$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json) Hash identifier: 2gevEGmmOEpxAUGIYtdDzuWwqII/L+HzHtikMhvPCFE= Subject key identifier: 9F:77:7B:76:E0:AA:8B:E7:E0:BA:F1:7C:86:6C:90:9A:D8:35:95:D0 Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft Manifest number: 064A Signing time: Fri 22 Aug 2025 22:51:09 +0000 Manifest this update: Fri 22 Aug 2025 22:51:08 +0000 Manifest next update: Fri 29 Aug 2025 22:51:08 +0000 Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: 5B4G1ESBVWbSbvuq5zCd21wLl1mI0d+KDPoEdKLlASc=) 2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=) 3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: WNqUPBF8HNjFohXgQh/4EEtiPRYZ8HZnCTlz6HaVU7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Validity Not Before: Aug 22 22:51:08 2025 GMT Not After : Aug 29 22:51:08 2025 GMT Subject: CN=68a8f45c-05a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:80:d0:56:37:22:c8:f6:73:41:cb:d1:25: f2:6b:dd:f2:07:c3:1c:a0:60:4d:c2:7e:70:5b:f5: 95:8b:bc:bf:cf:28:14:4c:b5:3e:8e:c9:fc:ee:b9: 2b:2f:1d:e7:37:eb:ab:f0:36:e8:3d:93:11:f2:cb: 80:92:61:a9:3b:99:45:14:27:09:bd:de:f7:a4:fd: 66:23:3e:8d:bd:d9:6b:2a:c2:17:4d:4c:cc:a0:b0: c7:96:3b:fc:d0:38:fa:12:34:11:8d:28:79:4f:46: 66:53:b0:4b:bd:37:cd:5a:eb:b8:3a:5c:dd:d5:39: 9e:67:6f:c3:27:da:82:f7:e6:0b:43:f4:a8:c3:09: 8e:fa:c3:68:49:a8:e3:66:95:f9:e5:d1:bf:36:0e: d0:91:b2:d1:ad:86:37:1e:cf:45:18:f6:38:35:29: da:0e:2e:3e:57:53:0e:53:a0:08:f7:b8:1c:1c:47: b6:83:ff:c6:46:ca:1e:c0:54:e8:88:c8:0f:51:aa: 6a:8f:3a:f0:5f:60:d5:c8:2a:82:4d:1d:e8:e5:37: 98:83:d5:39:1a:ba:75:53:92:34:84:be:75:9e:9f: 88:96:ed:87:63:50:ea:01:87:a7:5b:50:08:92:6b: 5f:bc:99:8b:a0:2e:fa:2e:37:4e:c2:49:e2:df:92: da:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:77:7B:76:E0:AA:8B:E7:E0:BA:F1:7C:86:6C:90:9A:D8:35:95:D0 X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:52:e4:0b:c5:10:b5:f6:fe:d9:a7:4b:53:1c:d9:86:5a:a8: 65:8e:a6:72:a6:77:6e:7e:c0:24:c0:37:fd:27:0b:25:55:7a: 0f:1c:17:36:e3:e3:c2:2f:23:b4:6b:e6:bc:05:73:aa:ae:91: fd:2d:a8:ee:86:6e:dd:33:ff:6a:2c:d3:0d:0d:c3:4d:a8:70: 19:2f:db:fc:d1:9b:36:58:33:5f:5a:f0:4f:64:67:9f:0f:57: ee:d1:b6:c3:75:c7:b6:04:db:41:ca:db:cd:4a:40:a1:a1:ed: 26:30:b5:36:09:7a:27:87:c8:b6:fa:2f:63:56:8c:08:a7:42: 13:e9:26:aa:fd:d1:b4:25:02:14:10:bf:ba:7e:7d:c0:5c:30: c9:b6:de:00:30:1f:b0:5e:d9:63:1d:be:9e:e9:01:0e:9f:97: f0:ee:93:04:2e:b9:45:12:bd:52:99:54:02:e1:82:1c:16:51: 31:e9:f0:8d:d0:9f:4f:12:60:7a:66:53:84:da:43:9a:e6:d2: cc:28:cc:ad:aa:87:9f:10:2a:4f:96:2f:74:06:92:5d:5d:5d: 27:cb:8e:07:e2:ff:af:c3:ed:ee:a9:53:a3:7b:8e:98:af:34: 53:a9:9e:f3:53:b5:98:f6:bf:dc:5f:bc:f9:6a:70:30:de:ba: 30:9e:04:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjUwODIyMjI1MTA4WhcNMjUwODI5MjI1MTA4WjAYMRYwFAYD VQQDEw02OGE4ZjQ1Yy0wNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN2A0FY3Isj2c0HL0SXya93yB8McoGBNwn5wW/WVi7y/zygUTLU+jsn87rkr Lx3nN+ur8DboPZMR8suAkmGpO5lFFCcJvd73pP1mIz6NvdlrKsIXTUzMoLDHljv8 0Dj6EjQRjSh5T0ZmU7BLvTfNWuu4Olzd1TmeZ2/DJ9qC9+YLQ/SowwmO+sNoSajj ZpX55dG/Ng7QkbLRrYY3Hs9FGPY4NSnaDi4+V1MOU6AI97gcHEe2g//GRsoewFTo iMgPUapqjzrwX2DVyCqCTR3o5TeYg9U5Grp1U5I0hL51np+Ilu2HY1DqAYenW1AI kmtfvJmLoC76LjdOwkni35LafQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ93e3bg qovn4LrxfIZskJrYNZXQMB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTk5OC8yQzU5MkUyODlGMUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JR Z09fWnFtejZXbEhFcDUzU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4UuQLxRC19v7Zp0tTHNmGWqhljqZypndufsAkwDf9JwslVXoPHBc2 4+PCLyO0a+a8BXOqrpH9Lajuhm7dM/9qLNMNDcNNqHAZL9v80Zs2WDNfWvBPZGef D1fu0bbDdce2BNtBytvNSkChoe0mMLU2CXonh8i2+i9jVowIp0IT6Saq/dG0JQIU EL+6fn3AXDDJtt4AMB+wXtljHb6e6QEOn5fw7pMELrlFEr1SmVQC4YIcFlEx6fCN 0J9PEmB6ZlOE2kOa5tLMKMytqoefECpPli90BpJdXV0ny44H4v+vw+3uqVOje46Y rzRTqZ7zU7WY9r/cX7z5anAw3rowngT4 -----END CERTIFICATE-----Generated at Sat Aug 23 10:46:13 2025 by rpki-client