$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft File: yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json) Hash identifier: Tyv7fkNkV9ixT9WcKiAGMP4a3bxqD0jooetZk/5SwD8= Subject key identifier: D2:C6:1D:B2:1B:83:B6:31:BB:25:5C:96:97:31:10:6C:55:D8:EF:E8 Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D Certificate issuer: /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft Manifest number: C9 Signing time: Fri 08 Aug 2025 22:04:59 +0000 Manifest this update: Fri 08 Aug 2025 22:04:58 +0000 Manifest next update: Fri 15 Aug 2025 22:04:58 +0000 Files and hashes: 1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: Ve3vGyfNZK8KS73LXpvuZy0PyY1IkQHvIzEEI11gDZQ=) 2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: C+d1LQ7j4suoEMqt6jmxPLK9+SyxrHsAW+pg0qKDarw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D Validity Not Before: Aug 8 22:04:58 2025 GMT Not After : Aug 15 22:04:58 2025 GMT Subject: CN=6896748a-9a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0f:69:70:ae:f9:65:9a:bc:cd:4b:eb:a9:28: b9:ef:0f:e1:7a:4a:9a:9a:11:b7:bd:31:b3:09:d2: c4:c2:24:a1:eb:70:d8:4d:a1:93:77:57:40:25:2d: f1:35:88:7f:b6:f5:f3:aa:e9:82:38:33:6f:5c:5b: 2f:a3:ea:57:e3:9c:d3:49:5a:41:ea:ca:04:d2:95: 38:55:a0:62:0e:ed:3e:ab:07:61:4a:c3:20:6b:83: dc:8e:fc:a0:62:01:bc:4f:28:13:5f:a6:ab:8f:67: 8f:27:88:cf:96:e0:96:ba:e0:26:86:7a:52:c7:df: 72:94:b4:17:92:71:25:9c:4f:bd:fd:97:06:bf:d0: b5:17:db:ac:2f:e2:9b:d7:34:1c:86:46:b7:f6:44: ce:42:fa:27:b4:d7:5f:31:82:73:85:c3:dd:d4:c2: 9b:85:58:58:fe:ef:7d:20:c9:98:f5:9d:73:34:d4: 3d:40:c6:0f:f9:ef:46:20:09:f0:a4:e7:e4:80:de: 79:4c:79:3d:30:21:33:99:05:15:63:e0:4e:4e:6e: 6d:e8:90:bb:4a:50:52:51:78:2d:56:71:45:44:2b: 65:0b:b7:f8:d9:dc:f9:b9:ce:c8:46:46:93:cc:93: b9:4e:2f:cb:f1:0c:23:3d:50:89:d4:80:a0:93:a6: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C6:1D:B2:1B:83:B6:31:BB:25:5C:96:97:31:10:6C:55:D8:EF:E8 X509v3 Authority Key Identifier: keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:73:f1:d9:a1:9b:91:a1:2c:fe:1e:2a:90:41:9b:14:b4:0f: 8f:09:5c:41:65:18:cf:4d:ff:2b:c8:58:e3:4c:10:f1:b0:dd: 93:98:be:fb:ad:9c:06:ff:13:9a:ad:0e:7c:30:65:18:eb:27: d9:72:2e:24:b0:73:f7:ec:26:28:31:a6:cc:ae:3c:2e:0b:a7: b8:eb:83:b4:0a:d1:67:6c:b0:23:9f:28:1b:94:9e:aa:b8:b4: cd:5c:fc:a9:e1:15:14:95:7e:18:bc:83:49:e6:8e:d4:7a:e2: f5:78:39:a7:5d:80:0e:fe:9f:e7:40:a0:79:6a:76:21:09:ec: f5:bc:82:bb:d2:f7:6b:cb:77:73:06:f8:14:5f:d7:7b:73:4a: c3:87:6b:f9:75:a3:09:fe:5d:08:4a:ae:79:97:06:66:8b:42: 73:c8:ed:05:e0:bf:8f:26:72:8b:b9:c3:78:2d:a2:d4:89:15: ba:4f:4c:91:84:f0:89:97:4b:8d:cc:93:17:9b:3a:63:33:7c: c0:d4:d9:f9:3c:42:1a:d0:c6:90:9d:37:e8:92:72:aa:fb:2e: 31:96:99:28:ab:11:02:f7:08:fb:f4:83:32:3a:00:ce:1c:0c: 5a:e9:5e:06:16:18:65:50:fa:12:87:a2:b9:cb:d7:3e:2c:b6: 07:1d:07:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKENBODc3QTdBRUYxREJCMDQ1NjQ4N0Y2MUZFRTY5OTM2 Mzc1NDFFNUQwHhcNMjUwODA4MjIwNDU4WhcNMjUwODE1MjIwNDU4WjAYMRYwFAYD VQQDEw02ODk2NzQ4YS05YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQ9pcK75ZZq8zUvrqSi57w/hekqamhG3vTGzCdLEwiSh63DYTaGTd1dAJS3x NYh/tvXzqumCODNvXFsvo+pX45zTSVpB6soE0pU4VaBiDu0+qwdhSsMga4Pcjvyg YgG8TygTX6arj2ePJ4jPluCWuuAmhnpSx99ylLQXknElnE+9/ZcGv9C1F9usL+Kb 1zQchka39kTOQvontNdfMYJzhcPd1MKbhVhY/u99IMmY9Z1zNNQ9QMYP+e9GIAnw pOfkgN55THk9MCEzmQUVY+BOTm5t6JC7SlBSUXgtVnFFRCtlC7f42dz5uc7IRkaT zJO5Ti/L8QwjPVCJ1ICgk6ZRLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLGHbIb g7YxuyVclpcxEGxV2O/oMB8GA1UdIwQYMBaAFMqHenrvHbsEVkh/Yf7mmTY3VB5d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My84NzIwMzA1RTQ0 OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3UldTSDloX3VhWk5qZFVI bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lvZDZldThkdXdSV1NIOWhfdWFaTmpkVUhsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My84NzIwMzA1RTQ0OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3 UldTSDloX3VhWk5qZFVIbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvc/HZoZuRoSz+HiqQQZsUtA+PCVxBZRjPTf8ryFjjTBDxsN2TmL77 rZwG/xOarQ58MGUY6yfZci4ksHP37CYoMabMrjwuC6e464O0CtFnbLAjnygblJ6q uLTNXPyp4RUUlX4YvINJ5o7UeuL1eDmnXYAO/p/nQKB5anYhCez1vIK70vdry3dz BvgUX9d7c0rDh2v5daMJ/l0ISq55lwZmi0JzyO0F4L+PJnKLucN4LaLUiRW6T0yR hPCJl0uNzJMXmzpjM3zA1Nn5PEIa0MaQnTfoknKq+y4xlpkoqxEC9wj79IMyOgDO HAxa6V4GFhhlUPoSh6K5y9c+LLYHHQfV -----END CERTIFICATE-----Generated at Sun Aug 10 18:46:57 2025 by rpki-client