$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft File: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft (raw, json) Hash identifier: G+QpJKbrA65R5k9NlwvtLERGeIQUxFC2I+V/WhUnvFk= Subject key identifier: E4:7A:85:56:EB:E7:FD:7D:94:B5:CC:7B:C9:A1:58:BA:7C:28:A8:79 Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 Certificate issuer: /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Certificate serial: 030C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft Manifest number: 0307 Signing time: Sat 23 Aug 2025 01:27:50 +0000 Manifest this update: Sat 23 Aug 2025 01:27:50 +0000 Manifest next update: Sat 30 Aug 2025 01:27:50 +0000 Files and hashes: 1: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl (hash: ZPsJcSBZRZABd/8FCLbOAxZ5yR6G26c3l4zAizB2bh0=) 2: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (hash: QUXJ6EoEVGUyvaKXpTag7fMul5UWaiUgtkt9cLzt5qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 780 (0x30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB06F, serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Validity Not Before: Aug 23 01:27:50 2025 GMT Not After : Aug 30 01:27:50 2025 GMT Subject: CN=68a91916-cacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6f:78:ea:50:07:50:fa:70:2f:f3:3b:31:fd: 0c:11:8e:3f:ae:7e:8d:48:3e:85:81:42:43:0d:87: 2f:da:79:9b:ea:d8:66:f1:5e:45:be:f3:99:6e:f2: c3:8a:c7:87:f9:85:dc:fa:45:00:87:e4:8d:d8:07: fa:1f:3e:c5:77:f8:62:17:88:f7:07:d5:73:d3:75: 52:f1:4d:71:58:1a:53:42:ee:32:7f:95:5e:c6:8a: a0:e7:aa:7c:36:72:3f:07:3f:37:e8:d7:5a:09:0e: 31:ea:b0:50:4e:2a:e1:60:83:fe:0f:90:a9:e9:eb: 92:3d:2e:d6:54:1c:83:89:75:66:7b:b3:1e:43:bd: e6:11:2c:78:b0:44:fe:eb:62:33:e4:4e:92:7f:e7: 07:f4:ff:3a:73:5a:fc:59:9a:98:6e:7c:f8:ee:87: 2c:d2:55:01:6e:96:c7:cb:6f:3d:80:37:e4:91:cf: 04:5d:8a:f6:04:cd:4f:09:19:4b:2f:7e:61:86:fc: 95:cf:c6:d1:24:3c:25:8c:41:85:f0:b6:73:b0:b4: 70:f7:5d:f2:6f:ec:1f:27:d1:e5:6b:ec:a2:b1:10: e1:35:86:04:70:a7:08:b0:e4:50:92:3f:47:5e:1b: 64:2c:d3:38:64:9f:b8:61:49:8f:b1:8b:8d:d7:d4: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7A:85:56:EB:E7:FD:7D:94:B5:CC:7B:C9:A1:58:BA:7C:28:A8:79 X509v3 Authority Key Identifier: keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:81:96:c1:0c:24:15:62:61:2f:f9:1e:76:09:22:39:1c:97: c2:63:f2:78:04:0e:37:83:fe:69:df:4a:50:a4:9b:79:96:23: 2f:e3:a6:4f:31:64:4c:f3:ea:98:7c:9b:da:0d:42:3d:ae:99: cc:a5:83:e6:a1:fd:74:a1:b2:b0:65:19:06:04:f0:76:d3:dd: 81:8c:b1:73:c8:10:af:79:8a:a1:ee:f3:25:ff:bc:21:da:f0: db:9b:6e:b2:00:38:57:fe:75:2a:1a:be:c7:64:39:0f:0c:cf: 20:7e:a2:d7:fc:10:ad:0e:d9:14:43:33:94:4b:7d:67:51:cf: 72:b5:f1:1d:5e:51:2f:1a:aa:0d:42:29:80:b2:e5:ec:f6:f8: 69:7e:82:3c:97:03:49:e3:f7:ac:c1:3b:c7:d6:b6:94:fd:83: 61:66:e8:39:8a:2f:ca:64:33:ef:1d:46:35:de:ef:26:e2:4e: 45:e8:ea:53:6b:f7:67:42:9f:6e:3e:73:d3:1d:63:50:26:db: 56:1f:26:a8:5a:51:be:de:ea:f7:bd:90:e2:1b:49:3d:d0:9b: e8:3f:d5:22:dd:d9:ae:11:48:da:de:0d:6d:17:39:fd:0e:4a: 8a:4d:cf:51:13:c6:99:03:b4:c1:b9:d4:12:59:ee:78:66:03: 9a:59:4e:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNkYxMTAvBgNVBAUTKEM5NDVCNzc3MkNDQzI3NDEzODY1QTkyQ0I4OTJERkQy N0NBQTlGNzcwHhcNMjUwODIzMDEyNzUwWhcNMjUwODMwMDEyNzUwWjAYMRYwFAYD VQQDEw02OGE5MTkxNi1jYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG946lAHUPpwL/M7Mf0MEY4/rn6NSD6FgUJDDYcv2nmb6thm8V5FvvOZbvLD iseH+YXc+kUAh+SN2Af6Hz7Fd/hiF4j3B9Vz03VS8U1xWBpTQu4yf5Vexoqg56p8 NnI/Bz836NdaCQ4x6rBQTirhYIP+D5Cp6euSPS7WVByDiXVme7MeQ73mESx4sET+ 62Iz5E6Sf+cH9P86c1r8WZqYbnz47ocs0lUBbpbHy289gDfkkc8EXYr2BM1PCRlL L35hhvyVz8bRJDwljEGF8LZzsLRw913yb+wfJ9Hla+yisRDhNYYEcKcIsORQkj9H XhtkLNM4ZJ+4YUmPsYuN19SypwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOR6hVbr 5/19lLXMe8mhWLp8KKh5MB8GA1UdIwQYMBaAFMlFt3cszCdBOGWpLLiS39J8qp93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2Ri8xMkYzMDIxMkU3 MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUowRTRaYWtzdUpMZjBueXFu M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVVzNkeXpNSjBFNFpha3N1SkxmMG55cW4zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2Ri8xMkYzMDIxMkU3MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUow RTRaYWtzdUpMZjBueXFuM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwgZbBDCQVYmEv+R52CSI5HJfCY/J4BA43g/5p30pQpJt5liMv46ZP MWRM8+qYfJvaDUI9rpnMpYPmof10obKwZRkGBPB2092BjLFzyBCveYqh7vMl/7wh 2vDbm26yADhX/nUqGr7HZDkPDM8gfqLX/BCtDtkUQzOUS31nUc9ytfEdXlEvGqoN QimAsuXs9vhpfoI8lwNJ4/eswTvH1raU/YNhZug5ii/KZDPvHUY13u8m4k5F6OpT a/dnQp9uPnPTHWNQJttWHyaoWlG+3ur3vZDiG0k90JvoP9Ui3dmuEUja3g1tFzn9 DkqKTc9RE8aZA7TBudQSWe54ZgOaWU7L -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:03 2025 by rpki-client