$ rpki-client -vvf rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft File: Yt792dXXaz4eaPmBKVcVDcD1PF0.mft (raw, json) Hash identifier: LfupUZ4voCeNrli9TWdKW7VzrOYKANQ+tyabrrLD+GI= Subject key identifier: 33:D5:B9:C9:47:8A:43:A8:28:59:0B:F4:DE:B7:49:57:1E:44:F2:8F Authority key identifier: 62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D Certificate issuer: /CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft Manifest number: 03F9 Signing time: Tue 17 Jun 2025 00:03:48 +0000 Manifest this update: Tue 17 Jun 2025 00:03:47 +0000 Manifest next update: Tue 24 Jun 2025 00:03:47 +0000 Files and hashes: 1: Yt792dXXaz4eaPmBKVcVDcD1PF0.crl (hash: 2s98631umVaMcD8Wt5ACY1/KJwl05WsZ8mCQyLmETnI=) 2: 766B426A7A9011ECA266DE36C4F9AE02.roa (hash: j9zT2tbgYHNW+zQe8fJ7BxqX2WRK2n0Np1/48KzCevY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195456, serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Validity Not Before: Jun 17 00:03:47 2025 GMT Not After : Jun 24 00:03:47 2025 GMT Subject: CN=6850b0e4-753c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:c2:ff:d1:95:e8:8b:2b:26:56:9a:74:eb: 82:0e:66:9c:6f:98:1e:81:64:2e:5c:d7:3d:5e:63: 9e:04:db:43:81:5b:6e:65:c3:6d:f8:87:30:b1:86: 99:71:ef:91:ec:fc:0b:2f:8f:f5:fb:eb:f9:37:ac: 25:b0:c1:36:37:c9:2a:9c:4e:f3:d8:2a:d6:30:78: aa:44:2d:66:12:b2:33:20:ea:44:cc:80:46:6c:cb: ae:92:b8:59:4e:22:0b:b6:18:af:a6:ff:ab:96:e4: cb:23:55:e5:7e:94:9f:67:c1:24:3d:36:14:58:c5: d3:ab:2c:84:bf:6d:01:0e:f3:9f:85:27:d4:a9:f1: d7:cc:17:1a:47:62:7e:34:43:5f:c6:69:df:18:4e: aa:e1:a8:72:9c:70:5b:6e:b9:fd:03:c2:7e:3c:d9: d5:d6:70:7e:fa:86:b7:6f:c4:db:ac:59:78:9f:e7: 8f:c7:59:fd:37:0d:34:85:8f:6f:0b:cc:e1:2c:45: 5e:52:a3:bf:f1:49:39:a9:14:fb:8d:ac:c4:41:2a: 54:50:d5:b3:54:b8:f4:89:9a:ef:71:2a:e6:e2:0e: ff:f6:17:d2:83:8f:a5:72:dd:d3:d0:44:36:9a:5e: 92:6a:46:9b:54:78:14:72:14:51:5f:80:1c:5c:1f: 9b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D5:B9:C9:47:8A:43:A8:28:59:0B:F4:DE:B7:49:57:1E:44:F2:8F X509v3 Authority Key Identifier: keyid:62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:42:c4:91:db:ba:22:67:18:9c:cc:a9:bd:37:1a:1b:59:04: 54:f9:3f:c6:8b:3b:47:ca:33:ac:a2:db:22:96:ee:71:53:bc: 21:c0:4f:c2:8c:c9:4d:d0:27:d0:e2:a4:c8:91:6e:d4:7d:84: 8d:04:89:c6:98:a9:52:b1:4a:4a:1d:42:9f:93:ec:14:95:25: 2f:d7:66:ad:13:99:5d:ae:1b:76:e0:bc:c5:68:fa:d5:ca:56: b5:b8:09:ec:ef:81:cc:fb:a2:8f:0c:f9:82:15:c9:2e:71:df: 12:c3:7e:8c:90:02:14:18:b4:9c:51:01:29:51:03:81:ee:65: 7f:75:f0:a9:d6:5f:1b:38:ab:7a:58:76:42:e4:ec:d7:91:a5: 6a:c7:39:d3:dc:68:43:74:dc:f4:24:99:fe:54:12:ef:72:be: b1:41:da:73:d2:07:e9:8c:f7:23:34:29:bd:0a:1f:9d:f2:71: 34:1c:e7:80:46:b5:e3:c5:64:a9:45:50:e6:88:d4:1a:c8:5e: f8:84:bb:b8:ae:9c:07:29:c8:bd:49:5b:36:34:82:87:29:50: 80:e8:6f:7f:b3:a6:58:28:79:66:c6:f8:51:ef:b0:1b:e0:e3: fc:d2:0b:60:8f:a5:1e:e6:2c:48:30:ea:af:c0:77:64:03:30: c0:61:a4:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NTYxMTAvBgNVBAUTKDYyREVGREQ5RDVENzZCM0UxRTY4Rjk4MTI5NTcxNTBE QzBGNTNDNUQwHhcNMjUwNjE3MDAwMzQ3WhcNMjUwNjI0MDAwMzQ3WjAYMRYwFAYD VQQDEw02ODUwYjBlNC03NTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVXC/9GV6IsrJlaadOuCDmacb5gegWQuXNc9XmOeBNtDgVtuZcNt+IcwsYaZ ce+R7PwLL4/1++v5N6wlsME2N8kqnE7z2CrWMHiqRC1mErIzIOpEzIBGbMuukrhZ TiILthivpv+rluTLI1XlfpSfZ8EkPTYUWMXTqyyEv20BDvOfhSfUqfHXzBcaR2J+ NENfxmnfGE6q4ahynHBbbrn9A8J+PNnV1nB++oa3b8TbrFl4n+ePx1n9Nw00hY9v C8zhLEVeUqO/8Uk5qRT7jazEQSpUUNWzVLj0iZrvcSrm4g7/9hfSg4+lct3T0EQ2 ml6SakabVHgUchRRX4AcXB+biwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPVuclH ikOoKFkL9N63SVceRPKPMB8GA1UdIwQYMBaAFGLe/dnV12s+Hmj5gSlXFQ3A9Txd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ1Ni85QzQ1QjlCNDdB OEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6NGVhUG1CS1ZjVkRjRDFQ RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l0NzkyZFhYYXo0ZWFQbUJLVmNWRGNEMVBGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTQ1Ni85QzQ1QjlCNDdBOEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6 NGVhUG1CS1ZjVkRjRDFQRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqQsSR27oiZxiczKm9NxobWQRU+T/GiztHyjOsotsilu5xU7whwE/C jMlN0CfQ4qTIkW7UfYSNBInGmKlSsUpKHUKfk+wUlSUv12atE5ldrht24LzFaPrV yla1uAns74HM+6KPDPmCFckucd8Sw36MkAIUGLScUQEpUQOB7mV/dfCp1l8bOKt6 WHZC5OzXkaVqxznT3GhDdNz0JJn+VBLvcr6xQdpz0gfpjPcjNCm9Ch+d8nE0HOeA RrXjxWSpRVDmiNQayF74hLu4rpwHKci9SVs2NIKHKVCA6G9/s6ZYKHlmxvhR77Ab 4OP80gtgj6Ue5ixIMOqvwHdkAzDAYaTg -----END CERTIFICATE-----Generated at Wed Jun 18 04:11:31 2025 by rpki-client