$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft File: YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json) Hash identifier: 8IQ4+rC/664+kDPb6+SsNOpoOhkjRM0zBby03RF8jX4= Subject key identifier: 0E:5E:7A:0A:FC:AF:B0:3E:1B:68:D5:94:10:3A:03:F8:8A:89:8C:6B Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 Certificate issuer: /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft Manifest number: 0280 Signing time: Sat 19 Jul 2025 02:07:22 +0000 Manifest this update: Sat 19 Jul 2025 02:07:22 +0000 Manifest next update: Sat 26 Jul 2025 02:07:22 +0000 Files and hashes: 1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: vi+Nugo3trgEKppiNX+3WrvZA4FqLF3hMa096r+sjwA=) 2: 008C0876148311ED856EF438C4F9AE02.roa (hash: TaT1WGLobUSkn2V8H3yXdWE7g83qq/C9PlZR3+C38jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9293, serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Validity Not Before: Jul 19 02:07:22 2025 GMT Not After : Jul 26 02:07:22 2025 GMT Subject: CN=687afdda-cbd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b2:5b:4e:f1:31:e9:43:bc:aa:2e:f5:10:21: c9:4e:6e:c8:63:fa:a2:ef:49:52:dd:49:23:70:c9: f8:44:f8:14:a4:5b:70:8d:59:39:78:59:42:d8:0b: 48:79:76:77:17:fc:26:94:31:71:3c:e4:93:31:97: 15:90:94:3b:20:af:61:f6:92:4a:a7:e0:a0:56:d7: a0:07:ad:4a:49:36:ce:bd:b1:10:05:ee:fb:c1:cb: 9d:38:ce:87:5d:02:69:96:ad:75:e6:c8:d8:66:89: 29:95:5e:ba:64:88:a4:13:19:ae:2a:ce:d2:46:64: ff:df:25:c7:b0:e6:40:db:e5:07:33:af:a7:46:72: 25:4c:f9:6d:91:26:b4:7e:e3:d4:0f:39:68:c7:58: 69:d5:2b:1c:aa:d6:c4:a0:38:38:60:cc:32:19:cb: f0:05:83:03:f1:30:54:96:a2:72:ab:81:e3:ca:15: 88:6f:49:c3:40:f7:da:80:b6:e4:6a:5c:55:48:35: 0a:23:f3:75:e3:b2:a1:9b:df:d7:0c:85:a8:7b:dd: bb:d6:a6:30:fc:c9:5d:39:b3:f1:5c:50:27:7b:ab: 82:6a:3d:d8:05:3f:5e:ba:26:dc:ca:cb:fd:a9:b2: 60:7b:f7:3d:1b:b0:5e:e5:94:b1:c9:ae:b0:83:c6: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5E:7A:0A:FC:AF:B0:3E:1B:68:D5:94:10:3A:03:F8:8A:89:8C:6B X509v3 Authority Key Identifier: keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f1:0f:18:a5:fc:c8:2b:4a:84:6c:83:2a:c8:30:a9:c8:66: c9:8f:39:75:7a:a1:76:7c:aa:48:f1:f7:6e:9b:de:07:fa:d8: a6:4d:ce:d0:59:c8:4f:90:f4:2a:3c:ae:81:26:7d:a2:bf:26: 5a:40:ae:13:05:b5:29:03:fc:89:06:a3:a9:73:05:bb:8c:4e: ec:3a:26:6f:1c:ef:ee:b1:ee:ab:af:1c:48:a6:83:72:c7:df: d8:a7:9f:4e:a3:7a:92:06:98:f9:3d:3a:ad:b1:d4:39:81:b4: 98:ae:d6:d9:73:0d:2a:9c:26:3f:4d:18:32:8b:bf:6f:56:40: 2d:0d:e9:cc:4c:93:a5:be:43:65:4a:41:77:b1:09:91:0c:e5: cd:a2:ce:81:42:22:6c:e3:49:b0:82:4d:1b:9c:ca:4f:f3:7d: 23:86:33:50:4b:e1:f3:1f:c0:9e:f1:34:3c:05:24:5e:93:6b: 35:78:7f:78:9f:e0:b8:76:4b:ad:e4:b2:58:51:f3:91:df:0f: 77:dd:18:d2:2f:ef:b5:b8:0c:8f:90:07:2c:9a:c6:9d:d5:e3: eb:1c:83:2a:ca:7f:4b:24:ca:9b:81:05:49:6f:19:e1:38:cb: b6:cd:fb:d5:36:a2:a8:29:e9:d0:42:17:3b:31:3c:f7:3f:ad: bb:a5:1f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOTMxMTAvBgNVBAUTKDYwMkZGNEZBODBBMDAwQUM2MUU2RDRBQjJGNzJGQkQ5 NkE2MUY4ODIwHhcNMjUwNzE5MDIwNzIyWhcNMjUwNzI2MDIwNzIyWjAYMRYwFAYD VQQDEw02ODdhZmRkYS1jYmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LJbTvEx6UO8qi71ECHJTm7IY/qi70lS3UkjcMn4RPgUpFtwjVk5eFlC2AtI eXZ3F/wmlDFxPOSTMZcVkJQ7IK9h9pJKp+CgVtegB61KSTbOvbEQBe77wcudOM6H XQJplq115sjYZokplV66ZIikExmuKs7SRmT/3yXHsOZA2+UHM6+nRnIlTPltkSa0 fuPUDzlox1hp1SscqtbEoDg4YMwyGcvwBYMD8TBUlqJyq4HjyhWIb0nDQPfagLbk alxVSDUKI/N147Khm9/XDIWoe9271qYw/MldObPxXFAne6uCaj3YBT9euibcysv9 qbJge/c9G7Be5ZSxya6wg8ag7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5eegr8 r7A+G2jVlBA6A/iKiYxrMB8GA1UdIwQYMBaAFGAv9PqAoACsYebUqy9y+9lqYfiC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5My9BOUEzOEJCRTE0 N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FLeGg1dFNyTDNMNzJXcGgt SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDXzAtb0NnQUt4aDV0U3JMM0w3MldwaC1JSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5My9BOUEzOEJCRTE0N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FL eGg1dFNyTDNMNzJXcGgtSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl8Q8YpfzIK0qEbIMqyDCpyGbJjzl1eqF2fKpI8fdum94H+timTc7Q WchPkPQqPK6BJn2ivyZaQK4TBbUpA/yJBqOpcwW7jE7sOiZvHO/use6rrxxIpoNy x9/Yp59Oo3qSBpj5PTqtsdQ5gbSYrtbZcw0qnCY/TRgyi79vVkAtDenMTJOlvkNl SkF3sQmRDOXNos6BQiJs40mwgk0bnMpP830jhjNQS+HzH8Ce8TQ8BSRek2s1eH94 n+C4dkut5LJYUfOR3w933RjSL++1uAyPkAcsmsad1ePrHIMqyn9LJMqbgQVJbxnh OMu2zfvVNqKoKenQQhc7MTz3P627pR+F -----END CERTIFICATE-----Generated at Sun Jul 20 06:28:31 2025 by rpki-client