$ rpki-client -vvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft File: yT-PYPBn4kwb_PI7LPQivVhkvss.mft (raw, json) Hash identifier: QH4P5nRFXSHclG4l0i1GWQvol5rjgzN+qkUisEI3U1I= Subject key identifier: BD:5B:FF:20:60:3C:CC:A4:72:10:7E:3F:5D:67:69:AB:C0:2A:B9:31 Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB Certificate issuer: /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft Manifest number: 04 Signing time: Sat 23 Aug 2025 08:24:51 +0000 Manifest this update: Sat 23 Aug 2025 08:24:50 +0000 Manifest next update: Sat 30 Aug 2025 08:24:50 +0000 Files and hashes: 1: yT-PYPBn4kwb_PI7LPQivVhkvss.crl (hash: uUbi/bC72eBXzWpnWDRw920DH+cpWMnSAoBRhiEhfbw=) 2: 7452F54C7D7D11F09C982A7CC4F9AE02.roa (hash: fSo3LQThSu3zM+wgt7BUnbtQ2wqM3uaigVctUk+6+W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB Validity Not Before: Aug 23 08:24:50 2025 GMT Not After : Aug 30 08:24:50 2025 GMT Subject: CN=68a97ad2-b591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:92:00:55:4b:af:6a:70:4c:ae:28:73:7b: c2:12:ce:96:3d:29:17:26:db:a4:5c:f3:02:95:c8: b6:70:21:f0:19:b9:1b:03:0b:b2:de:8b:46:5f:ec: c3:c9:42:94:0b:6e:78:97:62:2d:36:1c:d2:72:e2: b1:9e:26:b7:f3:9d:f6:dc:d7:aa:ec:6c:f7:74:39: cc:b0:c6:f7:f4:7e:af:78:4f:e3:79:b7:01:f9:a2: 81:55:8e:b7:f4:c4:ef:38:d6:a6:a6:9b:fe:2f:4d: dd:6a:97:e5:54:b7:de:97:08:02:fb:db:0f:e1:f4: ad:bb:a8:fe:fd:ee:96:86:dc:14:90:0b:ac:f5:9a: 67:d6:8c:f5:16:a7:b7:bd:fa:73:13:ec:8e:a7:3b: a6:90:99:03:6c:68:60:07:06:c1:3c:7d:85:24:ac: 8b:4b:30:7e:0a:49:94:c7:af:8e:36:54:69:e7:b4: cc:31:90:f2:f8:dd:5d:ea:76:40:87:a2:85:59:78: 3e:88:5a:80:a8:fc:f9:6e:a0:5d:3e:97:2b:c9:b5: 62:7d:de:f1:e9:9d:e6:08:8a:27:ac:e1:40:ed:4a: 27:ab:a3:b3:3c:8a:11:2b:54:0e:ce:72:67:60:b0: 6f:0f:97:e9:7d:b6:d7:41:bd:96:25:f0:9f:e7:a9: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5B:FF:20:60:3C:CC:A4:72:10:7E:3F:5D:67:69:AB:C0:2A:B9:31 X509v3 Authority Key Identifier: keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c1:f9:de:27:bd:08:4f:56:2f:d3:d5:5a:d8:4a:ee:60:64: 3c:e1:bb:28:d3:72:e4:5f:e9:c0:9a:b4:9e:6e:38:cd:cc:cf: 20:b6:e0:62:f5:d1:f7:70:e5:61:a1:23:f3:bc:8e:63:a2:17: 89:66:2a:ff:de:a6:14:59:15:be:55:eb:30:61:bf:41:51:04: f2:41:de:50:ec:9b:2f:31:75:e0:26:30:9b:5c:eb:50:45:d9: a6:6f:c8:70:30:c2:a5:23:e1:c0:0d:bc:76:88:7b:fc:5a:96: eb:fa:c7:b8:56:9a:4a:e6:bc:22:dd:89:b5:d3:35:dc:ad:60: be:fc:b8:53:e7:78:bc:41:d5:20:d0:32:de:b0:50:b7:50:14: 9c:5a:f1:7f:ea:a2:31:ee:b6:f5:32:e4:16:59:56:0a:8b:f6: 91:87:68:47:a8:f3:1e:bd:73:da:4f:2d:5f:06:41:8b:23:e8: 8b:ae:50:6e:9f:2b:75:2c:ee:8c:b1:30:91:88:df:4e:5c:43: ab:46:1d:a1:38:ab:a5:3a:7f:5a:c8:04:32:26:54:ba:3e:6b: 8d:8f:77:8a:6c:36:c3:4c:ef:71:26:54:b1:8b:9d:1c:33:ff: 27:a3:0a:0f:29:22:4d:55:f2:ec:0b:80:4d:77:c5:33:8c:03: 38:95:0e:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTRBNDExMC8GA1UEBRMoQzkzRjhGNjBGMDY3RTI0QzFCRkNGMjNCMkNGNDIyQkQ1 ODY0QkVDQjAeFw0yNTA4MjMwODI0NTBaFw0yNTA4MzAwODI0NTBaMBgxFjAUBgNV BAMTDTY4YTk3YWQyLWI1OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqypIAVUuvanBMrihze8ISzpY9KRcm26Rc8wKVyLZwIfAZuRsDC7Lei0Zf7MPJ QpQLbniXYi02HNJy4rGeJrfznfbc16rsbPd0Ocywxvf0fq94T+N5twH5ooFVjrf0 xO841qamm/4vTd1ql+VUt96XCAL72w/h9K27qP797paG3BSQC6z1mmfWjPUWp7e9 +nMT7I6nO6aQmQNsaGAHBsE8fYUkrItLMH4KSZTHr442VGnntMwxkPL43V3qdkCH ooVZeD6IWoCo/PluoF0+lyvJtWJ93vHpneYIiies4UDtSiero7M8ihErVA7Ocmdg sG8Pl+l9ttdBvZYl8J/nqfB7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvVv/IGA8 zKRyEH4/XWdpq8AquTEwHwYDVR0jBBgwFoAUyT+PYPBn4kwb/PI7LPQivVhkvssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNEE0L0VBQjE3QkY2N0Q3 QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3Yl9QSTdMUFFpdlZoa3Zz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVQtUFlQQm40a3diX1BJN0xQUWl2VmhrdnNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF NEE0L0VBQjE3QkY2N0Q3QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3 Yl9QSTdMUFFpdlZoa3Zzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADHB+d4nvQhPVi/T1VrYSu5gZDzhuyjTcuRf6cCatJ5uOM3MzyC24GL1 0fdw5WGhI/O8jmOiF4lmKv/ephRZFb5V6zBhv0FRBPJB3lDsmy8xdeAmMJtc61BF 2aZvyHAwwqUj4cANvHaIe/xaluv6x7hWmkrmvCLdibXTNdytYL78uFPneLxB1SDQ Mt6wULdQFJxa8X/qojHutvUy5BZZVgqL9pGHaEeo8x69c9pPLV8GQYsj6IuuUG6f K3Us7oyxMJGI305cQ6tGHaE4q6U6f1rIBDImVLo+a42Pd4psNsNM73EmVLGLnRwz /yejCg8pIk1V8uwLgE13xTOMAziVDtg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:58:42 2025 by rpki-client