$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft File: Yv18a2FzzDKVZktYaAWS-ybSuHo.mft (raw, json) Hash identifier: x1+Lx2y8BZcx/2qTZs2L5riIh0tksvABitpIvJETm8Q= Subject key identifier: 9D:B4:9A:73:3B:1A:DD:6C:1F:3E:45:84:AB:13:D2:8C:C3:98:FC:B1 Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A Certificate issuer: /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft Manifest number: 0783 Signing time: Fri 22 Aug 2025 21:39:28 +0000 Manifest this update: Fri 22 Aug 2025 21:39:28 +0000 Manifest next update: Fri 29 Aug 2025 21:39:28 +0000 Files and hashes: 1: Yv18a2FzzDKVZktYaAWS-ybSuHo.crl (hash: memQFXGsY45z0aka77biMX1eyTscE8Wo/H9xxiCxB3s=) 2: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (hash: sxCFtdRPysjFCbROcFadfDzJw+hZeGG75SF5L5NcahQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B488A, serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Validity Not Before: Aug 22 21:39:28 2025 GMT Not After : Aug 29 21:39:28 2025 GMT Subject: CN=68a8e390-6243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:4c:b3:f0:4b:7c:c4:e9:01:7c:ee:ab:cf: 7b:e5:9b:a5:d8:fb:22:7b:c6:27:37:96:79:e0:33: 55:fe:1e:b4:11:0b:6f:91:0f:e9:02:03:b5:91:87: cb:cc:7f:8d:27:79:f1:a7:6e:57:1c:9d:d9:59:ec: fd:5c:4a:0e:e0:13:7d:d2:bb:c9:c9:c1:8d:81:e2: 42:6c:86:c4:93:a9:d3:1c:37:77:9a:b2:d1:86:34: 14:93:5d:e7:6c:6f:ed:e0:eb:be:b1:04:8d:da:f4: b7:6b:a0:9f:78:98:ab:5f:d1:2b:bc:3f:04:a8:cf: 85:39:7e:80:6a:5f:51:8d:99:3c:48:1e:56:fc:b0: a9:15:e0:64:1a:f4:e1:15:e9:5f:21:c0:a9:5f:e0: 5a:c5:07:66:a9:3f:8e:0e:67:23:b3:c5:62:a4:6a: 49:a4:d0:a5:02:aa:5e:8d:8e:09:9a:14:f4:35:55: 44:e5:5b:a1:98:10:9e:87:82:5b:e6:c9:2b:d8:4f: 69:e2:77:41:0f:3f:67:12:43:24:14:00:29:49:1b: a3:a6:e9:a0:d7:3b:cf:4a:a9:50:34:bd:cd:5b:b4: 2d:7b:0b:d8:8a:93:5c:b9:b3:2f:25:35:3f:e9:bd: d6:e3:e3:a2:b2:44:4c:ac:9a:a1:de:ce:c2:ab:95: ea:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B4:9A:73:3B:1A:DD:6C:1F:3E:45:84:AB:13:D2:8C:C3:98:FC:B1 X509v3 Authority Key Identifier: keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:87:c2:4a:24:5d:62:44:58:3d:30:cb:af:d1:23:6d:f2:04: 23:27:26:6d:8b:9b:1d:81:10:55:25:4c:c3:9a:e7:b5:9a:27: dd:1e:fd:da:43:cc:af:10:0f:84:46:ba:d1:c2:2d:28:35:6c: d1:b2:97:47:cb:64:f5:42:cc:50:f2:2b:80:54:76:4d:8c:0a: 70:2e:62:bb:52:e9:f4:e2:fe:8c:7c:55:aa:ee:87:da:4d:d8: 80:68:d7:dd:99:7b:43:fa:49:8a:9c:d4:be:ec:c5:58:40:c4: 47:9e:0f:27:e9:76:df:e1:67:92:c1:12:1b:23:dc:4d:5d:b0: 9b:db:cd:76:6e:ff:e0:80:e2:9b:6c:4e:a9:97:8d:74:06:aa: f5:fa:d6:c1:2d:9e:ae:96:e8:02:52:1c:79:95:4e:3f:f0:8e: 7d:50:1f:95:11:3f:be:47:c4:02:62:09:04:da:ec:5a:c0:d5: f4:b2:3f:c9:36:c2:f1:e9:e8:8a:17:06:80:61:ff:cb:e8:12: f5:cb:54:09:de:99:d3:d3:06:a0:06:99:0d:e3:4e:06:5b:e7: d1:32:62:fa:7b:af:8f:1e:b2:e2:a9:ea:43:de:ab:94:87:90: 9e:35:7f:b3:59:bb:52:bf:98:85:7b:a9:13:ae:b3:19:27:93: 65:d6:65:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4OEExMTAvBgNVBAUTKDYyRkQ3QzZCNjE3M0NDMzI5NTY2NEI1ODY4MDU5MkZC MjZEMkI4N0EwHhcNMjUwODIyMjEzOTI4WhcNMjUwODI5MjEzOTI4WjAYMRYwFAYD VQQDEw02OGE4ZTM5MC02MjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWRMs/BLfMTpAXzuq8975Zul2Psie8YnN5Z54DNV/h60EQtvkQ/pAgO1kYfL zH+NJ3nxp25XHJ3ZWez9XEoO4BN90rvJycGNgeJCbIbEk6nTHDd3mrLRhjQUk13n bG/t4Ou+sQSN2vS3a6CfeJirX9ErvD8EqM+FOX6Aal9RjZk8SB5W/LCpFeBkGvTh FelfIcCpX+BaxQdmqT+ODmcjs8VipGpJpNClAqpejY4JmhT0NVVE5VuhmBCeh4Jb 5skr2E9p4ndBDz9nEkMkFAApSRujpumg1zvPSqlQNL3NW7QtewvYipNcubMvJTU/ 6b3W4+OiskRMrJqh3s7Cq5XqgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ20mnM7 Gt1sHz5FhKsT0ozDmPyxMB8GA1UdIwQYMBaAFGL9fGthc8wylWZLWGgFkvsm0rh6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg4QS85QUVGMjNEQzI0 NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpES1Zaa3RZYUFXUy15YlN1 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l2MThhMkZ6ekRLVlprdFlhQVdTLXliU3VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg4QS85QUVGMjNEQzI0NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpE S1Zaa3RZYUFXUy15YlN1SG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhh8JKJF1iRFg9MMuv0SNt8gQjJyZti5sdgRBVJUzDmue1mifdHv3a Q8yvEA+ERrrRwi0oNWzRspdHy2T1QsxQ8iuAVHZNjApwLmK7Uun04v6MfFWq7ofa TdiAaNfdmXtD+kmKnNS+7MVYQMRHng8n6Xbf4WeSwRIbI9xNXbCb2812bv/ggOKb bE6pl410Bqr1+tbBLZ6ulugCUhx5lU4/8I59UB+VET++R8QCYgkE2uxawNX0sj/J NsLx6eiKFwaAYf/L6BL1y1QJ3pnT0wagBpkN404GW+fRMmL6e6+PHrLiqepD3quU h5CeNX+zWbtSv5iFe6kTrrMZJ5Nl1mWI -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:40 2025 by rpki-client