$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft File: yvg06LwFd8t93bA-7UaRLns0ccw.mft (raw, json) Hash identifier: 87KJ/WAhfAOCo0oaslaNVxyALgn5KCYUEhMz+nele+w= Subject key identifier: 40:93:93:D6:36:89:A0:91:08:10:85:99:F9:7E:C6:A1:70:C1:19:D1 Authority key identifier: CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC Certificate issuer: /CN=A9158D5B/serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft Manifest number: B2 Signing time: Tue 01 Jul 2025 06:41:14 +0000 Manifest this update: Tue 01 Jul 2025 06:41:14 +0000 Manifest next update: Tue 08 Jul 2025 06:41:14 +0000 Files and hashes: 1: yvg06LwFd8t93bA-7UaRLns0ccw.crl (hash: OSwf301AaA+xKKB1q7QIg9WICwduv5cuIqMDM4jsWlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC Validity Not Before: Jul 1 06:41:14 2025 GMT Not After : Jul 8 06:41:14 2025 GMT Subject: CN=6863830a-cc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ba:f1:00:a4:1b:d4:99:f8:51:a6:55:dc:69: c3:4e:21:9a:e5:60:65:42:78:6d:5c:dd:f9:fe:bf: c5:66:a2:3d:9a:cf:83:e0:04:08:d4:25:19:a1:9d: 99:f6:06:d0:7a:ea:56:ce:a7:eb:eb:03:2c:ef:7a: d6:56:30:4f:07:05:d0:68:8b:a3:f6:cb:9d:0c:ee: 15:bf:82:70:3d:a1:b0:ae:32:f5:9c:54:d5:66:08: c5:cc:1f:ec:90:8c:37:d3:21:cb:54:30:5f:26:33: cf:fa:99:e9:16:c2:40:2c:e4:38:55:7a:ec:6f:f6: 77:00:6d:aa:d1:b2:4b:0b:a7:1e:ed:5e:92:9c:23: 34:ad:9f:73:57:45:19:1e:05:4e:d3:ed:f3:cc:ec: 63:12:d0:0a:4a:97:46:a1:0c:e7:2e:ea:18:04:75: 31:b5:59:6e:b2:82:23:97:36:ac:f2:be:9b:be:2a: 6a:4c:d4:6c:20:3b:73:b5:e4:0e:6b:ee:7b:06:d7: 74:82:ef:7a:de:4b:a9:c1:1a:9c:0e:dd:1f:d2:cf: 52:21:bf:35:a4:26:f4:05:99:20:2f:bd:36:55:17: ec:e9:73:ae:56:93:19:45:61:de:01:56:e8:17:9c: ec:e6:2d:12:10:63:68:f4:10:5d:9a:dd:6f:95:5c: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:93:93:D6:36:89:A0:91:08:10:85:99:F9:7E:C6:A1:70:C1:19:D1 X509v3 Authority Key Identifier: keyid:CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:0f:61:e2:c7:48:57:09:c2:e5:14:d6:d1:93:7a:79:59:65: 44:4a:7a:1b:b7:cc:2d:0b:e3:ad:40:0c:2e:e1:00:6c:92:9c: f1:3c:b7:e5:3e:33:71:1c:06:9a:04:8b:f1:5f:2c:45:ce:de: 1e:f9:58:77:1c:de:32:a6:21:b2:98:55:03:ca:37:27:db:54: 8d:de:11:fe:b7:3e:7b:9c:20:f4:7e:c7:3c:fb:5f:84:d1:b1: 86:85:5a:80:59:55:e2:49:01:00:d8:27:3c:4e:c4:0f:f2:03: 38:a4:f9:9a:9c:a9:ac:13:90:67:c5:66:c6:5e:c1:77:72:c0: e1:fd:5e:77:28:5b:77:ae:3c:ce:53:a7:6c:2a:02:bf:97:32: f8:a3:b1:9b:46:ee:49:1d:c4:3c:c7:d3:40:66:7b:b9:4a:e0: 53:4c:a8:16:c7:36:20:f5:4f:0d:81:de:50:4b:f4:91:6d:44: ca:b4:45:7d:a7:01:8a:91:95:96:f4:d5:0b:76:8f:49:09:75: 89:52:72:b7:24:c7:f0:2f:0f:d5:f6:fe:f5:59:64:b9:f7:5c: 47:d7:be:5a:55:83:f0:95:5a:f0:81:03:b2:c0:92:80:f0:d7: 96:8a:54:71:c3:3b:35:09:b3:01:60:12:65:83:b9:84:d1:87: 63:3e:8e:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENBRjgzNEU4QkMwNTc3Q0I3REREQjAzRUVENDY5MTJF N0IzNDcxQ0MwHhcNMjUwNzAxMDY0MTE0WhcNMjUwNzA4MDY0MTE0WjAYMRYwFAYD VQQDEw02ODYzODMwYS1jYzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7rxAKQb1Jn4UaZV3GnDTiGa5WBlQnhtXN35/r/FZqI9ms+D4AQI1CUZoZ2Z 9gbQeupWzqfr6wMs73rWVjBPBwXQaIuj9sudDO4Vv4JwPaGwrjL1nFTVZgjFzB/s kIw30yHLVDBfJjPP+pnpFsJALOQ4VXrsb/Z3AG2q0bJLC6ce7V6SnCM0rZ9zV0UZ HgVO0+3zzOxjEtAKSpdGoQznLuoYBHUxtVlusoIjlzas8r6bvipqTNRsIDtzteQO a+57Btd0gu963kupwRqcDt0f0s9SIb81pCb0BZkgL702VRfs6XOuVpMZRWHeAVbo F5zs5i0SEGNo9BBdmt1vlVysXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECTk9Y2 iaCRCBCFmfl+xqFwwRnRMB8GA1UdIwQYMBaAFMr4NOi8BXfLfd2wPu1GkS57NHHM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi84NEIyRkJENDQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi95dmcwNkx3RmQ4dDkzYkEtN1VhUkxuczBj Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2ZzA2THdGZDh0OTNiQS03VWFSTG5zMGNjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi84NEIyRkJENDQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi95dmcwNkx3RmQ4 dDkzYkEtN1VhUkxuczBjY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxD2Hix0hXCcLlFNbRk3p5WWVESnobt8wtC+OtQAwu4QBskpzxPLfl PjNxHAaaBIvxXyxFzt4e+Vh3HN4ypiGymFUDyjcn21SN3hH+tz57nCD0fsc8+1+E 0bGGhVqAWVXiSQEA2Cc8TsQP8gM4pPmanKmsE5BnxWbGXsF3csDh/V53KFt3rjzO U6dsKgK/lzL4o7GbRu5JHcQ8x9NAZnu5SuBTTKgWxzYg9U8Ngd5QS/SRbUTKtEV9 pwGKkZWW9NULdo9JCXWJUnK3JMfwLw/V9v71WWS591xH175aVYPwlVrwgQOywJKA 8NeWilRxwzs1CbMBYBJlg7mE0YdjPo6x -----END CERTIFICATE-----Generated at Tue Jul 1 20:53:03 2025 by rpki-client