$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json) Hash identifier: vtgrOcuKIQxCSesN4oVVzRHoVDBOpo5c/QRCiBq2Tf4= Subject key identifier: DB:1A:C8:D9:55:81:11:E7:E5:11:37:B1:80:9B:6B:DB:1E:8D:AA:1F Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft Manifest number: 01E2 Signing time: Tue 17 Jun 2025 01:56:09 +0000 Manifest this update: Tue 17 Jun 2025 01:56:09 +0000 Manifest next update: Tue 24 Jun 2025 01:56:09 +0000 Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: C/Shn+3I5B1n8mV0iNAM/0ADPw5I4HS31zgxLj5Ov40=) 2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: 7d+9V95blk3EIKh2Ixj3Euh7Ce2kReodQwZ4pY3gbnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Validity Not Before: Jun 17 01:56:09 2025 GMT Not After : Jun 24 01:56:09 2025 GMT Subject: CN=6850cb39-0660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:52:76:43:5b:29:69:1e:86:21:49:97:a9: 76:9c:18:45:45:f6:81:82:7e:33:a4:82:64:db:29: 70:c3:5a:85:62:f2:a1:69:e5:f0:9e:82:cb:df:ce: 65:b2:2b:e6:11:03:4b:d3:21:98:59:f4:61:e2:9e: f9:40:18:24:17:50:3d:fb:de:cb:c8:44:06:db:6e: 1c:e8:6c:3e:79:03:5a:5c:ae:b1:dd:fb:c7:3a:d3: 63:83:07:db:ea:1d:b3:14:27:c8:ab:0e:89:04:78: da:ec:01:3b:be:3f:1a:96:28:1d:2b:1e:9a:b6:57: 96:ef:ed:db:31:e2:c6:e9:88:f2:26:85:0c:b9:0f: 58:a4:ef:92:3d:a9:79:be:9e:f3:dd:8e:62:f3:a1: 9b:cb:7a:ad:e7:e6:a2:04:89:3d:2e:eb:90:a7:ec: f4:8d:6b:98:0f:c8:7b:35:dd:8e:f6:0b:7f:1d:f8: da:0b:d2:ad:f3:37:2c:e3:b4:7a:d7:dc:3d:58:30: ab:da:2d:a6:00:ad:9d:14:73:78:14:65:3f:44:cb: d7:e5:ff:88:44:3c:9b:7a:da:b4:0b:76:6a:88:33: 73:19:db:69:9b:27:78:46:f4:9e:9f:55:63:a7:b0: db:9c:18:d6:9b:9e:eb:c4:2e:1b:2c:81:7b:e4:8c: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1A:C8:D9:55:81:11:E7:E5:11:37:B1:80:9B:6B:DB:1E:8D:AA:1F X509v3 Authority Key Identifier: keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3b:f1:0f:3c:c9:75:bd:5c:91:3d:0c:69:9f:88:b7:9c:c2: 78:72:b7:d3:15:a4:eb:a2:36:7e:f2:45:1a:69:e9:66:ce:a1: 67:5a:af:b4:be:67:25:a6:d6:a4:4f:6d:30:c1:ff:8d:5c:b4: b0:ee:ea:7c:a0:c2:f1:d1:a0:50:33:33:85:26:f4:b6:4d:2b: 8b:2c:9b:ec:da:75:02:c8:94:17:73:94:44:a5:09:4f:9f:34: dd:07:32:e5:4d:3a:30:b7:ba:e1:91:1b:2b:da:14:f4:b0:f7: 6b:88:c1:e3:a4:36:ad:0d:24:93:19:e9:1e:59:cf:c1:91:7c: d2:08:33:84:e2:f7:8a:33:de:b4:b9:93:9c:f0:0f:2d:2e:06: 77:dd:fe:85:dc:c7:8f:6d:53:32:b5:6e:ba:3d:85:b2:c8:e2: 23:a6:49:56:13:98:29:04:60:42:f8:bc:07:aa:21:e2:4c:62: 42:dc:78:9f:60:d6:7a:d6:2a:ca:cb:d2:c6:57:7b:5a:4d:d2: 63:8c:02:fe:74:f4:31:f4:6e:d5:60:e3:4d:7a:f8:c8:11:ae: f2:ed:b4:e2:c3:3c:c1:f5:a1:a0:cf:fe:a9:fc:16:43:75:dc: d0:c4:e8:fd:20:d5:ba:d9:fa:d4:d4:b8:8d:df:16:29:71:b9: 4f:d4:8d:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1 Q0UzRTIzMzYwHhcNMjUwNjE3MDE1NjA5WhcNMjUwNjI0MDE1NjA5WjAYMRYwFAYD VQQDEw02ODUwY2IzOS0wNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcBSdkNbKWkehiFJl6l2nBhFRfaBgn4zpIJk2ylww1qFYvKhaeXwnoLL385l sivmEQNL0yGYWfRh4p75QBgkF1A9+97LyEQG224c6Gw+eQNaXK6x3fvHOtNjgwfb 6h2zFCfIqw6JBHja7AE7vj8aligdKx6atleW7+3bMeLG6YjyJoUMuQ9YpO+SPal5 vp7z3Y5i86Gby3qt5+aiBIk9LuuQp+z0jWuYD8h7Nd2O9gt/HfjaC9Kt8zcs47R6 19w9WDCr2i2mAK2dFHN4FGU/RMvX5f+IRDybetq0C3ZqiDNzGdtpmyd4RvSen1Vj p7DbnBjWm57rxC4bLIF75IzB0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsayNlV gRHn5RE3sYCba9sejaofMB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8yQzc1RkVDODdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0 YkEzSjdyaVZFbkpjNC1JelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkO/EPPMl1vVyRPQxpn4i3nMJ4crfTFaTrojZ+8kUaaelmzqFnWq+0 vmclptakT20wwf+NXLSw7up8oMLx0aBQMzOFJvS2TSuLLJvs2nUCyJQXc5REpQlP nzTdBzLlTTowt7rhkRsr2hT0sPdriMHjpDatDSSTGekeWc/BkXzSCDOE4veKM960 uZOc8A8tLgZ33f6F3MePbVMytW66PYWyyOIjpklWE5gpBGBC+LwHqiHiTGJC3Hif YNZ61irKy9LGV3taTdJjjAL+dPQx9G7VYONNevjIEa7y7bTiwzzB9aGgz/6p/BZD ddzQxOj9INW62frU1LiN3xYpcblP1I0g -----END CERTIFICATE-----Generated at Tue Jun 17 18:07:45 2025 by rpki-client