$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: Z0QFifbDrIMQvLW/sUe7tHKBa16lwn0MXzG43EV7Qq0= Subject key identifier: 70:0F:1C:38:95:73:80:D8:16:F5:2B:54:AF:7B:99:AB:2B:47:F8:2A Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0E6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 1FE8 Signing time: Wed 10 Sep 2025 17:19:49 +0000 Manifest this update: Wed 10 Sep 2025 17:19:49 +0000 Manifest next update: Wed 17 Sep 2025 17:19:49 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: TqCLypb2L/smCQCKa9Eg0z6ahsNCz4KoGpgTILKT89A=) 2: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: 2QTo+CsdRhAVYGY+SP4UeTuLXQh1z3BW1C7/XMRXisw=) 3: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: qTqcBFpr622OYkqG96eDnnoJ09wPpnvN7CHOU2zyZG0=) 4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: SV6dYe0/qbcbeBjCTRLSVOKAd3cmZlbo1prAD3jSVSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 17:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3694 (0xe6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Sep 10 17:19:49 2025 GMT Not After : Sep 17 17:19:49 2025 GMT Subject: CN=68c1b335-2fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:aa:a1:f3:1a:51:98:e9:e2:1a:5a:0b:f8:a7: 0f:ab:26:72:70:e4:99:79:63:99:3e:97:3e:66:24: 18:a9:15:82:44:4b:22:c1:e2:2d:12:39:57:d1:62: 91:c0:41:ec:71:32:66:77:1f:38:cd:c5:8e:eb:b4: 0d:8e:5f:53:73:bd:21:4e:29:54:44:52:94:9c:b2: a1:4d:e4:f1:eb:af:5b:f0:fc:e1:f0:b4:2e:5a:1a: 13:19:08:24:62:ac:fa:b6:c1:38:8b:5d:ad:7c:25: 09:7c:65:41:82:0f:26:fb:67:e5:d0:52:88:8b:a9: 14:cf:9d:af:47:54:ea:a0:ed:f5:40:c9:78:9b:3c: 96:63:51:2d:a8:da:83:ee:a4:15:45:a9:9d:7b:74: fb:56:aa:68:9f:d2:5e:5d:91:4d:a7:a9:42:22:77: bb:03:11:e7:0f:3c:13:bd:92:2d:8a:a4:9e:91:b9: 64:68:3f:22:e3:7f:f7:40:c2:34:fd:22:ee:59:e1: 7f:00:64:a6:19:d1:74:2e:ee:d0:cd:0c:4b:c3:ac: 9d:77:53:ec:22:1a:bf:47:b9:f2:55:64:69:00:6c: 6b:51:7f:d7:d5:9d:46:2e:1a:23:97:4d:70:ec:41: b3:bf:87:7f:c1:f5:8f:30:5f:bb:59:57:11:04:1f: 7c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0F:1C:38:95:73:80:D8:16:F5:2B:54:AF:7B:99:AB:2B:47:F8:2A X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:6a:de:f2:f9:0b:14:89:e4:b2:ec:cd:37:a7:b9:d7:9b:d3: 36:5a:a0:9c:98:a3:e2:35:39:f9:ad:66:84:80:29:ac:19:4c: 61:07:f6:c1:8b:c2:c2:ac:64:76:3c:d9:ae:18:6e:1a:a0:d5: ff:70:3e:96:04:3d:94:df:16:52:82:22:02:7e:ab:58:b9:4f: 05:42:63:f6:da:29:d2:62:b0:de:08:d6:55:3c:9f:9f:b8:39: e8:7b:28:41:db:ff:52:a5:22:a2:1a:98:56:20:ff:d3:da:10: 97:cb:34:6f:a8:b7:42:2c:3d:00:7b:bf:4d:dc:b0:f6:a6:57: 7e:78:70:cd:b0:81:5a:20:4f:61:77:a8:71:c0:43:28:3d:3b: 64:43:95:28:ae:83:66:16:39:24:d8:51:18:cd:af:d3:5a:8b: 02:90:d8:40:2b:c2:ba:b5:f0:d6:1b:9d:8c:21:bd:cd:76:a8: 33:1b:46:86:d2:79:10:36:a7:f4:a5:d3:ec:58:51:01:75:38: bc:34:9b:8f:a0:5a:2e:67:e5:91:17:51:36:b3:d2:1e:9d:44: 99:2c:2b:cc:02:b9:0e:89:81:98:5d:d3:eb:07:db:ec:60:c3: 20:1d:7f:46:46:9d:12:35:19:0c:54:9f:8e:bd:09:41:40:00: a1:74:96:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjUwOTEwMTcxOTQ5WhcNMjUwOTE3MTcxOTQ5WjAYMRYwFAYD VQQDEw02OGMxYjMzNS0yZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qqh8xpRmOniGloL+KcPqyZycOSZeWOZPpc+ZiQYqRWCREsiweItEjlX0WKR wEHscTJmdx84zcWO67QNjl9Tc70hTilURFKUnLKhTeTx669b8Pzh8LQuWhoTGQgk Yqz6tsE4i12tfCUJfGVBgg8m+2fl0FKIi6kUz52vR1TqoO31QMl4mzyWY1EtqNqD 7qQVRamde3T7Vqpon9JeXZFNp6lCIne7AxHnDzwTvZItiqSekblkaD8i43/3QMI0 /SLuWeF/AGSmGdF0Lu7QzQxLw6ydd1PsIhq/R7nyVWRpAGxrUX/X1Z1GLhojl01w 7EGzv4d/wfWPMF+7WVcRBB985QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAPHDiV c4DYFvUrVK97masrR/gqMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwat7y+QsUieSy7M03p7nXm9M2WqCcmKPiNTn5rWaEgCmsGUxhB/bB i8LCrGR2PNmuGG4aoNX/cD6WBD2U3xZSgiICfqtYuU8FQmP22inSYrDeCNZVPJ+f uDnoeyhB2/9SpSKiGphWIP/T2hCXyzRvqLdCLD0Ae79N3LD2pld+eHDNsIFaIE9h d6hxwEMoPTtkQ5UoroNmFjkk2FEYza/TWosCkNhAK8K6tfDWG52MIb3NdqgzG0aG 0nkQNqf0pdPsWFEBdTi8NJuPoFouZ+WRF1E2s9IenUSZLCvMArkOiYGYXdPrB9vs YMMgHX9GRp0SNRkMVJ+OvQlBQAChdJbb -----END CERTIFICATE-----Generated at Thu Sep 11 00:24:06 2025 by rpki-client