$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft File: YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json) Hash identifier: d0M9TpJ/KBxFH3Y5K+MM5VY0MeBBtxhTBoFxlR+xeOw= Subject key identifier: C9:F1:81:2A:8E:A0:67:48:65:FE:C8:C1:6A:BC:FB:41:D9:89:0E:CA Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft Manifest number: 09C7 Signing time: Wed 02 Jul 2025 20:11:51 +0000 Manifest this update: Wed 02 Jul 2025 20:11:51 +0000 Manifest next update: Wed 09 Jul 2025 20:11:51 +0000 Files and hashes: 1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: U4cqIKgnfLA+rjNKWYzdE8g/psY7aIfCOuJ1n5LLHms=) 2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: Jr5A5EFDHOtjVbEZUPlRHjoDRI+w8P0c18JoA/Eyebg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Validity Not Before: Jul 2 20:11:51 2025 GMT Not After : Jul 9 20:11:51 2025 GMT Subject: CN=68659287-dfef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:73:b2:bd:78:d4:10:e8:37:93:80:31:ec: 5d:a7:49:96:89:90:17:19:1d:f7:70:0e:ba:ad:47: 89:de:dc:05:81:3c:a2:20:ab:cf:95:9d:5e:fd:43: 78:66:6e:06:e2:a4:a1:73:a5:cf:54:41:a4:d8:df: 1f:e9:78:74:1b:a1:dc:44:33:33:f2:6f:be:f2:9b: af:2b:c2:c3:22:0d:68:e1:13:db:72:97:b3:99:4a: 39:dc:8a:be:99:5b:3d:09:30:87:4d:a1:cc:7f:39: 3a:1f:27:1b:e1:de:aa:7a:da:7c:ec:a2:7b:8f:bb: af:90:cb:b1:45:03:d6:3f:79:23:4b:d8:84:3e:9c: a9:78:26:ea:36:6d:80:ea:d7:f4:3f:64:ba:cd:bd: 65:34:f6:42:cf:0f:ae:c8:a2:97:25:b9:dd:5a:03: d1:ba:f4:96:35:e2:69:0d:bc:e0:1a:ae:44:2b:95: 2c:f8:af:06:2b:5b:0b:64:42:1f:5d:2a:bd:56:06: 56:f4:0e:f1:96:37:7d:94:31:fa:35:e6:45:13:b6: a5:77:17:b5:96:32:ab:02:0d:88:bb:7f:93:5b:ab: e5:f5:b9:b9:de:46:b3:54:16:fb:1d:a2:3f:3c:49: 06:81:3f:65:1a:06:23:25:09:fa:d5:2f:72:52:cb: f2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F1:81:2A:8E:A0:67:48:65:FE:C8:C1:6A:BC:FB:41:D9:89:0E:CA X509v3 Authority Key Identifier: keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:0b:ff:fd:78:49:ce:b2:ca:06:2b:27:77:2d:41:67:40:f9: 3c:17:9d:90:44:ab:49:1a:e3:f4:c9:65:b3:af:b1:c2:ce:fd: 9f:55:87:a7:a7:bc:3e:bb:18:fd:3a:29:cf:0e:b9:6d:1f:86: 37:a0:4d:e6:89:65:75:47:2e:83:3e:37:e0:75:60:79:5f:28: 09:b2:ee:db:1b:20:10:d3:fc:43:0b:37:2f:92:dc:70:71:69: b6:6e:a4:1a:55:61:e2:5b:f5:e7:64:b5:e5:d1:20:c3:58:3b: 49:21:78:03:f0:34:9a:8c:c3:2e:5c:d1:bf:f1:f8:be:a5:52: 91:84:e5:cb:92:5b:4c:77:34:63:fb:bf:16:08:61:19:8d:d2: 14:5b:d2:c3:6c:e5:1f:ed:d5:c2:df:06:e2:09:a3:d8:c9:47: 14:6d:59:60:dd:4c:f7:dc:d6:2d:c6:19:43:6c:c7:ca:79:03: ac:e7:71:c4:8d:04:87:69:22:73:6e:53:b3:34:bb:68:65:81: 78:f1:09:c5:1b:a4:45:ee:d5:03:62:26:56:9c:17:3d:31:76: 69:ba:f8:bf:8d:99:fa:db:b3:5f:82:43:66:67:8f:9b:1f:54: 94:48:70:b6:d4:fe:72:b2:1f:95:c6:a5:bc:ae:81:92:0b:6e: 1e:d0:10:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4 ODhGQTYzNDQwHhcNMjUwNzAyMjAxMTUxWhcNMjUwNzA5MjAxMTUxWjAYMRYwFAYD VQQDEw02ODY1OTI4Ny1kZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTxzsr141BDoN5OAMexdp0mWiZAXGR33cA66rUeJ3twFgTyiIKvPlZ1e/UN4 Zm4G4qShc6XPVEGk2N8f6Xh0G6HcRDMz8m++8puvK8LDIg1o4RPbcpezmUo53Iq+ mVs9CTCHTaHMfzk6Hycb4d6qetp87KJ7j7uvkMuxRQPWP3kjS9iEPpypeCbqNm2A 6tf0P2S6zb1lNPZCzw+uyKKXJbndWgPRuvSWNeJpDbzgGq5EK5Us+K8GK1sLZEIf XSq9VgZW9A7xljd9lDH6NeZFE7aldxe1ljKrAg2Iu3+TW6vl9bm53kazVBb7HaI/ PEkGgT9lGgYjJQn61S9yUsvyAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnxgSqO oGdIZf7IwWq8+0HZiQ7KMB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ4OC81RDI2ODM0QTgzOEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5 NjhwRW9VdmJjeGFJajZZMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0C//9eEnOssoGKyd3LUFnQPk8F52QRKtJGuP0yWWzr7HCzv2fVYen p7w+uxj9OinPDrltH4Y3oE3miWV1Ry6DPjfgdWB5XygJsu7bGyAQ0/xDCzcvktxw cWm2bqQaVWHiW/XnZLXl0SDDWDtJIXgD8DSajMMuXNG/8fi+pVKRhOXLkltMdzRj +78WCGEZjdIUW9LDbOUf7dXC3wbiCaPYyUcUbVlg3Uz33NYtxhlDbMfKeQOs53HE jQSHaSJzblOzNLtoZYF48QnFG6RF7tUDYiZWnBc9MXZpuvi/jZn627NfgkNmZ4+b H1SUSHC21P5ysh+VxqW8roGSC24e0BBR -----END CERTIFICATE-----Generated at Thu Jul 3 18:29:59 2025 by rpki-client