$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft File: YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json) Hash identifier: QCB8xUIO9X1BqL9RAWEZUBW1Cg6BCoju8XW3avA3WuA= Subject key identifier: D6:86:28:B5:DA:00:04:80:E1:FF:98:7E:61:98:91:17:D6:CF:E7:5D Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 Certificate issuer: /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft Manifest number: 27 Signing time: Sat 23 Aug 2025 08:01:37 +0000 Manifest this update: Sat 23 Aug 2025 08:01:37 +0000 Manifest next update: Sat 30 Aug 2025 08:01:37 +0000 Files and hashes: 1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: RQtCjRdp/JDSt72lXnXuauirXbBqHValwQ6nmb1yUP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Validity Not Before: Aug 23 08:01:37 2025 GMT Not After : Aug 30 08:01:37 2025 GMT Subject: CN=68a97561-8f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:33:89:1d:0f:55:85:e2:28:dc:b9:d0:35: 03:8a:01:dc:4a:72:65:ba:24:c3:ab:be:70:d3:08: 71:b9:8e:f9:55:f0:28:3e:62:be:29:a2:5d:ae:5d: 8c:06:a9:ce:99:32:17:dc:4e:f8:b6:8c:ed:1c:26: 10:80:93:59:39:c4:be:e6:31:6b:84:b4:6e:1c:f1: b1:c4:67:25:1e:9c:bc:91:a2:f7:e5:af:98:92:ca: ce:5c:95:8f:d7:ea:f9:36:8d:b7:8c:ea:fe:fe:cd: a5:f6:8a:7b:0f:ba:ef:60:25:8f:e1:cf:5c:7a:a0: b6:6b:58:69:14:d8:9b:ab:ba:2e:a4:ae:51:29:f2: b1:c7:86:7b:55:6e:5a:02:43:fa:21:4e:36:1f:a9: 60:f8:22:85:d4:f0:2f:d0:66:c9:d9:67:2e:64:5a: 6f:03:9e:d1:c1:98:90:e1:ea:e5:bb:4f:ca:c6:c9: 18:4b:67:bc:68:66:21:34:92:3c:a7:ff:4d:cd:70: 02:00:cd:4e:2b:0e:ff:4c:9b:fd:53:f6:25:96:80: a4:71:fb:39:fa:c7:fc:1d:12:c5:47:70:70:fd:c4: 3c:c3:9d:7a:6f:67:5a:4e:d9:cd:41:64:b4:25:57: 24:e5:84:a3:20:f2:93:26:e4:23:3c:58:68:50:b4: 31:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:86:28:B5:DA:00:04:80:E1:FF:98:7E:61:98:91:17:D6:CF:E7:5D X509v3 Authority Key Identifier: keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:4f:34:43:6c:89:8e:e6:9a:69:28:a3:95:14:49:31:4d:b5: 5d:85:21:2f:f4:70:98:2d:40:57:51:da:c5:32:fb:f5:bc:04: a6:2d:e8:1f:d3:47:e2:a4:58:ff:cf:23:b2:32:e6:8c:fb:7b: d7:d3:c7:7d:64:87:bf:40:d3:f3:96:ad:69:3f:bb:04:a3:e8: a4:d1:a9:03:4e:bf:58:95:25:db:58:2f:af:60:c4:eb:6b:14: 1a:66:60:df:a1:9c:fa:5c:b4:c3:65:e1:89:af:72:66:d5:32: 86:dc:f7:bc:94:3a:d2:ec:cf:fb:ae:b7:96:8b:73:64:8e:1b: 72:41:b4:24:ca:13:43:fa:11:d1:66:4c:de:84:a9:ee:a8:a5: ac:2f:30:22:5c:84:ba:23:6e:43:b6:be:98:c2:be:4c:09:63: 13:86:23:d4:be:a8:46:74:4c:54:1b:c2:4f:52:56:36:8c:95: 16:46:62:c2:18:cb:9c:3a:ba:58:cd:64:03:04:73:e1:1f:1f: 4a:66:bd:05:70:6d:d6:c5:87:ad:dd:00:d9:ad:14:c5:2a:48: e9:fc:a4:6d:c4:96:48:a0:9d:7b:93:3a:5a:ff:ce:9d:02:93: f1:dd:b4:64:9d:36:5f:2d:03:c6:3d:37:5c:2d:e2:c4:86:1f: 65:b8:02:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoNjFGNzJCNUU5M0U3OTM1REQ3OUUwNDM1QzgxOEY4RjlB NzEwRjY4OTAeFw0yNTA4MjMwODAxMzdaFw0yNTA4MzAwODAxMzdaMBgxFjAUBgNV BAMTDTY4YTk3NTYxLThmMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQQDOJHQ9VheIo3LnQNQOKAdxKcmW6JMOrvnDTCHG5jvlV8Cg+Yr4pol2uXYwG qc6ZMhfcTvi2jO0cJhCAk1k5xL7mMWuEtG4c8bHEZyUenLyRovflr5iSys5clY/X 6vk2jbeM6v7+zaX2insPuu9gJY/hz1x6oLZrWGkU2Jurui6krlEp8rHHhntVbloC Q/ohTjYfqWD4IoXU8C/QZsnZZy5kWm8DntHBmJDh6uW7T8rGyRhLZ7xoZiE0kjyn /03NcAIAzU4rDv9Mm/1T9iWWgKRx+zn6x/wdEsVHcHD9xDzDnXpvZ1pO2c1BZLQl VyTlhKMg8pMm5CM8WGhQtDFlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1oYotdoA BIDh/5h+YZiRF9bP510wHwYDVR0jBBgwFoAUYfcrXpPnk13XngQ1yBj4+acQ9okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzJENDU3ODAwNDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEzWG5nUTF5Qmo0LWFjUTlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWZjclhwUG5rMTNYbmdRMXlCajQtYWNROW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzJENDU3ODAwNDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEz WG5nUTF5Qmo0LWFjUTlvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJZPNENsiY7mmmkoo5UUSTFNtV2FIS/0cJgtQFdR2sUy+/W8BKYt6B/T R+KkWP/PI7Iy5oz7e9fTx31kh79A0/OWrWk/uwSj6KTRqQNOv1iVJdtYL69gxOtr FBpmYN+hnPpctMNl4YmvcmbVMobc97yUOtLsz/uut5aLc2SOG3JBtCTKE0P6EdFm TN6Eqe6opawvMCJchLojbkO2vpjCvkwJYxOGI9S+qEZ0TFQbwk9SVjaMlRZGYsIY y5w6uljNZAMEc+EfH0pmvQVwbdbFh63dANmtFMUqSOn8pG3ElkignXuTOlr/zp0C k/HdtGSdNl8tA8Y9N1wt4sSGH2W4Aig= -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:00 2025 by rpki-client