$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: Ue62HAPKHfdzraQbLn95L4zG8bsBd3e7LUMyS+xxhSc= Subject key identifier: CF:D4:70:BB:79:1C:E6:3F:67:2D:86:DC:BD:B8:74:44:92:87:FC:67 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0A88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 1190 Signing time: Tue 12 Aug 2025 19:48:56 +0000 Manifest this update: Tue 12 Aug 2025 19:48:55 +0000 Manifest next update: Tue 19 Aug 2025 19:48:55 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: H3WSpDkdbC4tqfujhwd6qjUenokdT7BfeKOVSpqhXC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2696 (0xa88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Aug 12 19:48:55 2025 GMT Not After : Aug 19 19:48:55 2025 GMT Subject: CN=689b9aa8-5f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:cd:23:1a:ca:e6:85:e4:f9:a4:c4:e2:83: 9f:13:a2:1c:29:e0:cd:9b:ac:2a:ad:31:6b:ca:9d: 74:2b:4c:96:e5:15:4b:51:fe:18:1f:2a:82:11:32: c0:f1:fc:e6:27:86:1d:37:3c:07:7f:a0:7e:da:17: ff:95:6e:74:d1:d2:55:56:a1:4e:25:d2:d0:8f:32: a0:37:26:74:8a:9a:1c:56:f8:20:f7:dd:8f:56:0c: 22:6b:92:ec:4c:64:69:96:69:5d:b0:f7:89:77:f1: b1:10:90:52:95:bb:55:56:e4:06:c1:48:b4:3d:3c: 9b:96:a9:07:37:e9:5c:5c:f3:ed:fc:9e:2c:c8:1c: 62:d2:2f:ef:d0:66:57:3b:40:0d:f8:dd:c0:9f:8b: c4:1d:d1:f2:9a:6d:cf:57:70:3e:55:39:c6:3d:85: d8:38:d9:85:90:99:9a:89:9c:51:c8:2e:ee:d8:7d: 31:05:67:60:df:c7:0a:6e:f4:00:b5:17:8b:47:2f: f5:bb:68:c3:13:12:ac:26:47:c3:2e:07:a4:a1:74: 25:7a:e9:19:0c:38:5a:17:b6:27:8f:5f:b5:bd:65: 7b:93:12:fd:1d:c1:3f:2b:81:06:93:cd:d8:e5:a3: 9b:0a:e1:9d:c1:fd:c1:71:b5:7d:4b:6a:fc:46:d0: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D4:70:BB:79:1C:E6:3F:67:2D:86:DC:BD:B8:74:44:92:87:FC:67 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ed:e5:4f:de:05:6e:a3:5c:9f:8f:f6:de:97:bf:6a:16:65: 67:63:6f:3f:d8:b5:9d:80:41:ad:ec:20:66:4f:72:97:d7:56: a2:0d:0c:f2:6f:d4:db:73:8f:79:98:eb:a9:cb:7b:63:f3:db: 6e:c0:72:9b:00:12:28:e3:b8:ad:30:88:21:09:cc:7f:4c:96: a4:bf:fe:0a:5c:60:20:6a:45:0b:21:a5:64:66:e4:cf:10:41: 22:f7:7a:eb:ec:79:dd:32:b3:3c:61:82:ee:19:41:27:bb:5e: cc:91:3d:cc:32:99:72:0b:9b:5d:96:6a:12:ca:29:fd:3f:86: f1:f2:83:91:66:46:b8:d8:ce:6d:86:ac:db:c7:19:95:4a:ff: eb:3f:d1:ba:a6:57:37:1a:d7:72:0e:86:91:3f:d5:58:cd:ba: 14:b7:f2:75:43:a9:9a:cd:7a:08:8d:6a:f2:5c:ef:bc:2d:86: a5:ed:25:f3:03:bd:e4:33:27:19:36:5d:37:e7:4c:22:e9:51: 2a:27:06:44:c0:1b:02:71:c9:1c:13:bf:d6:16:fa:a9:9d:50: 4b:08:1d:8f:b8:77:20:4d:02:c1:a6:f0:19:3b:3b:12:f0:eb: e8:d0:ca:b2:6e:aa:5c:a0:dc:b7:f8:44:f4:b0:1c:79:69:92: 9a:c7:0d:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUwODEyMTk0ODU1WhcNMjUwODE5MTk0ODU1WjAYMRYwFAYD VQQDEw02ODliOWFhOC01ZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NvNIxrK5oXk+aTE4oOfE6IcKeDNm6wqrTFryp10K0yW5RVLUf4YHyqCETLA 8fzmJ4YdNzwHf6B+2hf/lW500dJVVqFOJdLQjzKgNyZ0ipocVvgg992PVgwia5Ls TGRplmldsPeJd/GxEJBSlbtVVuQGwUi0PTyblqkHN+lcXPPt/J4syBxi0i/v0GZX O0AN+N3An4vEHdHymm3PV3A+VTnGPYXYONmFkJmaiZxRyC7u2H0xBWdg38cKbvQA tReLRy/1u2jDExKsJkfDLgekoXQleukZDDhaF7Ynj1+1vWV7kxL9HcE/K4EGk83Y 5aObCuGdwf3BcbV9S2r8RtDaMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/UcLt5 HOY/Zy2G3L24dESSh/xnMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG7eVP3gVuo1yfj/bel79qFmVnY28/2LWdgEGt7CBmT3KX11aiDQzy b9Tbc495mOupy3tj89tuwHKbABIo47itMIghCcx/TJakv/4KXGAgakULIaVkZuTP EEEi93rr7HndMrM8YYLuGUEnu17MkT3MMplyC5tdlmoSyin9P4bx8oORZka42M5t hqzbxxmVSv/rP9G6plc3GtdyDoaRP9VYzboUt/J1Q6mazXoIjWryXO+8LYal7SXz A73kMycZNl0350wi6VEqJwZEwBsCcckcE7/WFvqpnVBLCB2PuHcgTQLBpvAZOzsS 8Ovo0MqybqpcoNy3+ET0sBx5aZKaxw3p -----END CERTIFICATE-----Generated at Wed Aug 13 02:47:25 2025 by rpki-client