$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: 2tdeMXs0BwloqosX+Wh1kJSJTLB9WxVdO7mnEM9zzVI= Subject key identifier: 73:6C:CC:37:87:41:5A:B3:7E:CC:9D:B7:63:E0:D2:59:FE:15:47:2B Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 018A Signing time: Tue 09 Sep 2025 03:41:32 +0000 Manifest this update: Tue 09 Sep 2025 03:41:31 +0000 Manifest next update: Tue 16 Sep 2025 03:41:31 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: RCtPMCp9gPHjIQ0O0yzUhFV45MTlZXbQ2o+L//VZSV0=) 2: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: g09v6jk8fn3awL6foCEfKGlvvvO5I0PHpOGz6LziEuA=) 3: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: rhIhi3I6SpyrkjjQ3cL8Mw2vXOogWSjfaZP+3P/2bFk=) 4: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: qvUP6d81IdrzZbKdEjVG1snn+Y2Byr8jMGRCFKnK8TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Validity Not Before: Sep 9 03:41:31 2025 GMT Not After : Sep 16 03:41:31 2025 GMT Subject: CN=68bfa1ec-4539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:04:66:f9:10:14:9b:1c:79:61:34:ba:2d: d3:7c:b5:ba:22:48:7d:fd:0e:32:72:ac:9e:99:d0: fe:14:69:67:96:99:e7:51:70:a6:b7:30:74:83:9c: 2a:72:de:11:15:21:d5:76:bb:9f:61:08:42:95:9c: 06:37:0a:e3:25:7c:d7:59:64:16:cc:4e:63:c5:6c: 0d:1c:18:6d:2d:fe:29:a2:0d:67:d3:58:c7:79:b2: 72:11:7a:68:c5:51:29:0a:fe:0a:f4:22:ec:9b:48: 55:87:ca:a3:b5:88:89:1f:3a:93:26:6f:d8:28:99: d7:3a:88:19:66:8e:01:ed:54:ac:b0:e4:7a:8c:cf: 51:23:ce:dd:94:e3:76:96:19:9e:cb:bc:b1:cb:0d: 2e:6d:3c:08:bd:ae:ae:06:21:8c:86:72:88:65:50: 80:c7:35:aa:2b:9c:22:8e:21:8d:87:8b:77:f2:23: 70:a4:0c:fd:30:e0:44:22:e9:11:e3:74:7b:b6:39: 1b:5f:bc:1b:d6:1a:e1:b0:91:42:8b:ed:4d:62:fa: bd:2b:21:77:3d:c5:85:65:2c:db:15:c9:6b:58:8e: 5a:de:6d:e0:35:f0:69:3d:4e:e5:6a:d9:64:2a:75: bc:50:48:c7:fb:4f:ba:60:07:78:19:3d:53:8f:41: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6C:CC:37:87:41:5A:B3:7E:CC:9D:B7:63:E0:D2:59:FE:15:47:2B X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:51:bf:68:3b:f1:3d:ef:dc:fe:f2:d0:4e:b0:64:5b:94:9f: 85:7f:42:76:6d:cc:bd:d6:8b:35:ae:5a:5a:50:4f:07:9c:69: 1d:1f:37:ce:3b:8c:f2:3f:87:fd:fe:3f:53:fd:ea:c2:7d:fb: d7:85:b5:03:72:31:67:ef:ae:e3:1c:78:9d:ea:fc:92:7a:2a: 19:6b:de:57:5a:b5:8b:4e:c7:48:9f:aa:db:5f:2b:a7:90:47: 02:45:68:cd:47:65:13:e6:87:69:3f:63:ab:59:72:91:40:3f: 9d:f4:47:8c:15:a5:16:9d:7f:d6:62:33:82:a4:4f:8f:d6:81: c2:08:a1:a9:bd:12:5a:65:32:b4:bc:3a:fb:cb:fd:dc:34:ad: ae:be:34:a8:bf:0a:9e:49:e7:83:c7:1e:f6:84:68:0d:d7:69: 15:7f:f7:fe:fa:f6:f1:70:e7:94:92:e5:83:59:85:0d:b0:93: 2a:09:28:86:2c:eb:d2:cc:c6:c4:82:5d:fa:a5:b0:c4:87:80: 60:21:22:7e:da:3c:5d:5c:2a:a1:ce:97:40:64:0c:35:ec:2c: 30:9f:b6:13:e7:86:ec:7a:a8:07:90:2b:70:d5:76:73:50:15: e9:0e:61:e2:f9:f8:93:10:ac:1e:e2:9b:aa:0a:93:fc:61:97: 95:de:8d:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjUwOTA5MDM0MTMxWhcNMjUwOTE2MDM0MTMxWjAYMRYwFAYD VQQDEw02OGJmYTFlYy00NTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRUEZvkQFJsceWE0ui3TfLW6Ikh9/Q4ycqyemdD+FGlnlpnnUXCmtzB0g5wq ct4RFSHVdrufYQhClZwGNwrjJXzXWWQWzE5jxWwNHBhtLf4pog1n01jHebJyEXpo xVEpCv4K9CLsm0hVh8qjtYiJHzqTJm/YKJnXOogZZo4B7VSssOR6jM9RI87dlON2 lhmey7yxyw0ubTwIva6uBiGMhnKIZVCAxzWqK5wijiGNh4t38iNwpAz9MOBEIukR 43R7tjkbX7wb1hrhsJFCi+1NYvq9KyF3PcWFZSzbFclrWI5a3m3gNfBpPU7latlk KnW8UEjH+0+6YAd4GT1Tj0Ft8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNszDeH QVqzfsydt2Pg0ln+FUcrMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgUb9oO/E979z+8tBOsGRblJ+Ff0J2bcy91os1rlpaUE8HnGkdHzfO O4zyP4f9/j9T/erCffvXhbUDcjFn767jHHid6vySeioZa95XWrWLTsdIn6rbXyun kEcCRWjNR2UT5odpP2OrWXKRQD+d9EeMFaUWnX/WYjOCpE+P1oHCCKGpvRJaZTK0 vDr7y/3cNK2uvjSovwqeSeeDxx72hGgN12kVf/f++vbxcOeUkuWDWYUNsJMqCSiG LOvSzMbEgl36pbDEh4BgISJ+2jxdXCqhzpdAZAw17Cwwn7YT54bseqgHkCtw1XZz UBXpDmHi+fiTEKwe4puqCpP8YZeV3o2S -----END CERTIFICATE-----Generated at Tue Sep 9 13:19:47 2025 by rpki-client