$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json) Hash identifier: attq+o4dvbZ1Tw2elqaHk1hmPEzoZIqvnz1aONIFnT4= Subject key identifier: 18:E7:42:4B:EB:2F:00:59:DA:3A:1F:4F:55:7D:50:8E:ED:4A:43:E4 Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft Manifest number: 5D Signing time: Thu 07 Aug 2025 07:45:14 +0000 Manifest this update: Thu 07 Aug 2025 07:45:14 +0000 Manifest next update: Thu 14 Aug 2025 07:45:14 +0000 Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: lqpqlw6oj+aH3x0Cnk4R94NYWmuGMg9H8qLsGZzwMOQ=) 2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: Aug 7 07:45:14 2025 GMT Not After : Aug 14 07:45:14 2025 GMT Subject: CN=6894598a-76b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:1c:b6:fd:7b:cf:2d:b0:9f:22:1e:bd:9b: d6:2b:10:ac:14:c1:e9:43:56:f8:5b:7d:4b:43:a1: fa:20:78:79:6b:8e:1a:55:83:87:8a:2f:41:40:32: 7a:b3:e6:a7:42:65:fc:ea:a5:95:6c:37:af:31:75: 6e:73:d3:bc:2f:63:51:14:de:10:49:7d:4b:65:07: a6:0b:f2:48:4d:30:4b:a8:ee:c3:55:12:1f:95:0c: 8b:7d:eb:63:4a:c3:5c:25:f6:6d:c6:e1:6e:cb:88: 23:8c:c6:2a:15:72:e0:c7:20:ba:64:53:a5:e4:b5: 3a:4a:b5:66:2e:76:0a:d5:d8:5a:d8:3a:6e:2d:f4: 70:70:8c:d4:aa:ca:68:36:a6:dd:f0:c5:4f:e3:fc: 46:ed:b7:44:11:32:17:1e:2f:47:04:3c:c7:b9:6e: ad:d2:05:7d:20:9e:00:8b:59:5c:21:f4:4b:87:59: de:b4:d1:96:de:47:fb:b8:b0:e2:79:92:54:fe:55: 1e:48:6d:4f:77:4e:9d:bf:3f:12:2f:c0:cc:15:02: dd:0b:3f:89:b7:d4:22:e1:0c:91:fa:5f:aa:0a:46: 71:93:35:22:43:fd:c5:89:1c:18:1d:61:46:f0:f8: ea:19:f7:bb:92:6b:c5:8b:e1:4f:5c:51:3e:a9:bb: 31:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E7:42:4B:EB:2F:00:59:DA:3A:1F:4F:55:7D:50:8E:ED:4A:43:E4 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e4:b4:82:8c:bb:35:44:6f:db:7e:7f:16:a4:43:58:44:65: ea:8c:76:16:ae:29:cd:98:6c:f1:35:65:26:ed:33:30:1d:64: 61:e1:0d:11:75:7f:71:a5:b2:56:99:c8:19:8f:67:12:45:21: 6f:48:ef:e7:e1:61:97:5e:66:3a:c3:21:cc:76:88:c2:09:e3: c4:57:63:96:d9:c5:ed:a6:47:4a:64:ce:34:59:13:19:a7:8e: 92:d0:e7:dd:38:b5:23:a1:f8:22:fe:5e:61:08:e0:15:7e:4e: a4:f7:49:90:93:89:cb:c1:3b:b9:70:33:71:53:e1:8a:74:01: 80:d6:f4:e7:33:73:89:7f:1a:84:a9:25:5c:ca:68:8c:78:82: 69:8d:9f:4b:8a:df:0b:f1:83:5c:c5:06:20:50:b3:b7:7a:4b: 42:8b:04:77:9e:12:fd:1b:6d:4c:22:8c:28:ce:3b:50:e9:bb: 3a:7e:a6:8a:4b:55:78:7b:a9:8a:6e:16:e1:32:30:97:8f:10: 38:af:82:dd:b8:a4:98:a9:d6:1a:21:23:06:a2:67:9a:22:e3: 45:d1:36:98:9f:4f:bc:79:d6:6a:3c:42:69:41:25:c5:37:64: 07:4c:93:2c:01:da:f0:06:86:a4:59:06:a2:ff:3a:4e:b3:6d: 47:22:98:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTc2NjExMC8GA1UEBRMoQzkyNDYwMTQyNTdFRUZGRkZFODBDRDNFQUJGRUQ2N0E4 OThENkY1NzAeFw0yNTA4MDcwNzQ1MTRaFw0yNTA4MTQwNzQ1MTRaMBgxFjAUBgNV BAMTDTY4OTQ1OThhLTc2YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNQhy2/XvPLbCfIh69m9YrEKwUwelDVvhbfUtDofogeHlrjhpVg4eKL0FAMnqz 5qdCZfzqpZVsN68xdW5z07wvY1EU3hBJfUtlB6YL8khNMEuo7sNVEh+VDIt962NK w1wl9m3G4W7LiCOMxioVcuDHILpkU6XktTpKtWYudgrV2FrYOm4t9HBwjNSqymg2 pt3wxU/j/Ebtt0QRMhceL0cEPMe5bq3SBX0gngCLWVwh9EuHWd600ZbeR/u4sOJ5 klT+VR5IbU93Tp2/PxIvwMwVAt0LP4m31CLhDJH6X6oKRnGTNSJD/cWJHBgdYUbw +OoZ97uSa8WL4U9cUT6puzGTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGOdCS+sv AFnaOh9PVX1Qju1KQ+QwHwYDVR0jBBgwFoAUySRgFCV+7//+gM0+q/7WeomNb1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5NzY2LzgwRjU5RTk0RUE1 NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVNSZ0ZDVi03X18tZ00wLXFfN1dlb21OYjFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 NzY2LzgwRjU5RTk0RUE1NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19f LWdNMC1xXzdXZW9tTmIxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAADktIKMuzVEb9t+fxakQ1hEZeqMdhauKc2YbPE1ZSbtMzAdZGHhDRF1 f3GlslaZyBmPZxJFIW9I7+fhYZdeZjrDIcx2iMIJ48RXY5bZxe2mR0pkzjRZExmn jpLQ5904tSOh+CL+XmEI4BV+TqT3SZCTicvBO7lwM3FT4Yp0AYDW9Oczc4l/GoSp JVzKaIx4gmmNn0uK3wvxg1zFBiBQs7d6S0KLBHeeEv0bbUwijCjOO1Dpuzp+popL VXh7qYpuFuEyMJePEDivgt24pJip1hohIwaiZ5oi40XRNpifT7x51mo8QmlBJcU3 ZAdMkywB2vAGhqRZBqL/Ok6zbUcimP4= -----END CERTIFICATE-----Generated at Sat Aug 9 02:50:16 2025 by rpki-client