$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json) Hash identifier: 41xYWBC6yHLJw2dE00k9Z4qM9rUONhNx2AJq3OCbZoo= Subject key identifier: 49:5E:BF:23:1E:A3:56:3A:6F:AC:10:C8:96:E4:46:AA:CE:70:3F:CC Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Certificate serial: 0B95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft Manifest number: 0B7D Signing time: Sat 06 Sep 2025 19:15:16 +0000 Manifest this update: Sat 06 Sep 2025 19:15:16 +0000 Manifest next update: Sat 13 Sep 2025 19:15:16 +0000 Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: P+ul/NyGR6jNCF6IdqUc5DVS7u9e85E8D07vTlavOls=) 2: AD989788E05511EEADC7D67EC4F9AE02.roa (hash: gKXy2g22Zjp1Hqmn7Qc1nw8xcDNaJidEhFHTK4F7AJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2965 (0xb95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Validity Not Before: Sep 6 19:15:16 2025 GMT Not After : Sep 13 19:15:16 2025 GMT Subject: CN=68bc8844-ae87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:3c:93:9b:1a:aa:21:56:c4:bb:8f:db:e1: 07:5f:b7:5a:7c:db:3e:89:db:69:3c:af:19:18:00: a5:e0:97:d9:fe:74:2c:7b:27:d5:e2:2b:cf:27:b8: a3:17:e5:2f:f7:75:62:2f:51:aa:59:a8:b2:7c:ef: a4:76:fc:cd:c5:9e:03:18:80:9c:2c:a2:c6:5d:1f: 55:13:b8:6f:d7:46:23:a7:72:3f:79:da:4c:2a:3e: f5:08:3e:7a:b2:2e:14:4c:14:0a:a2:7d:21:af:26: 2e:b5:a2:89:95:75:29:29:6e:0c:e5:6b:0e:88:2c: 4b:25:40:ee:60:a4:16:69:8a:84:fa:f0:a1:3f:fd: 25:67:8c:bf:da:91:cc:ec:16:48:8d:15:3a:c3:f1: a4:55:a3:1d:15:e6:45:7a:e4:05:42:6d:09:af:8a: 48:58:55:bf:f7:29:47:fb:15:dd:4d:17:bd:54:47: 76:8d:ce:7b:9c:a9:1a:42:f6:06:e3:16:d9:42:9d: 33:de:16:7d:8e:51:67:9f:6b:64:87:bd:25:75:83: 84:26:6a:ab:c8:27:e6:fd:e4:3f:e8:f6:68:35:ce: 7b:a8:30:62:2c:23:3c:1f:c5:fa:e1:2e:cc:54:bb: 76:b6:e3:9a:48:53:3a:64:ac:01:77:f3:9f:99:4a: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5E:BF:23:1E:A3:56:3A:6F:AC:10:C8:96:E4:46:AA:CE:70:3F:CC X509v3 Authority Key Identifier: keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:8c:f6:1d:37:71:f1:a6:76:a0:db:86:a2:ae:71:a5:38:16: ad:60:1c:32:5b:7c:dc:2b:54:0d:2a:51:c0:c7:4c:22:59:48: 8d:9b:33:73:ca:de:dc:4a:84:93:ee:29:7e:7e:5c:81:5a:2d: d4:61:77:14:80:94:a9:84:d0:ad:73:b7:55:24:a8:13:fc:fe: de:bb:7a:4b:26:30:ef:30:86:32:f6:61:94:4c:1d:10:8d:23: 71:94:39:81:b1:2a:19:18:4b:48:33:1c:eb:a2:6f:8e:b7:da: 36:d3:01:4d:3d:fd:57:c7:f7:97:57:0f:04:d6:8a:53:48:b9: fb:f6:ef:60:97:4d:1d:98:72:9b:ae:d5:49:97:f3:58:9a:8e: a9:38:a7:0d:db:b9:88:a7:6b:0f:99:5d:11:45:22:87:61:cb: 7c:5a:64:c1:03:3a:bf:8f:57:ab:88:83:2a:d8:ad:10:48:49: 5a:0d:18:e4:f3:bf:82:e5:c1:63:83:9f:75:c7:1a:4c:fc:d5: 42:2e:4a:ff:ed:04:5b:c3:14:af:af:d6:27:ba:9b:ac:e9:7f: 44:74:c0:2c:fa:db:fc:fc:d1:81:c0:c0:d4:7f:ea:8e:7c:1d: fd:40:67:98:11:85:f2:38:2a:34:06:7b:7a:c3:48:ba:09:de: 8f:15:2a:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5 MTNENDE5RTMwHhcNMjUwOTA2MTkxNTE2WhcNMjUwOTEzMTkxNTE2WjAYMRYwFAYD VQQDEw02OGJjODg0NC1hZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOQ8k5saqiFWxLuP2+EHX7dafNs+idtpPK8ZGACl4JfZ/nQseyfV4ivPJ7ij F+Uv93ViL1GqWaiyfO+kdvzNxZ4DGICcLKLGXR9VE7hv10Yjp3I/edpMKj71CD56 si4UTBQKon0hryYutaKJlXUpKW4M5WsOiCxLJUDuYKQWaYqE+vChP/0lZ4y/2pHM 7BZIjRU6w/GkVaMdFeZFeuQFQm0Jr4pIWFW/9ylH+xXdTRe9VEd2jc57nKkaQvYG 4xbZQp0z3hZ9jlFnn2tkh70ldYOEJmqryCfm/eQ/6PZoNc57qDBiLCM8H8X64S7M VLt2tuOaSFM6ZKwBd/OfmUrU2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElevyMe o1Y6b6wQyJbkRqrOcD/MMB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5 RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn MlFKX3praGs4bXlSUFVHZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBjPYdN3Hxpnag24airnGlOBatYBwyW3zcK1QNKlHAx0wiWUiNmzNz yt7cSoST7il+flyBWi3UYXcUgJSphNCtc7dVJKgT/P7eu3pLJjDvMIYy9mGUTB0Q jSNxlDmBsSoZGEtIMxzrom+Ot9o20wFNPf1Xx/eXVw8E1opTSLn79u9gl00dmHKb rtVJl/NYmo6pOKcN27mIp2sPmV0RRSKHYct8WmTBAzq/j1eriIMq2K0QSElaDRjk 87+C5cFjg591xxpM/NVCLkr/7QRbwxSvr9Ynupus6X9EdMAs+tv8/NGBwMDUf+qO fB39QGeYEYXyOCo0Bnt6w0i6Cd6PFSqC -----END CERTIFICATE-----Generated at Mon Sep 8 03:37:12 2025 by rpki-client