$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft File: y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json) Hash identifier: g9mbbraHbHHN31U5pxGzztZop0MCrzB3XtcBwwvGhAg= Subject key identifier: E5:37:93:8A:BE:3F:DE:65:E9:BF:11:5B:BC:35:C2:2D:20:FF:F4:A8 Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD Certificate issuer: /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft Manifest number: 0CAC Signing time: Fri 04 Jul 2025 19:31:55 +0000 Manifest this update: Fri 04 Jul 2025 19:31:54 +0000 Manifest next update: Fri 11 Jul 2025 19:31:54 +0000 Files and hashes: 1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: UHVCK/GtjNfl46FZDFPWitBXzHUoGs/4dq+/89Oi8s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Validity Not Before: Jul 4 19:31:54 2025 GMT Not After : Jul 11 19:31:54 2025 GMT Subject: CN=68682c2b-cfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:99:a0:17:3a:47:65:46:12:be:a5:cb:a9: c0:d9:c3:53:d9:89:f8:68:78:37:3c:d4:bf:a4:2f: 42:62:23:bf:14:68:b1:db:c3:46:e1:36:43:7a:fd: d8:40:6c:59:91:95:9a:03:36:a3:cd:ab:0b:1e:65: 92:c6:01:3f:ab:f8:21:88:90:ae:cb:b3:ec:2d:89: 51:2c:d5:3f:04:22:86:ca:4a:ba:1c:58:91:30:6f: c7:61:c9:aa:4b:c9:01:9c:a3:e7:a9:e0:1b:e2:7c: bd:cd:da:7b:ab:cf:74:61:95:0c:9c:2b:03:eb:6b: 35:43:bb:26:67:9c:58:42:d4:03:03:54:20:a6:d4: 67:f5:ab:67:44:84:fc:68:d4:3c:ad:ca:b8:df:74: 96:c1:22:39:ef:bc:98:0b:14:db:95:6f:e3:76:69: 2d:3f:60:e4:87:2b:9e:3d:72:b6:7e:b7:02:2b:83: 00:60:b3:d9:b2:ca:7d:b1:6f:6d:40:35:5e:07:bd: 29:7e:f9:9a:df:19:fc:2b:e9:f5:e6:55:da:46:c7: cc:82:0d:6d:e8:cd:d9:5d:66:d4:4e:04:98:40:23: f4:39:99:80:7e:e4:b5:04:c3:cd:c7:0f:bf:38:05: 07:08:5f:5e:4d:7d:1b:5d:d2:2b:ea:3c:32:98:2c: 01:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:37:93:8A:BE:3F:DE:65:E9:BF:11:5B:BC:35:C2:2D:20:FF:F4:A8 X509v3 Authority Key Identifier: keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:81:21:bc:8c:d1:0b:30:5a:b2:97:71:fc:53:ea:95:76:47: d8:ae:6b:9f:68:bc:91:a7:26:9e:cc:5b:e0:26:fc:f9:35:fc: 98:a9:5a:79:02:af:6d:13:bf:c5:5e:12:c0:fc:46:e3:7d:0a: a5:a2:37:ba:3a:2b:7e:cb:fb:4b:62:8b:4b:84:dd:09:25:0c: b2:f7:3f:e5:8d:ec:8c:6f:66:5a:d8:e5:48:cd:7e:b4:c3:80: e8:73:de:81:99:f7:60:63:47:f7:7f:2b:c3:27:fa:f2:60:b0: 5b:f3:31:3f:f8:ab:78:5d:a1:c9:1a:a1:63:40:87:2f:d2:72: c2:c8:bd:e8:00:18:a7:4e:67:a3:ac:d3:c0:3a:0e:2c:b0:09: 11:a3:d9:56:a6:eb:12:75:76:bd:d7:7b:2e:1b:b9:20:34:cb: 9d:70:8b:c1:7c:d7:65:02:63:d9:1a:b4:dd:ea:87:31:42:24: 75:ea:e6:78:b4:18:fc:58:31:07:e9:03:29:f4:60:04:cd:cd: a4:61:70:92:fb:43:a7:5f:67:45:d1:3f:ab:9c:4c:5a:14:23: 2f:d4:e9:25:67:23:e4:f5:28:cb:ca:cc:d5:5c:66:ab:b2:ef: c1:2c:d3:98:0d:07:24:90:24:17:aa:86:2b:c4:44:b2:49:b3: 56:ad:82:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKENCOURGRDcyQThERjUwRTA2NTAwNDM3ODA2QjZBMjAx OEVDQ0JERkQwHhcNMjUwNzA0MTkzMTU0WhcNMjUwNzExMTkzMTU0WjAYMRYwFAYD VQQDEw02ODY4MmMyYi1jZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jmZoBc6R2VGEr6ly6nA2cNT2Yn4aHg3PNS/pC9CYiO/FGix28NG4TZDev3Y QGxZkZWaAzajzasLHmWSxgE/q/ghiJCuy7PsLYlRLNU/BCKGykq6HFiRMG/HYcmq S8kBnKPnqeAb4ny9zdp7q890YZUMnCsD62s1Q7smZ5xYQtQDA1QgptRn9atnRIT8 aNQ8rcq433SWwSI577yYCxTblW/jdmktP2DkhyuePXK2frcCK4MAYLPZssp9sW9t QDVeB70pfvma3xn8K+n15lXaRsfMgg1t6M3ZXWbUTgSYQCP0OZmAfuS1BMPNxw+/ OAUHCF9eTX0bXdIr6jwymCwBnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU3k4q+ P95l6b8RW7w1wi0g//SoMB8GA1UdIwQYMBaAFMud/XKo31DgZQBDeAa2ogGOzL39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVPQmxBRU40QnJhaUFZN012 ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MzljcWpmVU9CbEFFTjRCcmFpQVk3TXZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVP QmxBRU40QnJhaUFZN012ZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAegSG8jNELMFqyl3H8U+qVdkfYrmufaLyRpyaezFvgJvz5NfyYqVp5 Aq9tE7/FXhLA/EbjfQqloje6Oit+y/tLYotLhN0JJQyy9z/ljeyMb2Za2OVIzX60 w4Doc96BmfdgY0f3fyvDJ/ryYLBb8zE/+Kt4XaHJGqFjQIcv0nLCyL3oABinTmej rNPAOg4ssAkRo9lWpusSdXa913suG7kgNMudcIvBfNdlAmPZGrTd6ocxQiR16uZ4 tBj8WDEH6QMp9GAEzc2kYXCS+0OnX2dF0T+rnExaFCMv1OklZyPk9SjLyszVXGar su/BLNOYDQckkCQXqoYrxESySbNWrYJO -----END CERTIFICATE-----Generated at Sat Jul 5 14:51:00 2025 by rpki-client