$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: XiqkOE9TE/ZYQIshECAYiSy0AMSxdL9VQqUeFcyIhng= Subject key identifier: A8:B2:B4:69:02:7B:FD:2D:96:02:96:EE:28:E7:79:7A:08:1B:8B:0E Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 182C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 181F Signing time: Thu 12 Jun 2025 16:28:15 +0000 Manifest this update: Thu 12 Jun 2025 16:28:15 +0000 Manifest next update: Thu 19 Jun 2025 16:28:15 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: ogDmW7cIPIsIwY6QJGk9dGI6ULQme6979bhrTHipkcQ=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: YxR/IEAXYjhKk4qyNbFNVRXx2+Bty0U++VTURHi/7GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6188 (0x182c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Jun 12 16:28:15 2025 GMT Not After : Jun 19 16:28:15 2025 GMT Subject: CN=684b001f-cbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:e2:98:39:93:5d:64:67:df:fc:f2:e3:34: 98:c9:1a:c4:0b:df:a8:a0:5f:d0:ce:3c:fc:77:80: 12:ef:4c:46:4d:07:72:0b:a3:bc:74:be:c1:49:00: 39:0d:9a:b6:1e:2b:17:f3:e3:0e:60:06:ac:da:dd: 5b:8a:12:bf:11:be:9f:c1:92:b9:d5:1c:00:2b:ca: 95:67:c4:03:b6:87:73:62:62:41:72:ee:1f:05:d7: 9d:5a:e7:0a:c2:d3:4c:ae:a0:5f:60:39:0b:2d:6b: 0b:27:c2:19:90:bd:63:bf:6b:44:69:60:b0:13:24: 51:c3:a6:b1:26:ae:c4:de:40:1d:b4:bc:78:e3:68: e2:02:65:11:25:69:a2:3e:45:c1:7d:5d:aa:56:a3: 86:fb:ab:93:ea:be:fa:4c:5e:58:17:55:9d:b3:45: da:07:4d:0c:9e:66:74:ea:44:95:22:1f:87:42:4e: 53:8f:98:bb:76:7b:a7:2a:9f:f3:12:5b:45:38:94: 9e:9a:5d:55:bd:04:8d:fc:b3:4d:06:8d:91:3c:38: ee:2e:b6:1d:a5:51:03:1b:d1:5c:a4:68:ea:00:9b: d8:84:33:fa:a6:5d:f3:36:b3:33:7b:d3:37:2d:c4: c4:ce:7f:bc:e4:5c:d0:9b:8c:73:44:a2:1d:9c:d0: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B2:B4:69:02:7B:FD:2D:96:02:96:EE:28:E7:79:7A:08:1B:8B:0E X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:12:d9:91:79:bb:97:bf:e0:ea:1a:c9:e6:08:1e:b5:15:35: bf:e9:50:2e:7f:ce:bd:0d:d0:1e:21:37:f6:ee:f7:7c:07:49: dd:32:54:b6:0b:bd:fc:f3:69:13:26:49:4f:23:8c:8c:a4:24: 01:ad:42:f0:76:22:ff:04:3e:4e:a3:1d:84:57:e9:8e:a8:12: 43:53:43:13:6f:0e:41:4f:79:32:b6:ca:fa:e4:3a:41:30:dc: 1f:9a:3b:14:73:05:31:c8:f3:ce:bb:87:7f:96:08:7f:71:01: f4:6e:bf:01:b9:57:1f:a9:c3:b8:b0:e7:e8:c0:93:0f:1b:b9: 02:00:7b:ae:9d:0f:a8:eb:03:70:ba:99:2c:87:6f:44:df:05: 43:d8:b8:f4:27:e4:3f:c3:2a:c7:3b:6d:97:b1:e6:81:f4:db: 19:61:5b:3a:6b:61:d7:26:68:61:17:b9:60:29:a2:e0:a5:d1: 80:27:21:c1:93:90:1c:05:10:ac:f1:47:ce:15:99:18:ea:5a: 76:2a:95:e0:e0:2b:2c:40:87:63:aa:b5:76:9d:5e:39:6b:05: 7b:5d:82:d9:57:3d:fd:d7:10:ba:51:17:d6:b4:a3:ab:82:7d: 8b:cc:1a:bf:13:69:6a:b7:ba:d4:4f:17:b2:30:d7:34:8d:e8: c4:27:e2:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjUwNjEyMTYyODE1WhcNMjUwNjE5MTYyODE1WjAYMRYwFAYD VQQDEw02ODRiMDAxZi1jYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sDimDmTXWRn3/zy4zSYyRrEC9+ooF/Qzjz8d4AS70xGTQdyC6O8dL7BSQA5 DZq2HisX8+MOYAas2t1bihK/Eb6fwZK51RwAK8qVZ8QDtodzYmJBcu4fBdedWucK wtNMrqBfYDkLLWsLJ8IZkL1jv2tEaWCwEyRRw6axJq7E3kAdtLx442jiAmURJWmi PkXBfV2qVqOG+6uT6r76TF5YF1Wds0XaB00MnmZ06kSVIh+HQk5Tj5i7dnunKp/z EltFOJSeml1VvQSN/LNNBo2RPDjuLrYdpVEDG9FcpGjqAJvYhDP6pl3zNrMze9M3 LcTEzn+85FzQm4xzRKIdnNAhcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiytGkC e/0tlgKW7ijneXoIG4sOMB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6EtmRebuXv+DqGsnmCB61FTW/6VAuf869DdAeITf27vd8B0ndMlS2 C73882kTJklPI4yMpCQBrULwdiL/BD5Oox2EV+mOqBJDU0MTbw5BT3kytsr65DpB MNwfmjsUcwUxyPPOu4d/lgh/cQH0br8BuVcfqcO4sOfowJMPG7kCAHuunQ+o6wNw upksh29E3wVD2Lj0J+Q/wyrHO22XseaB9NsZYVs6a2HXJmhhF7lgKaLgpdGAJyHB k5AcBRCs8UfOFZkY6lp2KpXg4CssQIdjqrV2nV45awV7XYLZVz391xC6URfWtKOr gn2LzBq/E2lqt7rUTxeyMNc0jejEJ+I7 -----END CERTIFICATE-----Generated at Sat Jun 14 17:56:51 2025 by rpki-client