$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft File: yy5uwVWepHY5RAtAqtdfleb9vF8.mft (raw, json) Hash identifier: M28K4dNlwpqFebHSsGX20XEbCEhnF8WxyU0C5aKW1kI= Subject key identifier: 0E:93:C1:41:61:92:14:8A:FB:EE:96:D3:F7:B2:6C:1D:DB:0D:8A:3C Authority key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F Certificate issuer: /CN=A9127760/serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft Manifest number: 04 Signing time: Mon 25 Aug 2025 08:45:26 +0000 Manifest this update: Mon 25 Aug 2025 08:45:26 +0000 Manifest next update: Mon 01 Sep 2025 08:45:26 +0000 Files and hashes: 1: yy5uwVWepHY5RAtAqtdfleb9vF8.crl (hash: 64x/krdCQNPvzTLIDAAeG9hFN4Et3+ju1G8+ameLbJg=) 2: F9B1B1167E3F11F0B7941020C4F9AE02.roa (hash: bK7hZCbYRKmxsAbM/VvM+9yVYJP6bmKeYAFIpnPtV6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 08:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F Validity Not Before: Aug 25 08:45:26 2025 GMT Not After : Sep 1 08:45:26 2025 GMT Subject: CN=68ac22a6-c04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:7b:af:f0:62:f1:dc:6e:4d:41:6c:45:52: b3:05:dd:35:7f:ee:bd:0c:8f:7f:8e:1e:6e:b5:0e: 93:90:2e:fa:56:2b:ea:65:78:b3:94:cb:de:18:d6: 85:04:f5:76:31:64:03:2f:4d:75:53:69:21:36:05: 1a:bf:e8:2a:9c:2b:43:0d:f5:23:11:38:03:c9:78: 7d:14:92:42:36:d3:19:63:2e:69:ba:15:ac:4a:45: 8d:bd:dd:bb:fb:dc:7c:55:c4:b1:f1:ee:af:35:01: 49:7e:20:b3:d2:82:0b:d8:f0:61:a1:60:a0:dc:8a: 98:c5:ab:c9:b9:db:53:f5:30:bb:96:d1:85:c5:d0: 4d:2b:00:74:11:c9:9a:fd:ca:68:6d:c6:98:0e:a6: a9:e6:18:4b:9a:85:61:83:39:1e:ab:60:32:84:94: f7:89:75:5a:d2:02:f4:be:89:69:2b:e6:29:78:91: 63:de:1a:11:52:34:b7:25:ed:d8:74:10:12:1f:14: 53:56:aa:c7:6e:a5:5a:9c:e8:6b:36:bc:5f:81:e3: 8a:ec:63:5b:88:ff:1f:19:b1:71:6b:83:7a:47:0c: dd:8e:ba:9c:c0:70:ec:a8:9b:3f:6c:bd:47:c6:83: d2:40:40:5b:e3:e9:5a:99:2d:b9:5e:77:43:0c:64: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:93:C1:41:61:92:14:8A:FB:EE:96:D3:F7:B2:6C:1D:DB:0D:8A:3C X509v3 Authority Key Identifier: keyid:CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c1:07:95:ac:f1:ce:76:77:04:94:cf:22:12:fe:9a:21:fe: 17:b8:b2:45:ca:84:bf:c7:53:e7:23:88:8b:f4:c3:d7:c7:cd: dc:c7:94:ad:64:d6:3b:cc:e4:b9:e0:95:c2:a9:09:f8:15:fd: 1d:7b:78:1a:dd:4b:b5:a0:5c:34:0e:fe:f1:07:42:7b:ff:b1: c0:b4:a0:7d:93:dd:08:8f:1a:b6:57:12:c4:59:a3:63:fc:f3: ec:22:b4:bd:2e:91:83:47:e6:2b:87:0b:30:c3:f5:59:fa:a7: 1a:c1:de:a9:06:8a:c1:30:77:6c:b3:55:c6:db:7f:b8:6d:62: 61:cb:24:81:ed:50:51:a3:97:97:e5:95:0b:3a:a4:3d:47:cf: 0f:0a:96:08:42:c5:2a:0f:23:39:2d:c2:d6:e7:6e:36:50:8e: 6b:62:04:cb:ee:ad:59:e3:e8:10:70:1f:11:6b:5f:cc:80:e6: a6:bd:21:5d:38:28:23:2a:19:89:ab:b9:19:15:05:83:4a:0e: c9:66:02:30:03:23:f3:98:7f:35:98:11:72:07:b7:7a:dd:cf: 02:30:7c:ba:56:aa:63:ec:00:17:27:e4:8f:18:a1:02:ae:7a: 85:2c:9b:b7:2f:d7:90:c2:ad:61:ec:81:df:82:dd:f8:6d:8e: 1b:81:78:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Nzc2MDExMC8GA1UEBRMoQ0IyRTZFQzE1NTlFQTQ3NjM5NDQwQjQwQUFENzVGOTVF NkZEQkM1RjAeFw0yNTA4MjUwODQ1MjZaFw0yNTA5MDEwODQ1MjZaMBgxFjAUBgNV BAMTDTY4YWMyMmE2LWMwNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFznuv8GLx3G5NQWxFUrMF3TV/7r0Mj3+OHm61DpOQLvpWK+pleLOUy94Y1oUE 9XYxZAMvTXVTaSE2BRq/6CqcK0MN9SMROAPJeH0UkkI20xljLmm6FaxKRY293bv7 3HxVxLHx7q81AUl+ILPSggvY8GGhYKDcipjFq8m521P1MLuW0YXF0E0rAHQRyZr9 ymhtxpgOpqnmGEuahWGDOR6rYDKElPeJdVrSAvS+iWkr5il4kWPeGhFSNLcl7dh0 EBIfFFNWqsdupVqc6Gs2vF+B44rsY1uI/x8ZsXFrg3pHDN2OupzAcOyomz9svUfG g9JAQFvj6VqZLbled0MMZDiRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDpPBQWGS FIr77pbT97JsHdsNijwwHwYDVR0jBBgwFoAUyy5uwVWepHY5RAtAqtdfleb9vF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzc0M0QxNjdFN0Uz RjExRjBBQjA4OUIxRUM0RjlBRTAyL3l5NXV3VldlcEhZNVJBdEFxdGRmbGViOXZG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXk1dXdWV2VwSFk1UkF0QXF0ZGZsZWI5dkY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NzYwLzc0M0QxNjdFN0UzRjExRjBBQjA4OUIxRUM0RjlBRTAyL3l5NXV3VldlcEhZ NVJBdEFxdGRmbGViOXZGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAITBB5Ws8c52dwSUzyIS/poh/he4skXKhL/HU+cjiIv0w9fHzdzHlK1k 1jvM5LnglcKpCfgV/R17eBrdS7WgXDQO/vEHQnv/scC0oH2T3QiPGrZXEsRZo2P8 8+witL0ukYNH5iuHCzDD9Vn6pxrB3qkGisEwd2yzVcbbf7htYmHLJIHtUFGjl5fl lQs6pD1Hzw8KlghCxSoPIzktwtbnbjZQjmtiBMvurVnj6BBwHxFrX8yA5qa9IV04 KCMqGYmruRkVBYNKDslmAjADI/OYfzWYEXIHt3rdzwIwfLpWqmPsABcn5I8YoQKu eoUsm7cv15DCrWHsgd+C3fhtjhuBeBg= -----END CERTIFICATE-----Generated at Mon Aug 25 23:33:37 2025 by rpki-client