$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json) Hash identifier: Fk5C6C88XQHH1vdHLZUQc87DRPRA5p1E49O5autjOKE= Subject key identifier: 0D:EF:95:B8:AA:43:66:60:FA:7F:C4:7D:01:68:FE:CE:9B:D8:43:E4 Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft Manifest number: 012D Signing time: Tue 17 Jun 2025 03:36:39 +0000 Manifest this update: Tue 17 Jun 2025 03:36:39 +0000 Manifest next update: Tue 24 Jun 2025 03:36:39 +0000 Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: SB0uhUicGg/e+ytEwpYvKzfXXBC7UISuZG7DPFZ3m60=) 2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: DePAWeNaPf050wbH02MB/3/H4o3AawPKYgaEsO6gzSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Validity Not Before: Jun 17 03:36:39 2025 GMT Not After : Jun 24 03:36:39 2025 GMT Subject: CN=6850e2c7-3341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:42:58:8b:df:db:cf:ea:b7:80:9a:7c:d1:4a: 64:fe:55:e4:80:6b:92:88:a8:48:7f:9c:aa:44:e6: 33:8c:f1:10:b3:05:70:cb:26:04:be:34:88:fd:dd: 7e:d0:54:ff:99:52:60:ce:3c:fc:c3:8c:54:f5:54: 17:c9:5f:d0:55:6a:26:5c:28:6f:3b:b9:8a:6e:17: 2b:cf:61:d4:9f:a2:aa:59:c7:3d:f5:53:43:2e:6d: a4:4e:7c:83:05:b3:66:3c:33:61:3a:2f:14:b6:23: 34:7b:36:83:9c:57:01:c8:1c:5c:93:83:26:e2:01: 23:b3:23:ba:72:c4:61:9b:aa:73:b7:29:b4:0c:88: 3b:16:f6:de:4b:18:e8:30:ff:c1:2a:98:bf:c7:80: 3f:f7:d7:9d:30:35:6d:4f:a2:2a:a7:49:cf:9f:75: 04:69:87:95:7b:c5:39:f6:a5:1e:4b:8b:a5:10:4c: 41:46:41:2f:44:3e:4f:9b:0e:c8:11:89:14:29:a9: 8b:d8:a1:c3:14:7f:ec:79:4f:ad:4a:3b:da:8f:de: f9:d4:90:df:3c:71:fd:ea:04:9c:32:59:73:e6:c8: df:e4:8b:ae:29:f9:4d:a5:25:32:d0:60:27:f7:61: 52:68:56:10:78:b5:b3:91:ab:c4:70:53:41:70:40: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EF:95:B8:AA:43:66:60:FA:7F:C4:7D:01:68:FE:CE:9B:D8:43:E4 X509v3 Authority Key Identifier: keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:71:36:9f:56:7b:b8:75:bb:12:2d:07:2c:ce:90:19:bb:01: 9c:52:80:6f:ba:b9:9b:ad:ba:38:65:fe:55:0a:c4:6a:95:72: a5:67:6e:10:42:17:83:57:c4:fa:97:6d:27:cb:59:9e:46:a4: 7f:5b:27:26:68:3e:a2:15:3b:3a:07:10:c6:b7:e7:df:ac:14: 4a:0c:b1:94:f2:cb:97:5f:52:f7:bc:1b:97:2d:30:66:e0:87: c5:12:80:7f:a9:6c:e0:71:8c:d9:21:ed:a3:4d:6c:74:cc:1d: 66:c0:bd:73:7f:ac:96:68:74:42:7c:67:1c:cc:23:7b:87:b9: be:29:72:52:0e:d9:7d:78:db:ac:3c:57:47:1d:51:18:b8:4a: d2:46:70:96:be:f4:ac:9d:6a:3a:04:b7:2c:51:3d:74:42:e3: 2c:e5:5d:ce:11:10:49:90:b7:56:91:d3:c1:fa:ba:43:65:7a: 42:5b:b2:81:1a:89:4d:fb:3f:24:b2:ba:91:8a:af:c7:6c:85: 01:c7:10:84:d3:23:c0:72:7b:34:4f:3b:40:ba:3f:b8:9f:5a: 0c:54:3b:14:f6:a4:b9:5b:f2:85:39:f4:98:b3:98:a0:64:68: 20:71:90:e6:4a:0b:91:22:f7:02:02:aa:ea:76:31:09:d2:5d: 85:9c:13:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFMjMxMTAvBgNVBAUTKEM5NEE0QUJBMzMxNTg5MzM5QjQ2NTFDMDVCOTJGRkUw MUJDQjM0QzkwHhcNMjUwNjE3MDMzNjM5WhcNMjUwNjI0MDMzNjM5WjAYMRYwFAYD VQQDEw02ODUwZTJjNy0zMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9EJYi9/bz+q3gJp80Upk/lXkgGuSiKhIf5yqROYzjPEQswVwyyYEvjSI/d1+ 0FT/mVJgzjz8w4xU9VQXyV/QVWomXChvO7mKbhcrz2HUn6KqWcc99VNDLm2kTnyD BbNmPDNhOi8UtiM0ezaDnFcByBxck4Mm4gEjsyO6csRhm6pztym0DIg7FvbeSxjo MP/BKpi/x4A/99edMDVtT6Iqp0nPn3UEaYeVe8U59qUeS4ulEExBRkEvRD5Pmw7I EYkUKamL2KHDFH/seU+tSjvaj9751JDfPHH96gScMllz5sjf5IuuKflNpSUy0GAn 92FSaFYQeLWzkavEcFNBcEBQXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3vlbiq Q2Zg+n/EfQFo/s6b2EPkMB8GA1UdIwQYMBaAFMlKSrozFYkzm0ZRwFuS/+AbyzTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0UyMy9CRTk3QjBBNjdE NjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlUT2JSbEhBVzVMXzRCdkxO TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVcEt1ak1WaVRPYlJsSEFXNUxfNEJ2TE5Nay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0UyMy9CRTk3QjBBNjdENjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlU T2JSbEhBVzVMXzRCdkxOTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRcTafVnu4dbsSLQcszpAZuwGcUoBvurmbrbo4Zf5VCsRqlXKlZ24Q QheDV8T6l20ny1meRqR/WycmaD6iFTs6BxDGt+ffrBRKDLGU8suXX1L3vBuXLTBm 4IfFEoB/qWzgcYzZIe2jTWx0zB1mwL1zf6yWaHRCfGcczCN7h7m+KXJSDtl9eNus PFdHHVEYuErSRnCWvvSsnWo6BLcsUT10QuMs5V3OERBJkLdWkdPB+rpDZXpCW7KB GolN+z8ksrqRiq/HbIUBxxCE0yPAcns0TztAuj+4n1oMVDsU9qS5W/KFOfSYs5ig ZGggcZDmSguRIvcCAqrqdjEJ0l2FnBMT -----END CERTIFICATE-----Generated at Wed Jun 18 05:15:29 2025 by rpki-client