CDTCnqAt+87ap/DMxswZavb GhZvWEh6zca+A9FA9peYZG17YgR2bMl6s6aZenOiNdgKlxzVFlypmBiE+UKtqWuv 8ocxoN9P9+Qo2PsTNAT5S2KBLKJ3fxDapGkpR/HhDoj5jg+RKsXxFxN4zlZuHjzW xQ2FzE1K+M6Lwb20Dkf/lZRlKfS6kOafSCp27WuyrYWndwsb/vh0E1RJjGETNDUN VL/tmjjHebuvifd88PiIEcBnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWiZGrpvO nzYK8XwlMZguyIDI1lcwHwYDVR0jBBgwFoAUyLK8O4qx665KdD+Q2Mih39HUzhcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzNDkzLzA1RUMxRDE0MUVG OTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1S2RELVEyTWloMzlIVXpo Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUxLOE80cXg2NjVLZEQtUTJNaWgzOUhVemhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz NDkzLzA1RUMxRDE0MUVGOTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1 S2RELVEyTWloMzlIVXpoYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAPRhbjQaUxokWyhfliHiJGNghw6DlrESfftuwCpLd/GrQmbcWSSn++vK /WHg5VztgZ5Rc/nXsa5BaoKcQq51feuzAJKkaovCFR2A2BEYHKocE00NqUFCBUfI hIkEeWvnUaX7S+UiuWKRG1YCrCmgy5ISPXDtv4F8nDiJDFQVKAChGLXaLmHXHdf+ f1/aW9xhY44eT0SY0LDJ3YtoLt5eHtj5n1S4p0HQqek8ikZZUfB+UNdW3uh3WnL9 DmQjb7ITtHADbP8cEQSAg+W7zu2/d+G0LuWiJdnvEDdQ3YKaKKHN+RtyDRITZiCT ANA6NkhthEMmfNplqcDf2caaP+rezRY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:46 2025 by rpki-client