$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json) Hash identifier: zKaqW24u01UBOpRsuepYda/pCE4NftmTlC4PpuXo+ZM= Subject key identifier: 38:8C:35:12:BB:CE:89:F1:3E:B9:39:55:13:76:FD:44:25:1B:3A:CE Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Certificate serial: 06EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft Manifest number: 1675 Signing time: Fri 22 Aug 2025 17:39:36 +0000 Manifest this update: Fri 22 Aug 2025 17:39:36 +0000 Manifest next update: Fri 29 Aug 2025 17:39:36 +0000 Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: XRtO7kmfHZEFyRs8AOnZ7k9HsH+2/DLzUnZg4qejba4=) 2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: xyf+NgV/qzZzzx4oyqEQT3Z/16fLP6Y40HqsQl4nZiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1772 (0x6ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Validity Not Before: Aug 22 17:39:36 2025 GMT Not After : Aug 29 17:39:36 2025 GMT Subject: CN=68a8ab58-ab42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:11:9d:5e:0e:da:94:bf:c2:41:be:c4:a9: 74:02:e0:32:da:f0:e5:24:27:8b:cb:e3:ca:b9:26: 1f:2c:06:ac:9c:88:32:73:7f:a1:7d:2a:fa:f4:2d: 10:4d:c7:46:62:7a:1a:ab:5b:07:be:26:a4:1d:9a: 98:ab:66:9e:7f:75:5f:ba:2e:1f:59:5c:14:28:d5: 77:d4:d2:e7:a7:f8:63:be:b4:bb:f7:0d:80:60:76: 4c:b2:1b:18:0d:d8:43:7d:9b:68:ae:17:5d:3a:e8: 3e:fc:ee:8d:97:5b:2e:57:91:b0:00:16:ca:12:5b: 72:f5:d7:12:c7:5f:2d:39:36:15:c8:bb:42:53:36: f4:82:af:f1:2a:4c:fe:25:b2:19:a8:92:ae:05:23: ad:55:d9:39:11:80:81:75:86:27:64:59:3a:cf:bb: 59:b1:2c:9f:45:e0:60:e6:83:9a:00:09:56:53:b0: 81:35:e3:57:50:e7:17:d9:21:90:c2:69:96:86:ea: 87:e5:59:90:74:6f:0c:0e:e5:1c:ce:d7:3a:5a:d2: 80:57:5b:1c:06:21:e4:bf:83:b9:a8:ec:94:e2:2e: ce:7f:c5:56:55:69:a7:a9:1a:75:9f:b3:fc:d6:80: d6:df:f6:a3:a1:5e:62:ff:6a:b9:72:67:c6:59:43: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8C:35:12:BB:CE:89:F1:3E:B9:39:55:13:76:FD:44:25:1B:3A:CE X509v3 Authority Key Identifier: keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:71:ae:b0:76:e5:30:2b:c0:bc:e9:2b:6d:6e:6d:3a:c8:2f: 71:03:5a:a0:62:41:2d:10:57:30:2e:b0:8b:eb:5e:1e:3d:e5: 85:8f:b0:31:51:6b:be:49:1c:47:44:4d:b5:9f:97:30:af:c8: eb:a4:25:80:67:1d:16:96:c7:57:78:e6:ec:b3:00:48:d6:12: 17:cf:6f:ca:f0:e9:9e:62:dd:c3:e7:63:a6:5b:f3:e7:14:f1: c3:08:69:5b:4a:6f:bf:96:f0:1c:fc:d4:32:7d:32:45:02:db: f4:df:0b:da:da:5d:3e:fb:9e:f3:fe:40:a4:77:0f:5e:d6:6d: 6c:ac:0b:7c:14:20:06:65:d6:9f:80:ab:1e:02:59:a3:a5:d9: 70:20:73:50:4d:a4:a8:4e:14:f8:92:fd:c6:e3:7f:81:24:f7: cd:81:95:0c:69:8d:1c:2e:3f:07:fe:e5:82:0f:bc:4d:8d:de: 0b:07:41:36:e0:12:e9:85:dd:7d:a6:a7:d8:28:f9:40:ab:d2: 94:9f:ed:fe:b0:a9:91:b4:32:e8:d0:12:a5:8e:d0:48:a9:16: 8d:75:13:f7:d8:0b:4d:7a:82:15:91:3c:bf:c7:c7:28:62:ba: 12:05:8a:5e:5c:97:5e:85:04:e2:2b:4d:af:3b:76:7e:d5:51: ae:28:96:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKEM5OTA1REU1MjQ4NkI5RUM0RUY4NzlBMDI2NDQ1Qzcw QjBGRDk1MDUwHhcNMjUwODIyMTczOTM2WhcNMjUwODI5MTczOTM2WjAYMRYwFAYD VQQDEw02OGE4YWI1OC1hYjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwARnV4O2pS/wkG+xKl0AuAy2vDlJCeLy+PKuSYfLAasnIgyc3+hfSr69C0Q TcdGYnoaq1sHviakHZqYq2aef3Vfui4fWVwUKNV31NLnp/hjvrS79w2AYHZMshsY DdhDfZtorhddOug+/O6Nl1suV5GwABbKElty9dcSx18tOTYVyLtCUzb0gq/xKkz+ JbIZqJKuBSOtVdk5EYCBdYYnZFk6z7tZsSyfReBg5oOaAAlWU7CBNeNXUOcX2SGQ wmmWhuqH5VmQdG8MDuUcztc6WtKAV1scBiHkv4O5qOyU4i7Of8VWVWmnqRp1n7P8 1oDW3/ajoV5i/2q5cmfGWUN9CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiMNRK7 zonxPrk5VRN2/UQlGzrOMB8GA1UdIwQYMBaAFMmQXeUkhrnsTvh5oCZEXHCw/ZUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3VleE8tSG1nSmtSY2NMRDls UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laQmQ1U1NHdWV4Ty1IbWdKa1JjY0xEOWxRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3Vl eE8tSG1nSmtSY2NMRDlsUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADca6wduUwK8C86Sttbm06yC9xA1qgYkEtEFcwLrCL614ePeWFj7Ax UWu+SRxHRE21n5cwr8jrpCWAZx0WlsdXeObsswBI1hIXz2/K8OmeYt3D52OmW/Pn FPHDCGlbSm+/lvAc/NQyfTJFAtv03wva2l0++57z/kCkdw9e1m1srAt8FCAGZdaf gKseAlmjpdlwIHNQTaSoThT4kv3G43+BJPfNgZUMaY0cLj8H/uWCD7xNjd4LB0E2 4BLphd19pqfYKPlAq9KUn+3+sKmRtDLo0BKljtBIqRaNdRP32AtNeoIVkTy/x8co YroSBYpeXJdehQTiK02vO3Z+1VGuKJZ7 -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:36 2025 by rpki-client