$ rpki-client -vvf rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft File: ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft (raw, json) Hash identifier: DJqUnvtSfXTn5Ooti12xyH4CINR8c43ECZZXNaiTHkg= Subject key identifier: 81:5E:88:72:8C:58:E5:3D:12:50:97:43:44:E6:69:54:E6:F7:89:13 Authority key identifier: CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0 Certificate issuer: /CN=A9193037/serialNumber=CA955914F98B2FC916A4512DA72AB75A11C52BD0 Certificate serial: 090B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft Manifest number: 0903 Signing time: Fri 20 Jun 2025 20:15:09 +0000 Manifest this update: Fri 20 Jun 2025 20:15:08 +0000 Manifest next update: Fri 27 Jun 2025 20:15:08 +0000 Files and hashes: 1: ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl (hash: 4XCt3qevRehAbEJ1duopeVD3UGHz4THLrM4lyIGaI1g=) 2: D9C523A0B05A11EAA233021EC4F9AE02.roa (hash: plSH71jqFHiqVOcppEgGivQOT8E3EqzsKsifhjqPdW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 20:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2315 (0x90b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193037, serialNumber=CA955914F98B2FC916A4512DA72AB75A11C52BD0 Validity Not Before: Jun 20 20:15:08 2025 GMT Not After : Jun 27 20:15:08 2025 GMT Subject: CN=6855c14d-6f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:2f:bf:3c:20:dd:42:16:15:bb:2f:4f:47: f6:b7:b4:6e:e7:13:fa:5f:c5:4f:3a:c9:a0:69:07: 05:5a:0d:08:01:0c:8b:02:24:24:b4:60:01:5f:57: 0d:96:b8:dd:f7:4d:60:e7:6c:20:c7:24:1e:3d:f8: 97:a7:73:d4:ad:1f:48:a3:4e:e3:84:5d:f4:c1:1b: 3c:2c:9a:38:22:69:d0:65:6b:58:d8:54:e1:c5:9f: 2a:64:e0:70:23:4a:ec:03:5c:80:f2:e2:74:8a:e8: 89:a3:b5:20:47:2c:74:25:00:b8:87:20:08:18:c5: fd:ec:d4:4b:0d:9c:ee:b1:15:ce:91:fd:31:d4:78: 4d:45:67:09:53:b1:d4:1e:98:ad:2b:8e:79:8b:e2: ea:8e:3a:2f:ac:28:71:8a:14:82:d6:94:b3:27:44: 82:a0:d9:6e:a4:62:c7:32:2e:2d:41:fa:9a:71:73: 64:5e:bb:8d:22:25:d5:78:5b:e5:4f:5f:bc:c8:86: e5:3a:c6:b9:1f:ed:fe:8e:97:7d:1d:5e:e3:2c:fb: d5:db:1d:e2:a2:28:4c:b3:65:53:ee:46:4c:d8:f6: c6:33:9e:2d:f9:7f:4a:74:3e:53:82:ef:87:98:f2: 5a:5e:23:c4:27:6a:8f:9a:51:55:5e:c9:ee:4e:91: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5E:88:72:8C:58:E5:3D:12:50:97:43:44:E6:69:54:E6:F7:89:13 X509v3 Authority Key Identifier: keyid:CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:52:c9:b3:49:ca:6f:7d:22:77:46:02:74:72:22:24:08:88: 13:20:db:47:af:a4:c8:a8:51:aa:2d:eb:2c:b6:ce:b0:d2:1e: ca:c5:7d:e6:0e:9a:f6:ab:60:d6:a7:db:ee:00:c9:c0:7c:19: 46:1f:f3:36:77:a0:44:ef:15:88:a3:a8:77:8c:d8:65:8d:28: 30:7d:7c:7a:c3:17:10:57:a6:04:a9:71:18:0b:04:ea:ed:5e: 53:48:36:5e:02:88:59:f8:74:9c:8e:23:28:6e:a1:f5:6b:c0: 43:77:6e:cc:9c:ac:6e:ae:18:e9:71:61:0a:c6:9d:a4:68:58: d4:1a:8a:43:53:de:1d:d1:47:45:95:60:a4:71:71:02:09:93: 73:c4:ac:64:79:86:76:42:1c:e1:a6:4a:bb:f0:5b:66:62:d2: 59:65:57:cc:37:e1:19:3d:ce:e5:b7:a1:40:5d:4d:c9:5b:4f: 4c:85:b1:20:bc:79:db:65:b2:ca:3a:df:8d:04:5b:49:5a:10: 60:a5:b8:6c:39:4b:05:80:4e:0e:ba:75:e5:9a:53:76:e8:57: 41:38:a1:fc:e0:6e:2c:4d:af:96:e0:03:7f:08:8f:d3:1a:23: b4:4d:e4:b6:9f:e5:9e:84:d3:8d:9b:d7:50:c7:69:ac:ef:0c: ca:25:13:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwMzcxMTAvBgNVBAUTKENBOTU1OTE0Rjk4QjJGQzkxNkE0NTEyREE3MkFCNzVB MTFDNTJCRDAwHhcNMjUwNjIwMjAxNTA4WhcNMjUwNjI3MjAxNTA4WjAYMRYwFAYD VQQDEw02ODU1YzE0ZC02ZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvEvvzwg3UIWFbsvT0f2t7Ru5xP6X8VPOsmgaQcFWg0IAQyLAiQktGABX1cN lrjd901g52wgxyQePfiXp3PUrR9Io07jhF30wRs8LJo4ImnQZWtY2FThxZ8qZOBw I0rsA1yA8uJ0iuiJo7UgRyx0JQC4hyAIGMX97NRLDZzusRXOkf0x1HhNRWcJU7HU HpitK455i+LqjjovrChxihSC1pSzJ0SCoNlupGLHMi4tQfqacXNkXruNIiXVeFvl T1+8yIblOsa5H+3+jpd9HV7jLPvV2x3ioihMs2VT7kZM2PbGM54t+X9KdD5Tgu+H mPJaXiPEJ2qPmlFVXsnuTpG8KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFeiHKM WOU9ElCXQ0TmaVTm94kTMB8GA1UdIwQYMBaAFMqVWRT5iy/JFqRRLacqt1oRxSvQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzAzNy85NDBFNDZCNEFB QkMxMUVBQjEwNkMxNzZDNEY5QUUwMi95cFZaRlBtTEw4a1dwRkV0cHlxM1doSEZL OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwVlpGUG1MTDhrV3BGRXRweXEzV2hIRks5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzAzNy85NDBFNDZCNEFBQkMxMUVBQjEwNkMxNzZDNEY5QUUwMi95cFZaRlBtTEw4 a1dwRkV0cHlxM1doSEZLOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/UsmzScpvfSJ3RgJ0ciIkCIgTINtHr6TIqFGqLessts6w0h7KxX3m Dpr2q2DWp9vuAMnAfBlGH/M2d6BE7xWIo6h3jNhljSgwfXx6wxcQV6YEqXEYCwTq 7V5TSDZeAohZ+HScjiMobqH1a8BDd27MnKxurhjpcWEKxp2kaFjUGopDU94d0UdF lWCkcXECCZNzxKxkeYZ2Qhzhpkq78FtmYtJZZVfMN+EZPc7lt6FAXU3JW09MhbEg vHnbZbLKOt+NBFtJWhBgpbhsOUsFgE4OunXlmlN26FdBOKH84G4sTa+W4AN/CI/T GiO0TeS2n+WehNONm9dQx2ms7wzKJROS -----END CERTIFICATE-----Generated at Sat Jun 21 02:15:35 2025 by rpki-client