$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json) Hash identifier: MPvhDeDMAWJK/tCBLKUWpf8mj3ZC+ThiHRQlFqENuFs= Subject key identifier: 2E:CF:EE:E9:C5:E1:F1:58:7F:9D:13:FF:E5:8A:22:C4:6D:04:0A:A0 Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft Manifest number: 72 Signing time: Wed 17 Sep 2025 07:36:30 +0000 Manifest this update: Wed 17 Sep 2025 07:36:30 +0000 Manifest next update: Wed 24 Sep 2025 07:36:30 +0000 Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: VDG2jziwSD714lplJg+T4KBlTgpavTg2nYfXPkuS+Ew=) 2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: Sep 17 07:36:30 2025 GMT Not After : Sep 24 07:36:30 2025 GMT Subject: CN=68ca64fe-b677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:db:8e:62:6d:7d:d5:8b:6e:8c:3f:e0:01: ce:ff:31:49:0d:f0:cf:14:1e:c9:cb:d2:42:dc:4f: c4:27:69:17:27:63:48:a0:b6:36:82:15:25:b5:67: 14:8f:30:22:a0:8b:ae:db:39:8d:b1:cb:74:2e:8b: 9e:11:1c:68:dc:a9:c4:fc:2a:f8:9c:5c:3e:3e:13: e8:ce:f8:2d:cd:a3:0e:bb:ec:ec:de:98:93:80:53: 86:7b:a1:8c:4b:a4:97:81:62:7a:91:06:6b:9a:e0: 01:20:f0:6d:f3:98:0b:10:24:50:b3:e2:cc:bd:b7: 48:1b:db:dc:19:00:6f:14:ef:ff:6a:5b:a6:79:98: ed:dd:6f:10:df:70:bb:32:21:b7:cb:36:be:19:ec: 83:66:ef:57:d4:3a:2b:c5:a5:d7:f1:09:39:03:45: 8a:59:af:15:64:16:69:43:ce:5b:c0:e9:0f:93:ca: ca:73:f0:38:f4:97:81:3f:61:e4:67:98:2b:12:a7: 82:3d:15:d7:76:bf:92:09:53:3e:0a:84:a5:12:ea: 7b:e6:d4:cb:6c:4e:70:39:9a:ea:a2:e5:02:cb:6c: cd:e9:4a:8f:cf:4d:17:f7:6d:52:1b:75:fd:34:10: 0b:6e:f6:fb:00:2d:8c:f9:6a:ec:e3:14:65:4e:cf: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CF:EE:E9:C5:E1:F1:58:7F:9D:13:FF:E5:8A:22:C4:6D:04:0A:A0 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b7:77:f3:33:40:d2:13:d0:17:b3:4d:b1:83:f9:db:61:a3: 7a:ac:b6:18:5a:04:fc:29:5e:3e:f2:58:c0:10:f0:37:f5:bf: 21:7a:59:08:13:19:9a:5b:e2:40:f3:e9:0d:22:91:59:c1:9d: f6:5c:99:0e:c2:bc:3e:31:51:a4:89:e7:2b:85:a0:e5:b7:aa: e5:1e:81:25:ee:f5:c6:c7:1c:04:29:fc:83:42:35:f8:ec:a5: e4:87:62:5b:7d:a3:fe:f4:4e:08:61:d4:a1:e2:12:5e:3e:66: 1a:81:3e:c3:15:92:95:7b:29:1e:ac:a5:ca:55:e9:2a:ed:6c: e0:e2:f8:fd:0a:c6:6f:f1:9e:f7:b2:9d:64:a7:bb:d1:1c:30: 10:11:99:48:d3:de:b4:e5:37:85:fe:c6:6c:78:98:a9:89:0e: 61:f8:e6:38:e7:6c:b2:2a:a4:2f:19:ac:6a:0f:bf:b2:9d:f5: a1:bb:27:95:db:c6:81:33:7d:65:d5:e3:23:4e:59:0a:90:cb: f8:6f:6b:2a:f1:ed:ed:e3:7a:f1:38:eb:2d:84:1c:21:7e:bc: 0d:7e:87:80:0b:6c:ee:ee:43:5c:2f:da:45:aa:5d:11:98:f7: b7:51:bb:90:94:0d:ee:ce:8f:f4:06:b2:5a:7c:57:d6:c0:0c: fc:b1:4f:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTc2NjExMC8GA1UEBRMoQzkyNDYwMTQyNTdFRUZGRkZFODBDRDNFQUJGRUQ2N0E4 OThENkY1NzAeFw0yNTA5MTcwNzM2MzBaFw0yNTA5MjQwNzM2MzBaMBgxFjAUBgNV BAMTDTY4Y2E2NGZlLWI2NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWDNuOYm191YtujD/gAc7/MUkN8M8UHsnL0kLcT8QnaRcnY0igtjaCFSW1ZxSP MCKgi67bOY2xy3Qui54RHGjcqcT8KvicXD4+E+jO+C3Now677OzemJOAU4Z7oYxL pJeBYnqRBmua4AEg8G3zmAsQJFCz4sy9t0gb29wZAG8U7/9qW6Z5mO3dbxDfcLsy IbfLNr4Z7INm71fUOivFpdfxCTkDRYpZrxVkFmlDzlvA6Q+Tyspz8Dj0l4E/YeRn mCsSp4I9Fdd2v5IJUz4KhKUS6nvm1MtsTnA5muqi5QLLbM3pSo/PTRf3bVIbdf00 EAtu9vsALYz5auzjFGVOz04TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULs/u6cXh 8Vh/nRP/5YoixG0ECqAwHwYDVR0jBBgwFoAUySRgFCV+7//+gM0+q/7WeomNb1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5NzY2LzgwRjU5RTk0RUE1 NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVNSZ0ZDVi03X18tZ00wLXFfN1dlb21OYjFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 NzY2LzgwRjU5RTk0RUE1NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19f LWdNMC1xXzdXZW9tTmIxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFO3d/MzQNIT0BezTbGD+dtho3qsthhaBPwpXj7yWMAQ8Df1vyF6WQgT GZpb4kDz6Q0ikVnBnfZcmQ7CvD4xUaSJ5yuFoOW3quUegSXu9cbHHAQp/INCNfjs peSHYlt9o/70Tghh1KHiEl4+ZhqBPsMVkpV7KR6spcpV6SrtbODi+P0Kxm/xnvey nWSnu9EcMBARmUjT3rTlN4X+xmx4mKmJDmH45jjnbLIqpC8ZrGoPv7Kd9aG7J5Xb xoEzfWXV4yNOWQqQy/hvayrx7e3jevE46y2EHCF+vA1+h4ALbO7uQ1wv2kWqXRGY 97dRu5CUDe7Oj/QGslp8V9bADPyxT18= -----END CERTIFICATE-----Generated at Thu Sep 18 20:33:32 2025 by rpki-client