$ rpki-client -vvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft File: yT-PYPBn4kwb_PI7LPQivVhkvss.mft (raw, json) Hash identifier: 69Bt4cIq9jSvPLnya1vV+sgUbMc7JnX4L3Xdb5XkQeA= Subject key identifier: 28:4C:76:A4:C3:A6:02:EB:42:24:C7:61:41:FA:60:CD:A5:D0:A6:95 Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB Certificate issuer: /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft Manifest number: 03 Signing time: Thu 21 Aug 2025 08:24:52 +0000 Manifest this update: Thu 21 Aug 2025 08:24:51 +0000 Manifest next update: Thu 28 Aug 2025 08:24:51 +0000 Files and hashes: 1: yT-PYPBn4kwb_PI7LPQivVhkvss.crl (hash: ALZLTY8/kf7L5xbPSMGpv1YBvPLEVeKwE5Vb8RVyklE=) 2: 7452F54C7D7D11F09C982A7CC4F9AE02.roa (hash: fSo3LQThSu3zM+wgt7BUnbtQ2wqM3uaigVctUk+6+W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB Validity Not Before: Aug 21 08:24:51 2025 GMT Not After : Aug 28 08:24:51 2025 GMT Subject: CN=68a6d7d4-68ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:47:9c:d7:d8:e2:96:e9:cd:5a:d8:bc:63: 91:9d:8e:4e:3e:ca:39:cc:2e:c9:3b:0d:8e:e0:31: a7:3e:eb:2d:d4:a6:38:78:49:c4:4a:38:11:34:19: ac:3e:ea:93:74:74:11:5b:17:1b:24:00:f5:1f:5a: ec:6c:91:21:af:69:1d:94:e1:3d:43:88:f8:06:60: d0:03:da:59:4b:29:69:1d:c5:e7:fb:59:3b:ec:14: b7:19:60:1c:c1:8f:f5:64:e7:ea:51:62:1b:47:3f: 3f:2a:f6:29:a6:e5:f7:64:bb:cc:ca:60:0b:8e:9a: 5b:51:59:26:8c:e1:4f:23:a6:d7:25:e5:ce:c4:99: 25:2d:ab:1c:ad:c3:3a:fe:08:3e:5a:e0:d1:a9:82: 21:a9:b4:a5:6f:19:14:7f:7f:03:6e:8e:0b:9a:8a: ac:f6:0b:d5:5e:8a:59:d7:f4:00:a3:4d:25:ba:14: fb:99:f9:ea:2a:52:dd:4e:d4:a0:ab:6a:73:c2:dd: 5e:d5:22:ba:0c:f2:cd:c6:10:f3:6f:70:9e:c1:cf: 32:8b:d1:e8:34:b1:dd:3d:34:24:36:6d:fd:6c:02: 2f:04:26:f5:e0:d2:ca:56:69:d4:bc:3f:bc:8b:20: 29:98:cd:54:48:96:b9:2a:ce:d3:58:44:09:90:51: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4C:76:A4:C3:A6:02:EB:42:24:C7:61:41:FA:60:CD:A5:D0:A6:95 X509v3 Authority Key Identifier: keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f1:7b:e7:f3:49:5c:38:a1:00:2b:ab:4e:bf:a2:e8:61:21: 83:cf:35:67:7e:42:a3:9c:70:b8:0c:94:8f:fc:a7:a2:8c:c3: 71:a3:a6:e7:71:77:e2:d0:6c:3f:78:01:72:f6:0f:e6:df:b5: 93:96:19:85:6c:fa:39:c6:9c:97:8a:9a:1d:2b:e5:c4:9b:a5: df:78:dd:e8:3a:0f:c2:d8:91:ce:dd:35:b6:3b:ad:6c:1b:91: 06:a3:a2:9b:13:2b:f6:29:2c:17:8d:b0:c6:b6:c1:21:a9:e1: 5d:e6:10:a4:1d:a8:52:6f:db:9f:0d:04:f7:9d:a6:ca:52:34: b3:33:d2:93:b8:24:e8:ec:92:f8:a5:02:12:42:db:64:98:c7: 46:6b:20:d4:9d:95:5b:fe:9a:3a:2a:99:3a:2f:07:92:d4:a3: ee:a5:d2:35:c5:1a:84:a7:cd:a0:96:42:9e:27:a5:45:a6:d8: 6d:49:99:a8:dd:50:43:7c:6d:01:8c:1c:bc:d7:5f:a9:54:c7: 06:ee:33:96:06:cc:72:52:65:64:ef:88:6f:87:d7:b3:93:d6: 5a:ba:85:c1:8e:3f:39:82:51:f8:98:9f:e0:c3:70:62:59:0a: 9e:02:bd:07:c8:7e:cc:2a:a1:c3:ca:c3:5d:02:bf:48:e9:33: be:6b:5d:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTRBNDExMC8GA1UEBRMoQzkzRjhGNjBGMDY3RTI0QzFCRkNGMjNCMkNGNDIyQkQ1 ODY0QkVDQjAeFw0yNTA4MjEwODI0NTFaFw0yNTA4MjgwODI0NTFaMBgxFjAUBgNV BAMTDTY4YTZkN2Q0LTY4ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3O0ec19jilunNWti8Y5Gdjk4+yjnMLsk7DY7gMac+6y3Upjh4ScRKOBE0Gaw+ 6pN0dBFbFxskAPUfWuxskSGvaR2U4T1DiPgGYNAD2llLKWkdxef7WTvsFLcZYBzB j/Vk5+pRYhtHPz8q9imm5fdku8zKYAuOmltRWSaM4U8jptcl5c7EmSUtqxytwzr+ CD5a4NGpgiGptKVvGRR/fwNujguaiqz2C9VeilnX9ACjTSW6FPuZ+eoqUt1O1KCr anPC3V7VIroM8s3GEPNvcJ7BzzKL0eg0sd09NCQ2bf1sAi8EJvXg0spWadS8P7yL ICmYzVRIlrkqztNYRAmQUWhhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKEx2pMOm AutCJMdhQfpgzaXQppUwHwYDVR0jBBgwFoAUyT+PYPBn4kwb/PI7LPQivVhkvssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNEE0L0VBQjE3QkY2N0Q3 QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3Yl9QSTdMUFFpdlZoa3Zz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVQtUFlQQm40a3diX1BJN0xQUWl2VmhrdnNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF NEE0L0VBQjE3QkY2N0Q3QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3 Yl9QSTdMUFFpdlZoa3Zzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKHxe+fzSVw4oQArq06/ouhhIYPPNWd+QqOccLgMlI/8p6KMw3Gjpudx d+LQbD94AXL2D+bftZOWGYVs+jnGnJeKmh0r5cSbpd943eg6D8LYkc7dNbY7rWwb kQajopsTK/YpLBeNsMa2wSGp4V3mEKQdqFJv258NBPedpspSNLMz0pO4JOjskvil AhJC22SYx0ZrINSdlVv+mjoqmTovB5LUo+6l0jXFGoSnzaCWQp4npUWm2G1Jmajd UEN8bQGMHLzXX6lUxwbuM5YGzHJSZWTviG+H17OT1lq6hcGOPzmCUfiYn+DDcGJZ Cp4CvQfIfswqocPKw10Cv0jpM75rXTU= -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:45 2025 by rpki-client