$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft File: YBC8xly5zPAs9-0p7HXk1iK98_A.mft (raw, json) Hash identifier: Op4K9bJyrqVOo0FfSovBcz5EJskcrySLL8aGqsBteoU= Subject key identifier: 4A:ED:FA:43:97:52:01:35:3D:9D:7C:8F:7F:4B:8C:5B:FC:BD:19:5C Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 Certificate issuer: /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft Manifest number: 049C Signing time: Thu 12 Jun 2025 23:33:53 +0000 Manifest this update: Thu 12 Jun 2025 23:33:53 +0000 Manifest next update: Thu 19 Jun 2025 23:33:53 +0000 Files and hashes: 1: YBC8xly5zPAs9-0p7HXk1iK98_A.crl (hash: 1FH8ugICZb2LgEar/KHeZVsTsvns3IkbsDTt6/308XM=) 2: E225E68E397411EC8120D135C4F9AE02.roa (hash: GWZiL4+KkXKacwwHdWBVfV3QtoEcyH45HgJbisXMlBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F45, serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Validity Not Before: Jun 12 23:33:53 2025 GMT Not After : Jun 19 23:33:53 2025 GMT Subject: CN=684b63e1-5090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:48:33:d1:3f:5d:28:f1:98:c6:ca:3b:36: f0:cf:39:47:b8:1f:a8:91:2b:9c:af:8e:9b:fe:69: d7:f2:76:6e:ca:9d:df:7e:86:89:c5:45:54:2b:3b: df:b2:41:a1:ee:79:7c:20:03:79:dd:b8:75:3d:40: 0f:3a:2f:b2:5b:94:a1:21:bc:81:2e:e8:17:22:e8: 80:a6:17:d2:18:2f:9f:f1:c7:a0:71:9d:37:ac:78: 60:ef:73:ab:02:d7:2b:c7:11:9c:61:db:0a:41:b0: 5d:4a:5f:5d:ef:1c:1b:ba:a8:95:a5:50:64:21:2b: a6:07:bb:af:48:db:27:ca:39:25:2b:aa:72:66:2d: 67:08:47:ba:7c:64:ce:6a:51:33:b3:6b:ca:f5:23: 97:f2:23:78:b1:8a:69:2a:4f:7f:c3:7b:87:af:ac: 75:26:84:07:4a:c9:a5:a4:c0:da:8b:4d:27:06:6d: 71:b7:cd:60:1b:fd:e7:38:f2:e4:3b:5a:cf:f0:86: e5:5d:1a:83:ee:8b:82:23:58:37:0b:e9:7d:ed:a1: 49:78:66:0a:40:1c:de:90:01:e4:1f:ad:6a:d3:4a: 4b:8c:03:77:1a:9f:7f:80:e7:fd:46:ee:91:1b:e6: de:4a:76:39:88:eb:1e:25:42:46:58:ba:3b:c0:07: 5f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:ED:FA:43:97:52:01:35:3D:9D:7C:8F:7F:4B:8C:5B:FC:BD:19:5C X509v3 Authority Key Identifier: keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:89:2d:97:79:3c:1f:9e:34:74:a1:99:a3:93:96:70:ec:f6: eb:09:a4:52:64:f8:24:ee:55:4e:c8:b0:4e:47:76:49:e8:c0: 77:f3:f9:2a:c3:fa:c5:85:2d:a3:b0:cb:2a:75:f5:4f:da:57: 55:a6:e1:42:47:30:f0:ac:0e:5f:ef:51:2c:36:38:c6:e1:7c: 20:a5:ce:df:88:76:cb:68:bf:c0:a1:27:c1:9e:53:04:90:53: 5b:51:d9:b1:6e:b3:1f:df:6c:bc:5e:95:65:e9:96:e0:5c:77: de:51:a9:63:84:af:fa:ea:33:e1:cf:fd:c6:b6:8d:78:8d:be: f1:2b:d6:76:56:f7:75:4b:b9:e3:fb:65:55:d4:07:80:38:c3: 0e:74:ee:29:a8:05:4a:3d:74:4f:f3:4b:4d:75:3f:6e:e6:e0: e5:2d:e0:23:92:6b:a8:02:7e:af:28:d7:a0:35:03:9c:f8:d1: 79:65:65:fc:86:bb:d4:a6:56:e5:51:27:0a:6e:e6:d0:b4:75: b5:8f:c2:6c:db:ae:b3:6f:a7:65:3f:18:f0:da:a8:fd:ea:91: 5e:d2:6c:fd:6e:e7:09:5e:c7:d3:52:f0:18:3d:d7:6f:a3:04: b9:b9:d4:02:28:14:2b:ac:aa:2d:80:7a:f4:25:ff:30:66:c1: ed:ca:99:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNDUxMTAvBgNVBAUTKDYwMTBCQ0M2NUNCOUNDRjAyQ0Y3RUQyOUVDNzVFNEQ2 MjJCREYzRjAwHhcNMjUwNjEyMjMzMzUzWhcNMjUwNjE5MjMzMzUzWjAYMRYwFAYD VQQDEw02ODRiNjNlMS01MDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03tIM9E/XSjxmMbKOzbwzzlHuB+okSucr46b/mnX8nZuyp3ffoaJxUVUKzvf skGh7nl8IAN53bh1PUAPOi+yW5ShIbyBLugXIuiAphfSGC+f8cegcZ03rHhg73Or AtcrxxGcYdsKQbBdSl9d7xwbuqiVpVBkISumB7uvSNsnyjklK6pyZi1nCEe6fGTO alEzs2vK9SOX8iN4sYppKk9/w3uHr6x1JoQHSsmlpMDai00nBm1xt81gG/3nOPLk O1rP8IblXRqD7ouCI1g3C+l97aFJeGYKQBzekAHkH61q00pLjAN3Gp9/gOf9Ru6R G+beSnY5iOseJUJGWLo7wAdf+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErt+kOX UgE1PZ18j39LjFv8vRlcMB8GA1UdIwQYMBaAFGAQvMZcuczwLPftKex15NYivfPw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY0NS9ENzZGRjA0NDM5 NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQQXM5LTBwN0hYazFpSzk4 X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCQzh4bHk1elBBczktMHA3SFhrMWlLOThfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY0NS9ENzZGRjA0NDM5NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQ QXM5LTBwN0hYazFpSzk4X0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCziS2XeTwfnjR0oZmjk5Zw7PbrCaRSZPgk7lVOyLBOR3ZJ6MB38/kq w/rFhS2jsMsqdfVP2ldVpuFCRzDwrA5f71EsNjjG4Xwgpc7fiHbLaL/AoSfBnlME kFNbUdmxbrMf32y8XpVl6ZbgXHfeUaljhK/66jPhz/3Gto14jb7xK9Z2Vvd1S7nj +2VV1AeAOMMOdO4pqAVKPXRP80tNdT9u5uDlLeAjkmuoAn6vKNegNQOc+NF5ZWX8 hrvUplblUScKbubQtHW1j8Js266zb6dlPxjw2qj96pFe0mz9bucJXsfTUvAYPddv owS5udQCKBQrrKotgHr0Jf8wZsHtypl6 -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:19 2025 by rpki-client