$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: dF0JF3eyTnkdnvTb2Z0VubCfPkG5te+amjBO0eJTcsU= Subject key identifier: D2:C6:78:F7:9A:B8:A2:B0:C4:BE:2A:7E:04:E1:C8:FD:A6:7D:4F:D4 Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 24FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 24E4 Signing time: Fri 20 Jun 2025 15:48:19 +0000 Manifest this update: Fri 20 Jun 2025 15:48:19 +0000 Manifest next update: Fri 27 Jun 2025 15:48:19 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: Piq6Y67YmomZ06r2JRag6AqEh2V6YbYKPWMVjnhkgS4=) 2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: yJwIYH0HnsFs9Iy2kQBVrjVIvfYou5TYh0Yox/p0ekY=) 3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: bQ3KvLtmzclqglCfQCTMWY9jEZJ/oqjU8/5vFJyfH5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9471 (0x24ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Jun 20 15:48:19 2025 GMT Not After : Jun 27 15:48:19 2025 GMT Subject: CN=685582c3-1845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:d3:50:ec:ce:dd:91:a6:1a:43:ef:e7:4f: 16:b2:da:74:42:a8:89:08:1a:0b:d5:87:f2:fc:f8: e6:36:3c:a5:75:cd:d7:64:42:a7:78:ea:da:ed:c0: 4e:3d:e9:f3:cb:07:39:60:76:65:3f:18:f5:8e:1e: c2:e4:95:cf:1a:51:78:f8:29:66:35:25:af:15:36: 60:5b:70:19:34:0b:d2:9d:ee:db:1e:83:23:67:cb: ca:3f:ba:34:89:49:f7:14:5f:d6:d9:d1:f5:e2:16: 14:50:2f:17:43:81:6d:b8:7d:89:e5:50:17:0a:2d: ca:c8:25:bd:5a:1d:65:c1:b2:55:1e:3a:59:df:45: 45:94:a7:5c:5f:11:54:7f:bd:92:fe:af:3e:d0:0d: 87:26:bc:bc:55:13:1c:00:aa:64:5c:d7:e6:aa:71: e8:cd:cf:04:d8:c7:79:d2:37:be:12:26:b4:ab:cc: 18:f5:71:ce:2f:1f:4b:79:2f:57:2a:25:c5:e3:bf: d1:30:0a:84:4b:21:22:8d:f2:c8:06:4f:b5:a3:d7: 94:1a:ae:e2:fd:10:c8:d3:0a:a3:e0:29:b5:be:8b: 7d:50:d4:ea:10:23:a1:a7:1a:80:c1:97:6e:bc:14: 1f:42:15:7c:be:34:53:15:6e:fa:45:77:55:78:5b: b9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C6:78:F7:9A:B8:A2:B0:C4:BE:2A:7E:04:E1:C8:FD:A6:7D:4F:D4 X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:26:3b:f0:36:c9:1e:39:9f:02:ec:94:6c:79:53:2c:cb:bf: 7e:3d:4f:f5:30:52:57:01:5e:8c:a4:8c:59:5c:23:6c:7b:13: 8f:1c:a5:24:39:d7:e3:fa:8e:1b:db:54:8d:52:e0:ae:d3:1c: 50:4b:44:e5:70:15:78:ee:61:89:65:5c:f9:ef:96:f9:27:f3: cb:e1:1f:72:62:5a:6f:00:01:d3:77:b1:30:95:f6:a2:c8:0b: 6e:83:62:79:d7:a3:c7:eb:25:be:c1:dc:9f:8a:1e:f5:7c:70: 56:73:d6:e3:76:fb:d6:2c:25:86:6f:4b:1d:ed:5d:c9:c0:4f: 15:47:08:ae:58:57:44:73:e7:ad:86:8f:e9:56:5f:2c:70:42: a1:f5:1d:cc:49:62:29:62:12:43:88:fe:b6:bd:1e:0a:42:47: de:e0:5c:68:02:0a:5b:91:ab:d2:0c:bd:a0:59:13:e0:cf:61: 09:4c:f3:36:c0:90:9a:6e:99:db:a6:72:36:48:b4:23:81:d6: bd:e6:46:d7:eb:5d:ac:f3:98:71:01:bc:6d:86:86:b4:ef:17: 60:e9:84:ed:aa:57:32:77:a3:92:c6:d8:ea:02:8a:96:74:54: 30:31:c5:71:c2:d6:1a:7e:26:c6:4e:a8:2e:c2:60:4c:99:36: ae:c3:64:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUwNjIwMTU0ODE5WhcNMjUwNjI3MTU0ODE5WjAYMRYwFAYD VQQDEw02ODU1ODJjMy0xODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmfTUOzO3ZGmGkPv508Wstp0QqiJCBoL1Yfy/PjmNjyldc3XZEKneOra7cBO Penzywc5YHZlPxj1jh7C5JXPGlF4+ClmNSWvFTZgW3AZNAvSne7bHoMjZ8vKP7o0 iUn3FF/W2dH14hYUUC8XQ4FtuH2J5VAXCi3KyCW9Wh1lwbJVHjpZ30VFlKdcXxFU f72S/q8+0A2HJry8VRMcAKpkXNfmqnHozc8E2Md50je+Eia0q8wY9XHOLx9LeS9X KiXF47/RMAqESyEijfLIBk+1o9eUGq7i/RDI0wqj4Cm1vot9UNTqECOhpxqAwZdu vBQfQhV8vjRTFW76RXdVeFu5EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLGePea uKKwxL4qfgThyP2mfU/UMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpJjvwNskeOZ8C7JRseVMsy79+PU/1MFJXAV6MpIxZXCNsexOPHKUk Odfj+o4b21SNUuCu0xxQS0TlcBV47mGJZVz575b5J/PL4R9yYlpvAAHTd7Ewlfai yAtug2J516PH6yW+wdyfih71fHBWc9bjdvvWLCWGb0sd7V3JwE8VRwiuWFdEc+et ho/pVl8scEKh9R3MSWIpYhJDiP62vR4KQkfe4FxoAgpbkavSDL2gWRPgz2EJTPM2 wJCabpnbpnI2SLQjgda95kbX612s85hxAbxthoa07xdg6YTtqlcyd6OSxtjqAoqW dFQwMcVxwtYafibGTqguwmBMmTauw2QX -----END CERTIFICATE-----Generated at Fri Jun 20 23:06:21 2025 by rpki-client