$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json) Hash identifier: Nuh/jWGq4FwJNndQapIa/OvIADv+qGiyn1PA01qZkDo= Subject key identifier: 22:83:30:75:AC:CF:74:CA:AB:7D:7B:3E:7C:19:C5:F8:38:1C:2B:70 Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Certificate serial: 1077 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft Manifest number: 1077 Signing time: Fri 22 Aug 2025 17:29:55 +0000 Manifest this update: Fri 22 Aug 2025 17:29:55 +0000 Manifest next update: Fri 29 Aug 2025 17:29:55 +0000 Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: yIcZZxvezy2ymE11Tt40dQNHjjiibA4hpUtO7bwgMJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4215 (0x1077) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Validity Not Before: Aug 22 17:29:55 2025 GMT Not After : Aug 29 17:29:55 2025 GMT Subject: CN=68a8a913-fe07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:17:94:e7:ec:8c:20:fc:8f:ee:a0:b6:3c:5d: a8:f5:55:9c:3b:14:db:8c:a2:2b:72:52:9a:ca:70: 1b:cb:ad:d0:68:08:12:72:98:bf:a0:ff:0b:ee:f1: ff:dd:a0:00:49:5e:a5:2b:3c:ab:c3:b5:07:c1:89: 67:77:24:ff:e1:17:16:9b:47:82:17:68:e9:0d:4c: ce:88:56:4a:a9:4c:56:af:9b:53:5a:31:8c:f4:b1: 76:76:fa:08:dd:51:1e:5b:50:0e:68:a0:25:aa:58: 46:29:91:73:31:77:74:14:c6:77:cc:97:25:b2:6a: 7e:43:27:c7:e8:c7:13:53:10:73:01:01:4f:0f:d0: 84:be:36:48:cf:35:7a:c9:f2:e9:ff:01:e1:8f:26: fc:ea:09:1b:85:60:0c:a6:36:fd:26:cb:be:bb:c9: 03:82:61:6a:b7:be:5a:fc:43:53:96:9d:ef:20:28: e6:e8:72:76:bb:54:13:32:d2:73:30:49:c2:34:53: 63:1f:44:fb:05:5f:09:49:62:85:60:39:ca:83:b6: 00:1f:f2:b2:7c:02:91:c7:24:49:0b:ba:c4:e9:b5: aa:41:30:eb:ef:c6:44:f5:19:52:52:6e:c7:75:3b: 55:a6:8b:6f:9f:b4:05:86:90:57:00:a4:6a:02:41: f6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:83:30:75:AC:CF:74:CA:AB:7D:7B:3E:7C:19:C5:F8:38:1C:2B:70 X509v3 Authority Key Identifier: keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:96:11:76:d3:dc:71:1f:16:78:7d:69:b2:f7:cf:55:9c:d8: 68:78:c8:ce:d0:b4:36:b8:70:88:42:80:c2:1e:3f:78:be:ea: 1d:7a:0e:fc:7e:d0:d1:73:e7:c2:4e:76:be:7a:c9:a5:22:e8: 5a:dd:e7:93:b7:20:58:b4:e3:49:9d:be:6e:b4:06:a6:00:18: 2a:53:54:b5:3b:c4:a1:34:c9:f0:d7:be:d2:04:8d:0a:1d:a8: c5:ac:34:d1:86:c4:a7:fe:2c:9c:2f:99:37:df:aa:4c:cc:ff: 85:b8:71:3f:87:85:df:82:1d:69:21:ef:f3:c6:be:9b:eb:4b: c5:db:fe:b4:22:d0:9e:1a:c5:34:8a:e0:b8:ea:ed:05:99:51: 0e:2c:9c:b8:c1:f4:60:1c:55:76:9e:60:c5:45:1d:39:ad:24: d7:67:ee:a9:b9:eb:4b:4e:62:49:77:c2:0b:85:02:86:bf:46: 58:94:19:a5:bb:a0:4b:3e:b7:75:a7:b4:57:37:37:67:28:00: 31:0a:c8:5c:26:a7:c4:d6:25:52:3e:66:a0:13:03:8d:3c:ca: b1:dd:fc:a2:81:eb:5c:69:bc:f1:4a:76:7d:b7:52:37:63:1b: a4:a0:c0:20:40:96:e6:e9:0c:50:50:35:b2:3b:db:ec:97:86: b9:1b:18:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEM4REE2NDA5NjcxMzQ4MTA3RERCQzhCMTgzRjU1QUJG MjkzMTI1NTYwHhcNMjUwODIyMTcyOTU1WhcNMjUwODI5MTcyOTU1WjAYMRYwFAYD VQQDEw02OGE4YTkxMy1mZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+heU5+yMIPyP7qC2PF2o9VWcOxTbjKIrclKaynAby63QaAgScpi/oP8L7vH/ 3aAASV6lKzyrw7UHwYlndyT/4RcWm0eCF2jpDUzOiFZKqUxWr5tTWjGM9LF2dvoI 3VEeW1AOaKAlqlhGKZFzMXd0FMZ3zJclsmp+QyfH6McTUxBzAQFPD9CEvjZIzzV6 yfLp/wHhjyb86gkbhWAMpjb9Jsu+u8kDgmFqt75a/ENTlp3vICjm6HJ2u1QTMtJz MEnCNFNjH0T7BV8JSWKFYDnKg7YAH/KyfAKRxyRJC7rE6bWqQTDr78ZE9RlSUm7H dTtVpotvn7QFhpBXAKRqAkH21wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKDMHWs z3TKq317PnwZxfg4HCtwMB8GA1UdIwQYMBaAFMjaZAlnE0gQfdvIsYP1Wr8pMSVW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9ENjc3RDMxQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNCQjkyOGl4Z19WYXZ5a3hK VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3lOcGtDV2NUU0JCOTI4aXhnX1ZhdnlreEpWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9ENjc3RDMxQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNC QjkyOGl4Z19WYXZ5a3hKVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIlhF209xxHxZ4fWmy989VnNhoeMjO0LQ2uHCIQoDCHj94vuodeg78 ftDRc+fCTna+esmlIuha3eeTtyBYtONJnb5utAamABgqU1S1O8ShNMnw177SBI0K HajFrDTRhsSn/iycL5k336pMzP+FuHE/h4Xfgh1pIe/zxr6b60vF2/60ItCeGsU0 iuC46u0FmVEOLJy4wfRgHFV2nmDFRR05rSTXZ+6puetLTmJJd8ILhQKGv0ZYlBml u6BLPrd1p7RXNzdnKAAxCshcJqfE1iVSPmagEwONPMqx3fyigetcabzxSnZ9t1I3 YxukoMAgQJbm6QxQUDWyO9vsl4a5GxhM -----END CERTIFICATE-----Generated at Sun Aug 24 06:45:47 2025 by rpki-client