$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json) Hash identifier: ASs+rlGWg2Bf+JYWG0TgxLDtv7mbhPrOxMLyqu6/vMU= Subject key identifier: A2:D9:7C:B5:94:6D:4B:6C:E8:30:77:1F:DA:2E:E8:0B:F2:8C:04:7D Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft Manifest number: 34B1 Signing time: Fri 22 Aug 2025 14:58:11 +0000 Manifest this update: Fri 22 Aug 2025 14:58:11 +0000 Manifest next update: Fri 29 Aug 2025 14:58:11 +0000 Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: f4+ihXm55hfHb5qjxcTw87jlOHU99Q2reob3gUSvI+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Validity Not Before: Aug 22 14:58:11 2025 GMT Not After : Aug 29 14:58:11 2025 GMT Subject: CN=68a88583-5f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1a:99:fe:f5:ad:26:7b:e0:46:93:a9:b7:6b: 9f:ce:5d:04:8f:78:01:6f:ef:c6:63:2a:1a:8c:2f: 78:70:13:dc:1a:35:83:69:4d:34:d0:69:e1:9f:42: 75:01:dd:c2:62:d8:77:91:4a:e4:05:29:29:58:50: eb:cf:74:78:28:04:09:5d:a9:04:d4:f4:a5:ab:50: 4a:45:e1:e4:8c:68:08:14:21:db:39:87:d5:dc:71: 3d:a8:91:6f:cc:99:40:22:ab:d8:8a:82:0e:2c:c5: a0:40:46:fc:6a:27:54:b6:79:9e:08:83:14:bc:e8: ff:df:5f:16:7e:1a:8d:42:2f:8b:79:76:c1:56:b0: fb:7d:5f:c6:ea:18:07:6e:c1:22:42:4e:a2:16:6a: cd:7a:4e:ca:9f:13:a2:4a:30:49:d1:3e:42:f9:6f: 11:1f:15:11:4e:8e:c6:a6:44:e5:3c:f2:fe:ce:54: ac:45:99:39:19:7d:c0:a2:f3:08:19:8c:8a:2a:76: d5:21:da:2e:9d:f5:aa:ff:a1:38:cf:06:24:b4:20: 95:1e:5e:3f:84:d2:53:25:1c:d0:b7:5e:75:a3:62: 11:05:a2:c3:29:d9:3d:9f:24:3a:b2:e1:44:d8:ad: c1:8a:8f:54:42:2a:a2:de:87:1f:da:2c:5a:30:17: f2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D9:7C:B5:94:6D:4B:6C:E8:30:77:1F:DA:2E:E8:0B:F2:8C:04:7D X509v3 Authority Key Identifier: keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:23:71:d9:70:ff:84:03:a5:08:67:4d:2e:e4:62:76:15:ee: e7:80:50:d9:74:e1:1b:eb:30:7e:a4:6c:05:5c:9d:57:9f:a5: 9d:21:82:57:81:a6:85:5f:b7:dc:bd:48:d6:61:17:79:ae:64: d0:f1:c1:af:3a:5c:8c:78:bf:b5:6f:7a:99:6d:6f:d6:54:8e: 7e:65:46:24:a2:c5:be:b0:3d:1c:54:43:b7:1e:c8:da:92:9b: 97:fc:62:1c:2f:3e:3f:3f:13:ca:01:bc:59:d5:b9:52:7c:8f: e3:04:36:99:67:e6:56:ac:08:eb:e5:dc:83:c9:cd:f6:82:85: 0f:74:53:cd:34:25:ac:f5:c5:59:03:32:8e:91:48:3e:e7:d9: 08:54:5c:d0:3f:5b:61:ba:26:53:62:27:59:b3:4d:cb:f2:dc: 42:84:7e:2d:93:06:69:0b:65:67:07:6f:7f:07:3d:e0:cc:57: 8f:ac:6a:9b:43:9d:c3:b3:a3:37:4e:82:52:9d:63:0a:c9:62: 23:d1:7d:91:95:20:d0:fb:dc:1a:07:4e:a3:48:9f:b8:5f:48: 12:7d:fd:47:b7:c6:3b:a9:de:b4:f3:73:3f:7e:01:26:bd:25: d1:26:e2:ad:4a:21:fa:22:39:1b:39:de:72:15:86:01:08:6e: ab:86:d4:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NjgxMTAvBgNVBAUTKENBRTJDRkIxQTc5NzRBRDZCMDI0NUFFMzRFNEIwRENF RDgyMDk4NjcwHhcNMjUwODIyMTQ1ODExWhcNMjUwODI5MTQ1ODExWjAYMRYwFAYD VQQDEw02OGE4ODU4My01ZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhqZ/vWtJnvgRpOpt2ufzl0Ej3gBb+/GYyoajC94cBPcGjWDaU000Gnhn0J1 Ad3CYth3kUrkBSkpWFDrz3R4KAQJXakE1PSlq1BKReHkjGgIFCHbOYfV3HE9qJFv zJlAIqvYioIOLMWgQEb8aidUtnmeCIMUvOj/318WfhqNQi+LeXbBVrD7fV/G6hgH bsEiQk6iFmrNek7KnxOiSjBJ0T5C+W8RHxURTo7GpkTlPPL+zlSsRZk5GX3AovMI GYyKKnbVIdounfWq/6E4zwYktCCVHl4/hNJTJRzQt151o2IRBaLDKdk9nyQ6suFE 2K3Bio9UQiqi3ocf2ixaMBfyvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLZfLWU bUts6DB3H9ou6AvyjAR9MB8GA1UdIwQYMBaAFMriz7Gnl0rWsCRa405LDc7YIJhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2OC8wOEVDRUU0ODFE OUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0YXdKRnJqVGtzTnp0Z2dt R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1TFBzYWVYU3Rhd0pGcmpUa3NOenRnZ21HYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2OC8wOEVDRUU0ODFEOUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0 YXdKRnJqVGtzTnp0Z2dtR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQI3HZcP+EA6UIZ00u5GJ2Fe7ngFDZdOEb6zB+pGwFXJ1Xn6WdIYJX gaaFX7fcvUjWYRd5rmTQ8cGvOlyMeL+1b3qZbW/WVI5+ZUYkosW+sD0cVEO3Hsja kpuX/GIcLz4/PxPKAbxZ1blSfI/jBDaZZ+ZWrAjr5dyDyc32goUPdFPNNCWs9cVZ AzKOkUg+59kIVFzQP1thuiZTYidZs03L8txChH4tkwZpC2VnB29/Bz3gzFePrGqb Q53Ds6M3ToJSnWMKyWIj0X2RlSDQ+9waB06jSJ+4X0gSff1Ht8Y7qd6083M/fgEm vSXRJuKtSiH6IjkbOd5yFYYBCG6rhtRq -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:46 2025 by rpki-client