$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft File: yegJAGD4rmNwoBt-HsHW4m5PwBo.mft (raw, json) Hash identifier: +TQP0/BZifxmfExr2Qqrja6YAcEwD8Wkwm08BSlopYk= Subject key identifier: BC:CD:A8:D9:F5:A5:66:21:92:28:1B:E3:40:E2:86:F8:D4:CC:96:E8 Authority key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A Certificate issuer: /CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft Manifest number: 01A9 Signing time: Tue 09 Sep 2025 03:16:50 +0000 Manifest this update: Tue 09 Sep 2025 03:16:50 +0000 Manifest next update: Tue 16 Sep 2025 03:16:50 +0000 Files and hashes: 1: yegJAGD4rmNwoBt-HsHW4m5PwBo.crl (hash: lLhZszpbo36VWIPobb04l1l2UK4kmxvLHA19dLwexJs=) 2: 5261CE84068511EE9F71F964C4F9AE02.roa (hash: 7i5mwX4Nmw51+iu1QmxVZVjmeA5dANgMmUQSoCRdNzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D4A, serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Validity Not Before: Sep 9 03:16:50 2025 GMT Not After : Sep 16 03:16:50 2025 GMT Subject: CN=68bf9c22-3baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:51:ab:d5:82:ce:20:dd:94:8e:57:d8:ae: d2:81:99:d9:18:d7:d2:26:16:56:96:26:cb:2d:a9: a8:f4:3a:17:1f:4d:cf:6c:0a:ea:15:f9:14:b4:a2: d0:86:6b:d7:b4:53:b1:79:22:fe:c8:50:0b:a4:76: a5:74:f7:a7:d7:d1:36:c6:c1:de:a9:a7:b9:99:ad: be:b8:a3:49:ae:bb:bb:67:b8:d3:11:c1:16:2b:c3: 86:b0:f2:14:a5:d0:90:80:0f:1d:13:38:4e:11:b9: 38:e7:eb:2f:eb:19:c2:48:67:3a:75:b5:11:a3:43: b3:e5:d7:85:bd:6b:25:78:0a:6e:f2:7f:64:4b:e1: ed:ac:6a:82:60:ed:30:70:49:6d:a1:2d:e6:15:35: b7:49:bd:25:de:5d:f2:ad:d2:74:a2:df:72:7d:ce: bc:25:5b:7e:17:73:4a:f8:06:d8:e5:cc:a1:c4:fd: b6:28:63:32:0a:a7:28:aa:76:a0:d9:34:a4:60:bd: 40:83:58:64:91:d9:00:3f:7d:69:5b:0d:57:0f:4d: 84:56:b5:1f:87:f1:f3:20:ca:de:6e:95:74:be:e3: d8:eb:e9:80:88:fe:1a:3b:3b:14:47:32:c0:7f:44: cf:ec:be:ac:85:ea:dc:50:3e:c6:84:db:a3:33:1e: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CD:A8:D9:F5:A5:66:21:92:28:1B:E3:40:E2:86:F8:D4:CC:96:E8 X509v3 Authority Key Identifier: keyid:C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:49:f1:55:22:db:38:3d:bb:53:82:de:15:6c:45:26:b9:51: 20:49:4c:80:41:47:01:13:e6:c0:16:0a:73:1d:3a:87:da:d0: 6e:6f:25:da:a3:4b:87:90:9a:67:ac:f5:0b:b6:15:44:6e:fa: 3e:4c:bd:71:46:5e:6a:bd:4b:58:e2:56:49:8d:1c:c4:46:83: 79:1a:36:0c:26:cb:41:62:cb:21:a5:cd:91:dc:62:f4:7c:af: 4c:df:d3:21:91:b4:fc:cd:15:23:1e:ed:5f:42:c7:7f:85:28: dc:f4:64:54:d7:ea:e4:fd:60:65:46:25:d4:1c:6c:a2:a2:26: fe:54:29:d0:eb:53:27:01:cb:a6:f9:76:93:76:a7:e6:44:2c: c7:19:32:f6:c9:a0:c3:87:b7:ee:b5:b4:40:03:04:c3:bc:48: b9:c4:38:eb:ec:74:e4:42:de:2d:b0:c0:b6:12:7c:c5:fb:12: 90:25:15:c4:ae:3c:13:83:44:9d:5c:6b:e6:83:87:0f:3e:20: d1:6a:51:f2:87:01:22:c2:52:65:ad:71:4e:2b:49:18:4b:b8: 3c:44:35:ce:6e:9c:57:5f:3d:99:3e:5e:5d:79:20:23:33:f3: 2d:09:95:1b:61:02:2a:58:27:33:64:65:61:fe:29:de:d7:f7: 25:e0:b6:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENEExMTAvBgNVBAUTKEM5RTgwOTAwNjBGOEFFNjM3MEEwMUI3RTFFQzFENkUy NkU0RkMwMUEwHhcNMjUwOTA5MDMxNjUwWhcNMjUwOTE2MDMxNjUwWjAYMRYwFAYD VQQDEw02OGJmOWMyMi0zYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu11Rq9WCziDdlI5X2K7SgZnZGNfSJhZWlibLLamo9DoXH03PbArqFfkUtKLQ hmvXtFOxeSL+yFALpHaldPen19E2xsHeqae5ma2+uKNJrru7Z7jTEcEWK8OGsPIU pdCQgA8dEzhOEbk45+sv6xnCSGc6dbURo0Oz5deFvWsleApu8n9kS+HtrGqCYO0w cEltoS3mFTW3Sb0l3l3yrdJ0ot9yfc68JVt+F3NK+AbY5cyhxP22KGMyCqcoqnag 2TSkYL1Ag1hkkdkAP31pWw1XD02EVrUfh/HzIMrebpV0vuPY6+mAiP4aOzsURzLA f0TP7L6shercUD7GhNujMx7stwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzNqNn1 pWYhkigb40DihvjUzJboMB8GA1UdIwQYMBaAFMnoCQBg+K5jcKAbfh7B1uJuT8Aa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0QS84MTk2OThGQzA1 RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJtTndvQnQtSHNIVzRtNVB3 Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llZ0pBR0Q0cm1Od29CdC1Ic0hXNG01UHdCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0QS84MTk2OThGQzA1RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJt TndvQnQtSHNIVzRtNVB3Qm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZSfFVIts4PbtTgt4VbEUmuVEgSUyAQUcBE+bAFgpzHTqH2tBubyXa o0uHkJpnrPULthVEbvo+TL1xRl5qvUtY4lZJjRzERoN5GjYMJstBYsshpc2R3GL0 fK9M39MhkbT8zRUjHu1fQsd/hSjc9GRU1+rk/WBlRiXUHGyioib+VCnQ61MnAcum +XaTdqfmRCzHGTL2yaDDh7futbRAAwTDvEi5xDjr7HTkQt4tsMC2EnzF+xKQJRXE rjwTg0SdXGvmg4cPPiDRalHyhwEiwlJlrXFOK0kYS7g8RDXObpxXXz2ZPl5deSAj M/MtCZUbYQIqWCczZGVh/ine1/cl4Lal -----END CERTIFICATE-----Generated at Tue Sep 9 13:30:44 2025 by rpki-client