$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft File: yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json) Hash identifier: qVkb6IwrptpRycWBTy6xpKJZOcvZsP98KWmwg96ePHE= Subject key identifier: 6C:27:C2:A5:A6:E1:D7:B2:9C:2D:32:D6:CA:BC:85:5B:D6:CB:B4:04 Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 Certificate issuer: /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft Manifest number: 38 Signing time: Thu 07 Aug 2025 08:13:31 +0000 Manifest this update: Thu 07 Aug 2025 08:13:30 +0000 Manifest next update: Thu 14 Aug 2025 08:13:30 +0000 Files and hashes: 1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: pLOD9k/mxqdROUB8uw1j4r3xhxr4o2yIreYDJr0Vxh0=) 2: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: AsQWM+7HuozWTCBGDmXSa7QBPRIjHi4ee9IcaHPhl78=) 3: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: bD+Fep8IQgDA8vluXrT5vCvPbCgLZmMh8P2tGfHiM1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17 Validity Not Before: Aug 7 08:13:30 2025 GMT Not After : Aug 14 08:13:30 2025 GMT Subject: CN=6894602a-4355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:ec:f2:3e:15:67:4c:ed:e3:7c:88:0e:0b: 7e:04:19:ed:eb:ad:4b:86:5e:6e:fc:99:38:2a:b4: 7b:ae:51:96:d3:79:f3:01:5b:09:c1:94:12:d0:78: a9:5c:ee:ac:3c:16:ea:b8:ab:2f:52:ce:d7:37:4a: 97:12:01:a0:88:7d:6d:2f:30:5f:11:58:a6:cf:2a: d1:a8:89:f3:c2:e3:04:13:c7:e1:ff:3b:45:df:23: bf:73:68:1f:e4:61:7d:21:c7:2a:f6:9d:e6:b5:95: 3e:f5:9a:aa:75:92:cd:0d:4c:d9:5b:9a:bf:72:65: 98:59:7e:1f:35:1b:b7:e6:a4:38:b3:fd:ed:e6:05: 3f:0e:e3:ea:a8:bd:1a:83:ca:26:d3:b4:66:8c:3d: 37:d5:07:a4:16:18:e5:4d:8c:ce:6c:77:92:42:56: de:a3:f1:91:d2:26:6a:36:54:a9:01:59:15:63:a5: 6a:b7:85:bf:3a:b0:08:c4:32:ce:77:6b:bc:99:a4: 6f:2b:0f:7f:88:a5:91:82:5f:a5:71:2d:06:61:1d: 4a:83:cd:4c:62:65:b8:97:12:85:ba:ec:b0:94:8b: f5:cd:8e:cb:9b:9a:85:b9:f3:0f:e6:4e:3b:77:cc: 8e:62:c3:a8:a7:36:01:c5:e3:01:2f:8d:fa:46:39: d8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:27:C2:A5:A6:E1:D7:B2:9C:2D:32:D6:CA:BC:85:5B:D6:CB:B4:04 X509v3 Authority Key Identifier: keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:8d:9c:e7:97:05:0a:d0:02:ed:a7:1c:20:a1:3b:58:17:84: 56:dc:94:97:1d:f2:ae:f5:b0:5a:e0:de:39:f4:bb:1c:3d:da: 28:f7:f7:37:28:58:1a:30:e3:56:fe:d7:40:be:9f:48:d3:10: 44:85:d2:e8:1f:9a:a3:98:bd:a4:c4:7d:29:b4:aa:37:12:00: 3c:81:a3:89:9d:06:83:cd:51:b4:7c:89:f0:25:41:ea:37:47: 01:7f:56:94:ca:4a:e5:df:f6:3e:44:25:b7:47:00:03:fc:f7: 03:42:b4:7e:a1:40:cb:d0:65:93:3e:8c:39:c5:6d:e8:d2:a7: 43:34:2f:66:99:70:42:8c:93:03:71:f9:9a:a5:a7:63:2b:47: 50:96:e9:99:97:19:ee:80:13:9f:93:c5:c2:57:48:3a:90:91: 61:83:e3:fc:97:bf:f8:eb:73:5e:be:da:91:9b:9a:a8:73:da: e7:ad:a8:e0:f4:0e:db:f6:7a:34:9d:58:b4:ac:86:a0:3e:64: d3:22:5a:f5:4c:25:90:86:61:e6:73:62:64:77:a3:d4:85:36: fa:1e:c9:1f:c2:0b:7a:cc:03:9e:d8:cc:59:15:8c:e5:0c:22: f5:ec:18:48:65:51:71:41:4e:3c:b0:ed:94:a2:f3:52:42:07: c3:45:6f:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MzQ5MzExMC8GA1UEBRMoQzhCMkJDM0I4QUIxRUJBRTRBNzQzRjkwRDhDOEExREZE MUQ0Q0UxNzAeFw0yNTA4MDcwODEzMzBaFw0yNTA4MTQwODEzMzBaMBgxFjAUBgNV BAMTDTY4OTQ2MDJhLTQzNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFduzyPhVnTO3jfIgOC34EGe3rrUuGXm78mTgqtHuuUZbTefMBWwnBlBLQeKlc 7qw8Fuq4qy9Sztc3SpcSAaCIfW0vMF8RWKbPKtGoifPC4wQTx+H/O0XfI79zaB/k YX0hxyr2nea1lT71mqp1ks0NTNlbmr9yZZhZfh81G7fmpDiz/e3mBT8O4+qovRqD yibTtGaMPTfVB6QWGOVNjM5sd5JCVt6j8ZHSJmo2VKkBWRVjpWq3hb86sAjEMs53 a7yZpG8rD3+IpZGCX6VxLQZhHUqDzUxiZbiXEoW67LCUi/XNjsubmoW58w/mTjt3 zI5iw6inNgHF4wEvjfpGOdhDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbCfCpabh 17KcLTLWyryFW9bLtAQwHwYDVR0jBBgwFoAUyLK8O4qx665KdD+Q2Mih39HUzhcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzNDkzLzA1RUMxRDE0MUVG OTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1S2RELVEyTWloMzlIVXpo Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUxLOE80cXg2NjVLZEQtUTJNaWgzOUhVemhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz NDkzLzA1RUMxRDE0MUVGOTExRjBCNDExRTMyRUM0RjlBRTAyL3lMSzhPNHF4NjY1 S2RELVEyTWloMzlIVXpoYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWNnOeXBQrQAu2nHCChO1gXhFbclJcd8q71sFrg3jn0uxw92ij39zco WBow41b+10C+n0jTEESF0ugfmqOYvaTEfSm0qjcSADyBo4mdBoPNUbR8ifAlQeo3 RwF/VpTKSuXf9j5EJbdHAAP89wNCtH6hQMvQZZM+jDnFbejSp0M0L2aZcEKMkwNx +Zqlp2MrR1CW6ZmXGe6AE5+TxcJXSDqQkWGD4/yXv/jrc16+2pGbmqhz2uetqOD0 Dtv2ejSdWLSshqA+ZNMiWvVMJZCGYeZzYmR3o9SFNvoeyR/CC3rMA57YzFkVjOUM IvXsGEhlUXFBTjyw7ZSi81JCB8NFb6g= -----END CERTIFICATE-----Generated at Sat Aug 9 05:36:43 2025 by rpki-client