$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: OC+iVO1gNhO+xbACHRtpN+/IXKh5vc6Q55ZhGIZCg4Y= Subject key identifier: E9:A9:59:C2:33:50:20:AB:E4:DB:BB:24:DF:6E:29:2C:AE:72:D3:58 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: E9 Signing time: Tue 01 Jul 2025 05:59:51 +0000 Manifest this update: Tue 01 Jul 2025 05:59:50 +0000 Manifest next update: Tue 08 Jul 2025 05:59:50 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: aaWi4LjSjRiRjexMJETZGEBbKM4M34+L/Ytp6DglsLI=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=) 3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Jul 1 05:59:50 2025 GMT Not After : Jul 8 05:59:50 2025 GMT Subject: CN=68637957-db88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:6f:f0:4a:32:aa:fd:40:92:70:28:aa:c0: 0d:18:68:2d:ec:2c:b4:6b:69:bf:aa:8f:97:4d:04: 84:a0:83:cc:7a:09:c6:4e:df:43:ad:9a:0d:8c:81: cf:73:c9:cb:f0:72:06:42:e3:0a:d9:38:4b:77:fa: 13:01:2b:1e:17:65:db:f4:7c:2f:56:11:ab:7f:df: 5c:40:30:d7:70:b6:58:00:c0:51:a8:ee:b2:bf:a2: 76:82:b4:23:d8:6f:9c:6e:b5:f3:96:a7:99:e0:a8: a5:fb:14:a6:f6:8f:1e:d6:80:53:01:d2:4c:b1:24: 31:35:5b:60:b4:ea:e2:df:f7:d4:d2:63:64:4d:8a: 0d:47:60:b5:65:df:31:66:d8:fe:ce:e4:eb:1c:c9: bc:4e:66:86:07:11:0e:d4:d7:35:16:5a:5b:4c:65: a2:10:4b:5f:6b:6f:30:91:e1:b9:59:a0:6c:07:21: fc:1e:d3:92:65:fe:af:b1:79:c9:06:fb:67:71:65: 2b:43:6b:59:1b:48:ca:62:5b:32:c2:35:01:50:3c: f9:06:14:4e:b7:c4:76:f4:14:2d:55:12:29:db:7e: 64:21:c5:b3:9b:ac:bc:8d:40:54:84:65:23:07:6a: c4:72:f5:ee:ac:65:77:99:9a:23:87:fd:74:c3:3e: c2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A9:59:C2:33:50:20:AB:E4:DB:BB:24:DF:6E:29:2C:AE:72:D3:58 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:af:64:b8:e8:20:e4:b7:57:28:41:85:5f:02:7d:2e:2e:34: 40:ff:d2:d9:6f:29:87:b4:7e:d6:e4:f6:a2:e7:7b:0b:7c:08: b3:79:f0:81:42:e2:34:46:3b:56:c5:6c:ea:ff:2a:59:8d:1d: c5:09:40:fe:1e:65:b6:0a:96:06:5a:94:f5:88:69:8c:99:3d: 53:27:b8:bb:80:61:d9:ed:56:74:28:62:37:55:71:c2:64:97: 26:80:55:e0:94:55:e6:9b:4c:b6:fd:01:ed:32:d8:aa:f8:0e: e9:ba:73:cc:f1:0d:21:ff:34:d8:3c:0c:45:85:d7:47:2a:bc: 05:95:75:c1:52:75:c9:77:10:1f:e8:dc:50:d3:88:55:d0:35: af:c8:21:d4:bc:7c:a3:14:86:5c:66:ff:c7:44:0e:b8:2e:4f: 72:f8:23:ca:cd:b9:b8:dc:47:57:22:72:68:08:45:de:32:ab: 68:1c:bf:01:0a:32:1d:cd:e0:bc:2b:ad:67:86:7c:60:a3:eb: b7:05:8a:b2:2d:f2:f5:a6:a9:32:95:07:91:d1:35:61:15:ca: c5:70:ac:72:eb:b4:b2:96:46:b9:50:d7:54:70:b2:6e:f9:0e: 8b:a1:5f:c5:9f:2d:17:f6:79:be:00:81:4f:10:c6:72:1d:b4: 62:5a:4d:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjUwNzAxMDU1OTUwWhcNMjUwNzA4MDU1OTUwWjAYMRYwFAYD VQQDEw02ODYzNzk1Ny1kYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ9v8Eoyqv1AknAoqsANGGgt7Cy0a2m/qo+XTQSEoIPMegnGTt9DrZoNjIHP c8nL8HIGQuMK2ThLd/oTASseF2Xb9HwvVhGrf99cQDDXcLZYAMBRqO6yv6J2grQj 2G+cbrXzlqeZ4Kil+xSm9o8e1oBTAdJMsSQxNVtgtOri3/fU0mNkTYoNR2C1Zd8x Ztj+zuTrHMm8TmaGBxEO1Nc1FlpbTGWiEEtfa28wkeG5WaBsByH8HtOSZf6vsXnJ BvtncWUrQ2tZG0jKYlsywjUBUDz5BhROt8R29BQtVRIp235kIcWzm6y8jUBUhGUj B2rEcvXurGV3mZojh/10wz7CEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmpWcIz UCCr5Nu7JN9uKSyuctNYMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWr2S46CDkt1coQYVfAn0uLjRA/9LZbymHtH7W5Pai53sLfAizefCB QuI0RjtWxWzq/ypZjR3FCUD+HmW2CpYGWpT1iGmMmT1TJ7i7gGHZ7VZ0KGI3VXHC ZJcmgFXglFXmm0y2/QHtMtiq+A7punPM8Q0h/zTYPAxFhddHKrwFlXXBUnXJdxAf 6NxQ04hV0DWvyCHUvHyjFIZcZv/HRA64Lk9y+CPKzbm43EdXInJoCEXeMqtoHL8B CjIdzeC8K61nhnxgo+u3BYqyLfL1pqkylQeR0TVhFcrFcKxy67Sylka5UNdUcLJu +Q6LoV/Fny0X9nm+AIFPEMZyHbRiWk2A -----END CERTIFICATE-----Generated at Wed Jul 2 22:41:44 2025 by rpki-client