$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: aKcrvGOskEswIuIpHUeQ6mhWIDWPqW1fPIIcueah1lY= Subject key identifier: 2E:D9:41:47:90:E2:8C:7B:8E:26:90:3F:D2:0A:D0:0B:8C:37:A8:26 Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0CB0 Signing time: Wed 02 Jul 2025 18:24:24 +0000 Manifest this update: Wed 02 Jul 2025 18:24:24 +0000 Manifest next update: Wed 09 Jul 2025 18:24:24 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: EDxmnx0Mrbp6G3QdqoRlZknMadqeDArwBqxJ8BEZR1M=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: X3uR7nkHEkJDs/4UDZXjCbVpYlI7ETxizWrqRmPT3Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Jul 2 18:24:24 2025 GMT Not After : Jul 9 18:24:24 2025 GMT Subject: CN=68657958-c143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:93:fa:0b:b1:1e:3e:49:5f:47:6e:28:83: f2:45:4c:09:74:25:66:20:3a:8c:30:d4:65:18:ec: c8:28:65:c3:fa:4a:0d:57:6a:91:86:6a:0c:59:0c: aa:32:e4:37:4e:35:dd:1a:f6:a0:64:ea:03:1f:b3: 5c:fd:11:45:d9:d4:5e:70:15:98:24:78:28:c1:c8: 5e:9f:cf:9b:44:65:dc:a5:c9:4b:c8:2a:be:62:dc: 06:2d:83:9e:d2:9b:23:4c:4f:7c:2f:da:eb:27:9f: 41:72:81:80:25:0f:0a:69:76:99:b1:94:62:25:11: cd:23:2c:09:de:ea:c9:5c:2d:96:8c:00:af:eb:27: 6e:49:ff:13:74:7f:11:aa:60:1a:34:61:45:db:15: ac:ed:22:b7:37:87:d4:1a:a7:75:80:96:05:04:8d: 9a:fd:34:4e:80:59:44:38:c9:59:cd:3e:9c:97:e4: 65:dc:93:52:14:fb:29:36:e7:f9:75:6a:cb:30:c8: 51:e2:c5:2b:2a:96:f4:40:18:a8:67:95:a6:01:7c: 28:f7:42:4f:63:fd:63:26:04:e2:67:46:3d:54:f5: a2:81:a8:3c:0c:77:4a:6a:dc:af:ea:a0:48:be:50: a8:64:a7:56:bc:64:f6:ce:fb:fb:f6:32:cb:4a:23: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D9:41:47:90:E2:8C:7B:8E:26:90:3F:D2:0A:D0:0B:8C:37:A8:26 X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:57:78:08:3a:3f:5b:58:44:a4:5e:16:5a:d1:3a:ff:12:00: ab:f7:65:67:2c:a0:83:13:41:bd:4b:b9:78:65:b9:39:0c:c0: e2:c0:5c:1d:38:40:9d:0f:a7:8a:c7:9b:4a:22:77:ad:1f:ef: dc:0b:98:3d:da:6e:0c:90:d3:53:c6:80:9d:b6:6a:a5:64:95: f0:1b:fd:31:1e:ff:d9:51:c3:16:b1:4a:84:d6:3b:15:f9:44: 00:e2:ad:12:b1:fb:89:23:de:e6:1a:43:c2:47:2a:92:80:4e: b3:79:38:a7:fa:c6:8d:52:18:19:09:da:04:16:cf:5e:5e:c9: d2:9b:1f:97:86:0a:08:12:d8:fb:d6:38:e8:2a:7d:a1:1f:2f: 62:6f:72:ca:72:cb:53:97:80:61:8e:85:6e:e2:7c:04:1d:f8: 24:05:74:a1:02:c5:b5:ec:16:27:19:7d:73:68:f6:14:bc:df: 3d:bb:93:ac:54:ab:27:cf:29:cb:fd:a8:31:34:bb:d0:de:ad: d7:30:d2:a3:01:2e:bf:eb:2c:aa:20:39:b0:82:cc:c2:a3:c6: b9:5e:f6:6a:5f:cb:eb:a5:42:05:91:7d:31:22:c3:7d:ea:6a: 23:53:3b:a0:67:4b:8e:8c:72:a6:13:71:1d:f4:9e:22:43:95: 95:c7:86:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjUwNzAyMTgyNDI0WhcNMjUwNzA5MTgyNDI0WjAYMRYwFAYD VQQDEw02ODY1Nzk1OC1jMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxduT+guxHj5JX0duKIPyRUwJdCVmIDqMMNRlGOzIKGXD+koNV2qRhmoMWQyq MuQ3TjXdGvagZOoDH7Nc/RFF2dRecBWYJHgowchen8+bRGXcpclLyCq+YtwGLYOe 0psjTE98L9rrJ59BcoGAJQ8KaXaZsZRiJRHNIywJ3urJXC2WjACv6yduSf8TdH8R qmAaNGFF2xWs7SK3N4fUGqd1gJYFBI2a/TROgFlEOMlZzT6cl+Rl3JNSFPspNuf5 dWrLMMhR4sUrKpb0QBioZ5WmAXwo90JPY/1jJgTiZ0Y9VPWigag8DHdKatyv6qBI vlCoZKdWvGT2zvv79jLLSiNAbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7ZQUeQ 4ox7jiaQP9IK0AuMN6gmMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNV3gIOj9bWESkXhZa0Tr/EgCr92VnLKCDE0G9S7l4Zbk5DMDiwFwd OECdD6eKx5tKInetH+/cC5g92m4MkNNTxoCdtmqlZJXwG/0xHv/ZUcMWsUqE1jsV +UQA4q0SsfuJI97mGkPCRyqSgE6zeTin+saNUhgZCdoEFs9eXsnSmx+XhgoIEtj7 1jjoKn2hHy9ib3LKcstTl4BhjoVu4nwEHfgkBXShAsW17BYnGX1zaPYUvN89u5Os VKsnzynL/agxNLvQ3q3XMNKjAS6/6yyqIDmwgszCo8a5XvZqX8vrpUIFkX0xIsN9 6mojUzugZ0uOjHKmE3Ed9J4iQ5WVx4YO -----END CERTIFICATE-----Generated at Thu Jul 3 07:39:52 2025 by rpki-client