$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft File: YscfaukWKfhUypRkF2G2UizUgMM.mft (raw, json) Hash identifier: DdkL7QqotubE6ASzL47iEt9RqHmS87KDUAUWR8ug/Io= Subject key identifier: CA:F4:72:2F:30:3E:27:E4:05:B5:F8:8F:3B:E4:1A:C9:D3:B6:0A:30 Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 Certificate issuer: /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft Manifest number: 53 Signing time: Sat 23 Aug 2025 07:31:57 +0000 Manifest this update: Sat 23 Aug 2025 07:31:57 +0000 Manifest next update: Sat 30 Aug 2025 07:31:57 +0000 Files and hashes: 1: YscfaukWKfhUypRkF2G2UizUgMM.crl (hash: zW/rWcs2O7yqsAIILkca6qvK+xJi350kXlksW0C5Bhg=) 2: 824FECA61EA811F0A4B9881EC4F9AE02.roa (hash: lnqtXsb2uQDyw+VqZesv3MnkaYFT+PyijHSiNS5QwcA=) 3: 6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (hash: 3CfNmrVRNEvPM//uIqEsifmOeeaUM9uVI7qqpW4aJQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Validity Not Before: Aug 23 07:31:57 2025 GMT Not After : Aug 30 07:31:57 2025 GMT Subject: CN=68a96e6d-8e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:1d:eb:6a:32:13:0f:69:9d:29:e2:3a:6d: 70:60:48:ce:32:b0:7a:5e:cb:c9:9c:e5:b9:ff:b8: 95:51:25:e4:d3:1d:27:d0:b1:93:fe:38:ef:da:b2: e4:fe:35:9c:da:0c:eb:a8:90:0a:20:5b:30:99:eb: 82:42:23:55:25:ae:89:8e:3f:19:dd:1f:de:d1:a3: 92:41:f0:e5:e8:d9:54:9e:70:b7:44:fc:d1:2a:59: 0d:41:4b:21:b2:09:13:67:e0:91:3f:28:f8:f9:bb: e1:ec:7d:d8:2e:a8:c5:98:3f:7b:ca:d0:ce:03:fb: 87:fb:c7:3f:04:7a:0f:f7:dd:fb:f1:07:05:d6:c9: f3:ad:2a:93:90:17:07:1e:ab:65:71:14:72:5d:a7: 19:bd:d6:15:80:5d:e8:71:dd:a5:2f:ea:5c:b5:59: d4:24:be:6a:d8:f9:af:34:b1:1f:6f:b4:77:6a:f7: 72:04:75:1f:85:93:1c:60:c8:aa:05:7b:88:fd:ae: 46:04:79:02:21:f8:7d:a3:ea:50:f1:b6:4f:f1:4e: a6:d5:8d:9e:e8:54:da:d9:d7:6b:fb:a0:46:1d:8d: ca:fc:f7:43:81:0c:fa:57:23:c9:b6:50:68:21:28: 1e:45:2f:11:78:cd:a6:bd:af:e8:4a:f0:41:60:a9: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F4:72:2F:30:3E:27:E4:05:B5:F8:8F:3B:E4:1A:C9:D3:B6:0A:30 X509v3 Authority Key Identifier: keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:19:df:15:c2:f3:bd:e8:4b:5a:ed:90:d3:37:bf:a0:d4:6a: 38:72:0e:4a:ec:21:47:c6:9f:fe:bd:40:37:a0:9b:47:4f:77: f1:54:84:75:98:14:4e:fc:8e:04:f8:17:aa:0b:bf:97:44:c1: fd:2c:47:43:5c:50:35:66:64:b2:35:5a:03:c0:14:96:36:e7: ca:e3:8f:50:63:d1:f3:c7:2a:c3:13:5f:b0:16:e1:4c:e5:db: 1b:f8:8f:cd:55:46:75:46:31:e3:1a:c5:d7:c9:22:35:18:9b: 33:7c:fc:f7:e9:8b:8c:27:43:5b:ea:1c:e5:ff:54:37:b9:87: ef:64:54:45:4c:38:50:9c:41:ed:dd:47:af:03:59:40:bc:06: 01:5a:78:e9:0c:14:f7:9b:b9:a5:21:a1:8e:b9:ab:ae:41:62: 91:fe:0b:c3:73:8d:66:a4:6f:f2:08:bc:cd:14:b5:03:ec:27: ea:d4:89:25:9b:ff:49:af:6b:a3:f4:1b:84:5d:3f:8a:89:da: 22:8a:9e:04:0d:14:b0:05:24:df:22:4c:42:fc:12:ad:9c:88: 4d:4c:3a:d7:67:e8:d0:c5:6b:4e:5c:99:7a:47:3f:71:b2:f2: 09:88:25:82:ca:4f:b1:38:ba:67:cb:a9:9a:c6:14:d5:32:2d: 6f:0f:b4:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTE5RjExMC8GA1UEBRMoNjJDNzFGNkFFOTE2MjlGODU0Q0E5NDY0MTc2MUI2NTIy Q0Q0ODBDMzAeFw0yNTA4MjMwNzMxNTdaFw0yNTA4MzAwNzMxNTdaMBgxFjAUBgNV BAMTDTY4YTk2ZTZkLThlNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKnB3rajITD2mdKeI6bXBgSM4ysHpey8mc5bn/uJVRJeTTHSfQsZP+OO/asuT+ NZzaDOuokAogWzCZ64JCI1UlromOPxndH97Ro5JB8OXo2VSecLdE/NEqWQ1BSyGy CRNn4JE/KPj5u+HsfdguqMWYP3vK0M4D+4f7xz8Eeg/33fvxBwXWyfOtKpOQFwce q2VxFHJdpxm91hWAXehx3aUv6ly1WdQkvmrY+a80sR9vtHdq93IEdR+FkxxgyKoF e4j9rkYEeQIh+H2j6lDxtk/xTqbVjZ7oVNrZ12v7oEYdjcr890OBDPpXI8m2UGgh KB5FLxF4zaa9r+hK8EFgqXe9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyvRyLzA+ J+QFtfiPO+QaydO2CjAwHwYDVR0jBBgwFoAUYscfaukWKfhUypRkF2G2UizUgMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMTlGL0I5RUEwNEM2MDU5 NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXNjZmF1a1dLZmhVeXBSa0YyRzJVaXpVZ01NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MTlGL0I5RUEwNEM2MDU5NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2Zo VXlwUmtGMkcyVWl6VWdNTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALUZ3xXC873oS1rtkNM3v6DUajhyDkrsIUfGn/69QDegm0dPd/FUhHWY FE78jgT4F6oLv5dEwf0sR0NcUDVmZLI1WgPAFJY258rjj1Bj0fPHKsMTX7AW4Uzl 2xv4j81VRnVGMeMaxdfJIjUYmzN8/Pfpi4wnQ1vqHOX/VDe5h+9kVEVMOFCcQe3d R68DWUC8BgFaeOkMFPebuaUhoY65q65BYpH+C8NzjWakb/IIvM0UtQPsJ+rUiSWb /0mva6P0G4RdP4qJ2iKKngQNFLAFJN8iTEL8Eq2ciE1MOtdn6NDFa05cmXpHP3Gy 8gmIJYLKT7E4umfLqZrGFNUyLW8PtCY= -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:56 2025 by rpki-client