$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: OYSrI44L1ENycR05kwcCrjNg0tFxNxktfUAfae2A9d4= Subject key identifier: EF:38:A9:FB:2C:50:AE:F4:F4:A1:2D:A6:74:4F:C0:29:14:E6:E1:F5 Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 1853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 1845 Signing time: Fri 22 Aug 2025 16:37:05 +0000 Manifest this update: Fri 22 Aug 2025 16:37:04 +0000 Manifest next update: Fri 29 Aug 2025 16:37:04 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: cy+9TlGA/5SoUmoTaSNTl/ZRyy/B1AP990NFd3Cou3A=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: XNKpRb8/02tHDrrS9S3tLwWbmiJabIsnKyEKhJUYUM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6227 (0x1853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Aug 22 16:37:04 2025 GMT Not After : Aug 29 16:37:04 2025 GMT Subject: CN=68a89cb0-4135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:f9:8d:b5:bf:6b:7a:bc:89:e2:73:60:3a: d9:d2:08:88:45:b3:a4:c1:0f:71:23:4d:6a:c0:e5: e4:9e:2f:cb:4e:86:99:ce:e0:53:0d:ff:bc:e2:97: 37:eb:de:ba:56:04:e8:72:e8:ed:58:6f:5d:ca:55: df:41:13:1f:d9:bc:f4:7d:9c:39:f0:e3:8e:41:8e: 2d:1d:93:b3:0d:28:0f:55:32:ba:96:72:56:4a:6b: 35:ed:9c:a1:27:10:ef:e5:24:c7:5f:44:9e:db:fc: e6:32:47:a2:fc:34:6d:a3:e6:47:a3:a2:2f:eb:ff: 46:06:eb:a2:f8:d8:9a:08:ab:a0:81:08:4d:a8:cc: 33:ac:31:6e:d1:e4:6e:2a:0d:32:aa:94:56:40:6c: 44:02:07:14:5a:2a:18:ad:43:87:b4:10:52:e9:12: 5b:77:26:d8:94:02:c1:20:81:18:28:5f:12:62:59: 0b:06:ca:e2:1c:51:f6:81:87:d5:5c:f5:20:11:60: 72:e2:60:f3:88:bc:ba:1e:b2:4b:29:97:5c:b3:c4: 63:a6:b7:92:af:ad:08:9d:f6:ab:ad:ca:52:22:49: d7:8c:9d:7c:1d:f4:b0:c1:14:06:19:97:08:cc:72: 4b:01:3e:42:68:22:bf:fd:d6:59:a4:e1:8b:4e:de: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:38:A9:FB:2C:50:AE:F4:F4:A1:2D:A6:74:4F:C0:29:14:E6:E1:F5 X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:73:de:14:80:e3:35:b4:96:50:33:df:71:f2:85:bb:b1:1b: a6:ef:cd:06:52:ac:11:87:b5:58:08:18:fb:1d:7e:c7:6e:f9: 25:aa:c3:c4:2c:23:e7:2a:d5:62:f8:4d:0a:57:5d:50:e9:af: af:b5:de:c6:00:62:07:22:48:7f:2c:37:20:f1:3b:e7:01:24: a9:7b:6c:3c:1d:26:60:c3:64:0c:20:b7:a4:b5:0f:ef:a2:4c: ce:97:cf:89:9e:a7:01:1a:9b:20:44:99:77:aa:41:a9:ae:8e: 09:78:e7:62:54:b2:89:e2:c3:e1:b7:bb:93:2f:5a:53:41:fb: 49:1b:a0:d4:19:ca:e0:14:c8:18:db:14:da:06:1e:0a:20:76: cb:1a:87:a1:67:6d:95:7f:09:7e:a8:d1:06:80:21:2d:a3:58: 4f:1a:1c:fb:19:30:41:ca:b9:4e:e6:35:a1:ae:b3:48:c1:6e: 83:f3:24:41:1b:45:55:31:ea:36:23:c7:ca:bb:81:16:0d:2f: e4:01:49:a1:7b:3e:84:93:28:68:d3:d1:a7:ab:39:ad:f6:57: 5a:3e:51:16:26:4f:10:96:66:cc:3b:10:75:f7:58:87:74:07: 49:f1:a3:9b:1a:be:69:a9:d0:9f:c7:21:41:de:86:d3:8b:b8: 74:22:bd:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjUwODIyMTYzNzA0WhcNMjUwODI5MTYzNzA0WjAYMRYwFAYD VQQDEw02OGE4OWNiMC00MTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL/5jbW/a3q8ieJzYDrZ0giIRbOkwQ9xI01qwOXkni/LToaZzuBTDf+84pc3 6966VgTocujtWG9dylXfQRMf2bz0fZw58OOOQY4tHZOzDSgPVTK6lnJWSms17Zyh JxDv5STHX0Se2/zmMkei/DRto+ZHo6Iv6/9GBuui+NiaCKuggQhNqMwzrDFu0eRu Kg0yqpRWQGxEAgcUWioYrUOHtBBS6RJbdybYlALBIIEYKF8SYlkLBsriHFH2gYfV XPUgEWBy4mDziLy6HrJLKZdcs8RjpreSr60InfarrcpSIknXjJ18HfSwwRQGGZcI zHJLAT5CaCK//dZZpOGLTt4R5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO84qfss UK709KEtpnRPwCkU5uH1MB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVc94UgOM1tJZQM99x8oW7sRum780GUqwRh7VYCBj7HX7HbvklqsPE LCPnKtVi+E0KV11Q6a+vtd7GAGIHIkh/LDcg8TvnASSpe2w8HSZgw2QMILektQ/v okzOl8+JnqcBGpsgRJl3qkGpro4JeOdiVLKJ4sPht7uTL1pTQftJG6DUGcrgFMgY 2xTaBh4KIHbLGoehZ22Vfwl+qNEGgCEto1hPGhz7GTBByrlO5jWhrrNIwW6D8yRB G0VVMeo2I8fKu4EWDS/kAUmhez6Ekyho09Gnqzmt9ldaPlEWJk8QlmbMOxB191iH dAdJ8aObGr5pqdCfxyFB3obTi7h0Ir2p -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:17 2025 by rpki-client