$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: y7Phf3WnI3F2ANl4NnEJgHvmBgkEhEVW/UJbuJo2aiw= Subject key identifier: B4:E6:03:FD:1C:F5:49:DB:E0:AE:94:29:3B:C5:2B:07:2F:10:7D:FF Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0D73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0D67 Signing time: Sun 10 Aug 2025 17:58:55 +0000 Manifest this update: Sun 10 Aug 2025 17:58:54 +0000 Manifest next update: Sun 17 Aug 2025 17:58:54 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: QQhqWBcOuYRpSrLXgl9Gv9hWuO2BJ3sbPwQ3O3cSgNc=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3443 (0xd73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: Aug 10 17:58:54 2025 GMT Not After : Aug 17 17:58:54 2025 GMT Subject: CN=6898ddde-55e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:e7:f9:a2:a2:d1:60:0e:df:eb:19:8f:a7: 94:3b:4c:1e:e9:f0:fa:63:ec:0c:6f:02:09:f0:aa: 9c:95:7a:bf:d7:52:bd:91:5d:9d:be:7c:4b:c0:9b: 69:4d:ae:07:93:bd:8d:91:a3:5f:61:de:79:cb:e5: b2:c1:95:ff:bb:d9:f5:03:55:53:46:3d:fa:f5:4c: b2:71:f6:d4:be:c3:66:79:1e:fa:02:08:b1:ad:cc: 09:35:75:43:3f:2d:b7:aa:2d:3b:5b:c5:d8:d9:71: 2a:86:25:69:5b:f8:b2:45:d0:50:7c:39:86:1d:29: ec:07:45:2e:0d:cc:9c:31:01:a9:dd:64:a0:14:2b: 06:a1:15:23:03:f4:3e:53:90:5c:c4:e0:5e:18:3d: b3:12:17:d8:3d:f2:de:c0:57:24:93:51:9f:f8:70: 3a:61:95:0b:82:f1:38:c5:20:b0:14:5e:a5:75:be: ad:b3:d9:34:2c:98:3f:b8:34:ab:01:b3:17:2b:ab: c7:54:ce:61:96:3d:c4:fe:4d:4b:1f:ef:b8:0a:5a: 19:50:9a:89:2d:15:54:92:93:96:03:78:74:18:b9: 03:9c:1b:32:19:9a:0e:7b:a0:01:03:74:23:bd:2f: bc:50:fb:60:89:b5:37:66:8a:21:de:16:9f:31:1b: 78:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E6:03:FD:1C:F5:49:DB:E0:AE:94:29:3B:C5:2B:07:2F:10:7D:FF X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:64:d2:4a:c2:82:5c:ff:5a:dc:b2:88:a4:8a:67:d0:d3:fa: 15:3e:26:61:0f:39:33:8b:c2:00:08:1f:9f:78:7d:d2:1c:35: d6:8d:87:54:7e:00:9a:5f:79:ae:fc:f2:56:c0:06:65:b4:a2: 22:78:11:b0:cc:ae:ad:1b:fb:8f:08:b6:e2:2c:dd:3c:87:c9: 22:8b:67:d7:34:56:9f:86:cb:d7:1e:90:9d:ef:fc:4a:58:50: 24:c2:cd:0a:94:72:86:a6:58:b7:7d:c9:44:31:80:96:01:8e: 8f:37:e7:8c:64:e2:85:95:70:03:8c:d7:48:03:44:ce:02:a3: 83:a6:1d:d2:2e:66:17:fe:c4:a1:a7:50:ad:4d:c7:80:ad:9d: 41:bf:ca:6c:50:42:e8:53:1c:36:95:5f:c0:c7:6b:43:c6:10: 16:8b:ec:d0:62:46:5c:7b:eb:8c:af:6f:af:2b:33:8a:fa:b2: bd:a7:e8:e5:2b:36:56:bb:0e:e0:8f:d5:35:88:67:06:f9:a1: 7e:08:10:97:e8:ef:77:ee:cf:a1:f5:a2:40:03:3f:5c:3e:2e: 87:ed:77:72:e0:92:67:3b:cf:25:1c:c0:a6:b9:22:88:c8:39: 04:b5:58:24:7e:21:a4:df:98:ef:04:09:8d:88:b2:44:25:8f: a5:35:5e:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUwODEwMTc1ODU0WhcNMjUwODE3MTc1ODU0WjAYMRYwFAYD VQQDEw02ODk4ZGRkZS01NWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZHn+aKi0WAO3+sZj6eUO0we6fD6Y+wMbwIJ8KqclXq/11K9kV2dvnxLwJtp Ta4Hk72NkaNfYd55y+WywZX/u9n1A1VTRj369UyycfbUvsNmeR76AgixrcwJNXVD Py23qi07W8XY2XEqhiVpW/iyRdBQfDmGHSnsB0UuDcycMQGp3WSgFCsGoRUjA/Q+ U5BcxOBeGD2zEhfYPfLewFckk1Gf+HA6YZULgvE4xSCwFF6ldb6ts9k0LJg/uDSr AbMXK6vHVM5hlj3E/k1LH++4CloZUJqJLRVUkpOWA3h0GLkDnBsyGZoOe6ABA3Qj vS+8UPtgibU3Zooh3hafMRt43QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTmA/0c 9Unb4K6UKTvFKwcvEH3/MB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfZNJKwoJc/1rcsoikimfQ0/oVPiZhDzkzi8IACB+feH3SHDXWjYdU fgCaX3mu/PJWwAZltKIieBGwzK6tG/uPCLbiLN08h8kii2fXNFafhsvXHpCd7/xK WFAkws0KlHKGpli3fclEMYCWAY6PN+eMZOKFlXADjNdIA0TOAqODph3SLmYX/sSh p1CtTceArZ1Bv8psUELoUxw2lV/Ax2tDxhAWi+zQYkZce+uMr2+vKzOK+rK9p+jl KzZWuw7gj9U1iGcG+aF+CBCX6O937s+h9aJAAz9cPi6H7Xdy4JJnO88lHMCmuSKI yDkEtVgkfiGk35jvBAmNiLJEJY+lNV62 -----END CERTIFICATE-----Generated at Mon Aug 11 07:49:28 2025 by rpki-client