$ rpki-client -vvf rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft File: yC1GI7edxaBABywRKhur60QWBBw.mft (raw, json) Hash identifier: QHGjUR0H2H3EaXTRjWtc5JvSklBR2IbmXd9kcHn/+aQ= Subject key identifier: 0F:D4:5B:E0:23:B2:CA:BA:A7:15:BF:4F:DE:87:46:71:C1:60:56:4B Authority key identifier: C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C Certificate issuer: /CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft Manifest number: 05AC Signing time: Sun 10 Aug 2025 23:12:53 +0000 Manifest this update: Sun 10 Aug 2025 23:12:53 +0000 Manifest next update: Sun 17 Aug 2025 23:12:52 +0000 Files and hashes: 1: yC1GI7edxaBABywRKhur60QWBBw.crl (hash: bDcOuKg/7wlXE5qnd56/qEmDG/bcx0HRQB93jYmS6Aw=) 2: 469C2676D76111EB97EB721DC4F9AE02.roa (hash: OTs+qw3AvV3H1ENDQyiXHEhtKPRt4PABgjp0FWH4nzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 23:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D008B, serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C Validity Not Before: Aug 10 23:12:53 2025 GMT Not After : Aug 17 23:12:52 2025 GMT Subject: CN=68992775-f3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0f:82:1a:65:3a:fa:8f:8e:5d:04:30:c1:eb: 81:c4:08:f5:50:b3:71:54:0c:4d:f8:7a:a5:9e:3f: 45:23:46:7d:0e:f0:12:16:0f:50:05:e5:36:81:61: 82:94:b8:54:a6:47:9d:ef:58:31:47:1a:7d:81:c4: 1d:04:6e:fd:94:00:66:6e:f2:82:be:80:90:1c:b8: e5:ee:d8:99:67:c3:b4:fb:d3:e0:24:5e:15:25:8a: 01:b2:20:1b:ea:0c:5a:eb:20:a0:7b:9c:46:ec:8c: 03:dc:2a:58:6c:9e:2a:ac:54:af:2d:f4:82:16:18: 4f:cb:08:44:72:0d:89:c4:14:24:2d:43:45:a5:e0: d0:93:59:86:ea:7d:76:60:a8:f9:29:09:28:26:ad: 98:66:15:5b:32:1c:60:6c:bc:bd:63:d6:a0:3a:d5: 71:ce:a4:34:8e:14:9b:bf:e9:c7:e6:18:de:1b:6e: 66:59:d7:8c:45:4a:5f:ce:91:14:77:2e:9b:34:65: de:0c:77:b7:38:8e:a7:af:fb:a2:7f:dd:11:17:df: 2a:0a:56:2f:84:24:f1:66:72:a1:14:09:a0:18:59: bd:a2:87:7c:6e:d5:fa:2c:92:9b:b4:39:95:60:8c: 1c:0a:95:ae:16:95:c5:0f:13:e1:d8:59:da:56:1f: 3d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D4:5B:E0:23:B2:CA:BA:A7:15:BF:4F:DE:87:46:71:C1:60:56:4B X509v3 Authority Key Identifier: keyid:C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5a:43:04:5a:11:7e:92:ee:2d:85:2a:87:88:89:80:97:65: ca:ce:d7:0d:38:e3:73:76:69:51:c5:22:ee:1d:ac:d9:6f:ff: f3:29:59:e4:50:04:e8:85:dd:db:ab:3c:e5:61:fe:7b:06:45: 56:f4:e3:18:a1:15:d8:3a:0e:57:ff:7b:d7:f5:c9:8d:85:3d: 89:fc:4f:6b:19:18:7c:4a:09:1a:16:c8:b9:70:ad:78:fa:21: 20:38:86:ff:55:56:39:8d:9d:0b:04:f2:67:e9:ce:a5:76:0d: 87:7c:03:fc:99:60:32:5a:48:4a:aa:e0:78:8f:d1:32:aa:98: 99:34:a6:ad:ca:b7:55:5c:2e:a6:13:04:68:08:31:3b:8e:47: 3c:f7:6d:05:cf:91:0d:92:61:0e:d1:d5:f2:d4:d0:d2:74:49: 65:16:34:9c:aa:70:c2:e0:55:fd:f1:44:12:a0:63:7c:75:19: 3e:69:ea:87:0a:e1:20:19:72:97:14:c1:89:23:8d:27:22:eb: 6b:2a:36:d8:f0:d3:3d:cc:8c:66:cb:67:d4:e5:fb:5e:0e:c7: 5d:c8:ae:2a:58:d8:43:c0:aa:06:e0:a0:d6:b9:75:a6:4a:a5: 92:65:89:12:8c:93:64:cf:35:8d:3f:38:3d:64:aa:24:23:e0: 2b:40:79:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwOEIxMTAvBgNVBAUTKEM4MkQ0NjIzQjc5REM1QTA0MDA3MkMxMTJBMUJBQkVC NDQxNjA0MUMwHhcNMjUwODEwMjMxMjUzWhcNMjUwODE3MjMxMjUyWjAYMRYwFAYD VQQDEw02ODk5Mjc3NS1mM2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8w+CGmU6+o+OXQQwweuBxAj1ULNxVAxN+Hqlnj9FI0Z9DvASFg9QBeU2gWGC lLhUpked71gxRxp9gcQdBG79lABmbvKCvoCQHLjl7tiZZ8O0+9PgJF4VJYoBsiAb 6gxa6yCge5xG7IwD3CpYbJ4qrFSvLfSCFhhPywhEcg2JxBQkLUNFpeDQk1mG6n12 YKj5KQkoJq2YZhVbMhxgbLy9Y9agOtVxzqQ0jhSbv+nH5hjeG25mWdeMRUpfzpEU dy6bNGXeDHe3OI6nr/uif90RF98qClYvhCTxZnKhFAmgGFm9ood8btX6LJKbtDmV YIwcCpWuFpXFDxPh2FnaVh89VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/UW+Aj ssq6pxW/T96HRnHBYFZLMB8GA1UdIwQYMBaAFMgtRiO3ncWgQAcsESobq+tEFgQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA4Qi80OUU2MjcxNkQ3 NUYxMUVCOUJEMjRCMURDNEY5QUUwMi95QzFHSTdlZHhhQkFCeXdSS2h1cjYwUVdC QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDMUdJN2VkeGFCQUJ5d1JLaHVyNjBRV0JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA4Qi80OUU2MjcxNkQ3NUYxMUVCOUJEMjRCMURDNEY5QUUwMi95QzFHSTdlZHhh QkFCeXdSS2h1cjYwUVdCQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuWkMEWhF+ku4thSqHiImAl2XKztcNOONzdmlRxSLuHazZb//zKVnk UATohd3bqzzlYf57BkVW9OMYoRXYOg5X/3vX9cmNhT2J/E9rGRh8SgkaFsi5cK14 +iEgOIb/VVY5jZ0LBPJn6c6ldg2HfAP8mWAyWkhKquB4j9EyqpiZNKatyrdVXC6m EwRoCDE7jkc8920Fz5ENkmEO0dXy1NDSdEllFjScqnDC4FX98UQSoGN8dRk+aeqH CuEgGXKXFMGJI40nIutrKjbY8NM9zIxmy2fU5fteDsddyK4qWNhDwKoG4KDWuXWm SqWSZYkSjJNkzzWNPzg9ZKokI+ArQHlO -----END CERTIFICATE-----Generated at Tue Aug 12 18:19:00 2025 by rpki-client