$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json) Hash identifier: fjuJsuZk8JQiO/CB9DBaVrhgWdX6gJDHfE/y8AFLHHM= Subject key identifier: 93:AA:63:D2:E2:FB:5E:87:77:49:E8:36:0D:66:E2:0C:B3:28:B8:B7 Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft Manifest number: 3498 Signing time: Fri 04 Jul 2025 15:04:08 +0000 Manifest this update: Fri 04 Jul 2025 15:04:08 +0000 Manifest next update: Fri 11 Jul 2025 15:04:08 +0000 Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: m3qEqDRbA4XM881uV0VsZdF7h8CypmEEi5eKEuVIp2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Validity Not Before: Jul 4 15:04:08 2025 GMT Not After : Jul 11 15:04:08 2025 GMT Subject: CN=6867ed68-b79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dd:47:79:db:dc:15:56:d4:42:10:94:19:3f: 45:c5:eb:f6:26:c9:c3:af:05:54:ba:f2:40:94:1f: 37:5a:9a:9e:04:44:d3:fa:10:4f:16:1e:7d:46:20: 59:7d:c9:d5:4e:65:bb:ce:ad:05:d3:dc:12:8d:56: bf:0e:98:53:85:7f:04:45:e3:1d:17:fa:57:9d:a0: c4:d7:fb:2f:33:05:d7:9f:e8:65:5d:c6:0a:8b:62: a5:f8:ea:d3:1a:9c:38:54:de:33:7e:21:72:d9:78: ee:84:eb:e4:91:2e:a9:21:21:f6:9b:f7:eb:06:44: dc:5b:f0:f8:8c:8b:07:a0:cc:58:14:af:89:6a:92: 64:e8:e1:d4:34:9b:6e:11:77:21:50:f9:11:cc:40: a2:eb:79:a6:0e:78:00:14:d2:8c:1c:c5:59:73:3c: 34:b8:f1:30:2a:97:6f:40:75:62:27:63:98:4e:e9: 54:94:44:3a:6f:a8:6b:0c:87:8c:a1:95:d3:19:83: af:03:3b:68:c5:3c:7d:14:4b:1b:bf:6a:96:57:70: e0:9a:c5:14:c1:18:b7:ab:21:86:19:8f:58:fa:c5: 61:a6:ab:39:7c:ef:bc:f0:5c:cc:00:70:8f:9e:88: d5:45:7a:66:eb:32:46:9a:b5:7f:95:df:50:36:3b: ba:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AA:63:D2:E2:FB:5E:87:77:49:E8:36:0D:66:E2:0C:B3:28:B8:B7 X509v3 Authority Key Identifier: keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:1f:85:f4:c0:c4:7e:6f:43:a4:fc:58:9e:07:7d:23:f9:73: b6:67:7c:77:ed:06:8f:73:32:08:a1:e7:36:3a:31:d4:55:10: e8:90:c0:89:ce:0a:42:30:27:56:93:b1:0d:91:96:a6:dd:46: 3d:4e:4a:c3:7e:07:71:64:8c:f0:d2:8f:68:1f:aa:81:5e:ca: 8f:cc:a5:fd:78:af:69:8c:b8:b9:26:a0:29:93:48:e6:1a:86: 5d:68:5a:6d:38:22:ff:dc:1f:ec:ea:2b:d4:c5:b7:53:72:86: 06:17:08:d1:a4:5e:95:17:ce:25:d8:23:07:a0:b8:f5:76:7f: 1b:68:55:af:23:7e:78:c6:46:2c:26:51:fe:89:87:bf:4f:c5: 02:5e:4c:7d:73:3b:56:b5:4c:d1:00:a0:32:78:62:d9:43:be: c2:69:ab:fb:a0:9d:38:80:cf:20:7d:d5:4a:44:99:66:72:54: 85:95:2f:2b:bc:62:ff:03:6b:42:97:70:55:96:3a:9f:c0:42: fc:9a:24:ee:59:5d:c8:75:03:b2:9e:20:8a:01:7c:97:f9:81: 38:85:bc:6e:e4:2a:4a:59:36:58:38:14:42:24:41:87:6a:ef: f8:f0:32:11:a2:d7:55:93:d5:98:22:20:c2:97:ef:01:69:0c: db:4c:88:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NjgxMTAvBgNVBAUTKENBRTJDRkIxQTc5NzRBRDZCMDI0NUFFMzRFNEIwRENF RDgyMDk4NjcwHhcNMjUwNzA0MTUwNDA4WhcNMjUwNzExMTUwNDA4WjAYMRYwFAYD VQQDEw02ODY3ZWQ2OC1iNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA291HedvcFVbUQhCUGT9Fxev2JsnDrwVUuvJAlB83WpqeBETT+hBPFh59RiBZ fcnVTmW7zq0F09wSjVa/DphThX8EReMdF/pXnaDE1/svMwXXn+hlXcYKi2Kl+OrT Gpw4VN4zfiFy2XjuhOvkkS6pISH2m/frBkTcW/D4jIsHoMxYFK+JapJk6OHUNJtu EXchUPkRzECi63mmDngAFNKMHMVZczw0uPEwKpdvQHViJ2OYTulUlEQ6b6hrDIeM oZXTGYOvAztoxTx9FEsbv2qWV3DgmsUUwRi3qyGGGY9Y+sVhpqs5fO+88FzMAHCP nojVRXpm6zJGmrV/ld9QNju6QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOqY9Li +16Hd0noNg1m4gyzKLi3MB8GA1UdIwQYMBaAFMriz7Gnl0rWsCRa405LDc7YIJhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2OC8wOEVDRUU0ODFE OUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0YXdKRnJqVGtzTnp0Z2dt R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1TFBzYWVYU3Rhd0pGcmpUa3NOenRnZ21HYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2OC8wOEVDRUU0ODFEOUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0 YXdKRnJqVGtzTnp0Z2dtR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXH4X0wMR+b0Ok/FieB30j+XO2Z3x37QaPczIIoec2OjHUVRDokMCJ zgpCMCdWk7ENkZam3UY9TkrDfgdxZIzw0o9oH6qBXsqPzKX9eK9pjLi5JqApk0jm GoZdaFptOCL/3B/s6ivUxbdTcoYGFwjRpF6VF84l2CMHoLj1dn8baFWvI354xkYs JlH+iYe/T8UCXkx9cztWtUzRAKAyeGLZQ77Caav7oJ04gM8gfdVKRJlmclSFlS8r vGL/A2tCl3BVljqfwEL8miTuWV3IdQOyniCKAXyX+YE4hbxu5CpKWTZYOBRCJEGH au/48DIRotdVk9WYIiDCl+8BaQzbTIjQ -----END CERTIFICATE-----Generated at Fri Jul 4 22:09:08 2025 by rpki-client