$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json) Hash identifier: ec6hqaPUk1zeEiEwSsUqjbNwhYAOTI1ThFJ0l7Wk6+Q= Subject key identifier: C0:C1:D6:06:BD:B8:8B:7C:87:EE:A4:DD:60:86:A5:08:9A:89:AE:FF Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft Manifest number: 0416 Signing time: Thu 03 Jul 2025 00:43:07 +0000 Manifest this update: Thu 03 Jul 2025 00:43:07 +0000 Manifest next update: Thu 10 Jul 2025 00:43:07 +0000 Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: EkWNVlCH+uc2OTt6BvUr8DHhv+tNBzrFeix9Hd5amgo=) 2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: VxhE0yOw2UpFEmn9cUfGr5NqfhjBpOy+NCMi8LSn31o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BA8, serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Validity Not Before: Jul 3 00:43:07 2025 GMT Not After : Jul 10 00:43:07 2025 GMT Subject: CN=6865d21b-3886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:f9:07:90:63:b3:e5:bf:df:13:8b:cd:b2: 05:ce:bb:fd:69:4e:38:f2:3b:ff:ec:83:6b:c1:86: 64:3d:a4:e4:c1:dc:1b:82:a8:29:1d:3c:be:50:3c: f9:bc:6a:97:13:df:cc:88:bf:ad:e9:a8:03:65:24: b5:45:1c:59:d7:09:5b:ae:75:c6:34:5c:8c:8f:bf: 18:7a:d0:b9:0e:e4:be:72:71:57:4d:53:4b:ea:69: af:fc:95:ae:7b:58:ca:00:9a:61:6a:8b:3f:69:6e: 0d:51:36:4e:0b:78:f6:c2:7f:54:43:d3:cf:10:62: cd:ab:13:cb:27:26:dd:90:01:a2:2e:a6:53:f6:dd: 18:a4:42:1e:8d:43:96:76:16:a1:0c:dd:2b:bf:10: 91:58:9c:21:13:b5:e2:eb:30:2a:d2:53:d2:c0:eb: 6c:b7:01:2f:f4:10:2e:78:c1:13:bb:eb:7e:83:da: f9:a3:db:be:fe:6c:fc:73:5c:dd:af:b7:97:ab:2c: 45:e9:e4:e0:be:4c:76:19:4f:f0:33:97:01:be:ad: 9d:89:f0:a4:53:4a:f3:85:e6:1d:a8:78:93:a0:fe: a1:ce:ee:7e:c0:12:3c:75:8b:25:35:e0:80:4a:59: e9:cb:77:b9:90:c2:12:93:c0:1f:d1:0c:47:8f:a2: d3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C1:D6:06:BD:B8:8B:7C:87:EE:A4:DD:60:86:A5:08:9A:89:AE:FF X509v3 Authority Key Identifier: keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:7e:6a:29:d1:70:18:ae:73:3a:7f:7d:5a:a9:76:e3:16:d1: e0:66:5e:8c:cd:87:03:73:d0:50:e1:70:31:11:69:03:65:be: 43:de:fd:28:d9:9d:bb:f8:4f:cf:17:c6:8a:a4:2f:dc:d6:02: 78:9d:6f:91:8b:da:c9:b8:f6:db:6c:d0:89:82:25:c0:50:b4: 26:d6:1a:80:de:05:44:c7:ba:0d:f5:92:f0:c4:35:37:41:cb: 68:6e:34:ac:ea:ad:be:e7:b7:49:41:e7:87:90:74:25:29:fa: ca:a3:41:05:9b:b8:fd:50:9a:84:10:3b:f7:18:2f:b0:24:1d: a3:3c:9c:e6:91:e7:3b:0c:9f:d1:16:90:f5:42:fb:8b:c0:ab: 26:1d:52:2e:6f:f4:08:fc:13:3a:f4:f3:b1:5e:a0:6f:4d:c6: 45:ed:13:ab:dd:19:c4:59:18:a2:89:76:65:2a:10:fa:9d:06: ef:49:bb:44:b6:aa:6c:2c:ae:0a:ab:d0:50:ff:cb:c0:08:fd: 89:37:06:c1:b3:a8:c5:04:8d:0b:91:36:05:30:c5:69:d3:6c: 25:e5:dd:16:b5:d5:05:f2:b9:e5:20:30:84:2c:42:3c:56:ef: 91:9a:81:6b:9a:9d:72:cb:86:90:c9:ae:71:fd:cf:de:21:8f: 42:55:9c:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQTgxMTAvBgNVBAUTKENBNTU5NDEyRTJBMjM4MDIxQTk0RUYyNzE4RURCMDAx RUY5NkVBODUwHhcNMjUwNzAzMDA0MzA3WhcNMjUwNzEwMDA0MzA3WjAYMRYwFAYD VQQDEw02ODY1ZDIxYi0zODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7j5B5Bjs+W/3xOLzbIFzrv9aU448jv/7INrwYZkPaTkwdwbgqgpHTy+UDz5 vGqXE9/MiL+t6agDZSS1RRxZ1wlbrnXGNFyMj78YetC5DuS+cnFXTVNL6mmv/JWu e1jKAJphaos/aW4NUTZOC3j2wn9UQ9PPEGLNqxPLJybdkAGiLqZT9t0YpEIejUOW dhahDN0rvxCRWJwhE7Xi6zAq0lPSwOtstwEv9BAueMETu+t+g9r5o9u+/mz8c1zd r7eXqyxF6eTgvkx2GU/wM5cBvq2difCkU0rzheYdqHiToP6hzu5+wBI8dYslNeCA Slnpy3e5kMISk8Af0QxHj6LTDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDB1ga9 uIt8h+6k3WCGpQiaia7/MB8GA1UdIwQYMBaAFMpVlBLiojgCGpTvJxjtsAHvluqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJBOC9ERTc4RDU4Qzcy MDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9BSWFsTzhuR08yd0FlLVc2 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsV1VFdUtpT0FJYWxPOG5HTzJ3QWUtVzZvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJBOC9ERTc4RDU4QzcyMDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9B SWFsTzhuR08yd0FlLVc2b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIfmop0XAYrnM6f31aqXbjFtHgZl6MzYcDc9BQ4XAxEWkDZb5D3v0o 2Z27+E/PF8aKpC/c1gJ4nW+Ri9rJuPbbbNCJgiXAULQm1hqA3gVEx7oN9ZLwxDU3 QctobjSs6q2+57dJQeeHkHQlKfrKo0EFm7j9UJqEEDv3GC+wJB2jPJzmkec7DJ/R FpD1QvuLwKsmHVIub/QI/BM69POxXqBvTcZF7ROr3RnEWRiiiXZlKhD6nQbvSbtE tqpsLK4Kq9BQ/8vACP2JNwbBs6jFBI0LkTYFMMVp02wl5d0WtdUF8rnlIDCELEI8 Vu+RmoFrmp1yy4aQya5x/c/eIY9CVZyP -----END CERTIFICATE-----Generated at Fri Jul 4 04:04:07 2025 by rpki-client