$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json) Hash identifier: 37wDsWVjM2Ax6/LUpzGDsML8VHWGZfib8LE06ZJ39w8= Subject key identifier: B2:78:DE:1A:71:2B:DF:7A:04:9D:BC:4B:29:B6:AE:77:D8:58:4F:DB Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Certificate serial: 0B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft Manifest number: 0B6F Signing time: Sun 10 Aug 2025 19:07:00 +0000 Manifest this update: Sun 10 Aug 2025 19:06:59 +0000 Manifest next update: Sun 17 Aug 2025 19:06:59 +0000 Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: zOhsniTGSsTEU0usKOyDhGz0UAI4HTJ2+7M4Exfts8k=) 2: AD989788E05511EEADC7D67EC4F9AE02.roa (hash: gKXy2g22Zjp1Hqmn7Qc1nw8xcDNaJidEhFHTK4F7AJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Validity Not Before: Aug 10 19:06:59 2025 GMT Not After : Aug 17 19:06:59 2025 GMT Subject: CN=6898edd4-f075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:9c:a6:07:64:f7:8e:bd:58:8e:48:29:af: ff:d9:25:c7:e1:bb:a3:92:49:52:2e:e2:fc:8f:e8: 36:31:c5:96:e6:35:5d:b0:4e:39:15:2b:29:a2:60: 6b:be:63:e5:d7:38:7a:c5:45:59:5b:0d:d5:a1:69: 02:2b:f2:48:52:cd:7b:bb:d2:af:aa:5c:23:eb:3c: 71:92:79:0f:fd:6d:c8:37:11:76:70:7b:30:e2:8a: 0a:f9:61:e7:cd:ad:4b:9e:dc:99:47:7c:d7:2c:39: 74:25:78:e5:e9:4b:c0:06:51:7d:c1:08:ae:91:64: 69:3f:b0:a9:2b:45:1e:da:48:b0:9b:20:e7:7f:35: 9b:93:0d:cb:15:a4:aa:76:4a:a3:51:45:34:91:03: 77:15:0f:c9:26:94:0c:b1:25:bd:eb:fe:2b:dc:b7: 1c:a2:ad:5b:3d:e5:50:59:07:47:36:ad:74:22:df: 51:67:db:6f:c9:86:08:e9:e3:30:e4:f8:c5:02:87: e6:eb:53:40:f7:f4:d8:af:d5:30:be:3d:f9:11:65: ce:9e:90:c7:9c:5c:9d:08:30:41:9c:6b:96:00:b0: c2:f0:64:b6:9f:23:61:99:8d:49:81:d2:95:d7:50: 7c:39:71:c4:8a:6f:12:bf:4e:b8:5f:45:ee:84:8c: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:78:DE:1A:71:2B:DF:7A:04:9D:BC:4B:29:B6:AE:77:D8:58:4F:DB X509v3 Authority Key Identifier: keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:fb:6c:41:23:0b:9b:77:07:78:29:70:30:05:a9:bc:28:c1: 9b:80:fa:36:6b:6f:a1:9d:d9:1a:ee:79:54:8c:07:2d:2c:f9: 50:ac:2c:9a:17:25:f8:83:4b:d4:be:f8:bb:ba:62:8d:b9:6a: f1:ad:59:ad:02:25:f3:75:5c:8d:ef:e1:72:bd:66:3f:46:8b: 26:74:eb:ca:0e:6e:fc:83:d8:c2:d9:bd:7e:f9:47:72:93:72: 56:ac:18:5e:50:33:9d:c2:54:31:7f:b0:ea:b1:d0:7d:0b:81: a1:dc:bb:ef:3f:6d:79:c0:3a:b8:a6:46:8e:bc:96:f6:28:44: 1c:d8:46:99:05:0e:74:b3:c3:33:a7:73:42:36:96:8e:75:83: a1:cb:88:cc:a1:27:b5:f3:25:69:6a:52:7b:66:43:f2:83:b6: 99:36:ae:a7:78:17:fe:bf:e9:e8:64:c5:8f:ac:e0:19:e1:71: 89:b7:4b:0a:12:5b:bb:71:f9:7a:ca:f3:c7:f5:95:77:07:d8: 30:71:18:da:b9:ff:3f:4d:b9:a6:0f:63:96:ae:fc:de:5d:ac: 95:db:2c:11:89:a7:20:27:71:a1:46:81:cd:1c:a6:38:19:1c: 61:7a:9d:7a:db:d9:da:56:49:a4:54:7c:e1:41:67:b3:59:30: 54:a5:db:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5 MTNENDE5RTMwHhcNMjUwODEwMTkwNjU5WhcNMjUwODE3MTkwNjU5WjAYMRYwFAYD VQQDEw02ODk4ZWRkNC1mMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBucpgdk9469WI5IKa//2SXH4bujkklSLuL8j+g2McWW5jVdsE45FSspomBr vmPl1zh6xUVZWw3VoWkCK/JIUs17u9Kvqlwj6zxxknkP/W3INxF2cHsw4ooK+WHn za1LntyZR3zXLDl0JXjl6UvABlF9wQiukWRpP7CpK0Ue2kiwmyDnfzWbkw3LFaSq dkqjUUU0kQN3FQ/JJpQMsSW96/4r3Lccoq1bPeVQWQdHNq10It9RZ9tvyYYI6eMw 5PjFAofm61NA9/TYr9Uwvj35EWXOnpDHnFydCDBBnGuWALDC8GS2nyNhmY1JgdKV 11B8OXHEim8Sv064X0XuhIzoSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJ43hpx K996BJ28Sym2rnfYWE/bMB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5 RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn MlFKX3praGs4bXlSUFVHZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn+2xBIwubdwd4KXAwBam8KMGbgPo2a2+hndka7nlUjActLPlQrCya FyX4g0vUvvi7umKNuWrxrVmtAiXzdVyN7+FyvWY/RosmdOvKDm78g9jC2b1++Udy k3JWrBheUDOdwlQxf7DqsdB9C4Gh3LvvP215wDq4pkaOvJb2KEQc2EaZBQ50s8Mz p3NCNpaOdYOhy4jMoSe18yVpalJ7ZkPyg7aZNq6neBf+v+noZMWPrOAZ4XGJt0sK Elu7cfl6yvPH9ZV3B9gwcRjauf8/TbmmD2OWrvzeXayV2ywRiacgJ3GhRoHNHKY4 GRxhep1629naVkmkVHzhQWezWTBUpduY -----END CERTIFICATE-----Generated at Mon Aug 11 07:34:00 2025 by rpki-client