$ rpki-client -vvf rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft File: Yt792dXXaz4eaPmBKVcVDcD1PF0.mft (raw, json) Hash identifier: 5sXh3ah/Jaj2UrXA+Jmdcb8yi4sbjzDFuVZK6gJIYhU= Subject key identifier: 99:58:2D:E8:F7:EA:B6:44:62:5A:AA:DF:C2:A1:C6:9C:69:88:A8:8D Authority key identifier: 62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D Certificate issuer: /CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft Manifest number: 041B Signing time: Sat 23 Aug 2025 00:35:21 +0000 Manifest this update: Sat 23 Aug 2025 00:35:20 +0000 Manifest next update: Sat 30 Aug 2025 00:35:20 +0000 Files and hashes: 1: Yt792dXXaz4eaPmBKVcVDcD1PF0.crl (hash: UNedMh1i7PV5koQF7p/5oapkLkct8kqG+Ue8fRrBiNI=) 2: 766B426A7A9011ECA266DE36C4F9AE02.roa (hash: j9zT2tbgYHNW+zQe8fJ7BxqX2WRK2n0Np1/48KzCevY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195456, serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Validity Not Before: Aug 23 00:35:20 2025 GMT Not After : Aug 30 00:35:20 2025 GMT Subject: CN=68a90cc9-09f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:53:ff:98:89:af:20:24:7a:0e:52:51:ce: a6:89:67:59:c5:3d:27:31:14:53:6f:b4:0b:59:5f: ad:8f:f1:b0:22:d9:88:a1:93:57:c1:ba:70:4f:c5: b6:9d:98:30:52:f6:f2:a3:b5:3f:39:c1:08:97:08: 18:01:46:63:71:81:17:49:17:38:51:d7:c6:59:87: 7e:b2:a6:ec:39:8c:8b:9e:21:f1:cd:81:3a:81:da: 11:3d:40:f3:a0:c3:22:e6:1b:ee:e9:3d:0c:e4:65: 28:74:91:52:ae:62:ea:9e:31:f6:fb:d6:f8:39:e5: 99:dc:ef:b7:1a:db:9a:09:44:51:51:13:3e:da:88: 6a:35:3e:31:55:a7:7a:09:26:5a:1d:fe:ee:e8:e7: d4:ea:b9:b2:31:8b:2e:b3:5b:77:06:b6:e5:c5:8c: f5:6f:7b:ac:17:0c:32:02:3b:e8:d5:d0:22:1c:74: 45:b7:0e:1b:b7:df:3d:43:46:07:f8:9f:a2:40:98: c6:05:fd:d4:8d:9c:54:ba:43:c9:f5:74:cc:75:ed: 71:0d:ac:b5:db:3c:5f:ae:9a:76:0e:1d:d8:1c:30: 7f:8a:75:46:52:1f:29:07:42:2c:8a:cf:71:ca:c4: b0:25:3d:e3:91:24:47:4c:c6:71:55:4f:96:a0:62: 0f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:58:2D:E8:F7:EA:B6:44:62:5A:AA:DF:C2:A1:C6:9C:69:88:A8:8D X509v3 Authority Key Identifier: keyid:62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a7:03:98:1a:ca:5c:be:e5:65:59:ae:fd:58:59:76:2f:d5: 85:92:ba:a4:de:c9:23:0b:fd:dd:93:f4:b8:14:63:69:34:d2: 8c:69:16:4f:4a:49:74:76:f6:da:20:80:4e:17:5d:a9:ed:b2: 61:12:eb:bc:a2:07:2a:bf:be:73:b6:4c:bd:31:ae:e8:52:59: 1e:af:1a:5f:38:2b:80:0e:af:02:40:5e:8a:c4:d5:6f:39:9f: 45:5a:3e:dd:7f:97:82:8a:44:c3:0a:d5:cd:c4:63:4f:b9:f8: c7:d9:4f:26:3c:44:c1:6c:ac:14:8f:f4:c6:d4:c4:0c:f5:44: 01:e7:0f:2e:ca:64:2d:24:cf:1b:78:1d:53:18:72:30:53:cd: 59:7e:37:41:55:89:b8:dc:6c:09:82:72:87:06:a5:57:3c:3e: 94:73:29:af:55:a9:41:e5:7d:cb:4e:38:dd:5d:7f:33:0c:df: e3:8e:b3:55:3e:80:9c:df:ab:5b:a5:32:90:08:9f:78:d3:b9: 82:29:40:aa:6b:d6:88:df:a2:e7:6e:96:20:bb:d2:bd:ac:84: df:70:73:0a:be:b8:57:56:0d:3c:b1:0a:a6:97:0c:10:20:9b: 57:b7:b5:67:4f:96:ce:8e:b9:6b:cb:b1:87:c4:76:3d:23:f4: fc:19:80:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NTYxMTAvBgNVBAUTKDYyREVGREQ5RDVENzZCM0UxRTY4Rjk4MTI5NTcxNTBE QzBGNTNDNUQwHhcNMjUwODIzMDAzNTIwWhcNMjUwODMwMDAzNTIwWjAYMRYwFAYD VQQDEw02OGE5MGNjOS0wOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0FT/5iJryAkeg5SUc6miWdZxT0nMRRTb7QLWV+tj/GwItmIoZNXwbpwT8W2 nZgwUvbyo7U/OcEIlwgYAUZjcYEXSRc4UdfGWYd+sqbsOYyLniHxzYE6gdoRPUDz oMMi5hvu6T0M5GUodJFSrmLqnjH2+9b4OeWZ3O+3GtuaCURRURM+2ohqNT4xVad6 CSZaHf7u6OfU6rmyMYsus1t3BrblxYz1b3usFwwyAjvo1dAiHHRFtw4bt989Q0YH +J+iQJjGBf3UjZxUukPJ9XTMde1xDay12zxfrpp2Dh3YHDB/inVGUh8pB0Isis9x ysSwJT3jkSRHTMZxVU+WoGIPcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlYLej3 6rZEYlqq38KhxpxpiKiNMB8GA1UdIwQYMBaAFGLe/dnV12s+Hmj5gSlXFQ3A9Txd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ1Ni85QzQ1QjlCNDdB OEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6NGVhUG1CS1ZjVkRjRDFQ RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l0NzkyZFhYYXo0ZWFQbUJLVmNWRGNEMVBGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTQ1Ni85QzQ1QjlCNDdBOEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6 NGVhUG1CS1ZjVkRjRDFQRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcpwOYGspcvuVlWa79WFl2L9WFkrqk3skjC/3dk/S4FGNpNNKMaRZP Skl0dvbaIIBOF12p7bJhEuu8ogcqv75ztky9Ma7oUlkerxpfOCuADq8CQF6KxNVv OZ9FWj7df5eCikTDCtXNxGNPufjH2U8mPETBbKwUj/TG1MQM9UQB5w8uymQtJM8b eB1TGHIwU81ZfjdBVYm43GwJgnKHBqVXPD6UcymvValB5X3LTjjdXX8zDN/jjrNV PoCc36tbpTKQCJ9407mCKUCqa9aI36LnbpYgu9K9rITfcHMKvrhXVg08sQqmlwwQ IJtXt7VnT5bOjrlry7GHxHY9I/T8GYBq -----END CERTIFICATE-----Generated at Sat Aug 23 18:57:38 2025 by rpki-client