$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json) Hash identifier: cptV5RcRdedScoUkZiXb4B7hgtxk9vGCg1FUxi0ZIss= Subject key identifier: 0F:87:B9:10:5C:F6:AF:6E:01:EE:ED:37:27:F0:79:BE:17:D7:99:05 Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft Manifest number: 43 Signing time: Tue 17 Jun 2025 06:20:48 +0000 Manifest this update: Tue 17 Jun 2025 06:20:47 +0000 Manifest next update: Tue 24 Jun 2025 06:20:47 +0000 Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: D5mYJKLdqqKaT6HHfjQ81cRIYxlSbOVPfeJYJ1Unjog=) 2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: Jun 17 06:20:47 2025 GMT Not After : Jun 24 06:20:47 2025 GMT Subject: CN=6851093f-8e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:85:37:78:71:0b:06:90:2c:19:8b:ae:6d: fe:20:87:09:a5:ff:b1:c6:26:a8:b5:82:92:80:6f: e3:ab:84:15:3b:32:d4:1c:bd:f8:79:c0:db:21:75: c4:fd:28:d1:e0:23:94:10:5b:51:5a:25:bd:c6:6a: 4e:b9:b0:91:26:94:c1:76:75:75:ce:9f:68:31:2e: 6d:72:12:01:77:b2:58:bb:75:94:9a:3a:11:dd:2f: c1:19:9e:19:a0:89:7e:5f:66:fd:92:e5:bc:3e:45: 17:16:a2:23:8d:a6:6d:fc:16:17:fb:b9:5e:d0:46: 17:5a:74:f4:b6:05:4c:12:fd:17:ac:50:eb:6d:c7: 98:f2:16:ed:39:28:b4:52:a6:52:1a:f9:4e:00:31: ac:81:28:26:f0:1d:9b:2f:7a:22:67:81:b0:7e:e9: 91:b2:81:ec:d3:f6:42:ca:52:1b:55:da:19:04:f3: 18:bb:d6:5c:7f:e7:c1:ec:6a:d2:dd:5f:9e:15:53: 81:d0:f7:2b:f6:60:eb:52:cd:74:9f:6e:1f:ce:34: f9:fa:58:e9:4b:ce:6e:b9:38:e7:64:ed:ea:f5:06: 57:7b:ee:64:a3:5c:e0:e7:78:76:56:7e:15:76:c9: 02:20:0f:d9:37:f5:f4:8c:3a:fc:dd:c3:c9:e3:93: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:87:B9:10:5C:F6:AF:6E:01:EE:ED:37:27:F0:79:BE:17:D7:99:05 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3b:46:0b:bd:0d:a7:10:8f:4b:d7:59:d0:9d:ce:82:6e:f3: 83:32:ba:24:50:8d:70:12:49:25:8f:e4:e0:be:55:e5:9e:4c: 60:20:dc:3b:21:18:ac:47:e2:b1:83:2d:89:67:24:ac:af:6a: c8:ac:01:f5:a0:03:dc:51:a2:08:17:29:8c:72:3e:ee:04:81: 3e:d5:62:00:59:dc:33:0a:29:f8:ff:e1:dc:23:2b:d9:0c:40: 93:9e:a4:86:4f:3a:3e:a4:39:16:1a:ab:09:8c:ee:7c:4a:53: 0c:ba:97:d6:df:b7:58:eb:a6:4f:24:35:04:1c:5d:b8:32:86: 66:1d:c5:42:55:46:63:f0:5c:5d:e3:c3:88:38:75:12:5a:1e: f4:bd:18:7a:54:7d:8b:56:5c:3a:3e:f8:07:55:53:68:d8:7c: 72:c1:f0:28:d4:87:a7:09:01:b8:2e:36:ea:60:b2:d5:5c:e7: 29:3f:6b:22:84:18:db:34:4e:f2:49:6b:f6:70:bb:5b:fb:c2: 82:5e:91:22:0b:e7:3c:4d:47:d3:60:96:86:cf:bb:db:6c:bb: eb:7a:ea:69:7e:12:5e:61:96:ff:82:a5:da:59:4b:7d:65:bc: ed:3e:e9:2d:de:3c:ad:cd:12:c0:d3:0e:7a:c6:eb:0f:c0:43: bc:7b:ec:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTc2NjExMC8GA1UEBRMoQzkyNDYwMTQyNTdFRUZGRkZFODBDRDNFQUJGRUQ2N0E4 OThENkY1NzAeFw0yNTA2MTcwNjIwNDdaFw0yNTA2MjQwNjIwNDdaMBgxFjAUBgNV BAMTDTY4NTEwOTNmLThlOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDArIU3eHELBpAsGYuubf4ghwml/7HGJqi1gpKAb+OrhBU7MtQcvfh5wNshdcT9 KNHgI5QQW1FaJb3Gak65sJEmlMF2dXXOn2gxLm1yEgF3sli7dZSaOhHdL8EZnhmg iX5fZv2S5bw+RRcWoiONpm38Fhf7uV7QRhdadPS2BUwS/ResUOttx5jyFu05KLRS plIa+U4AMayBKCbwHZsveiJngbB+6ZGygezT9kLKUhtV2hkE8xi71lx/58HsatLd X54VU4HQ9yv2YOtSzXSfbh/ONPn6WOlLzm65OOdk7er1Bld77mSjXODneHZWfhV2 yQIgD9k39fSMOvzdw8njkwkdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD4e5EFz2 r24B7u03J/B5vhfXmQUwHwYDVR0jBBgwFoAUySRgFCV+7//+gM0+q/7WeomNb1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5NzY2LzgwRjU5RTk0RUE1 NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVNSZ0ZDVi03X18tZ00wLXFfN1dlb21OYjFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 NzY2LzgwRjU5RTk0RUE1NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19f LWdNMC1xXzdXZW9tTmIxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACg7Rgu9DacQj0vXWdCdzoJu84MyuiRQjXASSSWP5OC+VeWeTGAg3Dsh GKxH4rGDLYlnJKyvasisAfWgA9xRoggXKYxyPu4EgT7VYgBZ3DMKKfj/4dwjK9kM QJOepIZPOj6kORYaqwmM7nxKUwy6l9bft1jrpk8kNQQcXbgyhmYdxUJVRmPwXF3j w4g4dRJaHvS9GHpUfYtWXDo++AdVU2jYfHLB8CjUh6cJAbguNupgstVc5yk/ayKE GNs0TvJJa/Zwu1v7woJekSIL5zxNR9NglobPu9tsu+t66ml+El5hlv+CpdpZS31l vO0+6S3ePK3NEsDTDnrG6w/AQ7x77C0= -----END CERTIFICATE-----Generated at Wed Jun 18 04:43:17 2025 by rpki-client