$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json) Hash identifier: SL0p6I96UNqtI/QINPIe9c5ehuAmGz3ihVLmYZsZrf8= Subject key identifier: B6:13:01:AF:1A:48:13:08:8E:9F:28:FE:9D:F6:8D:FF:2C:BD:EF:66 Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Certificate serial: 105E Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft Manifest number: 105E Signing time: Fri 04 Jul 2025 17:40:44 +0000 Manifest this update: Fri 04 Jul 2025 17:40:44 +0000 Manifest next update: Fri 11 Jul 2025 17:40:44 +0000 Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: LMRsQy4t25Zjl+2eupwN3yD494dyiEe7UYyHXpY2OJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4190 (0x105e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Validity Not Before: Jul 4 17:40:44 2025 GMT Not After : Jul 11 17:40:44 2025 GMT Subject: CN=6868121c-3e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:74:fd:6b:cc:bf:11:27:f3:ba:7b:6f:5b: 76:f5:bf:cd:97:41:e1:96:70:79:d0:56:23:83:1c: 3b:ea:83:8f:39:8e:78:e7:3d:f2:9a:c0:59:f4:bf: df:98:32:9e:05:8a:b7:f6:8c:b4:79:31:91:18:1c: 7a:c7:7c:40:f1:8f:1a:7f:17:91:ab:94:8c:0c:5c: 4b:e0:3a:14:f3:15:e4:b6:5c:79:79:0c:cd:28:0b: bd:6b:dd:25:b8:5b:66:b4:6e:60:69:29:d8:57:d8: 9a:46:ae:0c:ca:f8:77:e2:7d:5c:b2:c1:13:9c:01: fc:e5:44:a0:49:82:5d:dc:a3:50:89:4a:50:5e:6b: ea:a1:6e:5c:9c:63:36:2f:f2:21:5d:f9:d3:d4:b6: 62:d6:a1:2c:e4:68:fc:f8:87:6b:74:c2:0e:82:07: 0c:a9:18:7a:aa:03:5c:a9:d5:be:fa:e5:b7:71:8c: 20:18:a2:25:db:4a:a8:a8:f9:f3:9f:50:38:86:45: 47:27:9a:77:9e:6b:b5:fa:a8:9a:52:20:17:2f:fa: 49:bc:2c:0a:9a:2e:b8:73:b1:9e:a0:95:0e:c7:59: f3:bb:e0:c3:94:6d:bb:86:32:cf:40:cf:2e:d8:f4: 6d:43:52:3a:5d:0d:7d:b2:18:68:ec:9b:cb:1b:01: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:13:01:AF:1A:48:13:08:8E:9F:28:FE:9D:F6:8D:FF:2C:BD:EF:66 X509v3 Authority Key Identifier: keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:84:60:a0:5c:d4:60:6d:51:4b:72:ca:48:5b:f6:ca:f7:db: 3b:4e:bd:65:7c:e0:d0:3d:89:b4:5b:84:5f:47:2a:5e:3c:2c: 71:8d:11:e3:bd:f4:b1:53:cd:28:b2:16:b9:6e:c4:ae:3f:c3: d9:d7:06:42:3b:71:2b:09:05:71:f0:7f:86:cb:2f:a5:70:62: 6d:4d:80:3e:c6:59:34:11:d1:3c:78:15:85:a9:32:5a:f3:e5: df:ba:6b:16:c4:67:6e:ba:58:72:14:cf:3a:92:3e:03:fd:b0: 37:39:0f:7e:08:d5:d9:d4:86:f0:bd:51:00:90:61:04:70:e0: 90:6e:e3:b9:f5:09:44:70:c1:5c:f5:dd:c4:20:50:5f:99:45: 2a:21:41:36:43:de:ee:0b:b5:f2:90:9f:4c:64:4e:67:59:ed: f5:4a:8b:c5:ba:49:e6:96:25:47:44:de:54:28:43:b9:d4:90: de:4a:f9:4c:7e:9b:24:20:99:7f:97:8e:11:19:a1:bf:6a:95: c9:60:81:49:ab:7a:47:dd:ba:57:dc:f8:16:dc:4b:14:4e:b1: ed:57:ce:1d:3c:b2:a4:4b:9e:50:c1:a2:cd:62:74:81:9b:c1: 2f:0a:0a:4a:12:ff:72:0e:de:db:40:aa:ba:07:a8:e6:69:09: 07:2a:ba:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEM4REE2NDA5NjcxMzQ4MTA3RERCQzhCMTgzRjU1QUJG MjkzMTI1NTYwHhcNMjUwNzA0MTc0MDQ0WhcNMjUwNzExMTc0MDQ0WjAYMRYwFAYD VQQDEw02ODY4MTIxYy0zZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyq90/WvMvxEn87p7b1t29b/Nl0HhlnB50FYjgxw76oOPOY545z3ymsBZ9L/f mDKeBYq39oy0eTGRGBx6x3xA8Y8afxeRq5SMDFxL4DoU8xXktlx5eQzNKAu9a90l uFtmtG5gaSnYV9iaRq4Myvh34n1cssETnAH85USgSYJd3KNQiUpQXmvqoW5cnGM2 L/IhXfnT1LZi1qEs5Gj8+IdrdMIOggcMqRh6qgNcqdW++uW3cYwgGKIl20qoqPnz n1A4hkVHJ5p3nmu1+qiaUiAXL/pJvCwKmi64c7GeoJUOx1nzu+DDlG27hjLPQM8u 2PRtQ1I6XQ19shho7JvLGwEVwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYTAa8a SBMIjp8o/p32jf8sve9mMB8GA1UdIwQYMBaAFMjaZAlnE0gQfdvIsYP1Wr8pMSVW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9ENjc3RDMxQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNCQjkyOGl4Z19WYXZ5a3hK VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3lOcGtDV2NUU0JCOTI4aXhnX1ZhdnlreEpWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9ENjc3RDMxQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNC QjkyOGl4Z19WYXZ5a3hKVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmhGCgXNRgbVFLcspIW/bK99s7Tr1lfODQPYm0W4RfRypePCxxjRHj vfSxU80osha5bsSuP8PZ1wZCO3ErCQVx8H+Gyy+lcGJtTYA+xlk0EdE8eBWFqTJa 8+XfumsWxGduulhyFM86kj4D/bA3OQ9+CNXZ1IbwvVEAkGEEcOCQbuO59QlEcMFc 9d3EIFBfmUUqIUE2Q97uC7XykJ9MZE5nWe31SovFuknmliVHRN5UKEO51JDeSvlM fpskIJl/l44RGaG/apXJYIFJq3pH3bpX3PgW3EsUTrHtV84dPLKkS55QwaLNYnSB m8EvCgpKEv9yDt7bQKq6B6jmaQkHKrpu -----END CERTIFICATE-----Generated at Sat Jul 5 02:23:28 2025 by rpki-client