$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft File: yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json) Hash identifier: Og1Yg+R9iHjTFRQPKmrNEYn5V0BeMUX26kbb3O1abCA= Subject key identifier: AE:FA:FA:F0:63:C5:66:AE:4A:ED:7F:3C:49:B8:F7:46:EB:48:1F:E2 Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft Manifest number: 0112 Signing time: Tue 01 Jul 2025 05:23:28 +0000 Manifest this update: Tue 01 Jul 2025 05:23:27 +0000 Manifest next update: Tue 08 Jul 2025 05:23:27 +0000 Files and hashes: 1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: Bvppd61d76mFMxWbbZXlC2hOCVVWx8dJdaGVWahQkjk=) 2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: 6omCuuVUgdbnOuuOFxfXDIcF+rrSXl7KykbR3GM1b/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Validity Not Before: Jul 1 05:23:27 2025 GMT Not After : Jul 8 05:23:27 2025 GMT Subject: CN=686370d0-7c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4f:91:ea:2c:b2:c4:05:af:87:ea:2c:ef:b5: 1a:41:4a:47:1d:d3:ca:72:d0:00:cb:35:8c:45:a8: ca:b1:3f:6a:32:09:25:fa:19:d0:6d:05:04:8b:03: ef:bb:c5:94:a8:d9:de:7e:6f:29:8b:0c:5f:14:a2: 93:e0:d5:97:14:c4:ee:dd:8c:ec:12:22:99:6d:66: ea:18:f0:8e:53:49:e2:f1:b3:2d:68:43:a6:d6:90: 5b:e7:c6:95:58:b9:e7:5f:28:8a:59:ee:72:48:d8: 55:55:71:37:f6:28:b8:b1:f9:25:9d:38:7d:40:66: 78:73:63:26:3f:03:6b:4e:5e:4d:24:dc:a4:1a:36: 32:21:03:35:66:30:25:df:a9:18:57:e4:e0:56:41: 34:3c:e8:1f:8e:27:69:d2:5a:80:0f:05:16:63:6e: b1:a6:57:de:86:6d:68:a1:37:2e:fb:fc:08:65:5b: e4:4d:59:33:d7:09:c7:ac:9d:7e:4d:86:0e:4d:47: 23:34:84:24:a5:84:20:30:2d:71:92:6f:e2:c4:4d: 9e:08:d1:2c:76:27:cc:2c:32:3b:c6:2b:ec:b5:b6: b2:4c:2f:44:06:09:a1:f1:ae:1c:8c:4a:cf:2b:fd: 33:43:5f:b6:c1:8b:de:41:ae:c2:3e:30:bd:a6:9d: 02:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FA:FA:F0:63:C5:66:AE:4A:ED:7F:3C:49:B8:F7:46:EB:48:1F:E2 X509v3 Authority Key Identifier: keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:91:fa:84:20:de:28:b3:81:3e:eb:a3:ef:87:5e:39:a9:a4: 85:96:7c:fe:fc:17:c2:1d:63:04:ab:70:6f:a2:6d:0a:16:e0: df:d7:2b:dc:9c:6f:79:02:69:39:b0:f8:c6:5d:29:df:0d:b8: 1b:fb:2e:55:1b:f6:ee:b2:09:87:fb:e1:b9:b7:a3:57:ec:7e: e1:fc:6d:94:42:2b:12:11:c3:57:95:5d:1a:eb:47:ed:11:82: 6f:4e:4c:7e:93:cb:9e:9b:a7:ad:75:95:df:12:41:92:5e:1c: be:a0:bc:68:49:e5:ca:82:64:20:37:49:89:6e:ae:28:d0:a4: bf:2b:8f:33:48:7d:6b:04:0d:26:77:93:b6:34:60:ea:70:17: d6:60:27:ba:24:4e:32:e4:04:28:5c:a8:07:34:84:41:f7:56: 16:52:f9:66:03:2f:8b:93:6b:c2:c3:7f:26:ec:cf:b5:95:8f: c6:a5:da:67:9e:1b:ec:13:33:e3:74:bf:87:dc:3a:68:bb:9c: 6e:8e:5e:16:74:cc:26:0b:d2:05:1e:6f:5a:19:08:4e:e2:d3: 84:cb:de:45:02:0a:d0:1a:0b:25:40:04:fd:a6:3b:ee:0a:f3: c1:8c:64:39:47:53:d5:56:37:e9:8b:a1:6d:fc:57:37:9a:2d: 68:9d:cb:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1MjYxMTAvBgNVBAUTKENBRTkwRjQ2QzIyMUQwMEIyREEwODA3QUQ0QzRCMDY1 MDMzNzQzNDQwHhcNMjUwNzAxMDUyMzI3WhcNMjUwNzA4MDUyMzI3WjAYMRYwFAYD VQQDEw02ODYzNzBkMC03YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0E+R6iyyxAWvh+os77UaQUpHHdPKctAAyzWMRajKsT9qMgkl+hnQbQUEiwPv u8WUqNnefm8piwxfFKKT4NWXFMTu3YzsEiKZbWbqGPCOU0ni8bMtaEOm1pBb58aV WLnnXyiKWe5ySNhVVXE39ii4sfklnTh9QGZ4c2MmPwNrTl5NJNykGjYyIQM1ZjAl 36kYV+TgVkE0POgfjidp0lqADwUWY26xplfehm1ooTcu+/wIZVvkTVkz1wnHrJ1+ TYYOTUcjNIQkpYQgMC1xkm/ixE2eCNEsdifMLDI7xivstbayTC9EBgmh8a4cjErP K/0zQ1+2wYveQa7CPjC9pp0CVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK76+vBj xWauSu1/PEm490brSB/iMB8GA1UdIwQYMBaAFMrpD0bCIdALLaCAetTEsGUDN0NE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODUyNi9DNEM2RDA0NkI0 NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBBc3RvSUI2MU1Td1pRTTNR MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1a1BSc0loMEFzdG9JQjYxTVN3WlFNM1EwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODUyNi9DNEM2RDA0NkI0NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBB c3RvSUI2MU1Td1pRTTNRMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6kfqEIN4os4E+66Pvh145qaSFlnz+/BfCHWMEq3Bvom0KFuDf1yvc nG95Amk5sPjGXSnfDbgb+y5VG/busgmH++G5t6NX7H7h/G2UQisSEcNXlV0a60ft EYJvTkx+k8uem6etdZXfEkGSXhy+oLxoSeXKgmQgN0mJbq4o0KS/K48zSH1rBA0m d5O2NGDqcBfWYCe6JE4y5AQoXKgHNIRB91YWUvlmAy+Lk2vCw38m7M+1lY/Gpdpn nhvsEzPjdL+H3Dpou5xujl4WdMwmC9IFHm9aGQhO4tOEy95FAgrQGgslQAT9pjvu CvPBjGQ5R1PVVjfpi6Ft/Fc3mi1onct1 -----END CERTIFICATE-----Generated at Tue Jul 1 14:02:27 2025 by rpki-client