$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft File: 3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json) Hash identifier: kEtimzXNEjtlLV6r3hdc2fbgyoK0iUXF5Sfcad6L1T0= Subject key identifier: 89:F6:01:93:C2:B7:63:B3:77:17:11:A4:ED:F7:AC:07:94:9B:04:E0 Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B Certificate issuer: /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft Manifest number: 03C4 Signing time: Sat 23 Aug 2025 00:55:32 +0000 Manifest this update: Sat 23 Aug 2025 00:55:32 +0000 Manifest next update: Sat 30 Aug 2025 00:55:31 +0000 Files and hashes: 1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: AtXsy8djfziEKVtWb1quBcrEqfjJkPZCV+OTSrEyT9Q=) 2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: ctAElc1BM1zI8owbq6eyFwFyuzNUp7IAey45t5f8jpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Validity Not Before: Aug 23 00:55:32 2025 GMT Not After : Aug 30 00:55:31 2025 GMT Subject: CN=68a91184-328b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f0:b5:c3:35:3d:1f:ab:fb:44:64:16:c5:45: 58:16:dc:7a:92:db:d7:05:b0:a6:d3:64:cb:e6:3e: 6a:65:42:b0:16:95:7c:30:ec:c7:43:73:43:28:f6: 34:86:ed:b1:25:fe:6f:a2:e0:b4:da:29:04:20:00: 29:a5:93:89:6a:52:66:1f:5b:51:28:71:e2:8f:fb: 87:5f:73:fe:9f:52:e6:70:09:55:3d:63:2f:30:07: e9:68:7d:57:b7:38:92:0f:7f:5c:5b:53:20:b5:ab: ea:88:3f:12:74:69:86:1d:c5:5b:0e:3b:4e:38:3a: d3:68:f3:38:a9:66:00:b8:83:12:a4:48:51:9f:71: 2b:8f:e8:f0:05:3b:7f:95:0d:f2:36:cc:06:b0:38: 85:41:04:ff:39:92:83:98:25:b2:ee:73:2f:7f:54: d3:83:f6:63:f2:48:c0:d7:30:f5:df:80:7a:8f:ee: a7:ea:49:d1:8c:93:30:e8:a3:80:b2:44:5b:dc:8e: 1c:f0:5d:5d:5e:ac:d0:b5:8c:4d:95:8e:d3:cf:33: 74:48:c4:3c:15:f7:17:23:2d:9d:d5:c9:c6:eb:17: 59:5f:06:ff:0e:56:a9:0c:f5:67:6f:4f:99:41:84: 3a:78:df:66:dd:cf:ac:2c:84:bc:d7:8a:f9:08:ed: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F6:01:93:C2:B7:63:B3:77:17:11:A4:ED:F7:AC:07:94:9B:04:E0 X509v3 Authority Key Identifier: keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:95:4b:5b:05:3a:7f:18:d7:46:95:ae:43:e4:92:6a:05:a2: bd:0b:37:1b:5f:00:e9:b3:58:a9:fc:30:c1:97:6a:68:d9:31: a7:ce:1c:c4:f1:63:67:cd:72:d7:50:f9:e5:e9:a4:6c:6f:d8: 08:b1:55:c8:df:f8:8c:43:6d:b4:d1:94:43:cd:d5:18:9b:41: 61:09:fc:b0:8d:34:49:53:49:b6:96:0c:ee:24:8d:a6:64:06: 5a:ed:9b:b8:3f:46:ae:52:6e:46:a8:77:42:c5:69:3e:c9:88: 71:9b:40:08:28:f8:ce:da:13:e0:b0:56:55:7a:e3:53:2b:46: 84:45:82:5d:e7:37:db:3c:5b:b7:68:0c:ce:d1:ec:b0:65:19: bb:df:e3:df:8e:59:dd:aa:06:9d:fc:b4:32:fe:cc:d5:ce:3a: 09:4c:e6:fc:4b:7a:7f:27:79:d1:d9:88:7d:35:c5:3b:63:1a: a6:15:ce:90:a3:27:d7:fd:29:16:26:02:40:d1:69:ff:00:e6: 87:6b:4e:21:36:e1:65:d3:bf:ea:99:ac:0e:2f:18:66:ca:de: 69:f1:92:ce:ca:e9:70:d1:50:84:4b:b0:5a:3a:cd:fc:b1:58: 2b:41:6e:94:a9:9d:4e:f4:43:5c:64:56:aa:c7:35:57:e3:0a: 4d:33:3d:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKEREOEEyQjg4NjU0QzMzNjZGRkU3RkNGNjU1NkE5Nzg2 MDAyQUE2NUIwHhcNMjUwODIzMDA1NTMyWhcNMjUwODMwMDA1NTMxWjAYMRYwFAYD VQQDEw02OGE5MTE4NC0zMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PC1wzU9H6v7RGQWxUVYFtx6ktvXBbCm02TL5j5qZUKwFpV8MOzHQ3NDKPY0 hu2xJf5vouC02ikEIAAppZOJalJmH1tRKHHij/uHX3P+n1LmcAlVPWMvMAfpaH1X tziSD39cW1MgtavqiD8SdGmGHcVbDjtOODrTaPM4qWYAuIMSpEhRn3Erj+jwBTt/ lQ3yNswGsDiFQQT/OZKDmCWy7nMvf1TTg/Zj8kjA1zD134B6j+6n6knRjJMw6KOA skRb3I4c8F1dXqzQtYxNlY7TzzN0SMQ8FfcXIy2d1cnG6xdZXwb/DlapDPVnb0+Z QYQ6eN9m3c+sLIS814r5CO340wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIn2AZPC t2OzdxcRpO33rAeUmwTgMB8GA1UdIwQYMBaAFN2KK4hlTDNm/+f89lVql4YAKqZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS9FODUzMzgyQzlG MTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0yYl81X3oyVldxWGhnQXFw bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZb3JpR1ZNTTJiXzVfejJWV3FYaGdBcXBscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS9FODUzMzgyQzlGMTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0y Yl81X3oyVldxWGhnQXFwbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJlUtbBTp/GNdGla5D5JJqBaK9CzcbXwDps1ip/DDBl2po2TGnzhzE 8WNnzXLXUPnl6aRsb9gIsVXI3/iMQ2200ZRDzdUYm0FhCfywjTRJU0m2lgzuJI2m ZAZa7Zu4P0auUm5GqHdCxWk+yYhxm0AIKPjO2hPgsFZVeuNTK0aERYJd5zfbPFu3 aAzO0eywZRm73+Pfjlndqgad/LQy/szVzjoJTOb8S3p/J3nR2Yh9NcU7YxqmFc6Q oyfX/SkWJgJA0Wn/AOaHa04hNuFl07/qmawOLxhmyt5p8ZLOyulw0VCES7BaOs38 sVgrQW6UqZ1O9ENcZFaqxzVX4wpNMz0t -----END CERTIFICATE-----Generated at Sat Aug 23 17:53:37 2025 by rpki-client