$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json) Hash identifier: JmR8NmeQDHFA2I7N5j15wzFwUmN/VqIwNdPNJg98CT0= Subject key identifier: EB:24:B4:A1:4C:D3:D1:03:36:0E:C1:06:AE:9B:EE:63:03:0C:4D:13 Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft Manifest number: 011D Signing time: Sat 23 Aug 2025 04:58:15 +0000 Manifest this update: Sat 23 Aug 2025 04:58:14 +0000 Manifest next update: Sat 30 Aug 2025 04:58:14 +0000 Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: ZybwJsPI6WQtx+NNQHjK4bRdK9IjryBQNPnI7MLD/oA=) 2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: 8r1ggxGUtscfFUhVNnn2tSXuD/VeviYdi6zXjlI+agM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Validity Not Before: Aug 23 04:58:14 2025 GMT Not After : Aug 30 04:58:14 2025 GMT Subject: CN=68a94a66-f811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:8e:16:30:6a:2a:a4:af:ee:d9:63:5a:70: 69:cf:5a:d5:17:c2:c1:45:cf:cf:8c:70:56:cc:f2: 13:cb:d6:f8:35:e3:d8:64:42:29:19:77:b3:68:e6: c1:bd:f3:d0:38:30:6d:ea:5e:7e:08:0e:39:bd:00: dd:a6:40:75:91:b1:0c:85:92:7f:75:5a:0c:f2:d9: 86:de:ef:a4:84:6c:8d:3e:da:1a:02:7c:9b:fd:b0: d3:1f:c6:2c:aa:94:85:a2:bc:ff:56:1f:c8:39:07: 41:2a:60:b8:51:29:8d:73:86:ec:1a:a6:c9:43:1b: d3:ad:30:ba:11:08:ab:9f:d7:d6:eb:82:b8:38:c2: 85:d6:13:d6:d8:c8:6a:50:00:c9:8f:d9:41:f3:c0: f6:53:d7:05:3e:d4:89:08:a4:02:71:e6:98:84:d1: ab:ca:23:17:8e:af:ad:50:a7:db:78:9c:43:15:cc: 14:25:bc:0b:b7:0e:7f:29:3d:9c:2c:ab:f9:dc:af: bb:02:b9:cf:8b:c1:8f:12:5a:c2:d8:f2:5e:62:76: 42:90:75:d1:4c:a5:0e:be:04:f2:b6:ad:ba:d8:c9: 2e:33:c1:9e:4c:94:bd:4b:8b:25:7b:17:7c:5a:84: c2:2d:58:a7:96:68:83:be:82:78:f9:c0:cc:9e:fc: 44:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:24:B4:A1:4C:D3:D1:03:36:0E:C1:06:AE:9B:EE:63:03:0C:4D:13 X509v3 Authority Key Identifier: keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f4:a1:1d:d7:2d:21:a4:e6:de:d7:b9:b5:63:ba:39:a4:79: 21:17:8f:c0:43:ad:27:6d:c6:43:97:1a:cf:b4:81:93:5d:f9: 1b:13:ea:df:ef:45:3c:9c:cb:41:b7:df:01:52:7c:10:fa:ee: 40:4c:d4:73:c6:95:28:ef:85:d5:b8:49:c7:b6:cb:55:52:ab: dd:8d:71:62:8c:15:0a:ec:20:e3:71:77:c5:97:d6:2c:b4:85: 6b:c9:cd:b5:e4:ef:7d:1a:6c:d6:16:7e:ee:79:63:80:d9:ad: c7:8d:81:53:79:00:1b:6e:d8:c9:85:2e:61:5e:16:61:cb:bb: be:98:35:08:f8:42:77:62:6b:0a:b3:13:14:1b:23:d7:7e:e2: 78:ff:95:cc:58:82:bb:5e:58:2f:d4:a9:89:31:78:73:85:93: 26:c9:82:47:d8:26:35:81:ee:c4:5a:a5:5b:dd:74:e7:7c:07: 2e:1d:1b:4c:fe:19:78:d3:1b:6a:a7:94:7c:a0:39:e8:57:63: 70:37:be:6e:a2:9b:9c:97:29:d5:9c:d7:a9:81:91:00:d7:3f: 0d:9c:5d:6b:fa:17:21:69:6b:f3:0e:42:c4:f3:9d:fd:37:11: 00:0e:c2:a3:a8:5c:0a:e7:3f:73:ea:13:91:9b:b0:91:89:5e: 54:f1:47:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKDYyNjEwOUJCRUNDOThCQTUyRTdGMzk5QjgwOTYyRDNB RkU1QUIyRDQwHhcNMjUwODIzMDQ1ODE0WhcNMjUwODMwMDQ1ODE0WjAYMRYwFAYD VQQDEw02OGE5NGE2Ni1mODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj6OFjBqKqSv7tljWnBpz1rVF8LBRc/PjHBWzPITy9b4NePYZEIpGXezaObB vfPQODBt6l5+CA45vQDdpkB1kbEMhZJ/dVoM8tmG3u+khGyNPtoaAnyb/bDTH8Ys qpSForz/Vh/IOQdBKmC4USmNc4bsGqbJQxvTrTC6EQirn9fW64K4OMKF1hPW2Mhq UADJj9lB88D2U9cFPtSJCKQCceaYhNGryiMXjq+tUKfbeJxDFcwUJbwLtw5/KT2c LKv53K+7ArnPi8GPElrC2PJeYnZCkHXRTKUOvgTytq262MkuM8GeTJS9S4slexd8 WoTCLVinlmiDvoJ4+cDMnvxE3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsktKFM 09EDNg7BBq6b7mMDDE0TMB8GA1UdIwQYMBaAFGJhCbvsyYulLn85m4CWLTr+WrLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FRTMxRDg3NEQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2VXVmem1iZ0pZdE92NWFz dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FRTMxRDg3NEQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2 VXVmem1iZ0pZdE92NWFzdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN9KEd1y0hpObe17m1Y7o5pHkhF4/AQ60nbcZDlxrPtIGTXfkbE+rf 70U8nMtBt98BUnwQ+u5ATNRzxpUo74XVuEnHtstVUqvdjXFijBUK7CDjcXfFl9Ys tIVryc215O99GmzWFn7ueWOA2a3HjYFTeQAbbtjJhS5hXhZhy7u+mDUI+EJ3YmsK sxMUGyPXfuJ4/5XMWIK7Xlgv1KmJMXhzhZMmyYJH2CY1ge7EWqVb3XTnfAcuHRtM /hl40xtqp5R8oDnoV2NwN75uopuclynVnNepgZEA1z8NnF1r+hchaWvzDkLE8539 NxEADsKjqFwK5z9z6hORm7CRiV5U8UeS -----END CERTIFICATE-----Generated at Sun Aug 24 02:34:30 2025 by rpki-client