$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: bdsiXRICTRWk7K0vNGyPYVzoVtXyWEQUU/R5d6bedkQ= Subject key identifier: 5C:09:C0:78:E3:49:DA:4B:C6:E6:74:0C:AC:66:71:4B:16:0C:68:94 Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 014A Signing time: Sat 23 Aug 2025 04:24:29 +0000 Manifest this update: Sat 23 Aug 2025 04:24:29 +0000 Manifest next update: Sat 30 Aug 2025 04:24:29 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: qExmg+2xelOCug37mfBgri+rey8/Eb+R2dZt2bu1SR0=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: kfUd7cLCmHmQ/k7ENeRjEkFUrum5OXV/qc4Vt8EOcIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Aug 23 04:24:29 2025 GMT Not After : Aug 30 04:24:29 2025 GMT Subject: CN=68a9427d-31ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:9f:79:dc:bf:4d:29:96:11:7d:95:3e:bb: 40:55:46:b7:4f:b8:ec:a7:7f:2b:a0:01:ff:2e:0c: 21:90:6b:8c:92:66:2f:b0:ad:ea:e0:71:47:d1:60: 60:2d:46:ff:c7:7c:29:89:cb:c4:ec:6f:a6:3e:05: 51:7c:33:03:5c:3e:1e:47:c9:6c:84:3f:25:fc:98: ad:7c:b0:54:d0:e2:23:12:d3:d8:b4:40:48:ae:a9: db:e4:f7:1b:f5:ab:18:7d:f4:be:18:1a:07:59:f0: e9:88:20:a5:8c:62:66:cb:51:39:03:f4:be:20:e5: ee:b5:5a:b6:2a:7d:f8:51:cd:48:d2:b2:57:ee:3a: 08:2b:42:66:c8:90:3a:96:c3:4b:c8:a4:a9:02:83: 6b:3e:3e:eb:41:24:a8:1c:cf:9e:e7:38:0e:17:cb: 09:d7:c6:61:7c:df:ff:62:a7:6a:84:43:b6:12:8c: 02:02:2d:02:8e:d9:cb:34:0a:fe:9e:26:11:ce:03: a3:8b:2b:e3:68:0d:29:0d:60:d7:19:b0:2e:ca:45: 06:4a:4a:e4:a7:df:de:c4:62:f3:3f:a9:53:42:5c: 44:f9:d6:dd:f4:cd:57:d4:3d:5e:4a:f7:cc:4b:92: e4:0c:14:f5:b7:7f:6a:f1:68:08:cc:e3:ed:a0:e9: b8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:09:C0:78:E3:49:DA:4B:C6:E6:74:0C:AC:66:71:4B:16:0C:68:94 X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:82:90:3e:ff:67:35:25:09:b1:5b:a4:95:98:a9:16:1c:ca: 17:0a:71:ba:5f:96:50:66:01:70:a4:ff:6f:52:cd:10:09:34: 8d:e1:f7:0d:4b:0f:8a:d7:c3:d2:d8:e9:86:91:32:2f:32:07: 40:34:7b:99:f4:e3:3f:52:7e:13:61:20:ac:33:6a:94:e5:df: a6:50:5c:36:e4:77:f0:7b:5d:7c:4d:d3:c4:09:7d:b0:23:43: 96:63:f9:b6:37:2a:14:91:25:20:6d:52:0e:9f:1d:b6:d9:9f: ab:c5:52:e6:0a:d7:0a:6d:72:7e:4c:67:8a:8d:c3:86:12:fd: 13:c9:d9:94:31:cc:ee:21:90:ac:c9:11:0c:42:8a:c6:e9:04: 1e:0b:98:45:0e:80:73:06:ee:c9:ec:3e:13:8c:96:44:35:86: d4:e9:b6:df:d6:98:dc:5d:87:85:36:db:b3:f8:66:cd:52:e0: 4b:17:4d:f3:02:27:26:aa:5d:2c:b3:94:ac:92:76:eb:26:f0: 31:a7:70:77:f6:aa:c0:df:a5:94:31:0b:a0:c9:59:c7:24:4c: f1:13:42:f2:43:17:ca:47:58:c2:a0:4a:16:50:7a:0f:dd:15: 75:24:91:fa:58:a9:54:2e:69:68:b6:d7:a5:32:2c:4d:c2:ab: 0d:63:4c:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjUwODIzMDQyNDI5WhcNMjUwODMwMDQyNDI5WjAYMRYwFAYD VQQDEw02OGE5NDI3ZC0zMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ2fedy/TSmWEX2VPrtAVUa3T7jsp38roAH/LgwhkGuMkmYvsK3q4HFH0WBg LUb/x3wpicvE7G+mPgVRfDMDXD4eR8lshD8l/JitfLBU0OIjEtPYtEBIrqnb5Pcb 9asYffS+GBoHWfDpiCCljGJmy1E5A/S+IOXutVq2Kn34Uc1I0rJX7joIK0JmyJA6 lsNLyKSpAoNrPj7rQSSoHM+e5zgOF8sJ18ZhfN//YqdqhEO2EowCAi0CjtnLNAr+ niYRzgOjiyvjaA0pDWDXGbAuykUGSkrkp9/exGLzP6lTQlxE+dbd9M1X1D1eSvfM S5LkDBT1t39q8WgIzOPtoOm4CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwJwHjj SdpLxuZ0DKxmcUsWDGiUMB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhgpA+/2c1JQmxW6SVmKkWHMoXCnG6X5ZQZgFwpP9vUs0QCTSN4fcN Sw+K18PS2OmGkTIvMgdANHuZ9OM/Un4TYSCsM2qU5d+mUFw25Hfwe118TdPECX2w I0OWY/m2NyoUkSUgbVIOnx222Z+rxVLmCtcKbXJ+TGeKjcOGEv0TydmUMczuIZCs yREMQorG6QQeC5hFDoBzBu7J7D4TjJZENYbU6bbf1pjcXYeFNtuz+GbNUuBLF03z Aicmql0ss5SsknbrJvAxp3B39qrA36WUMQugyVnHJEzxE0LyQxfKR1jCoEoWUHoP 3RV1JJH6WKlULmlottelMixNwqsNY0wX -----END CERTIFICATE-----Generated at Sun Aug 24 00:53:18 2025 by rpki-client