$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft File: YlWvHFTHD2B02LCsoatcuHg4dic.mft (raw, json) Hash identifier: WTw31GCwlt+adh2Irllgqcl/C7Aot0M6cuPxZwPjGW0= Subject key identifier: FB:CD:E4:0A:38:E6:A6:41:D5:5F:C0:87:76:6C:E9:79:4F:48:9E:C7 Authority key identifier: 62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27 Certificate issuer: /CN=A9148CCE/serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft Manifest number: 21 Signing time: Sat 23 Aug 2025 08:04:27 +0000 Manifest this update: Sat 23 Aug 2025 08:04:26 +0000 Manifest next update: Sat 30 Aug 2025 08:04:26 +0000 Files and hashes: 1: YlWvHFTHD2B02LCsoatcuHg4dic.crl (hash: f5V0eGc/cS9qsUHKA/0ZV3m87cQMteokj+3fkxBaKyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148CCE, serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627 Validity Not Before: Aug 23 08:04:26 2025 GMT Not After : Aug 30 08:04:26 2025 GMT Subject: CN=68a9760a-e427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e7:81:04:f5:ee:e3:11:6f:b7:08:64:0f:b0: a8:9d:06:25:7c:01:d4:df:a6:4d:d5:d5:83:49:de: b3:02:95:61:af:fa:f8:92:03:a6:54:8b:fc:1b:fa: 62:3d:2e:94:df:b8:8d:03:78:67:54:d6:51:c5:4f: 1e:2d:70:8c:01:bd:f0:7d:88:80:c1:8d:c7:f3:ad: 0a:b9:e8:14:d4:67:47:73:2e:d9:05:53:e0:68:68: 0e:6a:f1:9c:d2:0b:0c:68:b7:59:bb:2b:dd:2b:fc: 28:f0:e7:34:2d:08:a4:78:40:6a:52:68:ee:f8:4b: 93:dd:be:9c:37:cb:6e:70:79:63:ee:74:c2:ce:c3: e7:c3:28:b1:b0:54:05:58:e8:d9:1b:7d:e1:95:f4: ce:3e:2b:e9:d4:f0:a4:11:e6:09:75:97:73:77:ec: e4:52:bc:b3:4c:c5:cc:39:b7:5d:65:4b:69:b4:42: 0e:a4:ee:35:7c:c3:ed:33:16:2f:66:d4:60:ba:b7: fc:06:6c:c8:8f:00:97:46:0c:07:3b:91:91:78:39: 48:55:b6:10:e8:df:01:28:f8:8b:2a:66:d0:87:1b: cc:69:86:a8:83:b6:db:5a:ae:e5:2a:0c:18:d4:f4: de:e3:2b:90:88:9a:b1:3e:b8:5a:4f:4f:72:e3:f6: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CD:E4:0A:38:E6:A6:41:D5:5F:C0:87:76:6C:E9:79:4F:48:9E:C7 X509v3 Authority Key Identifier: keyid:62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c8:6e:ed:2c:ad:91:dc:27:fe:61:64:93:f7:fc:01:53:23: 6f:6c:9e:71:55:b4:fe:09:58:84:53:85:43:31:6b:a9:cf:74: 55:dc:ab:7d:92:a7:29:0c:c5:56:59:5b:eb:e3:71:a0:48:18: 95:4a:56:ce:37:80:e0:18:6d:9a:e8:b7:ba:03:07:48:5b:e6: 0d:37:48:d5:80:69:f4:88:3b:e7:02:48:55:36:d8:b7:06:7a: 51:e6:2f:27:e6:81:7c:de:ec:95:d8:51:5e:2d:b4:8b:b3:b2: 25:ee:6a:44:8e:21:e1:8d:8b:b3:6e:1e:45:89:24:e1:7a:8e: 81:19:6a:b3:f2:a7:9f:e7:63:d4:68:8f:d5:7e:2a:90:55:7b: c0:e1:c0:b4:6a:88:ae:fe:2a:6d:e5:a2:3e:6c:1f:a5:a5:2f: 56:63:19:37:7c:0c:0f:2b:88:16:44:94:39:c4:93:70:28:66: e1:92:e5:46:ca:91:aa:d4:6f:03:3e:03:df:a5:4d:fc:cf:03: 06:19:9c:b6:fc:9b:42:2c:f6:06:7c:ad:5e:3e:42:3e:17:97: d9:50:87:7d:85:cf:4d:2e:4a:44:a4:93:7a:6d:6a:57:e0:53: da:08:41:4d:11:d0:ff:3c:33:77:db:10:2f:95:dc:b4:6e:ba: f9:4a:a3:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OENDRTExMC8GA1UEBRMoNjI1NUFGMUM1NEM3MEY2MDc0RDhCMEFDQTFBQjVDQjg3 ODM4NzYyNzAeFw0yNTA4MjMwODA0MjZaFw0yNTA4MzAwODA0MjZaMBgxFjAUBgNV BAMTDTY4YTk3NjBhLWU0MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU54EE9e7jEW+3CGQPsKidBiV8AdTfpk3V1YNJ3rMClWGv+viSA6ZUi/wb+mI9 LpTfuI0DeGdU1lHFTx4tcIwBvfB9iIDBjcfzrQq56BTUZ0dzLtkFU+BoaA5q8ZzS Cwxot1m7K90r/Cjw5zQtCKR4QGpSaO74S5Pdvpw3y25weWPudMLOw+fDKLGwVAVY 6NkbfeGV9M4+K+nU8KQR5gl1l3N37ORSvLNMxcw5t11lS2m0Qg6k7jV8w+0zFi9m 1GC6t/wGbMiPAJdGDAc7kZF4OUhVthDo3wEo+IsqZtCHG8xphqiDtttaruUqDBjU 9N7jK5CImrE+uFpPT3Lj9mJVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+83kCjjm pkHVX8CHdmzpeU9InscwHwYDVR0jBBgwFoAUYlWvHFTHD2B02LCsoatcuHg4dicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4Q0NFLzkzRUZFMkI0NEZF RTExRjA4MDM3OTQ4MkM0RjlBRTAyL1lsV3ZIRlRIRDJCMDJMQ3NvYXRjdUhnNGRp Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWxXdkhGVEhEMkIwMkxDc29hdGN1SGc0ZGljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 Q0NFLzkzRUZFMkI0NEZFRTExRjA4MDM3OTQ4MkM0RjlBRTAyL1lsV3ZIRlRIRDJC MDJMQ3NvYXRjdUhnNGRpYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJPIbu0srZHcJ/5hZJP3/AFTI29snnFVtP4JWIRThUMxa6nPdFXcq32S pykMxVZZW+vjcaBIGJVKVs43gOAYbZrot7oDB0hb5g03SNWAafSIO+cCSFU22LcG elHmLyfmgXze7JXYUV4ttIuzsiXuakSOIeGNi7NuHkWJJOF6joEZarPyp5/nY9Ro j9V+KpBVe8DhwLRqiK7+Km3loj5sH6WlL1ZjGTd8DA8riBZElDnEk3AoZuGS5UbK karUbwM+A9+lTfzPAwYZnLb8m0Is9gZ8rV4+Qj4Xl9lQh32Fz00uSkSkk3ptalfg U9oIQU0R0P88M3fbEC+V3LRuuvlKow8= -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:39 2025 by rpki-client