$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: 6PKzVHjcBlYkWzmcvdnh0spZ0u7M0IzWwfg0eMe8Uio= Subject key identifier: EE:DF:21:4E:71:18:46:30:08:90:B4:45:30:8A:18:E3:F9:06:BA:0A Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 0918 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 0912 Signing time: Thu 18 Sep 2025 20:32:20 +0000 Manifest this update: Thu 18 Sep 2025 20:32:20 +0000 Manifest next update: Thu 25 Sep 2025 20:32:20 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: KJbOJ56pGQ3EodbD2TuGde1ZQPd9aY9IG/1c6nQdBAk=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: ZNkH5Sj7XHBs6ufHKPHidPlMntGP72EIG2BMLfQDnC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2328 (0x918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: Sep 18 20:32:20 2025 GMT Not After : Sep 25 20:32:20 2025 GMT Subject: CN=68cc6c54-aa23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:82:9b:44:9e:8c:96:40:25:9d:70:c5:15: 3d:bb:7a:11:63:06:3f:e4:c0:65:31:5a:0b:3a:31: 1b:86:ca:9b:a2:3b:9b:dd:8e:db:45:20:43:d2:96: 67:24:cd:ee:37:28:e9:49:6f:23:30:47:1d:a4:80: 8b:39:61:4c:c1:c0:44:90:16:5f:b6:1b:e7:dd:d9: 3a:07:cf:e6:08:5f:c4:f2:7c:2a:88:e4:eb:ea:bb: a6:7d:3f:08:d0:67:5c:d3:87:66:b4:6a:75:22:1e: a5:2a:03:f5:94:cf:99:b9:a4:22:ae:df:06:2d:51: 45:e3:7b:64:81:01:88:88:0b:10:0e:34:f7:75:9d: 56:96:2a:00:65:fc:10:f4:36:59:2b:6f:94:c7:f1: ab:8d:e5:e9:bb:4b:76:98:dd:88:c0:21:71:a7:34: 88:cf:0a:61:99:e5:84:0e:00:8a:2f:8f:9b:55:15: f5:cf:5b:39:25:7f:89:c7:82:7e:f6:cf:3c:9b:ad: e6:3e:45:8d:f0:51:f0:26:41:b1:87:da:f5:24:99: 15:5d:4b:96:35:25:ef:a7:d7:1a:f7:a1:b4:0a:a1: 98:b8:75:e7:ed:c5:d5:35:da:dc:55:b5:2f:d9:3c: 65:47:c1:a0:f9:c1:54:49:e3:51:25:60:e9:4f:29: a5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DF:21:4E:71:18:46:30:08:90:B4:45:30:8A:18:E3:F9:06:BA:0A X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:26:eb:e3:75:97:b5:c7:31:d2:7b:27:9f:b4:61:bb:5e:52: 55:12:8a:28:47:6c:de:77:ac:86:0b:73:d2:31:39:00:a0:9f: 40:30:f5:6f:84:f6:5c:5a:bd:e3:3e:da:d6:6b:76:3b:4c:a3: 3a:86:44:7f:8a:3b:45:9f:80:50:d1:9a:c5:1d:41:7d:0b:c8: b7:83:88:ee:1e:88:3a:5a:99:50:33:6f:ad:e9:09:2e:5d:18: 46:71:40:04:2b:0d:83:a2:61:19:53:0b:8a:d6:3c:20:71:f1: 60:34:f1:b9:a6:a3:7a:88:ea:d0:3b:c8:1b:6c:3a:22:f3:6b: ad:d8:3b:d6:e5:dc:38:bf:61:6f:7e:dc:ff:49:05:1e:a0:76: 22:10:f4:fa:63:a9:f9:3e:20:44:f2:c8:85:31:92:82:5a:33: 9f:7d:da:28:44:ea:c1:4f:f6:a9:57:1f:c2:b9:80:97:1b:69: 3c:44:21:91:a2:d9:e3:e1:0e:89:06:c5:c2:ad:00:ad:c0:41: 81:0b:10:8b:42:ad:34:0b:42:fe:a2:c1:ac:78:f4:7e:cc:b1: 41:ca:16:d5:a5:d7:b4:41:3a:95:a6:75:f1:de:ad:c6:a5:cd: 36:bd:ae:e9:4b:26:b4:ca:e3:11:cd:1a:ad:7a:85:7b:ac:b7: f2:6f:2a:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjUwOTE4MjAzMjIwWhcNMjUwOTI1MjAzMjIwWjAYMRYwFAYD VQQDEw02OGNjNmM1NC1hYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydGCm0SejJZAJZ1wxRU9u3oRYwY/5MBlMVoLOjEbhsqbojub3Y7bRSBD0pZn JM3uNyjpSW8jMEcdpICLOWFMwcBEkBZfthvn3dk6B8/mCF/E8nwqiOTr6rumfT8I 0Gdc04dmtGp1Ih6lKgP1lM+ZuaQirt8GLVFF43tkgQGIiAsQDjT3dZ1WlioAZfwQ 9DZZK2+Ux/GrjeXpu0t2mN2IwCFxpzSIzwphmeWEDgCKL4+bVRX1z1s5JX+Jx4J+ 9s88m63mPkWN8FHwJkGxh9r1JJkVXUuWNSXvp9ca96G0CqGYuHXn7cXVNdrcVbUv 2TxlR8Gg+cFUSeNRJWDpTyml8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7fIU5x GEYwCJC0RTCKGOP5BroKMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZJuvjdZe1xzHSeyeftGG7XlJVEoooR2zed6yGC3PSMTkAoJ9AMPVv hPZcWr3jPtrWa3Y7TKM6hkR/ijtFn4BQ0ZrFHUF9C8i3g4juHog6WplQM2+t6Qku XRhGcUAEKw2DomEZUwuK1jwgcfFgNPG5pqN6iOrQO8gbbDoi82ut2DvW5dw4v2Fv ftz/SQUeoHYiEPT6Y6n5PiBE8siFMZKCWjOffdooROrBT/apVx/CuYCXG2k8RCGR otnj4Q6JBsXCrQCtwEGBCxCLQq00C0L+osGsePR+zLFByhbVpde0QTqVpnXx3q3G pc02va7pSya0yuMRzRqteoV7rLfybyrX -----END CERTIFICATE-----Generated at Fri Sep 19 13:42:33 2025 by rpki-client