$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft File: Y4g-TKLI593aw5h-SE_R1nLZOUk.mft (raw, json) Hash identifier: zDbhz7/MDcEoKVsTxeTUmbKfqIIzb9YFXLDFAYtS2MQ= Subject key identifier: C3:75:93:7B:C0:2A:64:43:4A:D6:6D:54:80:BC:C1:3F:05:6B:5E:55 Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft Manifest number: 0C36 Signing time: Wed 10 Sep 2025 18:48:20 +0000 Manifest this update: Wed 10 Sep 2025 18:48:19 +0000 Manifest next update: Wed 17 Sep 2025 18:48:19 +0000 Files and hashes: 1: Y4g-TKLI593aw5h-SE_R1nLZOUk.crl (hash: wajyTA2CiDGCwY7F3osfka5vO7QIGd9GxmubrOWYEuM=) 2: 9D9E8D0C11DC11EABC4FB55AC4F9AE02.roa (hash: E2q/ZEHSPXl1Ew87PC9tVYqM/dotHBquWrnE6mAYEbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 18:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: Sep 10 18:48:19 2025 GMT Not After : Sep 17 18:48:19 2025 GMT Subject: CN=68c1c7f4-bed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1d:17:7e:e7:ba:6a:09:01:a5:e9:52:d7:e7: e9:fe:35:ec:b1:d0:99:26:62:65:96:96:5c:e7:1b: 5b:1c:d6:04:dd:38:29:68:f0:24:78:cc:6a:5f:cf: 0f:4b:87:2e:dc:8f:d3:c1:4b:d8:c3:15:cd:68:80: 4f:0a:79:15:f2:0e:2d:d7:f3:3b:87:e9:ae:4a:14: 91:b8:b6:2c:75:3a:7c:63:b3:93:63:cc:ac:3c:ff: eb:18:43:e3:73:30:5b:d7:8d:31:22:dd:05:ef:49: be:41:2f:64:04:79:ce:23:eb:cf:3e:e1:ad:83:8e: dc:5b:98:7e:b0:f5:78:a4:b5:8e:e8:7a:93:9c:75: 14:4e:00:e8:45:b0:33:db:c7:c7:53:f9:73:ce:6a: b1:1b:6d:37:49:28:f9:35:b9:36:31:37:44:df:0a: e0:64:21:f0:eb:c8:81:20:7f:e6:b5:69:af:1e:c6: 1b:2d:63:a7:f9:c1:e6:8d:54:4a:8f:cb:05:a3:29: a2:07:5c:51:96:fe:ca:c6:bf:76:64:fb:48:32:a2: bc:33:d0:a4:56:52:3a:2e:dd:7d:2e:09:55:a0:c3: 54:9c:a2:52:19:af:ae:a5:0b:02:95:c1:d8:e8:6c: 58:21:6b:b9:1b:48:ca:48:b3:e9:4f:3a:09:c8:ba: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:75:93:7B:C0:2A:64:43:4A:D6:6D:54:80:BC:C1:3F:05:6B:5E:55 X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fa:c1:f7:f4:40:25:0b:2f:3d:7c:d5:a7:9b:2d:a1:fa:5a: 56:75:13:8a:e2:3c:79:1c:51:07:17:d1:83:e8:63:5d:dd:eb: 90:f1:c2:3b:ec:db:35:1c:2e:c0:67:b0:14:d3:5b:62:bf:28: 50:2b:db:9e:8b:19:7f:36:25:ee:0c:b4:1d:10:0c:1b:7f:fa: 24:b8:41:fc:cc:d2:c1:01:48:77:ee:2f:54:22:f3:84:b3:08: 04:a6:58:cc:76:cc:d2:b8:f8:ed:8f:3a:c8:47:23:f8:bd:6d: b7:c8:a9:12:d3:13:b9:34:f0:9a:92:8b:07:cb:fb:97:87:c3: d1:bd:78:2d:21:96:67:6c:be:04:dd:b2:ca:87:74:16:b0:ca: ec:a4:81:65:ff:5b:78:f2:ca:6d:bb:6c:df:a3:2a:17:f0:f9: 61:bb:d6:5f:fc:01:e0:b1:dc:fc:00:8f:33:65:6e:fd:2e:46: 95:4d:a0:80:22:56:6e:a3:ee:aa:0e:2c:34:53:36:d4:78:bd: 6c:38:9b:1c:06:fc:f5:ef:da:b5:a3:2b:11:cd:3f:d0:45:3c: 2a:b2:ea:a9:ac:32:8c:09:76:19:9c:bb:2e:55:6a:58:16:c9: 1f:8e:99:14:f4:38:a7:70:03:cb:33:88:46:10:1e:f3:9a:73: 0f:6c:56:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjUwOTEwMTg0ODE5WhcNMjUwOTE3MTg0ODE5WjAYMRYwFAYD VQQDEw02OGMxYzdmNC1iZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R0Xfue6agkBpelS1+fp/jXssdCZJmJllpZc5xtbHNYE3TgpaPAkeMxqX88P S4cu3I/TwUvYwxXNaIBPCnkV8g4t1/M7h+muShSRuLYsdTp8Y7OTY8ysPP/rGEPj czBb140xIt0F70m+QS9kBHnOI+vPPuGtg47cW5h+sPV4pLWO6HqTnHUUTgDoRbAz 28fHU/lzzmqxG203SSj5Nbk2MTdE3wrgZCHw68iBIH/mtWmvHsYbLWOn+cHmjVRK j8sFoymiB1xRlv7Kxr92ZPtIMqK8M9CkVlI6Lt19LglVoMNUnKJSGa+upQsClcHY 6GxYIWu5G0jKSLPpTzoJyLpPYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMN1k3vA KmRDStZtVIC8wT8Fa15VMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTRBQS82NzRDQTI5RTExREIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5 M2F3NWgtU0VfUjFuTFpPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm+sH39EAlCy89fNWnmy2h+lpWdROK4jx5HFEHF9GD6GNd3euQ8cI7 7Ns1HC7AZ7AU01tivyhQK9ueixl/NiXuDLQdEAwbf/okuEH8zNLBAUh37i9UIvOE swgEpljMdszSuPjtjzrIRyP4vW23yKkS0xO5NPCakosHy/uXh8PRvXgtIZZnbL4E 3bLKh3QWsMrspIFl/1t48sptu2zfoyoX8Plhu9Zf/AHgsdz8AI8zZW79LkaVTaCA IlZuo+6qDiw0UzbUeL1sOJscBvz179q1oysRzT/QRTwqsuqprDKMCXYZnLsuVWpY FskfjpkU9DincAPLM4hGEB7zmnMPbFaY -----END CERTIFICATE-----Generated at Wed Sep 10 23:57:12 2025 by rpki-client