$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft File: yvg06LwFd8t93bA-7UaRLns0ccw.mft (raw, json) Hash identifier: E9+YsVGz6gnoXxkC4LQ04wkYrq7W9eZCiMRT/79FW+I= Subject key identifier: 32:FA:87:D1:22:50:0E:37:C0:E2:65:72:80:64:10:C9:D5:0E:FB:56 Authority key identifier: CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC Certificate issuer: /CN=A9158D5B/serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft Manifest number: CD Signing time: Sat 23 Aug 2025 05:52:08 +0000 Manifest this update: Sat 23 Aug 2025 05:52:08 +0000 Manifest next update: Sat 30 Aug 2025 05:52:08 +0000 Files and hashes: 1: yvg06LwFd8t93bA-7UaRLns0ccw.crl (hash: 8J2JKDgaakF4i5JTVMsw5igPDSwqWnV9no0pd2ZZWus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC Validity Not Before: Aug 23 05:52:08 2025 GMT Not After : Aug 30 05:52:08 2025 GMT Subject: CN=68a95708-a2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:0c:be:5e:f9:a4:4b:1a:7b:f5:07:af:f2: cb:9b:2e:ec:fb:da:22:be:ac:7e:3e:cf:77:bb:14: 95:98:72:1f:96:1a:9b:eb:65:2c:56:74:73:3f:8f: 6f:a7:ca:21:5c:66:4c:c9:51:76:f1:03:8e:c2:3c: 9b:20:15:93:7c:b7:46:12:71:7a:03:4f:6f:f2:69: 00:4c:26:15:15:3c:ad:39:d0:b5:9b:27:4c:42:a1: 63:72:58:5f:47:ab:dd:de:c5:8d:97:74:6b:dd:4a: 63:c0:02:43:d4:52:f5:28:d7:fe:cd:12:b0:67:07: 84:57:2f:ec:ed:ec:d8:f6:a8:18:f1:d7:d4:8a:21: d6:26:51:89:6e:7a:b4:a7:72:68:b1:3e:06:6b:ba: d3:11:ed:28:85:21:7f:6e:a7:a1:64:f7:cb:e6:5c: 84:4e:a6:a4:8a:e4:3c:b7:c7:03:bb:9d:5c:82:87: f0:95:7c:f3:16:82:17:8e:88:7f:0c:58:40:31:ea: 85:97:c5:5d:4f:ce:8b:07:66:b7:3b:35:c6:2a:a0: 6d:d6:e1:3f:86:45:58:5e:bc:a1:8e:d7:15:8b:1b: 1a:05:95:cd:97:f2:39:46:10:df:50:70:e9:04:f0: 8e:f0:97:1a:54:74:dd:71:b9:aa:9e:c0:7f:3b:68: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FA:87:D1:22:50:0E:37:C0:E2:65:72:80:64:10:C9:D5:0E:FB:56 X509v3 Authority Key Identifier: keyid:CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:3e:a1:65:d6:2b:9c:d3:26:01:f9:ef:a2:00:3a:45:fc:23: c0:33:3d:76:4f:90:2b:26:40:4f:58:05:c3:50:14:14:87:f2: be:37:df:89:97:2f:ab:b3:8b:c6:31:8c:66:c7:7d:cd:64:2e: 69:d0:81:df:b7:91:d3:71:b3:c9:cc:c8:b5:de:f4:6f:41:7b: 63:91:84:5a:0c:84:98:f4:c2:c6:b2:4f:a4:db:2b:f6:5b:b0: b3:43:ff:2a:7b:21:ca:54:da:1c:4f:12:f4:99:82:a7:b1:66: ad:a4:ae:22:59:40:d7:16:e8:a4:52:86:7b:85:dc:c3:76:25: 99:f2:79:45:ac:66:0e:e6:93:ae:c7:07:dd:5c:67:7c:46:4e: c2:12:b6:24:6e:bd:ce:82:b3:e2:71:24:25:73:73:85:0f:68: 97:02:1b:1e:b9:72:28:37:71:08:7d:97:1b:b6:5e:36:7a:75: 15:7e:27:3c:ea:ed:a5:7a:68:69:52:e2:dc:e0:99:5c:b7:28: 96:77:6d:7e:ca:b0:04:2c:3c:5d:2d:03:a1:bd:5a:ff:d6:38: ae:e0:ec:ff:cf:32:53:ce:07:b9:72:18:e8:ce:14:c6:16:1b: b1:e0:45:43:e0:7e:3c:48:63:2c:04:8c:d1:55:50:c7:80:92: eb:17:3a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENBRjgzNEU4QkMwNTc3Q0I3REREQjAzRUVENDY5MTJF N0IzNDcxQ0MwHhcNMjUwODIzMDU1MjA4WhcNMjUwODMwMDU1MjA4WjAYMRYwFAYD VQQDEw02OGE5NTcwOC1hMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAre4Mvl75pEsae/UHr/LLmy7s+9oivqx+Ps93uxSVmHIflhqb62UsVnRzP49v p8ohXGZMyVF28QOOwjybIBWTfLdGEnF6A09v8mkATCYVFTytOdC1mydMQqFjclhf R6vd3sWNl3Rr3UpjwAJD1FL1KNf+zRKwZweEVy/s7ezY9qgY8dfUiiHWJlGJbnq0 p3JosT4Ga7rTEe0ohSF/bqehZPfL5lyETqakiuQ8t8cDu51cgofwlXzzFoIXjoh/ DFhAMeqFl8VdT86LB2a3OzXGKqBt1uE/hkVYXryhjtcVixsaBZXNl/I5RhDfUHDp BPCO8JcaVHTdcbmqnsB/O2jvawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDL6h9Ei UA43wOJlcoBkEMnVDvtWMB8GA1UdIwQYMBaAFMr4NOi8BXfLfd2wPu1GkS57NHHM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi84NEIyRkJENDQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi95dmcwNkx3RmQ4dDkzYkEtN1VhUkxuczBj Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2ZzA2THdGZDh0OTNiQS03VWFSTG5zMGNjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi84NEIyRkJENDQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi95dmcwNkx3RmQ4 dDkzYkEtN1VhUkxuczBjY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnPqFl1iuc0yYB+e+iADpF/CPAMz12T5ArJkBPWAXDUBQUh/K+N9+J ly+rs4vGMYxmx33NZC5p0IHft5HTcbPJzMi13vRvQXtjkYRaDISY9MLGsk+k2yv2 W7CzQ/8qeyHKVNocTxL0mYKnsWatpK4iWUDXFuikUoZ7hdzDdiWZ8nlFrGYO5pOu xwfdXGd8Rk7CErYkbr3OgrPicSQlc3OFD2iXAhseuXIoN3EIfZcbtl42enUVfic8 6u2lemhpUuLc4JlctyiWd21+yrAELDxdLQOhvVr/1jiu4Oz/zzJTzge5chjozhTG Fhux4EVD4H48SGMsBIzRVVDHgJLrFzqA -----END CERTIFICATE-----Generated at Sat Aug 23 14:28:25 2025 by rpki-client