$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json) Hash identifier: 6Qjl7sr//hseiik2OWkxkLSfJkgnyaVRw/1UkSrQclI= Subject key identifier: D3:47:BC:7D:49:F7:00:AC:C1:1D:18:61:25:65:29:24:4E:8B:8D:C5 Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Certificate serial: 1056 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft Manifest number: 1056 Signing time: Wed 18 Jun 2025 17:21:16 +0000 Manifest this update: Wed 18 Jun 2025 17:21:15 +0000 Manifest next update: Wed 25 Jun 2025 17:21:15 +0000 Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: m7gUEeB3K+ppLB86OBwCwIqO2RmbOYRWwjQcN45/Shg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4182 (0x1056) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Validity Not Before: Jun 18 17:21:15 2025 GMT Not After : Jun 25 17:21:15 2025 GMT Subject: CN=6852f58b-76d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:25:76:9f:ef:3e:57:6c:89:cb:b7:27:8a: 25:6a:fc:74:88:50:c6:aa:74:e0:90:33:09:0c:79: 7e:ec:4c:aa:88:5b:9d:02:1c:aa:58:25:08:08:ae: ab:b8:eb:0e:cf:1c:fe:d4:96:9b:44:03:23:0d:8c: 0b:07:a6:a7:30:55:9f:3b:2b:0f:4d:87:85:fc:4a: b3:73:8d:53:39:12:59:6e:1d:38:aa:65:f1:25:c9: 2e:f8:f1:8f:c9:4d:3e:5b:d0:57:dc:fa:32:ad:80: e8:d1:6a:4d:57:cd:75:2f:a6:a8:16:9e:7a:bc:8d: 89:d2:a2:ce:7c:50:fc:b8:18:61:0b:bd:36:22:51: 20:7f:3d:de:3b:d6:c4:dd:45:86:3c:73:24:ab:e2: 44:29:ab:5d:42:8d:0f:b9:a9:ff:23:80:a4:66:0e: fb:5a:89:02:65:c3:3e:27:f6:13:4c:77:71:68:e3: 33:6c:df:11:e8:7b:bc:16:38:f5:6b:aa:e8:ae:3b: cf:1d:2f:c3:5e:70:1b:3e:46:69:f1:3c:e6:19:d1: d0:6e:96:3f:69:6c:3d:d0:52:b0:c6:e0:1f:41:49: 3d:b8:18:43:1e:12:6a:83:46:a7:7e:be:d9:fa:bb: da:28:a1:88:f2:fc:86:a7:59:c9:16:b4:e5:2c:06: f1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:47:BC:7D:49:F7:00:AC:C1:1D:18:61:25:65:29:24:4E:8B:8D:C5 X509v3 Authority Key Identifier: keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b1:77:39:68:4a:57:8a:d6:38:43:33:5d:d8:cc:50:38:1d: 59:6a:93:8b:09:e0:96:ea:f4:a1:de:41:41:a3:19:87:1c:29: a6:15:4a:4f:20:5d:97:83:b9:ae:16:19:a0:96:41:7f:54:17: 55:ec:1d:b7:32:59:11:04:f3:b2:71:80:6c:fa:2f:42:8c:51: b5:5b:5e:5a:5b:4c:bc:95:d9:c3:9c:62:c0:77:52:b0:df:e4: 8b:5d:31:ed:0b:d9:38:ea:1f:e7:3b:00:6a:57:fc:d3:0a:ff: ea:4e:ae:ef:7f:c3:8a:95:81:64:26:77:08:54:17:4e:e6:c0: e2:f2:14:ef:f3:76:54:5c:85:d4:0c:5d:fb:60:4c:15:aa:5c: 77:cf:b0:55:22:f0:6b:ee:7b:cc:ca:36:4b:4a:26:83:aa:03: eb:41:9a:04:10:e9:13:df:f8:90:31:60:d0:64:21:0b:b6:7c: 54:3d:33:00:2d:e7:06:8c:13:20:60:63:c3:59:ca:c9:21:85: 69:81:c9:01:d3:88:9d:f6:9a:42:95:12:35:69:75:2d:f2:3c: 39:05:a6:6e:95:1f:34:f6:14:ec:17:04:01:76:77:93:35:3f: a8:bc:a8:2c:cb:c4:0e:dd:90:40:95:2b:12:0f:be:57:39:d9: cd:f6:25:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEM4REE2NDA5NjcxMzQ4MTA3RERCQzhCMTgzRjU1QUJG MjkzMTI1NTYwHhcNMjUwNjE4MTcyMTE1WhcNMjUwNjI1MTcyMTE1WjAYMRYwFAYD VQQDEw02ODUyZjU4Yi03NmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu0ldp/vPldsicu3J4olavx0iFDGqnTgkDMJDHl+7EyqiFudAhyqWCUICK6r uOsOzxz+1JabRAMjDYwLB6anMFWfOysPTYeF/Eqzc41TORJZbh04qmXxJcku+PGP yU0+W9BX3PoyrYDo0WpNV811L6aoFp56vI2J0qLOfFD8uBhhC702IlEgfz3eO9bE 3UWGPHMkq+JEKatdQo0Puan/I4CkZg77WokCZcM+J/YTTHdxaOMzbN8R6Hu8Fjj1 a6rorjvPHS/DXnAbPkZp8TzmGdHQbpY/aWw90FKwxuAfQUk9uBhDHhJqg0anfr7Z +rvaKKGI8vyGp1nJFrTlLAbxjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNHvH1J 9wCswR0YYSVlKSROi43FMB8GA1UdIwQYMBaAFMjaZAlnE0gQfdvIsYP1Wr8pMSVW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9ENjc3RDMxQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNCQjkyOGl4Z19WYXZ5a3hK VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3lOcGtDV2NUU0JCOTI4aXhnX1ZhdnlreEpWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9ENjc3RDMxQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNC QjkyOGl4Z19WYXZ5a3hKVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmsXc5aEpXitY4QzNd2MxQOB1ZapOLCeCW6vSh3kFBoxmHHCmmFUpP IF2Xg7muFhmglkF/VBdV7B23MlkRBPOycYBs+i9CjFG1W15aW0y8ldnDnGLAd1Kw 3+SLXTHtC9k46h/nOwBqV/zTCv/qTq7vf8OKlYFkJncIVBdO5sDi8hTv83ZUXIXU DF37YEwVqlx3z7BVIvBr7nvMyjZLSiaDqgPrQZoEEOkT3/iQMWDQZCELtnxUPTMA LecGjBMgYGPDWcrJIYVpgckB04id9ppClRI1aXUt8jw5BaZulR809hTsFwQBdneT NT+ovKgsy8QO3ZBAlSsSD75XOdnN9iXk -----END CERTIFICATE-----Generated at Thu Jun 19 18:47:27 2025 by rpki-client