$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft File: YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft (raw, json) Hash identifier: 0FUw2ADL7qqmWj+CKcEQYTRqX/Vvv8gQf0axmM8ITKw= Subject key identifier: B1:37:8E:7B:F4:3F:38:12:10:11:FA:FB:D5:B8:40:19:06:8A:22:99 Authority key identifier: 62:B1:54:B8:09:04:EA:9C:27:90:47:35:58:02:9F:D9:7A:04:73:B3 Certificate issuer: /CN=A9115620/serialNumber=62B154B80904EA9C2790473558029FD97A0473B3 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrFUuAkE6pwnkEc1WAKf2XoEc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft Manifest number: 99 Signing time: Tue 01 Jul 2025 07:03:49 +0000 Manifest this update: Tue 01 Jul 2025 07:03:48 +0000 Manifest next update: Tue 08 Jul 2025 07:03:48 +0000 Files and hashes: 1: YrFUuAkE6pwnkEc1WAKf2XoEc7M.crl (hash: +0PAzP3dORZHAHLxQMQjIpPrvdWGMAjripJYN5mqBbE=) 2: 83B2675C6BA911EFADEBED84C4F9AE02.roa (hash: 4eX4lUijJSrhVNmempDvJ7+eDtbA+rvEpHoctmuR7MQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.crl rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrFUuAkE6pwnkEc1WAKf2XoEc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115620, serialNumber=62B154B80904EA9C2790473558029FD97A0473B3 Validity Not Before: Jul 1 07:03:48 2025 GMT Not After : Jul 8 07:03:48 2025 GMT Subject: CN=68638854-c043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:07:f1:36:a2:e4:73:c5:63:a2:5e:56:46: f1:d1:fb:7f:4a:3b:90:01:9a:ad:bf:5b:f0:1f:d8: ab:71:8b:e3:a4:d8:26:5d:86:e5:c7:f8:77:7e:3c: 5f:9c:ea:aa:bb:dd:59:af:eb:b4:96:8f:5e:89:be: 8f:5a:50:d1:e5:13:04:5d:57:8f:25:9e:fa:15:63: 07:cd:12:6f:63:37:19:2d:ec:b8:04:38:98:28:77: fd:4d:7a:ab:88:4d:e2:3a:61:56:af:5a:08:f4:95: ba:41:24:74:86:e1:dd:8d:cb:1f:68:ea:a0:57:ce: 64:15:6c:99:b7:84:a5:c5:e7:c6:7b:72:85:de:55: 99:fb:b0:cc:27:ea:e7:2a:05:aa:52:70:35:9b:91: a2:ec:ae:88:16:6f:4b:06:e6:71:1d:6b:d8:17:8b: af:03:c3:71:b8:20:30:51:f3:46:9e:de:10:81:58: ac:4b:95:11:cd:b5:b1:65:65:fe:e1:7c:4e:6e:9a: 33:31:02:8a:a6:bd:d4:fe:03:66:fa:7b:fc:78:33: fb:5b:e2:b8:02:f0:70:24:af:53:ba:17:6f:d1:83: 00:d0:29:a5:57:80:4e:f5:d0:86:83:60:18:64:f8: d2:c2:a3:0b:4f:15:49:ed:19:e7:38:e7:2c:83:c4: 54:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:37:8E:7B:F4:3F:38:12:10:11:FA:FB:D5:B8:40:19:06:8A:22:99 X509v3 Authority Key Identifier: keyid:62:B1:54:B8:09:04:EA:9C:27:90:47:35:58:02:9F:D9:7A:04:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrFUuAkE6pwnkEc1WAKf2XoEc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/1D40743C6BA911EFA3B34684C4F9AE02/YrFUuAkE6pwnkEc1WAKf2XoEc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:35:ff:06:9f:48:f5:c2:c4:aa:b9:0a:f6:4a:37:e3:77:4c: