$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft File: yuPbit7noWq2ylN_I0ewIFvfT3Y.mft (raw, json) Hash identifier: rTqNQcsd9vORwx/ygwHoNXI7DHWSaqZ4FNxqW9+hEhI= Subject key identifier: 61:AE:07:7E:D3:70:4C:80:06:2B:C0:A6:9E:66:80:67:A1:8E:99:FD Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 Certificate issuer: /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft Manifest number: E1 Signing time: Tue 19 Aug 2025 05:52:31 +0000 Manifest this update: Tue 19 Aug 2025 05:52:31 +0000 Manifest next update: Tue 26 Aug 2025 05:52:31 +0000 Files and hashes: 1: yuPbit7noWq2ylN_I0ewIFvfT3Y.crl (hash: Fq9F5c4F3eq6oseN29aU4bDAFeLRMjCy7/aa2bS8868=) 2: 12032AE02EAC11EFB73C0767C4F9AE02.roa (hash: NplfmjfBvEPVo22TXfl7ysU80/2MVRwwQvZxXy7GRR8=) 3: 66476E182EAC11EFAAAF8E67C4F9AE02.roa (hash: c+tQd6LFV/BZVoGpun0y1RLdLqyLfqdX/XcIv+ynZW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6FF, serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76 Validity Not Before: Aug 19 05:52:31 2025 GMT Not After : Aug 26 05:52:31 2025 GMT Subject: CN=68a4111f-ddda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f1:45:b4:40:07:33:84:9c:3e:01:97:3a:ea: 68:95:ca:28:d6:91:ec:ba:be:d7:bd:63:a3:7b:a9: 70:26:99:57:31:8c:e0:21:04:98:8d:e6:18:c8:39: 28:37:48:7d:c6:d5:63:b7:e0:84:c0:8c:05:93:c8: 9b:0a:c5:6f:ad:11:23:87:53:2d:22:c4:3c:cf:48: 16:20:9d:e1:ee:69:e4:18:10:38:39:c8:17:4e:32: 7f:6e:bb:88:87:96:29:9c:05:ff:2a:e3:2e:24:35: 07:1a:37:ff:a3:03:d6:91:fb:35:6d:af:20:fb:80: c3:e3:c4:fc:0e:f4:84:1a:39:1a:e5:47:b9:a5:41: aa:58:4c:5e:50:e8:cb:25:8f:94:24:a3:47:20:7f: 9d:02:08:7e:a9:09:5d:8f:4d:30:2f:0f:e5:f6:cc: 4e:3b:54:72:e0:c4:bf:93:5e:55:05:11:b5:dd:98: 21:53:15:5b:9e:48:b4:35:96:44:dd:26:46:f4:e8: e7:02:eb:18:aa:b6:05:4c:8c:b7:5c:2f:c5:de:60: 13:6a:85:b0:df:55:cf:7d:a1:f7:c5:e1:78:82:af: da:8b:3a:1e:8b:c5:d4:09:7f:e5:a9:a9:da:51:e7: e1:65:5b:e4:74:a0:fb:4a:17:5e:39:ab:32:36:eb: 24:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AE:07:7E:D3:70:4C:80:06:2B:C0:A6:9E:66:80:67:A1:8E:99:FD X509v3 Authority Key Identifier: keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:89:80:32:21:9a:20:f2:bf:7b:6a:68:88:cf:b4:21:06:9d: 15:20:a4:38:e4:bd:1a:21:b6:e3:78:42:3c:53:b6:54:be:bc: b8:a6:a7:c6:71:89:82:4e:b0:37:12:6c:dc:9f:95:45:b9:1b: ed:9d:e1:80:b2:23:46:ff:58:e5:d9:49:d2:9d:43:52:7e:b1: a0:d6:db:e1:df:dd:bb:40:93:45:ea:0d:f5:2a:cc:85:e2:83: 50:ae:a8:92:c5:9b:2d:cf:19:3a:e0:4d:5f:75:9d:57:24:f0: ec:b6:e0:1e:c7:d7:24:d7:4b:da:2f:44:29:a5:82:ae:68:b3: 2d:7a:fe:8e:ef:68:54:a0:d5:e4:eb:a7:a3:a4:52:63:c8:3c: 30:ad:89:8c:0f:0d:28:d1:74:7d:97:3b:b9:92:d9:53:46:1f: 20:72:f5:3a:21:06:73:08:f7:96:32:4d:75:3b:23:bb:5c:1b: 6d:ea:ee:f1:e7:8b:e4:a2:8c:44:c3:67:1e:d8:d3:93:7d:f0: d0:34:d0:bd:c8:a5:9f:92:45:2d:f6:2e:cd:7c:50:fa:0f:76: 35:3c:f9:a3:1e:bb:c1:1e:19:87:1a:ed:e1:ec:4b:a2:f6:b6: 3f:73:4e:57:70:09:ce:ab:ac:96:4c:86:a2:93:58:38:ac:17: 81:0c:a3:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2RkYxMTAvBgNVBAUTKENBRTNEQjhBREVFN0ExNkFCNkNBNTM3RjIzNDdCMDIw NUJERjRGNzYwHhcNMjUwODE5MDU1MjMxWhcNMjUwODI2MDU1MjMxWjAYMRYwFAYD VQQDEw02OGE0MTExZi1kZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fFFtEAHM4ScPgGXOupolcoo1pHsur7XvWOje6lwJplXMYzgIQSYjeYYyDko N0h9xtVjt+CEwIwFk8ibCsVvrREjh1MtIsQ8z0gWIJ3h7mnkGBA4OcgXTjJ/bruI h5YpnAX/KuMuJDUHGjf/owPWkfs1ba8g+4DD48T8DvSEGjka5Ue5pUGqWExeUOjL JY+UJKNHIH+dAgh+qQldj00wLw/l9sxOO1Ry4MS/k15VBRG13ZghUxVbnki0NZZE 3SZG9OjnAusYqrYFTIy3XC/F3mATaoWw31XPfaH3xeF4gq/aizoei8XUCX/lqana UefhZVvkdKD7ShdeOasyNuskUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGuB37T cEyABivApp5mgGehjpn9MB8GA1UdIwQYMBaAFMrj24re56FqtspTfyNHsCBb3092 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTZGRi9EMjgxRTczMDJF MjkxMUVGQkFFRDZBMUFDNEY5QUUwMi95dVBiaXQ3bm9XcTJ5bE5fSTBld0lGdmZU M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1UGJpdDdub1dxMnlsTl9JMGV3SUZ2ZlQzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTZGRi9EMjgxRTczMDJFMjkxMUVGQkFFRDZBMUFDNEY5QUUwMi95dVBiaXQ3bm9X cTJ5bE5fSTBld0lGdmZUM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQiYAyIZog8r97amiIz7QhBp0VIKQ45L0aIbbjeEI8U7ZUvry4pqfG cYmCTrA3Emzcn5VFuRvtneGAsiNG/1jl2UnSnUNSfrGg1tvh3927QJNF6g31KsyF 4oNQrqiSxZstzxk64E1fdZ1XJPDstuAex9ck10vaL0QppYKuaLMtev6O72hUoNXk 66ejpFJjyDwwrYmMDw0o0XR9lzu5ktlTRh8gcvU6IQZzCPeWMk11OyO7XBtt6u7x 54vkooxEw2ce2NOTffDQNNC9yKWfkkUt9i7NfFD6D3Y1PPmjHrvBHhmHGu3h7Eui 9rY/c05XcAnOq6yWTIaik1g4rBeBDKOK -----END CERTIFICATE-----Generated at Wed Aug 20 19:57:31 2025 by rpki-client