$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft File: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json) Hash identifier: 5OwACPE5QBHMDDmEeKPKNwJ2lSGGPu5iszyW0Fa+0X8= Subject key identifier: 5E:87:49:45:E6:E7:94:3A:B4:74:5E:B0:F7:F6:0A:3C:01:A4:2B:76 Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0C4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft Manifest number: 0C3B Signing time: Thu 12 Jun 2025 18:26:15 +0000 Manifest this update: Thu 12 Jun 2025 18:26:14 +0000 Manifest next update: Thu 19 Jun 2025 18:26:14 +0000 Files and hashes: 1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: INo5WSv0kqaFev8H+Jb2b8kQEFnqhRbhHPF6EXR0ve4=) 2: EC7403A0B20711EFAADEFA2CC4F9AE02.roa (hash: 41gtdkmTRXbX1drZcFOb/E12vO66zREAaSFWLwXsUVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3148 (0xc4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: Jun 12 18:26:14 2025 GMT Not After : Jun 19 18:26:14 2025 GMT Subject: CN=684b1bc6-a2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:c7:42:7a:ba:21:40:a1:cc:93:60:11:76: ee:bb:3d:e3:86:d1:f6:ac:fc:07:e8:e0:4d:7a:c0: d8:71:5f:68:a6:09:df:f4:9b:20:ef:15:1a:e5:90: 70:6d:71:b6:15:59:dd:73:04:4a:f3:71:83:76:77: c6:88:e7:cb:53:41:ed:20:de:f9:6e:61:22:c6:66: ec:9a:39:d9:2f:e4:41:ad:bb:d4:01:24:93:d9:00: e3:73:78:9f:cd:4a:e6:4e:e4:7a:b6:a5:1b:fe:27: e5:9f:d8:e8:f8:00:59:c5:ba:f6:70:15:e1:20:db: 5f:13:61:c4:f2:60:56:09:05:8b:5d:89:8f:ba:e9: 05:06:b0:fb:22:c9:9d:be:03:9e:8e:4f:c2:8c:b0: 73:07:86:1e:12:16:c3:40:4f:83:d2:57:c1:db:4d: 35:36:f1:59:57:4c:d8:da:f9:5e:ce:72:f5:a9:a3: 1d:f6:54:55:29:d8:54:66:2c:dd:d2:42:44:97:31: 4d:12:27:a8:93:a6:39:05:ea:b4:3a:a4:90:d7:21: 63:49:db:16:c5:5f:a7:3d:5b:74:71:3a:e5:6d:d9: 24:9d:36:fb:36:e8:fc:d2:f3:59:3b:1f:f4:02:1e: 26:a8:17:16:d3:81:e6:6a:64:13:79:a9:05:3d:c4: 74:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:87:49:45:E6:E7:94:3A:B4:74:5E:B0:F7:F6:0A:3C:01:A4:2B:76 X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:16:03:04:4e:21:da:25:32:59:24:0e:0a:14:fd:24:da:bf: 53:59:3e:34:bd:c9:af:88:1f:ff:36:58:75:0f:3b:83:34:af: c6:ca:f3:1c:2f:24:6f:73:1b:f5:50:8b:95:17:85:f8:ab:28: 56:c3:8b:1c:af:d4:32:37:87:83:4f:3f:23:ea:5d:3c:97:38: 9b:a0:e4:d4:7e:5e:e0:81:7e:38:60:c9:d6:dd:26:62:b7:52: b2:8d:5d:13:e5:80:5f:82:42:82:a1:3e:2e:72:c7:14:58:7e: 52:82:82:b7:fa:f0:55:b8:ea:6e:26:9f:8a:71:50:da:03:18: 8b:74:a6:e7:94:97:b1:21:3e:f0:d0:93:7f:da:bc:2c:7b:81: 16:df:3e:94:07:4a:a3:8f:ee:8e:2c:cb:11:06:b9:f3:50:de: 8b:f7:45:44:cd:1b:a9:8e:be:41:6c:34:f4:01:94:cb:e9:22: 71:ba:74:65:b4:6f:b0:be:76:46:6e:ae:c5:48:7c:88:66:bd: 57:1a:fb:0f:c9:2c:f8:c7:ee:03:2c:37:00:04:06:29:a9:c6: d0:fe:cf:cd:c8:4a:95:72:cd:90:17:68:a3:9d:03:f6:3b:cb: 6b:5c:48:9f:05:bf:78:2e:41:5d:f0:4d:2d:1b:17:62:dd:3f: 61:06:77:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjUwNjEyMTgyNjE0WhcNMjUwNjE5MTgyNjE0WjAYMRYwFAYD VQQDEw02ODRiMWJjNi1hMmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQ7HQnq6IUChzJNgEXbuuz3jhtH2rPwH6OBNesDYcV9opgnf9Jsg7xUa5ZBw bXG2FVndcwRK83GDdnfGiOfLU0HtIN75bmEixmbsmjnZL+RBrbvUASST2QDjc3if zUrmTuR6tqUb/ifln9jo+ABZxbr2cBXhINtfE2HE8mBWCQWLXYmPuukFBrD7Ismd vgOejk/CjLBzB4YeEhbDQE+D0lfB2001NvFZV0zY2vleznL1qaMd9lRVKdhUZizd 0kJElzFNEieok6Y5Beq0OqSQ1yFjSdsWxV+nPVt0cTrlbdkknTb7Nuj80vNZOx/0 Ah4mqBcW04HmamQTeakFPcR0GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6HSUXm 55Q6tHResPf2CjwBpCt2MB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEZFQS8yNDBEQUNFQTBCNzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2 b2praFBLelRkUVRTUmdvUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjFgMETiHaJTJZJA4KFP0k2r9TWT40vcmviB//Nlh1DzuDNK/GyvMc LyRvcxv1UIuVF4X4qyhWw4scr9QyN4eDTz8j6l08lziboOTUfl7ggX44YMnW3SZi t1KyjV0T5YBfgkKCoT4ucscUWH5SgoK3+vBVuOpuJp+KcVDaAxiLdKbnlJexIT7w 0JN/2rwse4EW3z6UB0qjj+6OLMsRBrnzUN6L90VEzRupjr5BbDT0AZTL6SJxunRl tG+wvnZGbq7FSHyIZr1XGvsPySz4x+4DLDcABAYpqcbQ/s/NyEqVcs2QF2ijnQP2 O8trXEifBb94LkFd8E0tGxdi3T9hBnd9 -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:57 2025 by rpki-client