$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft File: ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft (raw, json) Hash identifier: ARm8lnv9EWdZcsfdx+KNKISt7EA+1cmw+XpCsnABHH8= Subject key identifier: AD:42:7C:59:B7:32:87:C5:F3:85:43:C4:10:F8:E4:42:0A:E8:6A:49 Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8 Certificate issuer: /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8 Certificate serial: 08D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft Manifest number: 08C3 Signing time: Wed 18 Jun 2025 20:21:03 +0000 Manifest this update: Wed 18 Jun 2025 20:21:02 +0000 Manifest next update: Wed 25 Jun 2025 20:21:02 +0000 Files and hashes: 1: ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl (hash: iyy/N6oAo3D+MOTmkj/zyKke1f4t7e8fFxyK5UiZO/Q=) 2: E43CFABEB67611ECACB17C42C4F9AE02.roa (hash: ejgjifoiJDZJ+gWsoAobC1JoVa6W0Im+MVj8NKJ7EYw=) 3: A778E94E598911EBA7B14777C4F9AE02.roa (hash: 5yaZ6S1Dp8sDk+BVEX55LZpSEffc1QPyVJT4ZIYCENM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8 Validity Not Before: Jun 18 20:21:02 2025 GMT Not After : Jun 25 20:21:02 2025 GMT Subject: CN=68531fae-1654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d2:d4:8a:42:ee:fb:85:32:4e:e0:12:77:59: 16:77:41:33:06:84:53:53:98:0b:24:71:c4:a9:d8: 9e:99:1b:c3:ea:bb:a1:e1:d2:87:59:f1:e8:e1:e2: 02:a4:e0:6f:0d:eb:1a:75:f6:6d:ec:c3:8b:71:3a: 68:1e:cd:bd:b3:55:09:51:79:70:18:13:f4:c1:f6: a7:b0:d5:c2:aa:5b:56:e9:82:82:c2:39:15:25:90: d6:90:92:97:b1:8d:5c:06:05:f7:a2:98:56:36:ad: 1e:ff:07:9d:86:7f:76:8a:bb:a1:a6:a9:77:4d:f7: e6:d3:76:f6:52:92:e5:3c:f6:7d:7a:23:4c:53:3c: 87:df:8a:f5:e1:b3:24:e0:ed:1d:13:a9:6b:7c:10: 03:c7:5d:14:44:42:d2:59:e8:b0:a3:9c:ce:ec:89: 8d:a8:e9:02:4e:c9:ba:87:03:de:35:ff:14:27:fb: ca:88:80:19:04:bf:dd:fb:db:db:c5:21:90:b4:81: 6c:76:d1:a6:0b:0b:76:d5:18:d0:73:02:92:86:ff: 58:68:3e:13:e7:66:78:73:8d:6b:de:b5:b9:e6:78: 66:d5:94:1d:0a:de:ff:d1:2a:c2:97:b6:5a:1a:ea: 77:44:47:3a:88:87:e9:81:0e:4e:f6:c4:da:11:74: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:42:7C:59:B7:32:87:C5:F3:85:43:C4:10:F8:E4:42:0A:E8:6A:49 X509v3 Authority Key Identifier: keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:bf:e2:53:89:91:55:e6:bb:8c:a7:23:c2:6f:dc:54:fa:ce: c6:a8:fa:1b:3e:e1:05:eb:ed:58:18:fd:20:f2:19:e9:d6:26: 00:db:55:e6:d6:ff:23:e4:35:c5:b9:be:ec:f5:18:08:db:06: 2f:f8:0c:93:64:98:9d:2e:fc:e7:0d:92:df:c2:60:44:70:3f: 80:85:cb:af:e5:55:f9:47:d2:fe:76:f1:50:a9:9c:a3:4c:41: 09:57:49:64:ee:06:4a:c4:c8:79:d7:6a:5a:84:03:cc:a3:79: 9f:85:cd:70:e2:5e:bc:39:20:63:25:bb:61:17:67:c5:8a:d9: 08:f5:84:e7:c6:71:85:8d:eb:74:f7:8c:65:6b:c0:e8:9f:2f: 3a:0c:a5:95:60:af:75:97:28:01:08:c6:e5:7b:12:e7:a0:a2: fa:13:4d:0d:8e:6b:29:2b:12:ef:47:7e:88:dd:37:c2:40:f6: b3:c8:ce:c1:10:75:b5:c9:fd:b0:27:52:d5:e3:be:32:19:ae: a0:af:6c:75:75:7f:b7:7d:fb:21:da:eb:3e:4a:ba:bf:16:35: 7b:76:0b:79:fb:32:58:41:70:86:09:1f:c1:35:73:65:df:1d: 3c:29:92:8b:f7:9a:9b:4b:ea:c9:a5:b3:3b:30:f2:13:b1:68: f3:6f:63:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2ODMxMTAvBgNVBAUTKENBN0M4NkJFMDBEQjQxNDUwM0VENUVFNkMwQUY5MjhG MzRDNUM3RDgwHhcNMjUwNjE4MjAyMTAyWhcNMjUwNjI1MjAyMTAyWjAYMRYwFAYD VQQDEw02ODUzMWZhZS0xNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNLUikLu+4UyTuASd1kWd0EzBoRTU5gLJHHEqdiemRvD6ruh4dKHWfHo4eIC pOBvDesadfZt7MOLcTpoHs29s1UJUXlwGBP0wfansNXCqltW6YKCwjkVJZDWkJKX sY1cBgX3ophWNq0e/wedhn92iruhpql3Tffm03b2UpLlPPZ9eiNMUzyH34r14bMk 4O0dE6lrfBADx10URELSWeiwo5zO7ImNqOkCTsm6hwPeNf8UJ/vKiIAZBL/d+9vb xSGQtIFsdtGmCwt21RjQcwKShv9YaD4T52Z4c41r3rW55nhm1ZQdCt7/0SrCl7Za Gup3REc6iIfpgQ5O9sTaEXQCiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1CfFm3 MofF84VDxBD45EIK6GpJMB8GA1UdIwQYMBaAFMp8hr4A20FFA+1e5sCvko80xcfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY4My8zRjBCMzU2MkI3 OTMxMUVBQTRDNTRCMTRDNEY5QUUwMi95bnlHdmdEYlFVVUQ3Vjdtd0stU2p6VEZ4 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lueUd2Z0RiUVVVRDdWN213Sy1TanpURng5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY4My8zRjBCMzU2MkI3OTMxMUVBQTRDNTRCMTRDNEY5QUUwMi95bnlHdmdEYlFV VUQ3Vjdtd0stU2p6VEZ4OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYv+JTiZFV5ruMpyPCb9xU+s7GqPobPuEF6+1YGP0g8hnp1iYA21Xm 1v8j5DXFub7s9RgI2wYv+AyTZJidLvznDZLfwmBEcD+Ahcuv5VX5R9L+dvFQqZyj TEEJV0lk7gZKxMh512pahAPMo3mfhc1w4l68OSBjJbthF2fFitkI9YTnxnGFjet0 94xla8Dony86DKWVYK91lygBCMblexLnoKL6E00NjmspKxLvR36I3TfCQPazyM7B EHW1yf2wJ1LV474yGa6gr2x1dX+3ffsh2us+Srq/FjV7dgt5+zJYQXCGCR/BNXNl 3x08KZKL95qbS+rJpbM7MPITsWjzb2NS -----END CERTIFICATE-----Generated at Fri Jun 20 11:39:43 2025 by rpki-client