$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft File: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json) Hash identifier: 7Y/MSI1oBp7LTU+yIPNm2bGW+nC1GLqw2hzyd/qREcU= Subject key identifier: CE:4D:FB:70:94:C4:73:07:F9:54:7B:BA:83:9A:B0:41:AC:AD:9B:E2 Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 Certificate issuer: /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft Manifest number: 06C4 Signing time: Tue 16 Sep 2025 22:24:41 +0000 Manifest this update: Tue 16 Sep 2025 22:24:41 +0000 Manifest next update: Tue 23 Sep 2025 22:24:41 +0000 Files and hashes: 1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: U0RJwSobW1Trb8krtgwxmdsEC2E2QGCV6ffA3Cgl+so=) 2: 56A937F2360411EF8AA77687C4F9AE02.roa (hash: jBtUWO90hOewkZT/IOz6vgpi/ww1P3BMTXwB63qoFnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 22:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0277, serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Validity Not Before: Sep 16 22:24:41 2025 GMT Not After : Sep 23 22:24:41 2025 GMT Subject: CN=68c9e3a9-89be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:df:cd:2b:7c:77:69:5c:56:38:f3:ff:27: 14:07:fb:49:36:6b:05:6a:99:59:1b:07:de:cf:95: eb:dc:b9:3c:fc:45:65:30:34:23:c8:b0:59:62:59: d4:e0:b1:b4:4b:1d:83:c1:bf:19:c4:6f:7c:c3:a4: 57:ed:03:69:56:0a:e4:80:02:82:e8:1c:e8:50:d3: 04:d1:1d:7f:ff:83:ec:eb:06:73:58:21:5f:e4:39: 60:57:da:17:1f:5f:b9:0f:95:d2:4f:98:d4:73:1a: 50:b4:d1:61:85:c7:ec:e9:1c:a5:26:ee:d8:af:8a: 57:fa:b4:bc:eb:3a:99:35:b4:89:0b:58:32:16:87: dc:2c:a5:fc:14:d7:50:0b:b7:4b:07:a6:57:72:da: f6:32:d4:06:a8:54:e4:2a:d0:a0:51:46:d6:0a:1f: b2:ed:45:df:4c:9c:75:2a:1f:d3:21:d2:97:3f:c9: 86:b7:e2:00:2f:7a:44:d1:de:fb:99:80:a0:f3:39: 73:e2:63:f7:92:09:40:1d:66:a2:cd:44:31:36:40: 52:3b:82:75:dc:58:23:00:db:91:13:42:a9:2c:dc: 9d:51:63:c8:4d:ed:8c:a6:94:7d:da:35:70:20:cf: 27:a1:74:7a:21:a1:a2:86:d0:c3:29:28:bb:c2:3e: c6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4D:FB:70:94:C4:73:07:F9:54:7B:BA:83:9A:B0:41:AC:AD:9B:E2 X509v3 Authority Key Identifier: keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:56:1a:01:3e:3f:01:23:c6:41:6c:cf:3d:b4:e8:30:f3:1f: 2b:16:06:f0:fe:43:22:4d:73:f8:fc:51:67:82:59:79:76:51: 0e:a7:1a:b6:50:9c:ed:32:e3:e1:db:c9:f3:a3:1d:d1:bf:02: bc:07:00:3f:f4:47:36:e1:fd:ec:9a:ad:db:60:c9:a0:ad:f4: 94:1a:fb:66:df:17:fc:d3:02:67:2a:e4:1d:98:a2:fd:8f:e6: 59:26:ad:01:a9:80:3a:19:d3:aa:64:67:56:db:38:a8:6c:8c: c0:f0:e2:9f:0a:92:34:c6:4c:4d:b4:f3:ad:94:c3:ab:71:1b: f2:9a:cd:14:f1:39:35:2d:78:59:49:fc:1e:be:df:16:50:02: ac:ec:60:d7:d9:ea:6d:f1:95:76:91:b6:63:87:49:15:d9:c9: ff:c6:52:3a:f5:86:bd:c2:a7:87:61:23:6f:1f:d9:f3:f0:eb: f4:20:4f:2c:b7:00:53:e8:f7:29:bb:b9:4c:7c:38:9d:37:8b: ba:b3:84:05:09:6d:1e:04:8c:c1:cc:31:41:54:e7:51:6f:f7: c4:10:87:a0:39:bb:9a:dd:c0:65:0e:f1:e1:b9:f5:f1:f7:14: 21:b8:62:e7:af:0d:7e:41:a0:a2:83:f4:2a:36:5f:74:00:31: 23:37:05:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyNzcxMTAvBgNVBAUTKDYxRDkwOTQ5NEFBQzA5OUU1REM2N0JEOURFQ0NGRUJF NDRCNzc3NzkwHhcNMjUwOTE2MjIyNDQxWhcNMjUwOTIzMjIyNDQxWjAYMRYwFAYD VQQDEw02OGM5ZTNhOS04OWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYjfzSt8d2lcVjjz/ycUB/tJNmsFaplZGwfez5Xr3Lk8/EVlMDQjyLBZYlnU 4LG0Sx2Dwb8ZxG98w6RX7QNpVgrkgAKC6BzoUNME0R1//4Ps6wZzWCFf5DlgV9oX H1+5D5XST5jUcxpQtNFhhcfs6RylJu7Yr4pX+rS86zqZNbSJC1gyFofcLKX8FNdQ C7dLB6ZXctr2MtQGqFTkKtCgUUbWCh+y7UXfTJx1Kh/TIdKXP8mGt+IAL3pE0d77 mYCg8zlz4mP3kglAHWaizUQxNkBSO4J13FgjANuRE0KpLNydUWPITe2MppR92jVw IM8noXR6IaGihtDDKSi7wj7GUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5N+3CU xHMH+VR7uoOasEGsrZviMB8GA1UdIwQYMBaAFGHZCUlKrAmeXcZ72d7M/r5Et3d5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDI3Ny9ENDE5RDgxMDc1 Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0NaNWR4bnZaM3N6LXZrUzNk M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lka0pTVXFzQ1o1ZHhudlozc3otdmtTM2Qzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDI3Ny9ENDE5RDgxMDc1Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0Na NWR4bnZaM3N6LXZrUzNkM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpVhoBPj8BI8ZBbM89tOgw8x8rFgbw/kMiTXP4/FFngll5dlEOpxq2 UJztMuPh28nzox3RvwK8BwA/9Ec24f3smq3bYMmgrfSUGvtm3xf80wJnKuQdmKL9 j+ZZJq0BqYA6GdOqZGdW2ziobIzA8OKfCpI0xkxNtPOtlMOrcRvyms0U8Tk1LXhZ Sfwevt8WUAKs7GDX2ept8ZV2kbZjh0kV2cn/xlI69Ya9wqeHYSNvH9nz8Ov0IE8s twBT6Pcpu7lMfDidN4u6s4QFCW0eBIzBzDFBVOdRb/fEEIegObua3cBlDvHhufXx 9xQhuGLnrw1+QaCig/QqNl90ADEjNwU3 -----END CERTIFICATE-----Generated at Thu Sep 18 19:14:53 2025 by rpki-client