$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json) Hash identifier: DsqjWL4Oj+MPnXADALv72g1XDaO7FgkYO267i0eIiuA= Subject key identifier: F8:BB:FE:23:92:E1:E9:86:DC:C6:04:53:6A:05:67:31:91:4F:73:8D Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Certificate serial: 1A92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft Manifest number: 1A83 Signing time: Fri 22 Aug 2025 16:25:25 +0000 Manifest this update: Fri 22 Aug 2025 16:25:24 +0000 Manifest next update: Fri 29 Aug 2025 16:25:24 +0000 Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: VTg28D+5Qi10sxVjSkrB/kV/WWbKUcomL4PoMqjE4fY=) 2: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: rSf0co4QElknqmx/HUwcUze0T308M2kPbS2aUDzOJyo=) 3: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: Wesd0InqJ/VHy6+SYHu7ABNFnSg/btyWb+0cbj+CPEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6802 (0x1a92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Validity Not Before: Aug 22 16:25:24 2025 GMT Not After : Aug 29 16:25:24 2025 GMT Subject: CN=68a899f5-5deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:5a:24:19:f5:32:df:00:c0:37:8b:e9:91: b5:fd:92:c4:8f:33:71:19:4e:c8:4f:91:8a:23:10: b7:c5:15:b6:0d:9d:32:35:ad:ae:c4:3e:c0:61:69: 88:15:4e:28:87:5b:d0:08:2a:83:eb:f9:7a:79:75: 66:58:a2:b3:43:69:d3:f7:d3:f8:13:8f:b5:43:74: b8:e6:26:f1:2a:58:82:c8:c4:e4:4e:ec:f5:a7:7c: 74:fc:b4:e7:a0:a1:50:bb:5f:0e:5d:7a:98:2a:3b: c3:01:c3:14:1f:d3:f5:38:9d:ac:3b:ac:84:17:a7: 94:1e:48:a2:e8:2e:b8:5d:ae:00:2c:2e:f2:e3:aa: 6a:e6:c2:fb:eb:b6:9b:d8:20:9e:cd:75:0b:dc:d8: 5c:49:f5:cd:33:4d:94:6f:5c:4b:0e:ea:a1:de:cd: a8:49:cf:49:9b:43:fb:a3:c1:a3:72:93:a8:21:ef: b1:87:38:9e:47:34:34:67:3b:d1:88:ca:7a:e1:72: 1e:40:02:81:3f:93:89:6c:0d:c0:13:fa:d1:c8:03: e6:c3:77:03:c5:69:a1:6c:26:9b:3d:f5:ef:99:e8: 67:8f:76:7b:18:24:3e:95:1d:2f:a6:a5:eb:bf:6a: aa:4e:4e:78:b4:51:46:0b:58:a4:3c:45:4d:5c:b5: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BB:FE:23:92:E1:E9:86:DC:C6:04:53:6A:05:67:31:91:4F:73:8D X509v3 Authority Key Identifier: keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a1:db:21:6d:91:69:ee:93:34:60:89:6c:55:5c:e6:a5:39: c7:28:fa:65:46:10:3d:45:3c:8b:5d:dd:63:5c:e6:b9:4a:d4: 76:36:9e:98:d3:07:79:15:83:3e:f1:c0:71:9d:71:c6:14:9b: 39:85:2a:21:03:3c:83:49:de:2d:a5:b8:cd:64:d5:7d:09:55: 23:77:ef:ef:cf:aa:f3:89:fa:9f:b5:0c:33:1e:2d:a7:6b:ae: e3:87:10:83:34:f8:a1:21:ad:a8:66:8b:06:10:c3:4a:6a:ed: 5e:2a:48:8b:46:3b:e9:e8:2f:5d:db:73:45:f9:6e:d5:d5:98: 5f:b2:37:4a:c6:01:44:6d:a1:5d:9a:37:e5:17:5b:dc:4b:26: e0:22:89:fa:be:19:81:ad:9c:34:58:ce:2b:61:ae:9e:72:57: ce:38:4d:b9:6a:59:0b:9b:40:f3:23:80:d7:6f:22:38:b1:76: 6c:ae:be:3e:7b:87:87:59:9c:e8:13:aa:bf:d9:19:bb:1e:a6: d0:7a:e7:0d:cf:ed:e4:c5:f9:8d:e2:46:23:4b:b4:b8:71:a0: 11:3e:c4:79:a0:40:ef:bc:e0:04:d5:86:31:ef:74:91:0b:67: 75:5b:a2:ac:23:d3:60:f8:98:85:74:9a:ff:14:38:d6:3c:d2: 86:2e:5c:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyNjQxMTAvBgNVBAUTKDYwREQ2NUVDN0Y3MkVCNkM3REE4QjkzNzA2RTJEM0JB MEYwNjVCRkMwHhcNMjUwODIyMTYyNTI0WhcNMjUwODI5MTYyNTI0WjAYMRYwFAYD VQQDEw02OGE4OTlmNS01ZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSNaJBn1Mt8AwDeL6ZG1/ZLEjzNxGU7IT5GKIxC3xRW2DZ0yNa2uxD7AYWmI FU4oh1vQCCqD6/l6eXVmWKKzQ2nT99P4E4+1Q3S45ibxKliCyMTkTuz1p3x0/LTn oKFQu18OXXqYKjvDAcMUH9P1OJ2sO6yEF6eUHkii6C64Xa4ALC7y46pq5sL767ab 2CCezXUL3NhcSfXNM02Ub1xLDuqh3s2oSc9Jm0P7o8GjcpOoIe+xhzieRzQ0ZzvR iMp64XIeQAKBP5OJbA3AE/rRyAPmw3cDxWmhbCabPfXvmehnj3Z7GCQ+lR0vpqXr v2qqTk54tFFGC1ikPEVNXLXcBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPi7/iOS 4emG3MYEU2oFZzGRT3ONMB8GA1UdIwQYMBaAFGDdZex/cutsfai5Nwbi07oPBlv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDI2NC9DNThENkZGQTQx MDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYyeDlxTGszQnVMVHVnOEdX X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOMWw3SDl5NjJ4OXFMazNCdUxUdWc4R1dfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDI2NC9DNThENkZGQTQxMDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYy eDlxTGszQnVMVHVnOEdXX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXodshbZFp7pM0YIlsVVzmpTnHKPplRhA9RTyLXd1jXOa5StR2Np6Y 0wd5FYM+8cBxnXHGFJs5hSohAzyDSd4tpbjNZNV9CVUjd+/vz6rzifqftQwzHi2n a67jhxCDNPihIa2oZosGEMNKau1eKkiLRjvp6C9d23NF+W7V1ZhfsjdKxgFEbaFd mjflF1vcSybgIon6vhmBrZw0WM4rYa6eclfOOE25alkLm0DzI4DXbyI4sXZsrr4+ e4eHWZzoE6q/2Rm7HqbQeucNz+3kxfmN4kYjS7S4caARPsR5oEDvvOAE1YYx73SR C2d1W6KsI9Ng+JiFdJr/FDjWPNKGLlxn -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:57 2025 by rpki-client