$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft File: YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json) Hash identifier: m0Q/88ejH37OAkN7AjbjS/QK/sVChRX6YqXwLrh6MHM= Subject key identifier: A3:9A:A1:C9:AB:85:9F:DD:0B:2B:F5:C0:F2:FA:70:10:84:56:7A:75 Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10 Certificate issuer: /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft Manifest number: 01AC Signing time: Sun 15 Jun 2025 02:26:55 +0000 Manifest this update: Sun 15 Jun 2025 02:26:54 +0000 Manifest next update: Sun 22 Jun 2025 02:26:54 +0000 Files and hashes: 1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: U9Oqr8evIe4BBSAIvEgy0F3k+isQXlNRQ5bFBVrejeE=) 2: CCA801A2B97F11ED98ED3A74C4F9AE02.roa (hash: 70nEfW6y679vz54r1rMiwd9UT2VLDF6LzETjWTqp0aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A285, serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10 Validity Not Before: Jun 15 02:26:54 2025 GMT Not After : Jun 22 02:26:54 2025 GMT Subject: CN=684e2f6f-41a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:56:0b:e0:0f:d1:cd:07:69:39:af:dd:6f:93: 86:d6:19:f6:86:19:a5:18:d0:41:eb:41:90:35:97: aa:5c:48:cc:a9:cb:c1:54:5b:9d:b0:9d:00:9e:40: 2f:91:e0:3a:11:e9:12:73:d4:76:b0:fc:68:87:7c: e7:87:a1:bc:3a:13:86:a4:be:5b:2c:10:43:11:de: 87:27:71:40:3d:46:b0:f4:5b:76:a5:bf:37:37:1f: 31:50:b7:f8:ea:e7:55:11:1f:50:75:0d:9e:e0:c5: 59:b5:ca:8d:38:f3:ef:d0:a9:69:e3:7f:a5:cf:fe: 65:4b:99:1a:51:4f:48:df:15:f9:bd:23:c3:b4:ce: 20:cd:5a:a5:63:84:08:37:ea:db:9c:ae:3c:d1:33: 94:24:4c:db:4c:a7:6a:da:ac:3d:6b:9d:cf:2f:d4: 69:01:b8:57:79:08:e7:f8:65:ee:b3:67:d8:3e:c0: b3:0a:29:17:55:51:ac:16:e9:f0:9a:8c:cc:79:1a: ce:b2:60:8f:f0:f0:63:ef:df:98:a7:68:5a:31:8b: 8d:49:66:d4:b1:14:9d:64:3b:90:c3:3d:1b:19:f0: ec:42:18:b7:81:d9:75:31:14:6b:e5:ec:52:a7:3c: e2:5e:1d:ad:d4:24:be:cf:32:81:4e:2d:ac:f2:12: f1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9A:A1:C9:AB:85:9F:DD:0B:2B:F5:C0:F2:FA:70:10:84:56:7A:75 X509v3 Authority Key Identifier: keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:46:0e:da:6d:20:0c:ec:5a:f0:13:1c:a7:af:67:98:4a:4f: 51:18:39:78:14:40:c6:ed:18:0a:df:8c:49:61:4d:8e:cb:f4: f4:34:b7:b7:48:3f:74:c8:9c:ca:b2:58:79:b2:9c:f6:32:04: 85:9f:0b:43:03:5b:9d:21:b2:dd:a3:62:f9:2b:56:ee:bc:fd: ca:8c:cc:dc:aa:33:93:d4:73:03:4a:93:1f:67:c0:ea:7f:cb: 7d:99:56:77:49:5f:b8:c5:b1:5b:81:6e:b1:5d:97:ab:8c:b8: 84:c4:11:5d:70:bf:d1:aa:c3:cd:cc:db:09:6d:11:a5:1a:d7: 11:33:06:18:ea:5c:c9:ed:75:35:45:83:25:26:d6:a9:35:4b: 31:b2:9a:fd:12:6d:9b:c4:e7:1a:ff:be:4d:27:2f:02:54:df: b0:c9:21:ce:8d:ec:8f:dd:07:bd:40:37:37:99:f2:7d:a1:34: 07:d5:db:50:56:0a:2c:ac:7f:28:c1:32:31:de:70:4e:6c:df: 38:a1:75:6b:ea:15:a0:16:e7:ee:ac:e5:6f:63:13:06:dd:15: 68:58:3f:67:69:06:bc:1f:b3:09:9c:b5:0c:4a:b1:54:38:e4: bf:d7:31:8e:6a:8b:85:b9:59:57:e1:cc:00:4b:94:af:df:05: de:fe:c7:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEyODUxMTAvBgNVBAUTKDYyMjhBQjY4QTI0NjBCREM1NjY4OEI2RTU1ODkxNzkw REQ4MDRCMTAwHhcNMjUwNjE1MDIyNjU0WhcNMjUwNjIyMDIyNjU0WjAYMRYwFAYD VQQDEw02ODRlMmY2Zi00MWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VYL4A/RzQdpOa/db5OG1hn2hhmlGNBB60GQNZeqXEjMqcvBVFudsJ0AnkAv keA6EekSc9R2sPxoh3znh6G8OhOGpL5bLBBDEd6HJ3FAPUaw9Ft2pb83Nx8xULf4 6udVER9QdQ2e4MVZtcqNOPPv0Klp43+lz/5lS5kaUU9I3xX5vSPDtM4gzVqlY4QI N+rbnK480TOUJEzbTKdq2qw9a53PL9RpAbhXeQjn+GXus2fYPsCzCikXVVGsFunw mozMeRrOsmCP8PBj79+Yp2haMYuNSWbUsRSdZDuQwz0bGfDsQhi3gdl1MRRr5exS pzziXh2t1CS+zzKBTi2s8hLxIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOaocmr hZ/dCyv1wPL6cBCEVnp1MB8GA1UdIwQYMBaAFGIoq2iiRgvcVmiLblWJF5DdgEsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTI4NS9FODE5MjAzOEI5 N0ExMUVEQTI4NUE1NTRDNEY5QUUwMi9ZaWlyYUtKR0M5eFdhSXR1VllrWGtOMkFT eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpaXJhS0pHQzl4V2FJdHVWWWtYa04yQVN4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTI4NS9FODE5MjAzOEI5N0ExMUVEQTI4NUE1NTRDNEY5QUUwMi9ZaWlyYUtKR0M5 eFdhSXR1VllrWGtOMkFTeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGRg7abSAM7FrwExynr2eYSk9RGDl4FEDG7RgK34xJYU2Oy/T0NLe3 SD90yJzKslh5spz2MgSFnwtDA1udIbLdo2L5K1buvP3KjMzcqjOT1HMDSpMfZ8Dq f8t9mVZ3SV+4xbFbgW6xXZerjLiExBFdcL/RqsPNzNsJbRGlGtcRMwYY6lzJ7XU1 RYMlJtapNUsxspr9Em2bxOca/75NJy8CVN+wySHOjeyP3Qe9QDc3mfJ9oTQH1dtQ VgosrH8owTIx3nBObN84oXVr6hWgFufurOVvYxMG3RVoWD9naQa8H7MJnLUMSrFU OOS/1zGOaouFuVlX4cwAS5Sv3wXe/scV -----END CERTIFICATE-----Generated at Sun Jun 15 09:48:20 2025 by rpki-client