$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: eGJeC4o4BrqQm+l87oRz09kq+M+FVTvF6ZXky56bp14= Subject key identifier: 06:50:5E:F5:FB:26:5C:03:9E:69:9A:BF:EA:AD:D1:2E:F6:9C:1F:F5 Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 68 Signing time: Mon 11 Aug 2025 07:16:44 +0000 Manifest this update: Mon 11 Aug 2025 07:16:44 +0000 Manifest next update: Mon 18 Aug 2025 07:16:44 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: De8jhrOw1ieNf7pRUzkRlQ/OzXF+QVzcq3wmhxLmM7w=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: Aug 11 07:16:44 2025 GMT Not After : Aug 18 07:16:44 2025 GMT Subject: CN=689998dc-a892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:eb:9a:e8:12:e3:b0:1a:8d:f3:6a:63:13:80: b1:c0:49:00:b9:22:ce:b4:f4:c4:43:93:d6:18:1e: ad:c0:0d:b5:e7:27:8f:d5:b8:03:6f:ab:4e:6f:88: 4d:66:43:1a:36:eb:5e:83:ed:00:24:9d:a9:56:8d: dd:3c:0b:40:bb:2f:66:04:3c:58:c2:bd:c7:c0:e2: 10:40:93:69:47:2e:24:9e:63:33:ef:eb:22:ef:e4: c8:53:31:eb:c2:28:a0:3c:32:0b:b3:ab:00:e2:f5: 3f:9d:38:2e:c0:b9:f0:ec:62:a6:bf:ce:db:d0:98: 0a:43:fe:aa:e2:ca:d2:8e:48:09:da:52:68:98:82: 37:84:c9:60:86:23:b7:8f:88:96:96:64:ec:38:41: 1f:bf:bf:d5:f0:23:aa:33:3c:3e:e8:97:8b:96:1a: 4e:5e:d5:17:af:62:8d:55:31:89:d4:76:8d:44:d2: 1b:61:c3:13:14:01:02:b0:b1:6d:78:c3:05:d0:9a: 12:97:f5:fc:c8:e6:90:fb:cf:e5:85:c7:0c:87:e9: 51:5d:f5:4e:11:c7:6d:0e:42:23:d7:20:46:ff:1d: c7:99:d4:f9:f3:3f:7e:34:37:05:4a:92:fc:29:a0: b9:94:c4:0d:d8:86:47:c6:3a:5a:1c:bf:35:ff:10: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:50:5E:F5:FB:26:5C:03:9E:69:9A:BF:EA:AD:D1:2E:F6:9C:1F:F5 X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:64:1b:b4:90:e0:11:4a:25:27:e7:3c:23:c2:80:1c:9f:df: fa:52:9a:a4:ad:82:3d:09:58:7c:3d:ec:b4:8a:d7:df:82:d4: a9:f5:f9:22:b0:0f:2f:1e:cc:be:33:02:5b:e2:c5:15:18:a4: bb:2d:43:fa:11:35:79:87:5a:8e:63:5e:17:ac:9d:65:63:bf: 60:94:ff:d0:ea:83:44:d2:89:62:4a:ed:d9:6c:78:45:c9:33: b0:b2:55:bf:44:7c:73:34:56:e1:7b:30:3f:1d:bc:d4:f3:26: c7:b4:ac:40:78:f1:98:5f:58:aa:00:56:fd:38:ca:fd:45:3e: 30:bd:b8:2c:e3:28:f1:69:b8:e7:48:e2:a7:4c:c7:c6:1e:27: 95:88:b3:1f:53:0f:f0:47:88:32:13:17:f2:f2:8d:6c:4e:5b: 46:a2:9a:4c:da:b1:2a:45:51:bd:88:ff:48:a3:2c:26:07:b4: 72:39:7f:dd:f8:dd:6d:a1:2e:03:8e:83:19:94:b8:8b:3f:95: 94:97:50:a9:84:3d:94:f4:8f:e4:f1:11:0f:53:29:33:c2:63: 81:b0:be:20:33:5c:93:70:a8:73:b2:be:57:66:ac:32:45:e2: 49:a6:0f:b1:e2:3c:37:e6:b7:49:c9:44:4c:3e:d1:a7:25:c2: 26:1a:77:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODEwMzExMC8GA1UEBRMoNjAzMUQwNjAxRDVDMkQ4N0FENjYyMzYxRTYzQkZGRDkx RTA0MDczMzAeFw0yNTA4MTEwNzE2NDRaFw0yNTA4MTgwNzE2NDRaMBgxFjAUBgNV BAMTDTY4OTk5OGRjLWE4OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP65roEuOwGo3zamMTgLHASQC5Is609MRDk9YYHq3ADbXnJ4/VuANvq05viE1m Qxo2616D7QAknalWjd08C0C7L2YEPFjCvcfA4hBAk2lHLiSeYzPv6yLv5MhTMevC KKA8MguzqwDi9T+dOC7AufDsYqa/ztvQmApD/qriytKOSAnaUmiYgjeEyWCGI7eP iJaWZOw4QR+/v9XwI6ozPD7ol4uWGk5e1RevYo1VMYnUdo1E0hthwxMUAQKwsW14 wwXQmhKX9fzI5pD7z+WFxwyH6VFd9U4Rx20OQiPXIEb/HceZ1PnzP340NwVKkvwp oLmUxA3YhkfGOlocvzX/EMjLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBlBe9fsm XAOeaZq/6q3RLvacH/UwHwYDVR0jBBgwFoAUYDHQYB1cLYetZiNh5jv/2R4EBzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MTAzLzkzREM3NTRFREUw MTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURIUVlCMWNMWWV0WmlOaDVqdl8yUjRFQnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MTAzLzkzREM3NTRFREUwMTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFll dFppTmg1anZfMlI0RUJ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOZkG7SQ4BFKJSfnPCPCgByf3/pSmqStgj0JWHw97LSK19+C1Kn1+SKw Dy8ezL4zAlvixRUYpLstQ/oRNXmHWo5jXhesnWVjv2CU/9Dqg0TSiWJK7dlseEXJ M7CyVb9EfHM0VuF7MD8dvNTzJse0rEB48ZhfWKoAVv04yv1FPjC9uCzjKPFpuOdI 4qdMx8YeJ5WIsx9TD/BHiDITF/LyjWxOW0aimkzasSpFUb2I/0ijLCYHtHI5f934 3W2hLgOOgxmUuIs/lZSXUKmEPZT0j+TxEQ9TKTPCY4GwviAzXJNwqHOyvldmrDJF 4kmmD7HiPDfmt0nJREw+0aclwiYad8w= -----END CERTIFICATE-----Generated at Wed Aug 13 04:28:57 2025 by rpki-client