$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft File: ymSxcxGVIJPNTWDarxe2rKD3pRY.mft (raw, json) Hash identifier: MRzXuAxnCV1B5EztT03REvYNv1jBEsaqFFGPfG2ZJm8= Subject key identifier: 25:D9:9C:F8:3A:75:5E:4E:90:F3:F4:DD:4D:54:E2:A3:69:0F:0E:74 Authority key identifier: CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 Certificate issuer: /CN=A9112B24/serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft Manifest number: A4 Signing time: Tue 01 Jul 2025 06:52:35 +0000 Manifest this update: Tue 01 Jul 2025 06:52:34 +0000 Manifest next update: Tue 08 Jul 2025 06:52:34 +0000 Files and hashes: 1: ymSxcxGVIJPNTWDarxe2rKD3pRY.crl (hash: HfUf4Yv9eCZ9Y19Sg3Z880WYDeSyO6LTKuT8KBvGvGc=) 2: C384F0025BA011EFB7E79861C4F9AE02.roa (hash: HB8QMXYnImTcdy2zBeTOvUb91weeMYAQqjoTwrsvfrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112B24, serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Validity Not Before: Jul 1 06:52:34 2025 GMT Not After : Jul 8 06:52:34 2025 GMT Subject: CN=686385b3-2e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:0d:35:cb:e4:b6:e2:8a:80:c9:f9:f2:76: 44:e1:5f:dc:4f:7a:f8:fd:2f:7d:fd:d8:b3:ab:87: 1a:ea:25:2b:c5:1a:3b:6e:0f:3d:1b:5e:d0:d0:08: 77:6d:fd:c8:0c:eb:af:f4:3d:37:2b:b5:b7:5e:27: 12:97:b1:23:53:9d:6b:84:07:6e:ce:5e:b7:cd:b9: 47:d7:33:5c:f9:2a:34:9e:8b:9e:b8:10:1e:57:9c: f3:ee:62:e2:fe:f2:83:64:67:57:0f:11:cb:91:ae: 06:09:b5:f7:a2:a9:70:93:c3:d3:b6:13:c1:a0:9f: c8:01:f8:7c:27:89:bc:bc:3f:7b:16:96:a1:07:60: b1:a7:29:8c:a4:fb:18:85:12:8e:ce:3a:5b:a4:72: e1:fe:37:dd:9f:01:69:58:14:fb:1c:ad:81:3d:65: 82:db:4e:9d:5f:d9:2a:8c:7c:42:dd:0b:ef:e6:41: c3:af:cf:48:fa:48:7b:c7:64:8a:83:ba:8d:b2:8d: 3a:8e:1e:53:7e:64:8e:4f:8e:6b:05:05:5b:70:7e: d5:ac:ce:a1:4e:9e:81:7d:42:92:f1:14:fe:0b:a6: 4a:8f:ec:1b:25:fc:68:c2:b6:b4:23:0e:7c:3a:61: 13:c8:75:0c:ae:b4:c0:ec:51:8d:8c:fc:3d:3c:6c: 9b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D9:9C:F8:3A:75:5E:4E:90:F3:F4:DD:4D:54:E2:A3:69:0F:0E:74 X509v3 Authority Key Identifier: keyid:CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:57:37:05:99:7e:59:b8:5e:d8:b5:38:3a:5a:70:ef:9f:26: 37:d4:be:ed:8e:6c:0e:65:bb:f6:aa:08:b1:dd:87:83:82:7f: da:cf:54:c9:55:e8:1c:5c:a1:0e:39:e1:99:43:69:d4:5e:b6: 45:05:4c:77:f3:c2:b3:11:cb:88:dd:ab:79:0b:af:d3:34:50: a0:5c:27:2e:c7:96:9d:99:25:d3:3f:cd:9a:5e:b5:06:41:da: 45:76:c6:b1:16:b1:90:1c:3e:55:f4:2d:7b:e9:7c:1a:94:b1: b0:bf:f0:b2:88:e0:bf:60:14:5f:bb:cc:a0:1a:9a:e6:2e:89: b7:86:d9:f0:e1:b1:26:f7:b8:6b:ca:a1:e0:4c:d4:27:2d:84: 01:e0:b4:07:74:9f:2b:ab:0f:f5:f8:d4:c3:03:7f:a5:9e:be: b7:d0:81:6c:1d:ee:77:b0:0f:36:2d:87:f2:e2:86:d8:ec:ed: 42:52:4d:8e:74:5c:c9:59:10:16:fc:48:58:21:35:e5:04:01: 03:c4:73:86:b7:10:77:4e:62:69:78:4b:ee:40:62:92:fe:d0: 70:7d:78:96:97:97:1a:bb:73:78:e2:40:d4:93:79:20:d4:8d: 90:d2:9f:2b:6e:b6:92:90:23:24:40:5b:74:66:0a:36:6b:15: 7c:4f:52:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCMjQxMTAvBgNVBAUTKENBNjRCMTczMTE5NTIwOTNDRDRENjBEQUFGMTdCNkFD QTBGN0E1MTYwHhcNMjUwNzAxMDY1MjM0WhcNMjUwNzA4MDY1MjM0WjAYMRYwFAYD VQQDEw02ODYzODViMy0yZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx0NNcvktuKKgMn58nZE4V/cT3r4/S99/dizq4ca6iUrxRo7bg89G17Q0Ah3 bf3IDOuv9D03K7W3XicSl7EjU51rhAduzl63zblH1zNc+So0noueuBAeV5zz7mLi /vKDZGdXDxHLka4GCbX3oqlwk8PTthPBoJ/IAfh8J4m8vD97FpahB2CxpymMpPsY hRKOzjpbpHLh/jfdnwFpWBT7HK2BPWWC206dX9kqjHxC3Qvv5kHDr89I+kh7x2SK g7qNso06jh5TfmSOT45rBQVbcH7VrM6hTp6BfUKS8RT+C6ZKj+wbJfxowra0Iw58 OmETyHUMrrTA7FGNjPw9PGybcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXZnPg6 dV5OkPP03U1U4qNpDw50MB8GA1UdIwQYMBaAFMpksXMRlSCTzU1g2q8Xtqyg96UW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkIyNC84QTE2RkY3MjVC QTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklKUE5UV0RhcnhlMnJLRDNw UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltU3hjeEdWSUpQTlRXRGFyeGUycktEM3BSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkIyNC84QTE2RkY3MjVCQTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklK UE5UV0RhcnhlMnJLRDNwUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiVzcFmX5ZuF7YtTg6WnDvnyY31L7tjmwOZbv2qgix3YeDgn/az1TJ VegcXKEOOeGZQ2nUXrZFBUx388KzEcuI3at5C6/TNFCgXCcux5admSXTP82aXrUG QdpFdsaxFrGQHD5V9C176XwalLGwv/CyiOC/YBRfu8ygGprmLom3htnw4bEm97hr yqHgTNQnLYQB4LQHdJ8rqw/1+NTDA3+lnr630IFsHe53sA82LYfy4obY7O1CUk2O dFzJWRAW/EhYITXlBAEDxHOGtxB3TmJpeEvuQGKS/tBwfXiWl5cau3N44kDUk3kg 1I2Q0p8rbraSkCMkQFt0Zgo2axV8T1JX -----END CERTIFICATE-----Generated at Wed Jul 2 15:54:55 2025 by rpki-client