$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json) Hash identifier: i0s3VSiPcfy+4SY14gh3BPduGMgm+z5q5xATwVPiBtQ= Subject key identifier: CC:07:AB:4E:E5:9F:D5:5A:75:82:29:E6:18:14:1C:F6:15:6E:46:BD Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft Manifest number: 0626 Signing time: Mon 16 Jun 2025 23:27:19 +0000 Manifest this update: Mon 16 Jun 2025 23:27:19 +0000 Manifest next update: Mon 23 Jun 2025 23:27:19 +0000 Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: angHqJY09Jo4aj6iLN3IXTqhx4d+QcyGy0xCJDXn2Ww=) 2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: znV1YV1R4QHmzxUCIkShtYBgrQBJHV87NrUXdKtqEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Validity Not Before: Jun 16 23:27:19 2025 GMT Not After : Jun 23 23:27:19 2025 GMT Subject: CN=6850a857-d0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:67:fc:5a:e7:9e:a5:99:4f:f4:31:f5:a5: 90:95:bc:30:02:45:0a:7a:27:10:12:a2:d7:e3:bc: 87:51:59:1c:9a:31:81:51:5a:71:7c:14:3c:07:f6: 70:cc:b4:56:7f:cb:39:2f:7a:0a:1f:4e:c2:8e:3d: 41:7f:51:11:45:14:19:c1:d3:14:53:9c:62:9f:78: 1b:b0:d5:2d:62:14:64:a3:9f:48:e9:ed:2b:fc:2f: 4f:7c:c2:dd:ba:68:d9:c4:03:0a:16:6a:b3:62:3d: 4c:16:1c:2c:d8:d4:11:f5:99:44:76:94:2d:cf:55: e2:ff:c2:ce:35:ad:1c:26:ae:cf:46:82:28:cf:db: f3:1e:d5:db:d8:c6:7f:12:6b:07:fe:d6:b4:80:61: 50:f4:dc:98:25:2b:53:e8:02:aa:a4:75:f9:34:35: eb:15:ad:d7:cb:5a:14:43:8a:05:24:98:10:f9:da: 07:a0:38:ad:95:30:ac:eb:59:bb:27:cb:48:71:38: 7f:37:18:c3:cc:38:ae:2b:d6:dc:03:2d:96:99:be: 68:3b:79:72:ff:27:9c:8c:01:89:41:c3:a0:5d:42: 0c:8a:8b:0c:0c:5f:50:da:b0:f4:bc:68:86:5b:47: 0d:3b:76:a7:1e:54:3c:41:96:a8:9d:3f:98:5c:04: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:07:AB:4E:E5:9F:D5:5A:75:82:29:E6:18:14:1C:F6:15:6E:46:BD X509v3 Authority Key Identifier: keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:0f:72:3b:58:78:60:52:7a:4e:f1:62:33:d3:4e:51:42:01: 82:78:7e:4d:31:5b:77:5f:01:85:90:0a:4e:93:53:c7:71:58: e5:51:15:e6:6e:57:d7:53:de:9e:a9:07:bd:6a:c3:9e:7c:5d: a6:6b:b4:29:4c:8d:c6:e0:56:73:5a:2f:f3:da:07:e8:29:7d: 12:7b:2f:80:d2:0f:d2:38:98:cd:ee:f7:32:bc:c4:5e:9e:50: e9:50:44:72:bc:3b:1d:1a:aa:82:87:4b:15:a5:fb:dd:b5:67: db:ee:64:2c:7b:9c:74:21:85:f9:a9:30:3f:26:44:71:01:03: 89:cc:95:d3:09:f0:e9:0f:41:5d:1a:06:61:4d:6d:b0:eb:b2: 4b:11:97:9d:ad:b2:ad:3d:a0:e3:9a:ae:89:5b:f0:e5:1c:d1: 50:28:3a:ca:fe:8b:73:b6:58:24:aa:93:d5:a4:ec:61:ea:7c: 6d:b5:72:6a:ea:9d:21:27:c7:58:fc:54:b7:47:26:de:e5:a7: 11:68:7c:70:45:91:a2:b4:20:96:53:3a:d5:29:9f:18:09:83: d0:41:0d:ae:fe:74:bb:0c:80:33:b7:ce:9b:f9:8c:ab:99:f7: 80:30:b9:4d:dc:44:10:94:64:12:44:55:36:8d:90:3d:37:16: 05:a4:e9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz NTkwRkIyN0EwHhcNMjUwNjE2MjMyNzE5WhcNMjUwNjIzMjMyNzE5WjAYMRYwFAYD VQQDEw02ODUwYTg1Ny1kMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJJn/FrnnqWZT/Qx9aWQlbwwAkUKeicQEqLX47yHUVkcmjGBUVpxfBQ8B/Zw zLRWf8s5L3oKH07Cjj1Bf1ERRRQZwdMUU5xin3gbsNUtYhRko59I6e0r/C9PfMLd umjZxAMKFmqzYj1MFhws2NQR9ZlEdpQtz1Xi/8LONa0cJq7PRoIoz9vzHtXb2MZ/ EmsH/ta0gGFQ9NyYJStT6AKqpHX5NDXrFa3Xy1oUQ4oFJJgQ+doHoDitlTCs61m7 J8tIcTh/NxjDzDiuK9bcAy2Wmb5oO3ly/yecjAGJQcOgXUIMiosMDF9Q2rD0vGiG W0cNO3anHlQ8QZaonT+YXASgqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwHq07l n9VadYIp5hgUHPYVbka9MB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxD3I7WHhgUnpO8WIz005RQgGCeH5NMVt3XwGFkApOk1PHcVjlURXm blfXU96eqQe9asOefF2ma7QpTI3G4FZzWi/z2gfoKX0Sey+A0g/SOJjN7vcyvMRe nlDpUERyvDsdGqqCh0sVpfvdtWfb7mQse5x0IYX5qTA/JkRxAQOJzJXTCfDpD0Fd GgZhTW2w67JLEZedrbKtPaDjmq6JW/DlHNFQKDrK/otztlgkqpPVpOxh6nxttXJq 6p0hJ8dY/FS3Rybe5acRaHxwRZGitCCWUzrVKZ8YCYPQQQ2u/nS7DIAzt86b+Yyr mfeAMLlN3EQQlGQSRFU2jZA9NxYFpOm0 -----END CERTIFICATE-----Generated at Wed Jun 18 22:09:15 2025 by rpki-client