$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json) Hash identifier: GKOFT2nnZPRMwbmB7snClpY9XywnvQrBs168+0ws0gw= Subject key identifier: 3C:CE:9E:12:54:9B:9D:0C:05:60:37:45:1B:B5:B3:AE:58:C0:C8:B4 Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft Manifest number: 0204 Signing time: Thu 03 Jul 2025 02:24:23 +0000 Manifest this update: Thu 03 Jul 2025 02:24:22 +0000 Manifest next update: Thu 10 Jul 2025 02:24:22 +0000 Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: 2ZC8a5kfl2TTazsmMrZx4OaHgTsI+OWObiNs/wRXARI=) 2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: t7XCEjkxXsWQ/Dxk256ftxVIrolRXrZfUAZmnQPH6Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Validity Not Before: Jul 3 02:24:22 2025 GMT Not After : Jul 10 02:24:22 2025 GMT Subject: CN=6865e9d6-d103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:d4:d2:f9:9e:c0:ab:68:50:8b:77:bc:0b: 8d:77:af:ef:84:1c:66:59:94:35:6b:7d:e1:d0:80: ca:cb:19:0d:ac:23:8d:bf:2a:b0:46:81:98:ef:28: 18:75:7a:35:33:98:8f:52:34:13:f7:5b:ab:7f:5e: 0b:b9:0a:b2:1d:0c:0e:8f:03:53:dc:02:06:9a:fd: e3:69:24:c8:22:f8:3c:e5:ff:22:a7:69:5d:1f:ef: c0:eb:b1:d7:10:c7:ff:ae:df:3b:aa:2f:51:24:64: e7:49:34:e3:0e:f8:f3:fc:c1:30:1f:12:c7:f6:e3: 70:eb:d3:57:52:88:54:fc:ce:34:f8:56:20:f4:ab: 65:f3:f4:95:14:d4:ac:4d:e4:01:20:2b:58:17:83: 0a:60:82:5f:10:8b:1f:0b:ce:04:2a:61:46:3e:ab: b2:12:79:b7:dd:5a:8a:97:89:77:fd:fe:80:8e:7f: 21:53:09:21:a2:bc:6a:42:f4:29:09:12:95:84:3b: c7:74:dc:98:da:8b:98:27:db:23:28:aa:98:12:97: 49:74:c4:10:7c:c8:c7:97:5a:5c:30:55:c0:28:ac: 80:0c:93:ec:c7:87:5e:74:06:08:8c:92:4e:5e:13: 95:4b:6c:6e:fb:c9:77:c0:10:21:bc:cb:08:4a:56: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CE:9E:12:54:9B:9D:0C:05:60:37:45:1B:B5:B3:AE:58:C0:C8:B4 X509v3 Authority Key Identifier: keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:aa:d0:16:0d:e8:5c:62:5c:b0:d0:e9:56:26:2d:36:5e:fc: 93:2f:ad:57:75:f2:e3:f4:17:d8:20:a3:1d:23:b1:78:ef:cf: 71:6c:1f:12:6c:ea:4b:7f:69:4b:44:16:f0:59:cd:13:42:40: 13:4a:83:86:59:5f:05:19:06:bb:7f:2a:66:ae:12:de:80:6b: d7:57:c5:0c:40:45:38:e7:36:5e:d6:59:ee:f6:eb:24:c7:c0: 33:a0:f9:99:a6:c2:30:3c:96:32:24:0d:b5:2f:b8:6c:b3:6d: 04:32:56:8a:6a:0f:71:22:97:99:14:4f:27:e9:27:de:ff:59: 85:aa:4e:9d:ff:e5:bc:77:b5:c4:0b:88:ef:e7:93:ec:f5:0e: 38:01:de:d0:1c:9a:f0:ba:5c:bd:39:0e:32:6b:96:07:8c:04: 15:10:e9:79:fe:5e:1c:5a:d0:5e:2a:37:c1:ac:ef:ca:85:b1: 69:d0:53:c9:3c:7e:0e:ea:69:c0:aa:4e:33:64:29:24:c5:14: 0d:ff:ce:7e:69:a6:20:fa:16:37:e9:b8:eb:b8:71:71:d4:76: 40:d5:d5:15:c3:e7:c9:e6:6b:53:cf:40:01:0e:06:63:0c:56: 1d:f0:23:a6:ab:47:3d:6b:a4:85:61:99:56:5c:1b:86:ac:73: da:d1:dc:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0 NUYyNUUyMEIwHhcNMjUwNzAzMDIyNDIyWhcNMjUwNzEwMDIyNDIyWjAYMRYwFAYD VQQDEw02ODY1ZTlkNi1kMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAHU0vmewKtoUIt3vAuNd6/vhBxmWZQ1a33h0IDKyxkNrCONvyqwRoGY7ygY dXo1M5iPUjQT91urf14LuQqyHQwOjwNT3AIGmv3jaSTIIvg85f8ip2ldH+/A67HX EMf/rt87qi9RJGTnSTTjDvjz/MEwHxLH9uNw69NXUohU/M40+FYg9Ktl8/SVFNSs TeQBICtYF4MKYIJfEIsfC84EKmFGPquyEnm33VqKl4l3/f6Ajn8hUwkhorxqQvQp CRKVhDvHdNyY2ouYJ9sjKKqYEpdJdMQQfMjHl1pcMFXAKKyADJPsx4dedAYIjJJO XhOVS2xu+8l3wBAhvMsISlbq1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzOnhJU m50MBWA3RRu1s65YwMi0MB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14 M3FlcE9jdmltbzlGOGw0Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNqtAWDehcYlyw0OlWJi02XvyTL61XdfLj9BfYIKMdI7F4789xbB8S bOpLf2lLRBbwWc0TQkATSoOGWV8FGQa7fypmrhLegGvXV8UMQEU45zZe1lnu9usk x8AzoPmZpsIwPJYyJA21L7hss20EMlaKag9xIpeZFE8n6Sfe/1mFqk6d/+W8d7XE C4jv55Ps9Q44Ad7QHJrwuly9OQ4ya5YHjAQVEOl5/l4cWtBeKjfBrO/KhbFp0FPJ PH4O6mnAqk4zZCkkxRQN/85+aaYg+hY36bjruHFx1HZA1dUVw+fJ5mtTz0ABDgZj DFYd8COmq0c9a6SFYZlWXBuGrHPa0dx4 -----END CERTIFICATE-----Generated at Thu Jul 3 04:40:27 2025 by rpki-client