$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft File: YYrgnnRxNtZvEWWnuP6i_3OGffY.mft (raw, json) Hash identifier: n/ztEoeQ2DcG59g67JzuX0ouCJqZKabaG8GwYIklltg= Subject key identifier: E2:07:44:AC:27:F0:05:D7:25:69:AD:DB:4E:AF:89:5F:7D:9B:20:D9 Authority key identifier: 61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6 Certificate issuer: /CN=A91B4460/serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft Manifest number: 3F Signing time: Mon 11 Aug 2025 07:46:11 +0000 Manifest this update: Mon 11 Aug 2025 07:46:11 +0000 Manifest next update: Mon 18 Aug 2025 07:46:11 +0000 Files and hashes: 1: YYrgnnRxNtZvEWWnuP6i_3OGffY.crl (hash: FOlfOPzyOgiVO2DuMZ86pURrXVXkdKES/BMDJhVpk+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6 Validity Not Before: Aug 11 07:46:11 2025 GMT Not After : Aug 18 07:46:11 2025 GMT Subject: CN=68999fc3-cfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:41:a1:0a:8d:8e:15:2c:c6:d0:69:5a:64: bc:b3:c6:33:1c:7c:e3:a6:06:7a:c1:28:c1:78:c6: ea:89:09:c0:c4:1c:3b:a7:95:76:f7:b6:04:ec:61: d5:07:7f:3c:d7:06:71:10:f9:6f:42:aa:ee:af:c0: fc:ac:a5:8f:e1:9d:45:79:6e:0b:80:c8:5c:df:06: a0:df:63:3c:07:12:be:b2:35:5c:2b:57:72:4b:55: 7b:6b:ca:1c:3e:18:09:d3:53:82:94:c5:ee:84:d3: 32:7b:52:ae:d8:00:26:34:25:ee:33:74:ea:07:f9: be:4b:b0:a9:a1:14:ee:b1:d2:e0:e7:55:b0:90:ca: 7a:77:b6:a3:62:72:b5:b9:47:51:c4:bf:b4:f8:21: ac:a3:37:58:01:14:c0:7e:e5:bd:88:24:8e:2b:d9: 02:40:61:ce:c5:83:69:d1:c5:de:85:e5:96:36:74: ba:19:9c:8e:7f:21:08:c1:eb:fb:5b:76:c5:51:69: 6c:ec:6d:ad:5b:60:39:34:51:bd:9e:c5:88:4d:6d: 79:7d:18:e1:8f:88:fe:93:a2:4a:7f:72:42:91:2e: 90:19:b6:0f:01:0a:12:50:27:9a:21:10:84:fe:c3: a7:68:bb:27:b7:a4:c3:15:56:99:4d:3f:ab:69:35: 52:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:07:44:AC:27:F0:05:D7:25:69:AD:DB:4E:AF:89:5F:7D:9B:20:D9 X509v3 Authority Key Identifier: keyid:61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a8:f8:61:c2:af:9a:37:d3:b0:8d:a9:6c:0a:37:91:46:4d: 1f:30:c4:65:da:ef:f9:1e:9a:f2:4d:39:68:11:2b:61:40:3a: ab:52:cd:96:e4:17:49:04:7b:10:f6:80:58:b7:ed:74:c9:6e: b3:2c:1e:a5:b2:f0:5a:ef:05:69:20:5e:04:60:da:1c:2d:0e: 65:d1:b3:c0:d7:9e:d4:f4:0f:42:61:0d:7e:6a:15:62:01:d7: b8:cb:d1:1b:12:f3:db:97:bb:a4:eb:b6:a3:a1:f7:bf:2a:98: 3b:0a:54:9c:65:f2:e7:49:32:cb:90:9a:00:ad:c8:b8:08:09: 95:a6:57:21:b4:83:85:03:85:4d:16:c6:35:17:5b:59:b7:e3: 37:c0:56:a7:ec:f8:0e:5a:70:ff:09:cd:79:2d:09:27:69:ce: 99:d9:6f:b4:58:e4:3b:52:a6:94:9e:ce:7f:f2:66:d1:55:96: 39:2f:f0:18:9f:04:5f:41:4c:f8:94:35:af:9e:8b:08:84:cb: bc:12:2c:01:13:05:1a:df:0e:7a:b9:cf:84:a5:90:92:3c:54: 53:57:e1:97:61:8f:3d:e3:87:17:2e:2a:79:c3:ca:ab:2c:78: 96:3c:b0:4c:18:9b:bd:d2:74:e9:ff:b9:2b:23:e2:9b:d7:fe: 23:ed:54:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoNjE4QUUwOUU3NDcxMzZENjZGMTE2NUE3QjhGRUEyRkY3 Mzg2N0RGNjAeFw0yNTA4MTEwNzQ2MTFaFw0yNTA4MTgwNzQ2MTFaMBgxFjAUBgNV BAMTDTY4OTk5ZmMzLWNmY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDrEGhCo2OFSzG0GlaZLyzxjMcfOOmBnrBKMF4xuqJCcDEHDunlXb3tgTsYdUH fzzXBnEQ+W9Cqu6vwPyspY/hnUV5bguAyFzfBqDfYzwHEr6yNVwrV3JLVXtryhw+ GAnTU4KUxe6E0zJ7Uq7YACY0Je4zdOoH+b5LsKmhFO6x0uDnVbCQynp3tqNicrW5 R1HEv7T4IayjN1gBFMB+5b2IJI4r2QJAYc7Fg2nRxd6F5ZY2dLoZnI5/IQjB6/tb dsVRaWzsba1bYDk0Ub2exYhNbXl9GOGPiP6Tokp/ckKRLpAZtg8BChJQJ5ohEIT+ w6douye3pMMVVplNP6tpNVKLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4gdErCfw Bdclaa3bTq+JX32bINkwHwYDVR0jBBgwFoAUYYrgnnRxNtZvEWWnuP6i/3OGffYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzBENDY4ODNDMTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL1lZcmdublJ4TnRadkVXV251UDZpXzNPR2Zm WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVlyZ25uUnhOdFp2RVdXbnVQNmlfM09HZmZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NDYwLzBENDY4ODNDMTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL1lZcmdublJ4TnRa dkVXV251UDZpXzNPR2ZmWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+o+GHCr5o307CNqWwKN5FGTR8wxGXa7/kemvJNOWgRK2FAOqtSzZbk F0kEexD2gFi37XTJbrMsHqWy8FrvBWkgXgRg2hwtDmXRs8DXntT0D0JhDX5qFWIB 17jL0RsS89uXu6TrtqOh978qmDsKVJxl8udJMsuQmgCtyLgICZWmVyG0g4UDhU0W xjUXW1m34zfAVqfs+A5acP8JzXktCSdpzpnZb7RY5DtSppSezn/yZtFVljkv8Bif BF9BTPiUNa+eiwiEy7wSLAETBRrfDnq5z4SlkJI8VFNX4Zdhjz3jhxcuKnnDyqss eJY8sEwYm73SdOn/uSsj4pvX/iPtVAA= -----END CERTIFICATE-----Generated at Mon Aug 11 13:03:03 2025 by rpki-client