$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: yiDDaEvxfOrzqiY+yN6Win9KIsR0QFP68PbAiXnLpLs= Subject key identifier: D8:47:97:40:75:CC:78:56:62:02:83:D5:A4:9B:20:37:76:5A:08:D3 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 04C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 04B3 Signing time: Sat 14 Jun 2025 23:40:45 +0000 Manifest this update: Sat 14 Jun 2025 23:40:45 +0000 Manifest next update: Sat 21 Jun 2025 23:40:45 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: vllhpjY7m0pmDsvukESvvtAJGMjlIaSfdWpVkGtBLCg=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: xNVbMWOJTNr+TWQdJDNkDpjKnJa72sxLxfgu1hE4Y3w=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: yMa9anpM1Fx5awM2ELLejmDtWuOQ4e92GvLkjwBL1Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1222 (0x4c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Jun 14 23:40:45 2025 GMT Not After : Jun 21 23:40:45 2025 GMT Subject: CN=684e087d-1044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:4a:a5:7f:90:bb:19:02:df:f7:fd:1e:1d: 14:82:78:61:35:87:4a:c0:92:4b:1d:27:ac:f6:ba: fe:50:a3:73:9c:13:36:5a:a4:cd:84:ad:af:58:1a: ae:d8:ec:be:be:d5:92:11:1a:33:6c:9b:3d:3c:73: 7d:34:45:fd:c0:41:bd:3d:01:4e:4e:1d:9a:af:ee: f3:0f:b9:8e:85:f7:98:bd:52:1f:7e:02:61:57:75: 58:f2:0c:e0:43:a2:b7:61:aa:29:9b:07:78:0d:c1: 4b:8e:7d:1c:06:46:d1:33:ce:11:d2:b9:5d:8d:db: ec:6d:c1:a4:b9:8c:76:5f:03:66:9a:12:47:a8:82: 0b:91:75:75:56:ca:e4:8a:20:76:c6:38:6a:8e:0c: c9:d9:3b:84:d7:28:f6:41:9e:84:56:4e:41:28:67: 9a:7c:3c:3b:71:05:03:2e:be:13:b4:2b:e0:c1:67: cd:58:1d:e7:77:5f:4d:2a:59:1f:e3:c3:96:45:b4: ca:ad:22:e9:66:81:a8:33:b5:d1:26:a2:86:34:3e: e6:14:25:c7:33:c0:18:8b:de:39:39:0a:10:a7:cb: f4:e2:eb:97:8d:03:bf:b1:c8:53:f5:8e:88:ef:58: 2e:c3:12:8a:c3:b1:b9:7f:e8:45:7b:f8:a4:4e:72: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:47:97:40:75:CC:78:56:62:02:83:D5:A4:9B:20:37:76:5A:08:D3 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:67:0f:15:bf:b4:b0:44:85:ba:b4:1a:d6:41:fc:06:b6:83: 95:3d:05:59:24:7f:a4:14:fe:d2:e0:02:d9:17:bb:10:7e:20: d1:ee:de:7b:01:ce:73:db:cd:3e:4f:3f:aa:6c:ee:56:56:2d: 83:92:1c:3b:b3:30:59:10:66:30:52:c1:c4:9d:1d:61:47:c3: f4:58:ac:a9:be:4a:fa:fb:8d:78:06:bc:36:49:7a:33:96:50: d7:12:81:22:6f:ba:7b:b8:d2:7d:85:1d:7c:ba:71:64:47:df: c9:88:b3:5f:46:88:44:41:77:c0:95:ba:5c:c0:19:2e:35:fa: 10:1c:f7:5a:da:84:cf:6a:a7:37:09:41:25:82:25:f8:c6:18: 3e:56:bc:e7:2e:01:da:0e:ce:34:77:9c:73:23:7f:64:60:23: b1:8d:80:f3:07:29:57:c6:98:ae:2e:e4:b3:4f:cc:c2:90:98: 90:08:14:bd:ca:c5:f4:9b:11:09:0d:20:81:03:f0:81:64:10: af:74:2b:3a:04:f8:43:01:f0:59:2c:47:15:d5:ca:e7:70:f8: 9b:32:6e:cf:6a:68:dc:22:5f:a6:32:92:16:70:54:8f:2c:75: 8c:ea:1d:21:aa:7b:86:5a:cf:ea:30:86:61:5d:1c:70:0a:66: e8:d6:3c:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjUwNjE0MjM0MDQ1WhcNMjUwNjIxMjM0MDQ1WjAYMRYwFAYD VQQDEw02ODRlMDg3ZC0xMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJFKpX+QuxkC3/f9Hh0UgnhhNYdKwJJLHSes9rr+UKNznBM2WqTNhK2vWBqu 2Oy+vtWSERozbJs9PHN9NEX9wEG9PQFOTh2ar+7zD7mOhfeYvVIffgJhV3VY8gzg Q6K3Yaopmwd4DcFLjn0cBkbRM84R0rldjdvsbcGkuYx2XwNmmhJHqIILkXV1Vsrk iiB2xjhqjgzJ2TuE1yj2QZ6EVk5BKGeafDw7cQUDLr4TtCvgwWfNWB3nd19NKlkf 48OWRbTKrSLpZoGoM7XRJqKGND7mFCXHM8AYi945OQoQp8v04uuXjQO/schT9Y6I 71guwxKKw7G5f+hFe/ikTnJLswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhHl0B1 zHhWYgKD1aSbIDd2WgjTMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeZw8Vv7SwRIW6tBrWQfwGtoOVPQVZJH+kFP7S4ALZF7sQfiDR7t57 Ac5z280+Tz+qbO5WVi2Dkhw7szBZEGYwUsHEnR1hR8P0WKypvkr6+414Brw2SXoz llDXEoEib7p7uNJ9hR18unFkR9/JiLNfRohEQXfAlbpcwBkuNfoQHPda2oTPaqc3 CUElgiX4xhg+VrznLgHaDs40d5xzI39kYCOxjYDzBylXxpiuLuSzT8zCkJiQCBS9 ysX0mxEJDSCBA/CBZBCvdCs6BPhDAfBZLEcV1crncPibMm7PamjcIl+mMpIWcFSP LHWM6h0hqnuGWs/qMIZhXRxwCmbo1jwx -----END CERTIFICATE-----Generated at Sun Jun 15 10:16:27 2025 by rpki-client