$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft File: Yv18a2FzzDKVZktYaAWS-ybSuHo.mft (raw, json) Hash identifier: cVzhLKQxrjorSL8hy8Iye4GY5VzXpvUPRkK3G7VxiS4= Subject key identifier: B7:AC:58:18:28:26:8B:3E:10:59:59:21:B9:66:4C:86:03:79:33:40 Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A Certificate issuer: /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Certificate serial: 0783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft Manifest number: 077A Signing time: Mon 04 Aug 2025 21:52:59 +0000 Manifest this update: Mon 04 Aug 2025 21:52:58 +0000 Manifest next update: Mon 11 Aug 2025 21:52:58 +0000 Files and hashes: 1: Yv18a2FzzDKVZktYaAWS-ybSuHo.crl (hash: RrIYaVF7BwVrHZ+E+7KvacQ+d96ZtEvayB1NPLxyFwU=) 2: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (hash: sxCFtdRPysjFCbROcFadfDzJw+hZeGG75SF5L5NcahQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1923 (0x783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B488A, serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Validity Not Before: Aug 4 21:52:58 2025 GMT Not After : Aug 11 21:52:58 2025 GMT Subject: CN=68912bba-1c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:c1:4f:dc:23:05:88:0f:21:02:ac:28:54: 36:a2:b5:db:44:b1:34:d9:f6:20:23:47:b8:7f:39: e6:be:79:e3:52:02:ca:ea:76:2d:1f:04:39:48:43: f3:dd:10:92:db:a2:d6:59:16:ec:df:b6:c5:a2:02: 23:bc:09:9f:4d:57:fa:52:26:26:71:8d:05:8a:4c: 5a:c8:15:03:36:25:8a:94:14:41:a3:b8:65:f3:47: d2:4b:df:36:2e:8f:38:29:f5:80:11:11:7a:91:9f: e5:44:85:54:8e:8b:a4:0a:9b:4b:4c:35:37:66:63: 12:b0:c7:c1:3f:5a:41:14:ad:97:d9:66:48:0d:83: 75:64:8c:a1:19:67:77:bc:ec:f8:c7:42:a6:3d:05: 75:b4:ca:4c:1f:ea:ba:fb:e7:43:b0:e2:61:37:26: f5:03:a4:8e:24:d4:1b:60:38:76:72:15:8c:cf:35: 3f:ae:72:12:44:07:7e:8b:10:d0:60:b4:55:5d:65: 0f:e5:52:3a:a3:a9:fe:8e:14:76:b1:f4:90:d4:e8: 2f:3a:52:5b:fd:7d:fe:94:aa:dd:75:76:f7:f6:86: 8d:fe:27:67:9c:79:6c:98:df:1d:27:16:17:d1:f9: cc:8d:76:a4:99:2f:6d:2a:80:a1:74:d8:79:9b:da: 04:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AC:58:18:28:26:8B:3E:10:59:59:21:B9:66:4C:86:03:79:33:40 X509v3 Authority Key Identifier: keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:40:c5:1f:28:01:ef:80:74:91:c8:5a:e5:f9:52:9d:28:8f: 4d:44:09:1e:2a:94:ce:07:79:b5:bf:2f:16:69:1d:a4:24:ec: bc:a9:3b:5a:3e:f3:01:44:dc:7b:3d:33:50:d7:38:7d:56:0b: 64:f5:b2:d6:f3:fa:ae:a9:cd:32:12:52:21:fc:b7:4b:9c:0c: fe:20:82:2c:71:b8:fa:4b:c6:2d:8c:83:b7:06:53:79:1b:c0: 39:90:25:ae:a7:0b:ff:0f:f3:37:71:99:73:d0:a1:6c:e4:cd: b2:af:c4:48:49:b6:9e:ff:71:af:c7:10:dd:59:60:61:2d:cd: c6:04:e0:31:25:6e:c6:32:f6:e2:02:1c:8f:dd:bd:6e:dd:0c: e4:3b:0b:ec:0a:38:b2:33:08:70:d9:0c:36:7a:7a:23:8e:6c: d5:28:55:1b:4e:82:9c:85:65:9c:1c:b2:fb:37:19:cd:26:8b: 7c:06:79:ec:d3:f0:aa:1e:87:16:03:a9:af:83:21:96:6d:3b: 06:ff:e0:82:02:74:2d:1e:36:69:f9:fc:2b:5a:28:a2:a3:54: f8:ba:58:a9:43:f9:99:03:16:37:e8:24:78:cf:e9:9d:d9:87: 51:18:d2:6e:6e:61:3a:8f:eb:0d:4c:05:7e:3b:84:74:bc:6a: 23:b3:5c:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4OEExMTAvBgNVBAUTKDYyRkQ3QzZCNjE3M0NDMzI5NTY2NEI1ODY4MDU5MkZC MjZEMkI4N0EwHhcNMjUwODA0MjE1MjU4WhcNMjUwODExMjE1MjU4WjAYMRYwFAYD VQQDEw02ODkxMmJiYS0xYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHfBT9wjBYgPIQKsKFQ2orXbRLE02fYgI0e4fznmvnnjUgLK6nYtHwQ5SEPz 3RCS26LWWRbs37bFogIjvAmfTVf6UiYmcY0FikxayBUDNiWKlBRBo7hl80fSS982 Lo84KfWAERF6kZ/lRIVUjoukCptLTDU3ZmMSsMfBP1pBFK2X2WZIDYN1ZIyhGWd3 vOz4x0KmPQV1tMpMH+q6++dDsOJhNyb1A6SOJNQbYDh2chWMzzU/rnISRAd+ixDQ YLRVXWUP5VI6o6n+jhR2sfSQ1OgvOlJb/X3+lKrddXb39oaN/idnnHlsmN8dJxYX 0fnMjXakmS9tKoChdNh5m9oEKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLesWBgo Jos+EFlZIblmTIYDeTNAMB8GA1UdIwQYMBaAFGL9fGthc8wylWZLWGgFkvsm0rh6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg4QS85QUVGMjNEQzI0 NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpES1Zaa3RZYUFXUy15YlN1 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l2MThhMkZ6ekRLVlprdFlhQVdTLXliU3VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg4QS85QUVGMjNEQzI0NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpE S1Zaa3RZYUFXUy15YlN1SG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgQMUfKAHvgHSRyFrl+VKdKI9NRAkeKpTOB3m1vy8WaR2kJOy8qTta PvMBRNx7PTNQ1zh9Vgtk9bLW8/quqc0yElIh/LdLnAz+IIIscbj6S8YtjIO3BlN5 G8A5kCWupwv/D/M3cZlz0KFs5M2yr8RISbae/3GvxxDdWWBhLc3GBOAxJW7GMvbi AhyP3b1u3QzkOwvsCjiyMwhw2Qw2enojjmzVKFUbToKchWWcHLL7NxnNJot8Bnns 0/CqHocWA6mvgyGWbTsG/+CCAnQtHjZp+fwrWiiio1T4ulipQ/mZAxY36CR4z+md 2YdRGNJubmE6j+sNTAV+O4R0vGojs1w/ -----END CERTIFICATE-----Generated at Wed Aug 6 00:43:45 2025 by rpki-client