$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: uxqFHSuAWIzYh7/d9qMHaFveV8xGtVYIDivlylkiGyU= Subject key identifier: 35:6B:99:4B:A9:6C:44:7A:77:E9:35:8F:2B:0E:AF:A9:DC:64:7D:99 Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 0473 Signing time: Tue 01 Jul 2025 00:36:49 +0000 Manifest this update: Tue 01 Jul 2025 00:36:49 +0000 Manifest next update: Tue 08 Jul 2025 00:36:49 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: fAcCX0lw7yOhUZz/SiKxLkrfV4bOQYDEiWiviRRrKG0=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: 0K3q0dVCvDExh+rAvv97+F6NfiAcFtJOv8chW1CF1z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: Jul 1 00:36:49 2025 GMT Not After : Jul 8 00:36:49 2025 GMT Subject: CN=68632da1-4576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:74:0e:24:84:74:94:e3:52:3d:6e:db:f7:0b: c7:90:6b:93:92:0f:5e:73:51:57:28:2a:6e:86:74: 15:e4:6d:8a:2f:54:d5:15:ef:e1:4d:88:a8:12:80: 40:27:53:2d:f7:ae:b9:4e:c1:ff:50:e4:f1:a5:16: b9:f2:47:58:7d:94:9e:01:8c:1e:a3:9e:9a:d0:bb: 26:0d:92:87:15:3b:ea:46:19:76:60:5e:bc:90:03: c0:3d:1e:84:5b:0c:23:f6:e4:1d:08:d7:82:c5:c4: 6e:d7:17:3a:94:be:e8:5a:6b:1b:39:2e:74:b4:9d: 5f:a4:05:11:ba:84:00:f9:ba:8c:5c:44:13:a1:9c: 66:b6:ca:98:86:b0:5f:b6:7c:cd:36:aa:3d:11:b2: 35:cc:56:0c:9f:31:e0:7e:da:cc:5a:95:df:bd:0e: 0d:23:35:2b:13:8c:2e:0d:3e:4b:2f:e7:a6:15:ac: f3:cd:ae:c3:04:20:e0:f0:4f:63:13:21:88:b3:53: d7:b1:19:bb:7b:cc:e4:bf:23:3f:e2:66:c6:a2:0c: 63:dc:89:03:b9:ab:27:ff:99:a7:2e:ff:8e:87:2a: 50:e8:97:4e:44:6d:4c:46:f1:22:5a:b0:da:83:cc: ea:a5:56:46:7b:10:60:76:38:ce:45:2f:87:c3:80: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6B:99:4B:A9:6C:44:7A:77:E9:35:8F:2B:0E:AF:A9:DC:64:7D:99 X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6e:27:5e:8f:49:5f:66:1c:d7:48:59:e2:31:37:de:a2:f8: f5:0d:9f:2f:ac:b2:c5:b4:bd:3c:66:a9:38:49:78:3d:17:f8: 6d:93:9e:1f:d8:2b:56:70:e9:b9:35:25:39:f3:97:29:21:4e: 06:fd:45:84:34:e5:c0:69:17:2e:0a:03:f7:cc:30:8d:a4:af: 7c:ad:e8:5f:13:11:c0:d3:f8:71:26:36:de:52:4f:65:76:52: 75:1b:8d:d8:c9:c6:95:f9:3d:b2:31:d5:0a:65:c8:13:17:08: 85:0c:3d:3b:ac:81:57:45:81:c4:d2:69:f7:e9:67:c5:5e:bf: c6:83:df:a5:96:2d:32:ec:66:c3:93:33:62:af:c1:56:ea:41: 28:2c:2b:57:bc:15:ab:61:c2:d6:63:b7:76:ef:c3:98:27:b7: 3d:9b:e8:e5:0a:a3:0c:51:0c:6c:0b:78:07:ec:37:0d:52:a9: 0c:a0:d3:5e:a0:d6:14:fe:11:4b:7e:8f:04:9f:1b:1d:7c:e9: e2:58:d2:fb:3a:a4:1c:aa:e8:6e:dd:01:f8:fd:39:dc:d7:48: f5:ca:da:6c:41:58:51:fa:3a:bd:72:67:2d:87:ef:16:e9:50: aa:7f:0a:85:dc:1b:18:e9:5c:3c:2e:3a:af:82:99:59:6e:05: 9e:a9:c0:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjUwNzAxMDAzNjQ5WhcNMjUwNzA4MDAzNjQ5WjAYMRYwFAYD VQQDEw02ODYzMmRhMS00NTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HQOJIR0lONSPW7b9wvHkGuTkg9ec1FXKCpuhnQV5G2KL1TVFe/hTYioEoBA J1Mt9665TsH/UOTxpRa58kdYfZSeAYweo56a0LsmDZKHFTvqRhl2YF68kAPAPR6E Wwwj9uQdCNeCxcRu1xc6lL7oWmsbOS50tJ1fpAURuoQA+bqMXEQToZxmtsqYhrBf tnzNNqo9EbI1zFYMnzHgftrMWpXfvQ4NIzUrE4wuDT5LL+emFazzza7DBCDg8E9j EyGIs1PXsRm7e8zkvyM/4mbGogxj3IkDuasn/5mnLv+OhypQ6JdORG1MRvEiWrDa g8zqpVZGexBgdjjORS+Hw4DAowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVrmUup bER6d+k1jysOr6ncZH2ZMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCbidej0lfZhzXSFniMTfeovj1DZ8vrLLFtL08Zqk4SXg9F/htk54f 2CtWcOm5NSU585cpIU4G/UWENOXAaRcuCgP3zDCNpK98rehfExHA0/hxJjbeUk9l dlJ1G43YycaV+T2yMdUKZcgTFwiFDD07rIFXRYHE0mn36WfFXr/Gg9+lli0y7GbD kzNir8FW6kEoLCtXvBWrYcLWY7d278OYJ7c9m+jlCqMMUQxsC3gH7DcNUqkMoNNe oNYU/hFLfo8EnxsdfOniWNL7OqQcquhu3QH4/Tnc10j1ytpsQVhR+jq9cmcth+8W 6VCqfwqF3BsY6Vw8LjqvgplZbgWeqcBi -----END CERTIFICATE-----Generated at Wed Jul 2 23:20:41 2025 by rpki-client