$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft File: _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json) Hash identifier: 8yqBE41N+XZdUFduihNStb0D87kudjHAorOc6OGwG10= Subject key identifier: A8:EC:7C:39:17:1B:BE:EF:73:8F:BD:B1:67:54:72:9F:4D:E0:83:4E Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft Manifest number: A0 Signing time: Tue 05 Aug 2025 06:47:28 +0000 Manifest this update: Tue 05 Aug 2025 06:47:27 +0000 Manifest next update: Tue 12 Aug 2025 06:47:27 +0000 Files and hashes: 1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: oJ/tufLnf86K1z0JFCnP8MxhgvBwivKc2IiRNn5EcjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Validity Not Before: Aug 5 06:47:27 2025 GMT Not After : Aug 12 06:47:27 2025 GMT Subject: CN=6891a8ff-f2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:f2:ca:f1:b8:77:b6:47:7b:8b:02:96:c7: c6:4a:56:05:9d:80:61:e9:e7:cd:78:6f:4d:2d:49: e1:fc:05:e8:58:45:4f:c2:d4:21:7f:f0:5f:b8:f3: 30:48:96:10:fe:66:d3:f5:d3:07:47:11:1c:4c:89: 38:95:2a:c5:d7:f9:16:cf:a5:8a:f1:40:56:48:a9: e8:ae:00:87:9d:47:37:e0:cd:2a:fa:b9:ad:f8:cd: 92:b9:bd:f0:7c:e8:87:b6:d8:a3:de:4d:61:60:31: 52:0f:ac:fe:06:4f:e4:d5:2d:80:e9:61:8a:a3:40: 3a:15:e3:45:16:53:85:2f:c0:3c:96:98:a3:23:37: 8c:6e:3f:9e:a1:d8:45:bb:77:44:6d:d2:70:a4:8a: 0a:16:9c:e5:12:82:5e:e9:3c:c4:27:f1:7e:10:82: 1c:30:4b:73:03:98:32:11:66:9c:6c:b1:38:87:d7: 90:60:f8:20:d8:51:ee:af:e6:72:2c:19:a8:e1:4b: bb:9f:5f:95:8a:de:db:31:d1:a8:f6:84:9f:28:46: 78:83:ea:2d:d9:ca:eb:a6:77:f5:35:ff:d7:f2:0a: 4a:84:57:92:e9:6b:81:27:52:b6:6f:23:6a:e9:21: 09:d1:30:f2:7e:41:8c:ed:00:41:59:96:c3:b0:c2: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EC:7C:39:17:1B:BE:EF:73:8F:BD:B1:67:54:72:9F:4D:E0:83:4E X509v3 Authority Key Identifier: keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ec:64:20:e0:c9:66:b2:3b:0d:6f:5e:23:29:55:aa:79:f5: cc:c0:a7:e5:d7:cd:07:6c:f8:69:a1:16:6e:9f:b2:67:41:72: 88:97:d4:07:6a:14:54:c6:09:60:73:6e:b6:83:e9:a5:e4:07: e3:1e:f2:5a:0c:18:5b:b2:e7:8e:85:53:b6:92:17:6d:7f:85: 87:84:38:bf:9d:87:a1:36:e8:4b:0d:6c:3a:47:39:8c:c9:4d: 1e:4d:6c:e4:c6:2a:a4:f0:af:7a:95:82:31:8c:8c:5b:88:18: 0a:06:8d:28:15:f9:24:d3:b2:88:30:37:f3:35:a2:73:dc:d5: f3:52:6a:b1:d2:0f:3b:07:96:65:9f:ce:e2:41:f1:6d:da:39: 68:e4:ee:57:84:39:3b:d4:73:18:75:a5:ac:e1:f1:b1:11:65: 56:58:82:f6:67:a9:7c:45:bd:5f:c8:b2:8c:a5:1f:77:f1:42: 0c:bf:fe:e3:95:73:ed:7d:31:3b:46:98:36:66:07:91:1d:ef: 53:63:0d:2b:7d:65:a0:0a:13:a0:85:83:2a:a8:51:c8:e5:5c: 41:54:2d:ca:b1:87:d0:79:2c:f9:d2:61:10:ec:42:11:64:04: f0:b4:27:65:df:65:56:03:0c:5a:ca:9b:1f:c7:a4:96:51:bc: f7:fc:06:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKEZEODAxMkJGRTk5MTI5RUY5QzhCQjdBNDYwMzIxNDQy RjZEMjY1NjIwHhcNMjUwODA1MDY0NzI3WhcNMjUwODEyMDY0NzI3WjAYMRYwFAYD VQQDEw02ODkxYThmZi1mMmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDryyvG4d7ZHe4sClsfGSlYFnYBh6efNeG9NLUnh/AXoWEVPwtQhf/BfuPMw SJYQ/mbT9dMHRxEcTIk4lSrF1/kWz6WK8UBWSKnorgCHnUc34M0q+rmt+M2Sub3w fOiHttij3k1hYDFSD6z+Bk/k1S2A6WGKo0A6FeNFFlOFL8A8lpijIzeMbj+eodhF u3dEbdJwpIoKFpzlEoJe6TzEJ/F+EIIcMEtzA5gyEWacbLE4h9eQYPgg2FHur+Zy LBmo4Uu7n1+Vit7bMdGo9oSfKEZ4g+ot2crrpnf1Nf/X8gpKhFeS6WuBJ1K2byNq 6SEJ0TDyfkGM7QBBWZbDsMJiiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjsfDkX G77vc4+9sWdUcp9N4INOMB8GA1UdIwQYMBaAFP2AEr/pkSnvnIu3pGAyFEL20mVi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wMUQyMzlBNDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktlLWNpN2VrWURJVVF2YlNa V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wMUQyMzlBNDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktl LWNpN2VrWURJVVF2YlNaV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA67GQg4MlmsjsNb14jKVWqefXMwKfl180HbPhpoRZun7JnQXKIl9QH ahRUxglgc262g+ml5AfjHvJaDBhbsueOhVO2khdtf4WHhDi/nYehNuhLDWw6RzmM yU0eTWzkxiqk8K96lYIxjIxbiBgKBo0oFfkk07KIMDfzNaJz3NXzUmqx0g87B5Zl n87iQfFt2jlo5O5XhDk71HMYdaWs4fGxEWVWWIL2Z6l8Rb1fyLKMpR938UIMv/7j lXPtfTE7Rpg2ZgeRHe9TYw0rfWWgChOghYMqqFHI5VxBVC3KsYfQeSz50mEQ7EIR ZATwtCdl32VWAwxaypsfx6SWUbz3/AZV -----END CERTIFICATE-----Generated at Wed Aug 6 16:06:00 2025 by rpki-client