$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft File: yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json) Hash identifier: oXueaJkSnuuGcspCZTbFHtGIkv+QbRmkhy2IVct59kw= Subject key identifier: 3E:F4:AA:86:AD:73:35:5C:C0:EC:A3:89:60:0F:32:D2:97:1E:22:66 Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft Manifest number: 043E Signing time: Sat 23 Aug 2025 00:30:30 +0000 Manifest this update: Sat 23 Aug 2025 00:30:30 +0000 Manifest next update: Sat 30 Aug 2025 00:30:30 +0000 Files and hashes: 1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: kd0etQKeQLDoGRiPrvCjqpbC5NIMx2ERjiU3dRSOqzM=) 2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: kw8NlMSw+Nqcx4jBYDikGpkNhg4pIHl7KmPwkj2eC0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Validity Not Before: Aug 23 00:30:30 2025 GMT Not After : Aug 30 00:30:30 2025 GMT Subject: CN=68a90ba6-afa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ce:54:15:fc:56:d9:8b:16:df:c4:36:23:37: de:f5:32:3b:c9:7a:77:67:ac:ff:4e:2e:3d:be:be: 15:9c:d2:1a:ac:07:77:f6:75:20:35:3c:93:2d:ad: ff:ff:4d:25:ec:c4:a9:9c:13:5c:0c:4d:8c:df:80: f2:d8:e6:1d:66:74:88:a0:28:8c:39:b1:5b:4f:d1: 39:d6:22:8f:5f:19:ea:6d:28:69:f4:42:9c:48:43: b2:59:db:cf:4e:77:31:86:e5:92:52:01:9c:27:d7: 8d:9f:16:0c:b0:5a:f4:c0:b5:70:1c:a3:19:64:53: 6e:31:a2:db:7a:57:9a:b7:32:f3:df:4b:1e:6e:a0: 3d:c6:83:ea:f2:6e:b4:12:bc:9e:3c:c0:65:7a:ad: 88:f4:18:7a:f0:0a:31:0a:97:5b:c4:d5:d5:b5:5c: c9:6e:96:a6:ca:60:63:54:a7:b4:63:3b:44:e2:b7: 7d:e1:e3:8e:40:7f:fe:9a:7f:fb:fc:f0:a0:ba:a3: f5:16:e3:56:49:c0:64:d2:19:7c:0a:ac:30:32:f6: ba:c3:1d:7b:46:ed:3e:f9:59:90:2c:e2:bf:6d:9d: b0:b0:ab:a4:0e:65:97:ba:74:7f:b5:00:fd:c4:40: e8:03:0a:0b:22:f1:f3:20:e4:4a:2a:4b:f0:9a:d3: 16:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F4:AA:86:AD:73:35:5C:C0:EC:A3:89:60:0F:32:D2:97:1E:22:66 X509v3 Authority Key Identifier: keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:4b:b4:b8:6e:62:4b:9f:46:ee:f3:de:57:40:43:e5:df:84: 05:f4:03:40:d5:74:8e:51:e2:7b:ac:b4:32:b4:97:a8:17:69: 62:2f:d0:cd:2d:e7:2d:ac:30:05:c6:ad:9d:8d:94:73:97:16: 94:39:00:5f:c4:e0:03:c4:97:16:7a:11:f7:f7:c5:1d:25:a9: 8b:7a:74:4b:5a:4a:ac:dc:92:e2:bd:34:c9:dd:af:6d:28:8e: b9:3c:53:1c:66:da:ed:48:61:c4:26:d9:66:cf:22:9b:cd:c0: 96:c4:b8:85:fb:7a:c9:fe:82:a3:0c:20:1f:e2:05:2b:13:54: b8:ca:3c:20:f1:0e:f1:2b:40:50:f2:83:af:84:73:b4:d2:5f: e2:f6:6f:d7:83:e3:a9:be:6a:9b:53:90:89:e6:3b:e6:37:2d: 84:09:7b:78:11:5f:a4:4b:c9:62:00:06:fb:e9:64:0c:e4:5f: 09:44:1d:0c:e2:6c:ad:f6:09:04:3e:8a:ec:7a:cf:b6:66:bf: b3:dc:8a:1b:de:6d:1e:df:80:83:55:a1:7c:22:3b:86:54:22: 81:90:c4:6a:ab:62:29:b2:df:e7:13:6e:27:a6:4d:8a:77:b1: 15:ff:a8:02:2f:a5:06:e1:85:f6:cf:55:4c:c8:65:5a:03:44: 94:51:77:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTkxMTAvBgNVBAUTKEM5RDc2RUUzNjlDQzFDRjBFNjI5QzUxMEE0QkFGNDY1 RTE1RkI1RTEwHhcNMjUwODIzMDAzMDMwWhcNMjUwODMwMDAzMDMwWjAYMRYwFAYD VQQDEw02OGE5MGJhNi1hZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9M5UFfxW2YsW38Q2Izfe9TI7yXp3Z6z/Ti49vr4VnNIarAd39nUgNTyTLa3/ /00l7MSpnBNcDE2M34Dy2OYdZnSIoCiMObFbT9E51iKPXxnqbShp9EKcSEOyWdvP TncxhuWSUgGcJ9eNnxYMsFr0wLVwHKMZZFNuMaLbeleatzLz30sebqA9xoPq8m60 EryePMBleq2I9Bh68AoxCpdbxNXVtVzJbpamymBjVKe0YztE4rd94eOOQH/+mn/7 /PCguqP1FuNWScBk0hl8CqwwMva6wx17Ru0++VmQLOK/bZ2wsKukDmWXunR/tQD9 xEDoAwoLIvHzIORKKkvwmtMWIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD70qoat czVcwOyjiWAPMtKXHiJmMB8GA1UdIwQYMBaAFMnXbuNpzBzw5inFEKS69GXhX7Xh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1OS9BQjYxMTFCNDZD NjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQRG1LY1VRcExyMFplRmZ0 ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lkZHU0Mm5NSFBEbUtjVVFwTHIwWmVGZnRlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1OS9BQjYxMTFCNDZDNjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQ RG1LY1VRcExyMFplRmZ0ZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzS7S4bmJLn0bu895XQEPl34QF9ANA1XSOUeJ7rLQytJeoF2liL9DN LectrDAFxq2djZRzlxaUOQBfxOADxJcWehH398UdJamLenRLWkqs3JLivTTJ3a9t KI65PFMcZtrtSGHEJtlmzyKbzcCWxLiF+3rJ/oKjDCAf4gUrE1S4yjwg8Q7xK0BQ 8oOvhHO00l/i9m/Xg+OpvmqbU5CJ5jvmNy2ECXt4EV+kS8liAAb76WQM5F8JRB0M 4myt9gkEPorses+2Zr+z3Iob3m0e34CDVaF8IjuGVCKBkMRqq2Ipst/nE24npk2K d7EV/6gCL6UG4YX2z1VMyGVaA0SUUXfH -----END CERTIFICATE-----Generated at Sat Aug 23 19:11:10 2025 by rpki-client