$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json) Hash identifier: 9CQgrpotLJOXt5nkpU8xFMQI83kgR8AIK6qJYLpHotA= Subject key identifier: 5A:43:B5:D6:3C:B2:89:25:CB:52:3B:C2:69:00:0A:B7:15:08:90:D3 Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft Manifest number: 01FB Signing time: Sun 15 Jun 2025 01:42:56 +0000 Manifest this update: Sun 15 Jun 2025 01:42:55 +0000 Manifest next update: Sun 22 Jun 2025 01:42:55 +0000 Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: DhyhA93l4vZOEqEQEgLB2wVSSbdbSVwO5Al/9gF1F6M=) 2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: t7XCEjkxXsWQ/Dxk256ftxVIrolRXrZfUAZmnQPH6Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Validity Not Before: Jun 15 01:42:55 2025 GMT Not After : Jun 22 01:42:55 2025 GMT Subject: CN=684e251f-ae4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:c9:67:dd:4e:0b:a0:b1:22:e0:e6:b1:c8: fe:80:53:df:a8:64:45:a6:56:49:c6:fa:cb:18:9b: bc:29:d2:1b:ed:a0:03:1a:94:c5:9c:99:72:27:6b: 07:a4:c4:0f:8f:9d:ea:b1:39:8b:ac:5a:de:14:88: dc:e0:ed:29:cc:67:bf:75:fc:4e:81:3f:18:17:e6: 07:17:01:bc:bd:e1:76:b1:55:f5:a5:b1:a8:eb:52: c7:78:d4:a6:3c:18:fb:f4:1d:61:46:d0:6f:9a:4a: 7e:a2:f2:7c:d0:94:00:45:81:6f:ae:68:79:28:20: 23:01:84:66:5b:ef:16:40:c5:e8:d7:af:6d:cd:99: ee:49:72:30:3f:9b:3f:37:5f:b7:86:f4:2c:24:d7: 44:c5:e9:b4:ee:11:3c:81:f7:d0:0c:43:e2:c4:1c: f2:a5:34:86:ac:01:ea:f4:cf:fc:fb:15:ea:29:f1: 1f:34:4f:bb:22:5d:14:3d:84:2e:c3:c3:17:9c:cb: 91:42:8b:96:34:f8:d6:fa:c0:76:f9:8f:74:84:91: 45:82:08:6e:f1:53:d8:13:7d:d4:5e:f7:66:7e:28: 91:e3:70:1c:8a:48:0f:b4:b3:25:03:4c:48:38:53: 4a:d9:a6:0a:7a:9c:b0:00:eb:34:d3:16:b4:b8:00: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:43:B5:D6:3C:B2:89:25:CB:52:3B:C2:69:00:0A:B7:15:08:90:D3 X509v3 Authority Key Identifier: keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:20:85:14:c7:69:5d:b9:ac:4d:82:c1:48:07:ee:72:ee:d1: 5d:22:a1:c3:11:92:33:83:68:71:be:10:9d:85:ff:b7:18:a1: a3:57:55:43:cb:99:7a:b0:ed:b5:e1:1b:f3:42:bc:d5:f9:2b: 45:1b:ca:d9:46:aa:96:dd:6f:ef:45:ee:f2:54:2a:68:a6:4d: ff:72:06:9c:1e:4e:ec:65:2a:8e:30:cf:c9:79:fc:2c:34:10: eb:c2:b3:93:df:47:43:9c:99:73:ea:0d:7d:43:9e:35:41:ca: 5c:68:08:67:17:a6:94:40:a8:ff:1d:68:dc:07:bc:02:52:d9: 0b:74:cd:99:24:1d:d6:a9:dd:d0:aa:09:15:bb:48:74:d2:58: 30:23:fc:17:73:fe:74:0b:54:98:04:aa:22:8f:e8:13:56:22: 2b:ec:f7:3b:b6:70:3e:37:f7:08:4a:2b:99:24:45:e6:25:e3: b1:52:7f:1f:a8:57:03:e4:db:8a:d5:ec:2a:18:27:77:ff:c0: 03:97:a3:e2:96:42:9f:54:8e:56:6b:7b:3f:0c:22:26:d3:0b: 91:88:5a:fe:04:0c:36:da:92:c5:c2:40:a1:3b:71:95:9c:26: 90:b3:21:4b:1e:1f:cc:c6:95:c8:94:bb:ea:52:d2:52:ed:fb: be:6b:85:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0 NUYyNUUyMEIwHhcNMjUwNjE1MDE0MjU1WhcNMjUwNjIyMDE0MjU1WjAYMRYwFAYD VQQDEw02ODRlMjUxZi1hZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsV7JZ91OC6CxIuDmscj+gFPfqGRFplZJxvrLGJu8KdIb7aADGpTFnJlyJ2sH pMQPj53qsTmLrFreFIjc4O0pzGe/dfxOgT8YF+YHFwG8veF2sVX1pbGo61LHeNSm PBj79B1hRtBvmkp+ovJ80JQARYFvrmh5KCAjAYRmW+8WQMXo169tzZnuSXIwP5s/ N1+3hvQsJNdExem07hE8gffQDEPixBzypTSGrAHq9M/8+xXqKfEfNE+7Il0UPYQu w8MXnMuRQouWNPjW+sB2+Y90hJFFgghu8VPYE33UXvdmfiiR43AcikgPtLMlA0xI OFNK2aYKepywAOs00xa0uAClzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpDtdY8 sokly1I7wmkACrcVCJDTMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14 M3FlcE9jdmltbzlGOGw0Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkIIUUx2lduaxNgsFIB+5y7tFdIqHDEZIzg2hxvhCdhf+3GKGjV1VD y5l6sO214RvzQrzV+StFG8rZRqqW3W/vRe7yVCpopk3/cgacHk7sZSqOMM/Jefws NBDrwrOT30dDnJlz6g19Q541QcpcaAhnF6aUQKj/HWjcB7wCUtkLdM2ZJB3Wqd3Q qgkVu0h00lgwI/wXc/50C1SYBKoij+gTViIr7Pc7tnA+N/cISiuZJEXmJeOxUn8f qFcD5NuK1ewqGCd3/8ADl6PilkKfVI5Wa3s/DCIm0wuRiFr+BAw22pLFwkChO3GV nCaQsyFLHh/MxpXIlLvqUtJS7fu+a4Ul -----END CERTIFICATE-----Generated at Sun Jun 15 09:32:48 2025 by rpki-client