$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json) Hash identifier: 3TJhFKHJZx8ovlIeZFq5ZZoHhuldHX09HdS/oP7kFWI= Subject key identifier: AC:1A:81:A8:3F:12:7C:4C:8C:D0:E3:B0:50:16:57:C2:AC:91:D4:47 Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft Manifest number: 01FB Signing time: Tue 05 Aug 2025 02:58:35 +0000 Manifest this update: Tue 05 Aug 2025 02:58:34 +0000 Manifest next update: Tue 12 Aug 2025 02:58:34 +0000 Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: j6x+bebT3zg0LrUOR174sH3wIbdAxeuazwInAiY0meA=) 2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: 7d+9V95blk3EIKh2Ixj3Euh7Ce2kReodQwZ4pY3gbnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Validity Not Before: Aug 5 02:58:34 2025 GMT Not After : Aug 12 02:58:34 2025 GMT Subject: CN=6891735b-a34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:42:48:40:ce:34:c4:39:fb:87:12:27:a8: 1d:f7:3c:03:c5:78:44:7a:52:f1:7a:b6:c3:2d:00: d7:90:c4:ba:7a:b4:08:c9:40:64:1b:23:e1:18:21: 26:ce:48:f9:70:66:a3:d6:f7:e4:87:9f:39:c1:13: 34:25:4d:1c:4b:3d:cf:d5:70:30:5d:ba:5f:f0:d8: b4:c0:28:e2:8b:1e:fb:3e:f0:11:8c:e7:47:c6:55: c3:87:27:3c:94:06:59:6f:bd:0f:cf:9d:33:83:95: 43:7d:ec:a3:91:8c:0f:f8:21:63:53:60:7d:90:57: 49:0a:02:e7:aa:22:d0:05:1b:ce:2e:48:86:2e:93: cd:0e:f6:5f:7e:9b:f5:ee:67:9e:e3:87:b3:66:7e: b2:82:0d:48:c8:49:51:13:45:18:61:f4:89:49:cf: 7e:f2:1d:ff:de:f0:ca:1c:ab:ad:bf:1f:db:70:ad: 87:9b:d2:4d:48:28:aa:63:2a:6f:09:16:87:82:be: f7:40:54:c2:dc:24:59:61:8a:b4:ff:b4:29:00:46: fd:c8:f7:51:30:21:36:c1:54:34:16:07:ef:94:b5: c5:13:02:31:d7:40:2a:f6:26:ff:ab:c6:55:5d:01: df:db:cf:24:97:38:db:bf:f9:a8:5d:43:32:e3:35: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1A:81:A8:3F:12:7C:4C:8C:D0:E3:B0:50:16:57:C2:AC:91:D4:47 X509v3 Authority Key Identifier: keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:9f:db:26:15:c5:d3:c6:a3:fc:5c:18:d5:6f:e0:64:15:49: 2a:a8:c9:d1:76:1a:5a:cd:a7:fa:5a:5b:e9:9f:2a:6a:fb:f3: 24:98:dc:f7:a6:0d:8e:0a:c9:fa:e2:13:ff:50:e7:89:64:45: f6:40:ca:1c:6f:a8:12:74:79:05:7c:28:54:0e:3f:73:b1:18: 08:46:47:d4:92:22:d6:2d:d6:87:b9:36:d4:87:48:95:85:b9: e0:9f:24:f1:a7:4b:2f:fb:a5:bc:47:bb:41:16:41:27:c2:65: 72:b5:4f:95:04:6b:4e:4a:44:04:87:5a:89:a0:7a:64:17:ac: 8e:c9:fa:fe:88:67:3c:a6:99:b9:da:5b:dc:97:3f:a9:87:24: 8d:d0:02:11:07:18:6c:d8:bc:19:4d:11:b6:db:ac:26:ff:1c: 28:3f:0a:55:de:59:c5:2a:6e:66:fd:5f:c6:b0:97:21:31:43: 84:62:5d:1c:05:5e:f0:3e:3b:22:f1:3f:8d:4d:72:aa:c5:a1: b6:8b:96:ef:7b:84:4e:ef:da:a2:66:c9:2d:7e:29:59:f5:f5: f0:84:58:c5:65:d6:ad:1b:64:ec:dd:a0:50:bf:1c:86:62:80: e3:7e:3c:c0:a9:a1:c5:12:b1:10:04:2d:bc:a8:9f:52:96:aa: a9:65:a5:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1 Q0UzRTIzMzYwHhcNMjUwODA1MDI1ODM0WhcNMjUwODEyMDI1ODM0WjAYMRYwFAYD VQQDEw02ODkxNzM1Yi1hMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFJCSEDONMQ5+4cSJ6gd9zwDxXhEelLxerbDLQDXkMS6erQIyUBkGyPhGCEm zkj5cGaj1vfkh585wRM0JU0cSz3P1XAwXbpf8Ni0wCjiix77PvARjOdHxlXDhyc8 lAZZb70Pz50zg5VDfeyjkYwP+CFjU2B9kFdJCgLnqiLQBRvOLkiGLpPNDvZffpv1 7mee44ezZn6ygg1IyElRE0UYYfSJSc9+8h3/3vDKHKutvx/bcK2Hm9JNSCiqYypv CRaHgr73QFTC3CRZYYq0/7QpAEb9yPdRMCE2wVQ0FgfvlLXFEwIx10Aq9ib/q8ZV XQHf288klzjbv/moXUMy4zVNKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwagag/ EnxMjNDjsFAWV8KskdRHMB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8yQzc1RkVDODdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0 YkEzSjdyaVZFbkpjNC1JelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBon9smFcXTxqP8XBjVb+BkFUkqqMnRdhpazaf6Wlvpnypq+/MkmNz3 pg2OCsn64hP/UOeJZEX2QMocb6gSdHkFfChUDj9zsRgIRkfUkiLWLdaHuTbUh0iV hbngnyTxp0sv+6W8R7tBFkEnwmVytU+VBGtOSkQEh1qJoHpkF6yOyfr+iGc8ppm5 2lvclz+phySN0AIRBxhs2LwZTRG226wm/xwoPwpV3lnFKm5m/V/GsJchMUOEYl0c BV7wPjsi8T+NTXKqxaG2i5bve4RO79qiZsktfilZ9fXwhFjFZdatG2Ts3aBQvxyG YoDjfjzAqaHFErEQBC28qJ9SlqqpZaXU -----END CERTIFICATE-----Generated at Wed Aug 6 13:18:12 2025 by rpki-client