$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft File: YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json) Hash identifier: /eNHLKSvwxN9zgy4POU/OqlAlCHIJZ0ImauN/ltEMO0= Subject key identifier: E1:E4:89:64:41:FF:99:61:DD:B9:79:08:A1:13:20:AF:96:3F:A4:72 Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 Certificate issuer: /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Certificate serial: 060D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft Manifest number: 0606 Signing time: Fri 22 Aug 2025 23:02:58 +0000 Manifest this update: Fri 22 Aug 2025 23:02:58 +0000 Manifest next update: Fri 29 Aug 2025 23:02:58 +0000 Files and hashes: 1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: w39jJZTfi6KrcVDYZp6+M5KJ4hI3IC/2Z6pbw4HY34w=) 2: 6D5F7C74B99611EBB5E9AE5EC4F9AE02.roa (hash: bUC1i6U8bBn9UfWkY4L4fN9q3qdDlIRzcJbNDpJZl6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1549 (0x60d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Validity Not Before: Aug 22 23:02:58 2025 GMT Not After : Aug 29 23:02:58 2025 GMT Subject: CN=68a8f722-6f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:10:bc:aa:ae:2f:55:2d:67:bb:08:43:37: 6d:d1:9b:a8:91:4a:57:4a:39:4e:81:4c:ba:39:33: 98:22:82:b9:7c:01:a3:96:7c:8a:51:48:b0:12:38: 59:f4:e8:2f:0e:96:fc:e9:aa:36:13:88:45:23:2a: af:cd:50:f7:12:0a:fa:b1:e5:e4:00:a6:c2:35:5b: ce:28:de:5f:23:da:55:c7:82:b7:29:36:98:fa:05: 71:41:1c:de:81:57:2a:55:9b:69:9d:f2:ff:76:ef: e2:b4:2b:c8:15:98:ad:0d:a3:69:6a:28:fe:b4:5a: 7a:5c:23:b3:5c:65:4a:e3:61:59:bb:e0:70:73:96: b7:91:c9:49:e4:5a:ff:b2:df:ba:1e:c9:d5:fa:90: 47:02:1b:87:9e:12:43:fd:a1:73:d5:19:ff:a4:e9: ff:79:90:a7:e5:e1:fb:1c:77:69:eb:38:1b:30:e2: cf:8f:e3:8f:33:79:58:1f:ee:ee:df:c4:a1:53:73: 80:ff:d0:13:08:a3:c6:41:cc:76:6b:e6:4f:32:ce: f5:d2:7c:5c:a8:c2:87:c5:45:59:00:ac:af:b5:0e: ad:0c:a4:17:e0:05:b6:41:8e:99:99:1e:9a:ad:ee: fe:b6:82:39:2c:b8:cf:5d:63:e3:1d:f8:97:b9:dc: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E4:89:64:41:FF:99:61:DD:B9:79:08:A1:13:20:AF:96:3F:A4:72 X509v3 Authority Key Identifier: keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:d0:7a:26:45:d3:22:d9:a3:8d:b1:f5:81:d2:78:2c:5c:3e: 4e:07:9b:96:93:54:d6:9c:32:0b:f7:f0:5e:ba:2d:49:52:16: 66:c0:82:9f:de:54:1b:df:93:9d:74:e5:c4:3d:fa:3f:ca:14: c7:6c:8b:56:73:c6:b1:7b:8c:ff:fb:51:17:0b:6e:13:7b:cf: f3:89:f9:eb:cb:fb:e4:ce:47:34:4d:e4:89:b1:d5:e3:8e:16: 04:f6:59:83:fa:15:23:03:97:8a:5c:d5:23:c4:f6:b2:fd:ac: e9:af:00:0b:3f:c9:99:a1:88:9c:ee:e8:b2:7f:29:f9:2d:a8: 04:bd:72:80:a5:af:06:5e:5f:10:8f:f1:68:c3:f9:24:62:d5: ed:32:59:45:f0:50:24:0b:44:99:0b:fa:92:37:ca:ae:86:71: 6d:f1:42:59:01:36:44:3e:3d:69:01:cf:86:69:ef:da:5d:81: b9:5c:c9:15:4c:89:b2:df:86:f1:11:15:c0:74:1e:56:fa:c9: 07:c1:65:87:87:83:54:2c:56:72:74:f8:af:f3:2d:63:3a:e7: 43:12:2e:c2:b7:f9:d5:b5:f8:eb:10:82:1d:b4:88:c3:72:9a: 07:4a:8f:2b:6f:cb:c8:48:23:25:31:c2:7a:14:3a:74:4a:dd: 8d:8d:bf:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDQ0UxMTAvBgNVBAUTKDYxRjQ1REM1NEY0N0UyNTJGQUM2NTUyRERCQjM5NjU4 NTRDNkM4MDEwHhcNMjUwODIyMjMwMjU4WhcNMjUwODI5MjMwMjU4WjAYMRYwFAYD VQQDEw02OGE4ZjcyMi02ZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6MQvKquL1UtZ7sIQzdt0ZuokUpXSjlOgUy6OTOYIoK5fAGjlnyKUUiwEjhZ 9OgvDpb86ao2E4hFIyqvzVD3Egr6seXkAKbCNVvOKN5fI9pVx4K3KTaY+gVxQRze gVcqVZtpnfL/du/itCvIFZitDaNpaij+tFp6XCOzXGVK42FZu+Bwc5a3kclJ5Fr/ st+6HsnV+pBHAhuHnhJD/aFz1Rn/pOn/eZCn5eH7HHdp6zgbMOLPj+OPM3lYH+7u 38ShU3OA/9ATCKPGQcx2a+ZPMs710nxcqMKHxUVZAKyvtQ6tDKQX4AW2QY6ZmR6a re7+toI5LLjPXWPjHfiXudw2xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHkiWRB /5lh3bl5CKETIK+WP6RyMB8GA1UdIwQYMBaAFGH0XcVPR+JS+sZVLduzllhUxsgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkNDRS9CNzU1REEyOEI5 OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRsTDZ4bFV0MjdPV1dGVEd5 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lmUmR4VTlINGxMNnhsVXQyN09XV0ZUR3lBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkNDRS9CNzU1REEyOEI5OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRs TDZ4bFV0MjdPV1dGVEd5QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm0HomRdMi2aONsfWB0ngsXD5OB5uWk1TWnDIL9/Beui1JUhZmwIKf 3lQb35OddOXEPfo/yhTHbItWc8axe4z/+1EXC24Te8/zifnry/vkzkc0TeSJsdXj jhYE9lmD+hUjA5eKXNUjxPay/azprwALP8mZoYic7uiyfyn5LagEvXKApa8GXl8Q j/Fow/kkYtXtMllF8FAkC0SZC/qSN8quhnFt8UJZATZEPj1pAc+Gae/aXYG5XMkV TImy34bxERXAdB5W+skHwWWHh4NULFZydPiv8y1jOudDEi7Ct/nVtfjrEIIdtIjD cpoHSo8rb8vISCMlMcJ6FDp0St2Njb+G -----END CERTIFICATE-----Generated at Sat Aug 23 20:12:59 2025 by rpki-client