e5:9b:bf:76:e5:57:c3:8b:97:e0:90:af:8e:af:2e:da:df:3e: ad:79:d7:fd:1e:cc:01:bd:4f:08:3d:25:29:64:3a:97:81:1c: af:d8:41:73:9f:91:6d:1f:f3:1e:4f:8a:b1:ee:4b:8a:c2:56: 83:77:0c:ab:b5:15:55:b5:3d:9b:ec:73:f6:50:a0:f7:6e:77: 7e:31:95:32:6b:9a:50:bf:42:3d:51:4d:5a:ed:7c:64:03:54: 33:7c:f7:d8:4c:b4:da:a8:86:f9:7d:78:83:c8:87:7b:28:40: fe:1c:87:80:fc:22:80:cd:4b:36:64:33:c7:1d:11:41:2a:3b: ea:14:2f:3a:06:e2:73:e4:d7:d0:9c:c0:7e:15:53:dd:a7:1c: ee:c1:52:d8:63:dc:ec:e7:38:30:4e:31:1b:db:87:df:7c:20: 5d:11:46:7b:03:d3:8a:ea:b8:47:79:d7:53:58:cd:ad:33:1c: 69:d0:9e:ab:7f:a7:f0:ef:5f:fd:ec:91:e2:ba:24:d9:f7:78: 64:45:02:70:f4:27:af:b5:aa:69:68:32:e9:c4:a3:c4:d6:55: e5:18:10:ad:e0:65:72:a3:0a:cd:d8:2f:09:f9:e5:97:83:9a: 3c:95:04:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU2MjAxMTAvBgNVBAUTKDYyQjE1NEI4MDkwNEVBOUMyNzkwNDczNTU4MDI5RkQ5 N0EwNDczQjMwHhcNMjUwNzAxMDcwMzQ4WhcNMjUwNzA4MDcwMzQ4WjAYMRYwFAYD VQQDEw02ODYzODg1NC1jMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3wH8Tai5HPFY6JeVkbx0ft/SjuQAZqtv1vwH9ircYvjpNgmXYblx/h3fjxf nOqqu91Zr+u0lo9eib6PWlDR5RMEXVePJZ76FWMHzRJvYzcZLey4BDiYKHf9TXqr iE3iOmFWr1oI9JW6QSR0huHdjcsfaOqgV85kFWyZt4SlxefGe3KF3lWZ+7DMJ+rn KgWqUnA1m5Gi7K6IFm9LBuZxHWvYF4uvA8NxuCAwUfNGnt4QgVisS5URzbWxZWX+ 4XxObpozMQKKpr3U/gNm+nv8eDP7W+K4AvBwJK9Tuhdv0YMA0CmlV4BO9dCGg2AY ZPjSwqMLTxVJ7RnnOOcsg8RU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLE3jnv0 PzgSEBH6+9W4QBkGiiKZMB8GA1UdIwQYMBaAFGKxVLgJBOqcJ5BHNVgCn9l6BHOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTYyMC8xRDQwNzQzQzZC QTkxMUVGQTNCMzQ2ODRDNEY5QUUwMi9ZckZVdUFrRTZwd25rRWMxV0FLZjJYb0Vj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lyRlV1QWtFNnB3bmtFYzFXQUtmMlhvRWM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTYyMC8xRDQwNzQzQzZCQTkxMUVGQTNCMzQ2ODRDNEY5QUUwMi9ZckZVdUFrRTZw d25rRWMxV0FLZjJYb0VjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKNf8Gn0j1wsSquQr2Sjfjd0zlm7925VfDi5fgkK+Ory7a3z6tedf9 HswBvU8IPSUpZDqXgRyv2EFzn5FtH/MeT4qx7kuKwlaDdwyrtRVVtT2b7HP2UKD3 bnd+MZUya5pQv0I9UU1a7XxkA1QzfPfYTLTaqIb5fXiDyId7KED+HIeA/CKAzUs2 ZDPHHRFBKjvqFC86BuJz5NfQnMB+FVPdpxzuwVLYY9zs5zgwTjEb24fffCBdEUZ7 A9OK6rhHeddTWM2tMxxp0J6rf6fw71/97JHiuiTZ93hkRQJw9CevtappaDLpxKPE 1lXlGBCt4GVyowrN2C8J+eWXg5o8lQSf -----END CERTIFICATE-----Generated at Thu Jul 3 04:26:08 2025 by rpki-client