$ rpki-client -vvf rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft File: YbChG9lEvNqGW7mx-_fuBtVzvXE.mft (raw, json) Hash identifier: f9vE8NKVHft17a7JiYrOibstlssb7Gou5V698035zwI= Subject key identifier: 3B:E3:6B:63:3D:62:4F:15:95:B6:6A:66:9D:F6:16:07:EC:3B:90:24 Authority key identifier: 61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71 Certificate issuer: /CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71 Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft Manifest number: 05DD Signing time: Wed 02 Jul 2025 23:18:29 +0000 Manifest this update: Wed 02 Jul 2025 23:18:29 +0000 Manifest next update: Wed 09 Jul 2025 23:18:29 +0000 Files and hashes: 1: YbChG9lEvNqGW7mx-_fuBtVzvXE.crl (hash: 7D85MpvmOPSIjCi/UBiIWeQFa85iEAEBNh38rSU6WnE=) 2: 6F706208BE0F11EB90239C1AC4F9AE02.roa (hash: aJNEKMighzJgRijL/uKI8yCdGKsKV/KJafHUF4cH4Rw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127656, serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71 Validity Not Before: Jul 2 23:18:29 2025 GMT Not After : Jul 9 23:18:29 2025 GMT Subject: CN=6865be45-e9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:7b:8e:cb:c8:06:9a:74:3c:81:5d:c6:48: 0c:95:61:94:85:3d:10:25:66:bf:99:88:44:58:79: 83:98:37:53:f3:eb:57:2a:c2:da:d9:36:59:7d:9e: 32:cc:39:6c:d3:d5:12:25:17:5c:07:82:62:91:19: f5:c9:70:38:d1:60:c7:81:07:09:3c:a3:c6:cc:0a: b2:59:fa:32:55:10:45:a0:01:1c:d1:b2:c3:7d:82: 29:a3:a7:f7:be:2b:83:c5:0b:22:89:3a:8d:06:ba: 05:ab:dc:26:19:b9:cf:79:de:b7:29:dc:22:fe:3d: 3e:b0:22:9f:15:fd:34:d2:e6:d1:64:6f:82:a9:b8: 27:2b:29:39:45:df:32:6c:30:83:12:69:c2:0f:00: e1:65:97:9a:a5:17:84:7a:a8:48:51:66:83:fa:84: 51:96:4c:df:77:29:98:1b:9d:84:e7:d6:f6:61:11: c0:c5:e2:2b:c1:99:45:e2:d8:7e:b7:67:88:05:38: dd:9e:5c:ac:b5:f9:13:d8:e4:b8:58:ea:63:86:4a: b8:65:7c:68:b1:d2:c4:1b:1b:1f:df:ab:82:28:2d: dd:90:1f:9a:b4:9b:27:7b:ca:f1:3e:02:59:5b:3c: e1:9c:d8:3d:f4:1e:1b:00:73:8e:62:f3:35:64:d7: db:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:6B:63:3D:62:4F:15:95:B6:6A:66:9D:F6:16:07:EC:3B:90:24 X509v3 Authority Key Identifier: keyid:61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:42:c9:2f:8e:e2:45:5a:7c:77:1d:b7:a1:44:af:33:07:ce: 14:67:cd:df:ac:3f:d2:64:82:57:59:33:19:89:0b:a1:b0:e2: 2b:7f:c0:58:59:79:9d:21:aa:9d:bf:f7:09:2b:96:aa:ff:ab: 30:5c:f9:aa:46:83:3e:47:43:1b:4a:fb:c8:a0:0b:79:7b:7a: 65:da:ea:96:87:aa:cb:a1:19:00:7e:36:c1:86:d7:be:cd:81: 0c:da:07:1f:1f:9c:2e:6c:b9:91:49:49:1f:8b:b5:ec:48:56: 59:ad:ad:72:3e:83:03:9f:d1:e4:d2:19:31:10:de:72:7a:7e: cb:07:66:61:bf:cd:61:93:49:1f:18:e0:4a:20:10:1e:1a:29: c8:b5:fc:c0:2f:a3:75:5c:d7:c9:dc:2f:5f:bb:8b:ec:71:ce: 99:ca:29:e6:03:24:07:b4:08:20:96:dc:c8:14:28:dc:b6:b3: ed:04:45:00:63:d3:05:88:ca:7f:86:19:1d:8a:52:67:b4:28: 96:c4:b5:b3:78:e5:7d:13:68:9d:35:cb:e1:54:56:76:5a:f3: 71:68:c1:70:23:62:ca:de:2c:d8:23:f4:fa:f4:54:22:c6:09: cd:5f:7f:0a:ec:4c:18:bf:81:af:8c:e1:8e:ea:f6:e8:53:40: 4e:c8:de:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NTYxMTAvBgNVBAUTKDYxQjBBMTFCRDk0NEJDREE4NjVCQjlCMUZCRjdFRTA2 RDU3M0JENzEwHhcNMjUwNzAyMjMxODI5WhcNMjUwNzA5MjMxODI5WjAYMRYwFAYD VQQDEw02ODY1YmU0NS1lOWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDJ7jsvIBpp0PIFdxkgMlWGUhT0QJWa/mYhEWHmDmDdT8+tXKsLa2TZZfZ4y zDls09USJRdcB4JikRn1yXA40WDHgQcJPKPGzAqyWfoyVRBFoAEc0bLDfYIpo6f3 viuDxQsiiTqNBroFq9wmGbnPed63Kdwi/j0+sCKfFf000ubRZG+CqbgnKyk5Rd8y bDCDEmnCDwDhZZeapReEeqhIUWaD+oRRlkzfdymYG52E59b2YRHAxeIrwZlF4th+ t2eIBTjdnlystfkT2OS4WOpjhkq4ZXxosdLEGxsf36uCKC3dkB+atJsne8rxPgJZ WzzhnNg99B4bAHOOYvM1ZNfbVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvja2M9 Yk8VlbZqZp32FgfsO5AkMB8GA1UdIwQYMBaAFGGwoRvZRLzahlu5sfv37gbVc71x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY1Ni84OEU4RTQyRUJF MEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZOcUdXN214LV9mdUJ0Vnp2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liQ2hHOWxFdk5xR1c3bXgtX2Z1QnRWenZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY1Ni84OEU4RTQyRUJFMEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZO cUdXN214LV9mdUJ0Vnp2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgQskvjuJFWnx3HbehRK8zB84UZ83frD/SZIJXWTMZiQuhsOIrf8BY WXmdIaqdv/cJK5aq/6swXPmqRoM+R0MbSvvIoAt5e3pl2uqWh6rLoRkAfjbBhte+ zYEM2gcfH5wubLmRSUkfi7XsSFZZra1yPoMDn9Hk0hkxEN5yen7LB2Zhv81hk0kf GOBKIBAeGinItfzAL6N1XNfJ3C9fu4vscc6ZyinmAyQHtAggltzIFCjctrPtBEUA Y9MFiMp/hhkdilJntCiWxLWzeOV9E2idNcvhVFZ2WvNxaMFwI2LK3izYI/T69FQi xgnNX38K7EwYv4GvjOGO6vboU0BOyN77 -----END CERTIFICATE-----Generated at Thu Jul 3 12:24:33 2025 by rpki-client