$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft File: YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json) Hash identifier: LTqgbjgN9lpkix6LnOBGhGOLmWMTHi3Ncj1urx4Vj7k= Subject key identifier: D4:9F:C8:BE:A0:95:44:0C:CD:73:96:A1:90:AA:CE:97:3F:A3:DD:FA Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10 Certificate issuer: /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft Manifest number: 01B5 Signing time: Thu 03 Jul 2025 03:11:07 +0000 Manifest this update: Thu 03 Jul 2025 03:11:07 +0000 Manifest next update: Thu 10 Jul 2025 03:11:07 +0000 Files and hashes: 1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: GDxdMVBgrG/FNO8KM7nGfwxFV/OCLAaEnkfPsAbCtp4=) 2: CCA801A2B97F11ED98ED3A74C4F9AE02.roa (hash: 70nEfW6y679vz54r1rMiwd9UT2VLDF6LzETjWTqp0aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A285, serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10 Validity Not Before: Jul 3 03:11:07 2025 GMT Not After : Jul 10 03:11:07 2025 GMT Subject: CN=6865f4cb-5ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:9f:f1:ef:bd:51:78:bf:0e:07:2a:ac:0f: 41:08:35:43:9a:d6:cd:e9:42:ca:b2:b7:98:c5:9a: 6a:df:0a:35:b7:fd:8e:a4:d3:93:26:c0:13:6b:52: d4:1c:35:54:18:e5:b8:e3:30:4e:03:ac:bb:cf:4b: 3b:50:fb:af:0e:78:98:e9:08:fe:c2:3c:cd:86:d4: 9e:a0:82:96:b5:e9:48:1a:90:da:a2:d7:7f:a3:db: 5e:91:df:02:17:dc:5c:b7:cf:b4:0c:b7:91:26:fc: 5b:91:56:cd:87:2f:49:d9:d3:5b:b1:19:bc:30:54: ab:2d:7e:61:82:ba:3a:71:36:96:80:8e:cf:5e:2d: 82:03:7b:02:53:7d:dd:86:01:db:b8:47:f9:26:97: 52:7f:e3:99:73:ce:42:69:9e:40:e0:01:7d:d2:f7: 0d:27:16:34:f3:35:b1:49:4c:89:c6:4f:0c:ba:78: 38:ef:30:dc:eb:07:63:6a:1c:60:5d:69:03:02:22: 78:af:0f:5c:56:8f:85:fb:36:ca:24:b9:b9:98:f9: 0b:b4:54:00:34:9f:70:94:43:d7:80:72:7e:f9:c9: 79:db:b5:52:a5:7c:86:3a:74:bc:0f:95:b0:ee:34: 6a:10:ae:26:17:75:6c:8d:30:33:99:d2:e8:25:f1: ac:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9F:C8:BE:A0:95:44:0C:CD:73:96:A1:90:AA:CE:97:3F:A3:DD:FA X509v3 Authority Key Identifier: keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:23:d0:7d:cc:dd:76:16:74:0d:70:6b:ea:e6:c2:c1:2f:11: e7:43:55:4b:ff:b4:84:5c:8c:1c:31:69:de:91:f0:33:f1:25: 1b:46:0d:02:14:0c:90:d1:86:92:aa:a9:78:6f:8a:53:32:87: b5:97:6c:fa:2f:a2:03:35:ca:51:a3:0e:16:4c:d7:38:e6:f8: 37:3e:c7:74:1e:bc:d8:4b:5c:6c:39:b5:1b:5d:78:34:d0:08: c3:1e:ed:f9:0c:a4:a9:fd:dd:13:a7:ce:33:be:93:a9:37:60: 48:f3:3f:ab:7a:cd:ed:4b:0d:92:24:e0:b7:a8:2f:c7:7e:b9: 82:74:c4:37:7c:2d:8d:b4:81:b2:8e:e2:6f:98:6c:18:03:f2: 23:65:77:03:c2:0a:5b:6d:4a:c5:75:44:da:92:13:a1:a8:8d: 09:17:14:9a:d6:07:b6:29:f8:ba:b7:e2:16:4e:97:d3:53:04: 61:2f:bb:f0:37:a1:cb:6a:a7:07:11:1f:58:22:5b:24:94:9b: 28:ff:85:79:3f:8d:2e:c9:b1:04:cc:42:5d:4d:f7:22:bb:a2: 7a:39:6b:5d:d9:7f:f2:d5:dd:26:b5:18:9c:da:84:ea:0a:5f: 5c:76:a8:9e:1b:0d:c2:09:af:1c:e9:57:8f:d4:41:94:e0:ae: cf:39:d2:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEyODUxMTAvBgNVBAUTKDYyMjhBQjY4QTI0NjBCREM1NjY4OEI2RTU1ODkxNzkw REQ4MDRCMTAwHhcNMjUwNzAzMDMxMTA3WhcNMjUwNzEwMDMxMTA3WjAYMRYwFAYD VQQDEw02ODY1ZjRjYi01YmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywKf8e+9UXi/DgcqrA9BCDVDmtbN6ULKsreYxZpq3wo1t/2OpNOTJsATa1LU HDVUGOW44zBOA6y7z0s7UPuvDniY6Qj+wjzNhtSeoIKWtelIGpDaotd/o9tekd8C F9xct8+0DLeRJvxbkVbNhy9J2dNbsRm8MFSrLX5hgro6cTaWgI7PXi2CA3sCU33d hgHbuEf5JpdSf+OZc85CaZ5A4AF90vcNJxY08zWxSUyJxk8Mung47zDc6wdjahxg XWkDAiJ4rw9cVo+F+zbKJLm5mPkLtFQANJ9wlEPXgHJ++cl527VSpXyGOnS8D5Ww 7jRqEK4mF3VsjTAzmdLoJfGsnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSfyL6g lUQMzXOWoZCqzpc/o936MB8GA1UdIwQYMBaAFGIoq2iiRgvcVmiLblWJF5DdgEsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTI4NS9FODE5MjAzOEI5 N0ExMUVEQTI4NUE1NTRDNEY5QUUwMi9ZaWlyYUtKR0M5eFdhSXR1VllrWGtOMkFT eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpaXJhS0pHQzl4V2FJdHVWWWtYa04yQVN4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTI4NS9FODE5MjAzOEI5N0ExMUVEQTI4NUE1NTRDNEY5QUUwMi9ZaWlyYUtKR0M5 eFdhSXR1VllrWGtOMkFTeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcI9B9zN12FnQNcGvq5sLBLxHnQ1VL/7SEXIwcMWnekfAz8SUbRg0C FAyQ0YaSqql4b4pTMoe1l2z6L6IDNcpRow4WTNc45vg3Psd0HrzYS1xsObUbXXg0 0AjDHu35DKSp/d0Tp84zvpOpN2BI8z+res3tSw2SJOC3qC/HfrmCdMQ3fC2NtIGy juJvmGwYA/IjZXcDwgpbbUrFdUTakhOhqI0JFxSa1ge2Kfi6t+IWTpfTUwRhL7vw N6HLaqcHER9YIlsklJso/4V5P40uybEEzEJdTfciu6J6OWtd2X/y1d0mtRic2oTq Cl9cdqieGw3CCa8c6VeP1EGU4K7POdIH -----END CERTIFICATE-----Generated at Thu Jul 3 17:11:37 2025 by rpki-client