$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft File: lYpO2dfWT6yHvRbsijZXHhovUIo.mft (raw, json) Hash identifier: DB7FHTlRCAdQgCEkp5HkWigzxbtXDIO1gmjOMUAdD1s= Subject key identifier: A0:5C:12:E9:3A:09:0C:07:0B:6C:EF:ED:17:7F:E8:99:A6:16:79:E3 Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A Certificate issuer: /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Certificate serial: 0CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft Manifest number: 0CB2 Signing time: Sun 20 Jul 2025 18:15:09 +0000 Manifest this update: Sun 20 Jul 2025 18:15:08 +0000 Manifest next update: Sun 27 Jul 2025 18:15:08 +0000 Files and hashes: 1: lYpO2dfWT6yHvRbsijZXHhovUIo.crl (hash: Xy6a87VhofqFbZim1RUrmSSx4u6WmXZCyLMiw27K/Lw=) 2: C3667DBAE6A711EFA8D1A077C4F9AE02.roa (hash: 5CkSO9tc+/UFRkRtU6tdYYVHHpR7HqK76CBHyDuJbdw=) 3: C2911C74E6A711EFA8D1A077C4F9AE02.roa (hash: 7uzXUSClxgsZqYNV6os8g6TMOvQ9tK2i5DS7Dqxq1Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160EEF, serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Validity Not Before: Jul 20 18:15:08 2025 GMT Not After : Jul 27 18:15:08 2025 GMT Subject: CN=687d322d-c443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9b:aa:d0:cd:82:65:a2:c5:1f:38:db:a0:3e: a6:5b:35:d5:e3:9f:9f:d1:ba:e9:3a:4f:32:a1:44: f2:04:1d:a6:10:3d:0d:6e:f1:0f:a3:f8:c7:f9:26: 7e:7f:88:88:5b:a3:d5:35:8a:dd:b0:6d:39:4f:c6: 5d:70:85:a4:69:08:c1:28:4f:c9:67:09:19:84:be: 0c:b0:6a:6a:63:70:a9:df:0a:af:8f:56:50:45:88: c8:b9:52:cd:81:ac:97:b3:83:d2:c5:50:21:47:84: e0:0a:49:93:34:eb:67:a5:69:bb:90:12:a3:00:35: ad:df:00:b7:7a:c2:de:b6:77:ea:53:e6:22:39:ee: c9:66:29:f5:69:7c:97:68:58:e7:13:e5:2d:6f:89: ba:82:68:35:26:86:c7:1b:c6:f3:38:66:22:65:f4: 46:af:65:9f:9d:1b:17:55:7e:29:59:f6:97:55:4f: e3:d5:70:5f:7d:78:89:df:b4:d8:1b:f2:5d:6d:c8: 36:8d:b1:c0:c3:42:29:98:82:24:ad:a4:8d:df:ee: d4:e0:c0:3c:0e:17:11:06:e7:37:0a:e7:2c:b3:ac: d7:69:f5:93:e1:12:0a:b6:4f:19:e0:26:37:62:7d: 2e:56:c2:f9:99:be:e5:98:9e:f9:a4:f1:b7:98:1c: 3b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5C:12:E9:3A:09:0C:07:0B:6C:EF:ED:17:7F:E8:99:A6:16:79:E3 X509v3 Authority Key Identifier: keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:1d:87:d6:bd:58:1a:a7:95:5d:07:9c:ed:37:01:34:61:dd: 1a:2c:70:41:9f:03:55:54:e9:9d:01:82:25:2f:83:75:3e:39: 5e:f2:12:9c:6d:bd:19:09:48:30:d3:b8:ba:67:a0:bf:22:9d: b3:15:0a:e3:0e:ed:03:b1:3a:ab:30:8f:10:0a:41:c0:80:be: cd:f6:ab:11:e5:e3:27:ac:44:1e:c4:3b:98:79:83:fe:ae:1d: f9:0a:ea:80:f0:4a:e6:21:a5:f1:4c:0a:46:7d:e7:a8:7f:ec: dc:df:8b:8b:c2:01:4f:12:70:99:61:f8:69:5a:ef:50:3d:c5: a0:1b:da:5e:17:6c:d0:ae:6b:b9:81:18:2a:a1:1a:26:58:96: 6b:39:fc:e3:86:15:d2:97:d2:5c:7e:e2:da:cc:0e:a2:bd:7d: b3:fc:14:26:59:f1:a5:fa:dd:87:75:62:36:e1:8d:77:14:83: b4:54:21:f7:db:8f:01:41:c2:1d:f7:fa:ca:b0:4e:cf:36:44: 7f:f0:8a:61:41:29:95:ab:c4:00:9a:9b:a1:fc:0e:09:74:77: df:1f:78:62:53:2b:06:11:7d:8d:8e:e6:d1:2a:07:1b:ce:6d: 4c:48:0b:37:b6:7a:77:b3:69:07:4f:79:ef:1c:f7:ad:47:4c: ec:c0:e3:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBFRUYxMTAvBgNVBAUTKDk1OEE0RUQ5RDdENjRGQUM4N0JEMTZFQzhBMzY1NzFF MUEyRjUwOEEwHhcNMjUwNzIwMTgxNTA4WhcNMjUwNzI3MTgxNTA4WjAYMRYwFAYD VQQDEw02ODdkMzIyZC1jNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Zuq0M2CZaLFHzjboD6mWzXV45+f0brpOk8yoUTyBB2mED0NbvEPo/jH+SZ+ f4iIW6PVNYrdsG05T8ZdcIWkaQjBKE/JZwkZhL4MsGpqY3Cp3wqvj1ZQRYjIuVLN gayXs4PSxVAhR4TgCkmTNOtnpWm7kBKjADWt3wC3esLetnfqU+YiOe7JZin1aXyX aFjnE+Utb4m6gmg1JobHG8bzOGYiZfRGr2WfnRsXVX4pWfaXVU/j1XBffXiJ37TY G/Jdbcg2jbHAw0IpmIIkraSN3+7U4MA8DhcRBuc3Cucss6zXafWT4RIKtk8Z4CY3 Yn0uVsL5mb7lmJ75pPG3mBw7aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBcEuk6 CQwHC2zv7Rd/6JmmFnnjMB8GA1UdIwQYMBaAFJWKTtnX1k+sh70W7Io2Vx4aL1CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEVFRi82QzRDRDY5MEY4 ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2eUh2UmJzaWpaWEhob3ZV SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZcE8yZGZXVDZ5SHZSYnNpalpYSGhvdlVJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEVFRi82QzRDRDY5MEY4ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2 eUh2UmJzaWpaWEhob3ZVSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiHYfWvVgap5VdB5ztNwE0Yd0aLHBBnwNVVOmdAYIlL4N1Pjle8hKc bb0ZCUgw07i6Z6C/Ip2zFQrjDu0DsTqrMI8QCkHAgL7N9qsR5eMnrEQexDuYeYP+ rh35CuqA8ErmIaXxTApGfeeof+zc34uLwgFPEnCZYfhpWu9QPcWgG9peF2zQrmu5 gRgqoRomWJZrOfzjhhXSl9JcfuLazA6ivX2z/BQmWfGl+t2HdWI24Y13FIO0VCH3 248BQcId9/rKsE7PNkR/8IphQSmVq8QAmpuh/A4JdHffH3hiUysGEX2NjubRKgcb zm1MSAs3tnp3s2kHT3nvHPetR0zswOOH -----END CERTIFICATE-----Generated at Sun Jul 20 22:35:37 2025 by rpki-client