$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft File: YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json) Hash identifier: vlhsUIoYasUXWfV59BHyirQfWyWufVSgoKctHaxLqEk= Subject key identifier: 10:0A:57:2E:CB:9C:6A:3D:3D:30:E5:77:AB:22:2B:58:2B:86:B1:F9 Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 Certificate issuer: /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft Manifest number: 017A Signing time: Fri 13 Jun 2025 02:45:10 +0000 Manifest this update: Fri 13 Jun 2025 02:45:10 +0000 Manifest next update: Fri 20 Jun 2025 02:45:10 +0000 Files and hashes: 1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: 0g5hxV09+eSKZ/oQzMEJw44fII1cbPYJsla6QIfSjRc=) 2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: fc1mmSSRqzCuGE7h3o2YcW/Wc0vCR2x5Y/Ca8guGROk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Validity Not Before: Jun 13 02:45:10 2025 GMT Not After : Jun 20 02:45:10 2025 GMT Subject: CN=684b90b6-76db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:cd:98:a9:fd:ee:4d:36:eb:21:10:0b:26: 9d:49:b0:ca:24:f5:80:0e:38:81:10:35:4d:d5:9e: a4:44:77:1b:02:9b:d8:f4:59:8e:b1:b9:5f:0f:70: df:d5:9a:13:cd:51:ee:b9:05:e6:e3:08:63:76:f6: e7:65:c8:02:5b:20:16:ab:4a:6e:84:72:39:73:65: 7f:c6:d4:76:a4:ef:64:e0:86:8c:a5:17:a2:23:2b: f0:24:2a:a9:8c:fa:07:02:8a:9a:a6:0f:c0:a1:3b: 12:4c:26:55:3c:69:b5:37:79:3f:bb:77:2f:a8:b6: 37:ff:43:ef:75:8f:64:74:9d:d0:57:61:1d:ab:67: 99:9d:ef:ec:b7:7c:f8:83:48:a2:a8:ad:ba:65:7e: bf:20:e4:88:92:a1:80:7b:67:c3:d9:98:99:00:36: 30:03:b3:4e:dd:de:e3:5c:68:48:d5:67:3d:b0:f8: 53:2c:a3:73:0c:e3:33:44:b3:bc:c9:14:ba:15:4a: ab:de:b9:a8:73:18:24:86:01:18:35:5b:4a:3c:2e: da:81:31:85:24:59:43:23:e8:73:1b:57:6c:48:23: 76:9b:b9:18:fb:b3:93:e5:5f:01:da:65:10:8c:f0: a3:e1:5e:3d:4b:43:12:1e:86:27:e6:ca:85:83:ad: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0A:57:2E:CB:9C:6A:3D:3D:30:E5:77:AB:22:2B:58:2B:86:B1:F9 X509v3 Authority Key Identifier: keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4c:93:76:40:8b:3e:d9:b5:24:f2:7a:50:2c:a5:7a:f2:67: 88:0d:4e:c9:35:7f:ed:dc:3b:4c:80:d5:87:5e:81:69:11:93: d7:ba:10:ce:30:65:4b:ca:96:24:57:4c:20:a2:84:2c:3c:ed: 51:1d:07:6a:74:60:39:61:ef:11:fc:f2:a5:08:9e:c1:42:50: 81:39:ab:95:66:9e:33:85:34:86:49:4a:85:d4:53:b2:d6:cf: 07:5d:cf:75:53:96:c5:0d:b0:2a:cc:2c:2b:3b:c0:f0:7f:35: da:2d:80:e6:17:c1:6a:fb:ac:cc:de:34:05:ca:18:79:4a:87: 1f:99:fe:af:8a:b9:e4:f0:fc:54:66:1e:27:a5:30:93:f9:f1: 73:69:9b:8a:41:32:6a:b9:c3:d9:c0:80:93:e8:92:54:62:4c: 34:06:f9:bc:26:1c:7c:d8:93:ab:89:59:38:4b:82:d4:57:6a: 52:52:e4:bd:70:67:75:91:22:cb:f5:cc:01:95:82:77:42:1e: db:e4:06:b6:e4:c1:12:13:ee:99:93:1c:c7:60:cc:28:76:98: 72:4d:73:08:a7:dc:b3:7f:4d:00:b9:68:45:49:6e:ac:28:8f: 89:5d:3e:07:1a:d6:f6:7a:32:2a:8e:f7:d0:4f:2d:1c:11:5e: 02:7c:61:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERFRjAxMTAvBgNVBAUTKDYxMTQxQUI1M0ZENEFGMURCMkE4NkFGRTdFQzhGRUM5 N0Q1RUExRDUwHhcNMjUwNjEzMDI0NTEwWhcNMjUwNjIwMDI0NTEwWjAYMRYwFAYD VQQDEw02ODRiOTBiNi03NmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8jNmKn97k026yEQCyadSbDKJPWADjiBEDVN1Z6kRHcbApvY9FmOsblfD3Df 1ZoTzVHuuQXm4whjdvbnZcgCWyAWq0puhHI5c2V/xtR2pO9k4IaMpReiIyvwJCqp jPoHAoqapg/AoTsSTCZVPGm1N3k/u3cvqLY3/0PvdY9kdJ3QV2Edq2eZne/st3z4 g0iiqK26ZX6/IOSIkqGAe2fD2ZiZADYwA7NO3d7jXGhI1Wc9sPhTLKNzDOMzRLO8 yRS6FUqr3rmocxgkhgEYNVtKPC7agTGFJFlDI+hzG1dsSCN2m7kY+7OT5V8B2mUQ jPCj4V49S0MSHoYn5sqFg63wNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAKVy7L nGo9PTDld6siK1grhrH5MB8GA1UdIwQYMBaAFGEUGrU/1K8dsqhq/n7I/sl9XqHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REVGMC84MjAzMDlDMjBB NUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4MnlxR3ItZnNqLXlYMWVv ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSUWF0VF9VcngyeXFHci1mc2oteVgxZW9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REVGMC84MjAzMDlDMjBBNUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4 MnlxR3ItZnNqLXlYMWVvZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8TJN2QIs+2bUk8npQLKV68meIDU7JNX/t3DtMgNWHXoFpEZPXuhDO MGVLypYkV0wgooQsPO1RHQdqdGA5Ye8R/PKlCJ7BQlCBOauVZp4zhTSGSUqF1FOy 1s8HXc91U5bFDbAqzCwrO8DwfzXaLYDmF8Fq+6zM3jQFyhh5Socfmf6virnk8PxU Zh4npTCT+fFzaZuKQTJqucPZwICT6JJUYkw0Bvm8Jhx82JOriVk4S4LUV2pSUuS9 cGd1kSLL9cwBlYJ3Qh7b5Aa25MESE+6ZkxzHYMwodphyTXMIp9yzf00AuWhFSW6s KI+JXT4HGtb2ejIqjvfQTy0cEV4CfGEE -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:41 2025 by rpki-client