$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: JrLOvzBOOh3ggHkKUhliTLR/+dl4HUfQR7gN8+oNcTk= Subject key identifier: F9:45:23:89:1C:96:B2:91:BC:DC:B8:BF:B7:27:22:4B:04:09:7D:15 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0D87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0D7B Signing time: Thu 18 Sep 2025 18:08:26 +0000 Manifest this update: Thu 18 Sep 2025 18:08:26 +0000 Manifest next update: Thu 25 Sep 2025 18:08:26 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: Pix65Qd9dVJPFtO9L5E8sgW2lSHLXwUc9H3LhSZerr8=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: Sep 18 18:08:26 2025 GMT Not After : Sep 25 18:08:26 2025 GMT Subject: CN=68cc4a9a-695a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:56:63:80:df:fb:3f:80:aa:63:1d:4c:4a: c1:e8:03:dc:35:ed:91:66:76:0f:01:3f:27:05:d0: 29:19:2d:fa:7d:8c:df:6d:9a:73:05:a2:df:0c:97: 63:8d:88:8f:15:f5:ce:62:a7:5c:6f:a6:a4:66:22: 19:5f:d8:85:f5:48:a0:3b:d1:08:e0:06:1c:4a:4b: b6:35:c7:b5:00:67:0e:eb:c6:ef:7a:46:5d:d7:bc: d4:e1:0f:4f:ee:75:45:aa:eb:c3:44:1a:13:51:1d: 00:66:65:9f:c7:cd:d4:e1:a6:65:25:69:5c:b1:9e: eb:a8:3f:61:0f:c4:78:02:6c:33:16:a1:da:94:56: 11:6a:8e:39:11:bc:05:41:b5:54:e1:57:c6:58:d0: f8:f0:c0:57:68:98:4d:11:61:ff:c5:7e:0b:f4:46: 63:86:cc:55:22:48:30:bd:68:d1:99:8a:49:1a:26: 81:86:77:e2:a5:44:11:26:62:7b:ca:4a:6f:4b:8d: 67:ab:f9:ad:1f:38:5e:66:b6:14:dd:6f:21:e4:70: 4f:6c:99:0e:d4:4d:12:15:f4:ef:f1:49:67:f5:f0: 07:79:33:26:4d:4c:57:7d:18:ea:f2:35:fe:47:38: 10:f0:8d:0b:bc:51:34:aa:3f:ec:ac:3e:a4:d1:cf: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:45:23:89:1C:96:B2:91:BC:DC:B8:BF:B7:27:22:4B:04:09:7D:15 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:ad:96:93:0f:5a:68:23:fe:02:bc:52:15:23:b8:72:d5:26: d5:a5:1e:1c:af:87:06:db:ad:bb:d6:32:e8:1f:59:f2:d7:2e: 30:e9:98:69:22:b5:1b:2f:f5:40:ad:16:0a:90:5f:7b:4f:24: 0e:46:18:6c:6c:72:aa:ca:e5:cd:54:f3:e3:81:32:78:16:b7: 6d:33:4a:d7:8c:7e:75:33:39:72:29:30:2f:c1:f7:37:63:8a: 5c:18:71:b1:e5:c8:5a:49:9a:e4:7a:e0:38:2b:c8:c2:67:d2: 99:94:8e:2e:7d:c0:c6:17:2f:ab:3a:09:ac:17:50:9c:85:e8: 8a:81:68:0c:db:40:0a:43:8c:7e:44:1e:7b:dc:11:b7:ac:74: 80:92:8a:00:35:1d:c8:c0:93:f7:58:77:78:80:b9:df:48:ef: f9:96:21:4b:40:08:12:87:47:7d:0a:72:00:e5:bb:97:7f:d3: 8c:1d:a5:fe:70:cb:78:8b:8c:27:7c:a9:4d:27:44:6f:ca:85: 8c:0b:99:50:11:0b:4f:a8:fc:a2:66:28:af:fd:f9:1f:45:df: b0:06:5e:4f:06:ec:41:0e:a1:0c:97:2d:11:d8:03:d8:b0:39: 1c:0b:c4:93:49:b9:9a:0f:88:83:c0:3b:1c:52:ef:91:1a:64: 00:4f:e7:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUwOTE4MTgwODI2WhcNMjUwOTI1MTgwODI2WjAYMRYwFAYD VQQDEw02OGNjNGE5YS02OTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0c1WY4Df+z+AqmMdTErB6APcNe2RZnYPAT8nBdApGS36fYzfbZpzBaLfDJdj jYiPFfXOYqdcb6akZiIZX9iF9UigO9EI4AYcSku2Nce1AGcO68bvekZd17zU4Q9P 7nVFquvDRBoTUR0AZmWfx83U4aZlJWlcsZ7rqD9hD8R4AmwzFqHalFYRao45EbwF QbVU4VfGWND48MBXaJhNEWH/xX4L9EZjhsxVIkgwvWjRmYpJGiaBhnfipUQRJmJ7 ykpvS41nq/mtHzheZrYU3W8h5HBPbJkO1E0SFfTv8Uln9fAHeTMmTUxXfRjq8jX+ RzgQ8I0LvFE0qj/srD6k0c8rCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlFI4kc lrKRvNy4v7cnIksECX0VMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYrZaTD1poI/4CvFIVI7hy1SbVpR4cr4cG26271jLoH1ny1y4w6Zhp IrUbL/VArRYKkF97TyQORhhsbHKqyuXNVPPjgTJ4FrdtM0rXjH51MzlyKTAvwfc3 Y4pcGHGx5chaSZrkeuA4K8jCZ9KZlI4ufcDGFy+rOgmsF1CcheiKgWgM20AKQ4x+ RB573BG3rHSAkooANR3IwJP3WHd4gLnfSO/5liFLQAgSh0d9CnIA5buXf9OMHaX+ cMt4i4wnfKlNJ0RvyoWMC5lQEQtPqPyiZiiv/fkfRd+wBl5PBuxBDqEMly0R2APY sDkcC8STSbmaD4iDwDscUu+RGmQAT+eY -----END CERTIFICATE-----Generated at Thu Sep 18 20:52:26 2025 by rpki-client