$ rpki-client -vvf rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft File: yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft (raw, json) Hash identifier: m7+cLknhrcWbveiV82ikd9okeOj+fwzmTLNVcXzslCw= Subject key identifier: 04:FD:D2:C0:14:FD:AF:DF:59:AB:93:BF:5D:EC:0B:E0:A5:6B:C0:6B Authority key identifier: C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E Certificate issuer: /CN=A915547C/serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E Certificate serial: 02B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft Manifest number: 02A8 Signing time: Mon 11 Aug 2025 01:46:58 +0000 Manifest this update: Mon 11 Aug 2025 01:46:57 +0000 Manifest next update: Mon 18 Aug 2025 01:46:57 +0000 Files and hashes: 1: yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl (hash: j6m1dGWZRXwbAROau0owOEMSgpIRtJ3ZOq4IgQ6V3LU=) 2: 80C08414A45B11EDA610F30BC4F9AE02.roa (hash: YECGFmsS3YqMK8QF+uRexbLFkUyQX0XL0w3iDLNMxig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 01:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915547C, serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E Validity Not Before: Aug 11 01:46:57 2025 GMT Not After : Aug 18 01:46:57 2025 GMT Subject: CN=68994b91-2e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:75:6d:65:a0:b3:44:aa:0e:13:9b:f0:35: 03:6d:ec:da:21:ad:91:49:56:91:12:cd:9f:43:80: 1f:93:99:0c:78:6f:29:66:88:86:20:96:45:44:95: 12:93:c2:c8:ce:f4:01:cf:12:cf:b4:4f:fa:c3:78: 97:b7:47:b8:9b:8f:0d:72:ac:9a:f7:3d:42:34:38: 8d:34:1b:74:99:93:ca:1a:64:25:ab:fe:57:a8:d9: e7:37:a8:75:1d:34:d3:1a:99:a6:c9:0b:b7:5c:aa: 52:de:b7:01:ec:03:ba:c4:c3:ae:2a:d1:7e:cc:1f: ea:5c:21:4b:81:2a:e7:af:85:82:d5:45:8e:e9:a5: 96:43:c5:e2:c6:b5:0e:77:fe:a9:36:7b:26:94:c1: 51:82:53:48:f3:e8:0d:de:65:8d:44:0f:73:33:8a: 32:31:79:63:37:a5:b7:31:13:0d:56:fd:e1:e7:21: e6:10:19:f3:2f:de:7c:49:b1:c7:82:d1:d9:f0:5d: 4e:20:ac:6a:b2:81:e7:78:52:4c:e5:ab:c2:7f:b2: 4c:5e:02:fc:ac:12:2a:15:d0:25:f7:89:dc:dd:c7: 82:0b:4e:fb:90:df:f0:01:c3:91:b7:de:ac:2c:e8: ae:7a:e2:f2:bc:b4:2b:07:63:c3:a1:e1:ad:d7:b4: c2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FD:D2:C0:14:FD:AF:DF:59:AB:93:BF:5D:EC:0B:E0:A5:6B:C0:6B X509v3 Authority Key Identifier: keyid:C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c8:f5:00:7a:bb:3b:ea:32:95:32:63:19:84:db:36:54:db: 79:f2:78:8f:a3:40:d2:44:48:ed:34:c6:0b:fd:de:e5:8d:50: d9:fd:09:8c:ef:8f:bc:15:ef:fa:2a:3e:eb:53:87:4a:1b:39: 70:ba:46:78:1f:93:cf:f1:e8:fa:df:f1:83:05:c3:1f:d7:b0: 68:75:5d:c1:54:f5:6c:2c:cf:7c:37:92:f2:08:b9:3c:cc:7f: f1:c8:4e:d4:5b:89:4d:79:03:a0:41:3d:d4:fb:eb:7e:a3:fc: 93:aa:80:f6:9a:fa:d5:26:0c:60:6e:19:06:e7:98:87:a1:21: 60:7b:e3:e6:e7:04:3d:11:04:47:d8:77:3a:4d:6a:7b:3a:c7: bc:bf:f8:86:6f:47:a7:cd:7e:29:b1:ab:d5:5a:13:d5:2f:61: 8d:96:13:9d:a8:1e:b1:93:d7:19:c7:c1:66:52:04:f3:91:f1: 1f:9b:e1:94:85:f5:12:20:e0:6e:78:eb:9b:36:92:77:e1:7f: 38:43:2d:d6:2e:50:6c:62:94:3f:44:9d:f8:56:29:70:86:b9: a7:1c:8c:52:ff:7f:57:d9:b9:16:9f:cf:f3:3e:9d:70:da:0f: be:37:af:cc:30:31:de:2b:23:ca:e0:c5:e7:98:5f:f0:85:02: c4:6f:cb:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0N0MxMTAvBgNVBAUTKEM5MzYwRUM5MUVFQzE0QjA3RUQ3OTJGRDNCMEZCQUI3 RkY5RjY0MkUwHhcNMjUwODExMDE0NjU3WhcNMjUwODE4MDE0NjU3WjAYMRYwFAYD VQQDEw02ODk5NGI5MS0yZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOB1bWWgs0SqDhOb8DUDbezaIa2RSVaREs2fQ4Afk5kMeG8pZoiGIJZFRJUS k8LIzvQBzxLPtE/6w3iXt0e4m48Ncqya9z1CNDiNNBt0mZPKGmQlq/5XqNnnN6h1 HTTTGpmmyQu3XKpS3rcB7AO6xMOuKtF+zB/qXCFLgSrnr4WC1UWO6aWWQ8XixrUO d/6pNnsmlMFRglNI8+gN3mWNRA9zM4oyMXljN6W3MRMNVv3h5yHmEBnzL958SbHH gtHZ8F1OIKxqsoHneFJM5avCf7JMXgL8rBIqFdAl94nc3ceCC077kN/wAcORt96s LOiueuLyvLQrB2PDoeGt17TCgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAT90sAU /a/fWauTv13sC+Cla8BrMB8GA1UdIwQYMBaAFMk2Dske7BSwfteS/TsPurf/n2Qu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ3Qy81NzZDQ0QyQTBD NTMxMUVEODMyNzQ3MEFDNEY5QUUwMi95VFlPeVI3c0ZMQi0xNUw5T3ctNnRfLWZa QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lUWU95UjdzRkxCLTE1TDlPdy02dF8tZlpDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTQ3Qy81NzZDQ0QyQTBDNTMxMUVEODMyNzQ3MEFDNEY5QUUwMi95VFlPeVI3c0ZM Qi0xNUw5T3ctNnRfLWZaQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTyPUAers76jKVMmMZhNs2VNt58niPo0DSREjtNMYL/d7ljVDZ/QmM 74+8Fe/6Kj7rU4dKGzlwukZ4H5PP8ej63/GDBcMf17BodV3BVPVsLM98N5LyCLk8 zH/xyE7UW4lNeQOgQT3U++t+o/yTqoD2mvrVJgxgbhkG55iHoSFge+Pm5wQ9EQRH 2Hc6TWp7Ose8v/iGb0enzX4psavVWhPVL2GNlhOdqB6xk9cZx8FmUgTzkfEfm+GU hfUSIOBueOubNpJ34X84Qy3WLlBsYpQ/RJ34VilwhrmnHIxS/39X2bkWn8/zPp1w 2g++N6/MMDHeKyPK4MXnmF/whQLEb8sy -----END CERTIFICATE-----Generated at Tue Aug 12 18:59:44 2025 by rpki-client