$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: b+gKASJ7HaCQ3DZcdPdcCS1sXUyxexZCtSQ2ID81DoM= Subject key identifier: B3:3A:1C:D4:6E:87:65:BF:1D:C3:E6:7F:7C:82:F2:7A:63:5B:A5:0E Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 2506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 24EB Signing time: Fri 04 Jul 2025 15:58:42 +0000 Manifest this update: Fri 04 Jul 2025 15:58:41 +0000 Manifest next update: Fri 11 Jul 2025 15:58:41 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: h3os1TpQGGeiYaJfXcMTc6yiE2zK7y5sD7VPFExgPTY=) 2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: yJwIYH0HnsFs9Iy2kQBVrjVIvfYou5TYh0Yox/p0ekY=) 3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: bQ3KvLtmzclqglCfQCTMWY9jEZJ/oqjU8/5vFJyfH5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9478 (0x2506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Jul 4 15:58:41 2025 GMT Not After : Jul 11 15:58:41 2025 GMT Subject: CN=6867fa32-a4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:b4:32:d1:92:88:4d:c1:f7:a7:0c:6e:0b: 69:be:e7:f3:fe:76:32:3a:74:99:d6:12:7e:b1:ae: 9b:6a:5d:0d:b4:aa:b4:c6:49:e6:34:bb:89:5f:91: f0:d4:d1:8e:37:a5:36:fd:06:3f:fc:49:cf:0f:c2: 2d:ff:24:26:5e:bd:f2:6e:23:84:f2:81:e1:07:1e: 15:2a:05:c8:6e:62:f0:78:5c:27:87:5b:13:7a:e7: 1b:f6:7d:4a:a1:68:10:8a:25:e7:c5:4e:31:b0:22: 39:25:ac:4f:56:85:ac:36:58:cf:cd:c8:b5:f5:67: ce:e3:26:e9:5a:df:fc:39:7b:7f:6a:8e:f8:32:34: 16:84:d4:50:9c:c8:1d:21:f4:fa:bf:e4:c8:b2:72: 7f:d6:eb:c9:ab:ea:42:8c:2a:16:ae:47:8a:f8:df: 9f:26:05:3a:58:4a:84:db:30:e8:0d:24:26:50:a9: 5b:6e:8a:16:36:57:13:8e:cd:df:53:6d:27:b1:af: 1e:e8:00:f6:44:a1:79:47:a9:c6:f2:08:56:c5:a0: ac:37:7f:1d:d7:c7:5f:73:68:e9:81:ef:1b:6a:41: e6:29:ea:2a:bf:f3:c6:27:7a:9e:58:9f:eb:bd:2a: ad:d1:ad:b6:35:ae:b9:0a:b3:a6:23:86:ec:3d:06: 75:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3A:1C:D4:6E:87:65:BF:1D:C3:E6:7F:7C:82:F2:7A:63:5B:A5:0E X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:93:95:c4:fa:4b:03:83:08:ff:e2:33:c0:43:66:a0:81:a7: 8f:b7:a9:19:80:0b:28:1e:47:14:bc:1b:ca:a8:6f:59:95:58: de:58:9e:7d:f2:5a:56:71:10:33:a0:16:5c:34:8d:c1:75:39: 62:ef:1e:75:1a:b8:d4:2a:ed:3d:5f:e2:2f:85:07:72:e0:05: 04:a4:9f:2e:c8:56:a3:c6:7b:bd:8e:45:9d:ff:07:eb:73:ae: 15:e7:2f:c7:21:f8:0c:1a:60:dd:2b:72:c9:3f:06:3b:81:85: f6:d6:62:c7:52:fe:48:b6:5e:94:e0:9d:e5:9b:37:bc:99:c0: 10:f3:c0:d9:4a:a4:67:16:40:6b:09:fa:dd:8c:1e:74:1e:ea: 83:67:58:23:c7:29:bb:18:28:7e:9f:c7:b0:1e:e3:10:fc:38: 8b:03:f2:e7:0f:29:40:9e:36:d0:26:13:14:76:ba:f9:97:9d: 86:d3:35:82:c7:b5:93:fa:91:8e:b7:0d:7c:e6:68:fb:b7:69: 0e:9e:56:64:07:a2:1f:aa:a3:96:a6:81:fd:97:1f:86:49:ed: 32:e6:65:e5:42:52:41:4b:e3:3f:9c:a5:ec:b5:9b:cc:32:ab: d1:7f:6b:34:61:67:09:d6:65:c2:b2:47:09:a3:07:db:2d:33: 61:65:69:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUwNzA0MTU1ODQxWhcNMjUwNzExMTU1ODQxWjAYMRYwFAYD VQQDEw02ODY3ZmEzMi1hNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfu0MtGSiE3B96cMbgtpvufz/nYyOnSZ1hJ+sa6bal0NtKq0xknmNLuJX5Hw 1NGON6U2/QY//EnPD8It/yQmXr3ybiOE8oHhBx4VKgXIbmLweFwnh1sTeucb9n1K oWgQiiXnxU4xsCI5JaxPVoWsNljPzci19WfO4ybpWt/8OXt/ao74MjQWhNRQnMgd IfT6v+TIsnJ/1uvJq+pCjCoWrkeK+N+fJgU6WEqE2zDoDSQmUKlbbooWNlcTjs3f U20nsa8e6AD2RKF5R6nG8ghWxaCsN38d18dfc2jpge8bakHmKeoqv/PGJ3qeWJ/r vSqt0a22Na65CrOmI4bsPQZ1mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLM6HNRu h2W/HcPmf3yC8npjW6UOMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQk5XE+ksDgwj/4jPAQ2aggaePt6kZgAsoHkcUvBvKqG9ZlVjeWJ59 8lpWcRAzoBZcNI3BdTli7x51GrjUKu09X+IvhQdy4AUEpJ8uyFajxnu9jkWd/wfr c64V5y/HIfgMGmDdK3LJPwY7gYX21mLHUv5Itl6U4J3lmze8mcAQ88DZSqRnFkBr CfrdjB50HuqDZ1gjxym7GCh+n8ewHuMQ/DiLA/LnDylAnjbQJhMUdrr5l52G0zWC x7WT+pGOtw185mj7t2kOnlZkB6IfqqOWpoH9lx+GSe0y5mXlQlJBS+M/nKXstZvM MqvRf2s0YWcJ1mXCskcJowfbLTNhZWka -----END CERTIFICATE-----Generated at Fri Jul 4 19:20:16 2025 by rpki-client