$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json) Hash identifier: dUDeuAoYacq+0lLMOkvyTfR9ZnqMnKXRJbGP3wr2MR8= Subject key identifier: 07:11:A0:2F:30:8A:EB:05:96:BB:41:34:A0:D0:AA:E0:FC:CC:2B:C9 Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft Manifest number: 08EA Signing time: Sat 10 May 2025 20:05:55 +0000 Manifest this update: Sat 10 May 2025 20:05:54 +0000 Manifest next update: Sat 17 May 2025 20:05:54 +0000 Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: UV7kyB2SdgyowXy7Alhmg7nJyzll9tXnnji9cL7udzE=) 2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: SjfL0z+V8r1mG2yvSd88vw9Fy41PjMV8KGz6ODEkn2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Validity Not Before: May 10 20:05:54 2025 GMT Not After : May 17 20:05:54 2025 GMT Subject: CN=681fb1a3-0077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:a4:25:75:cf:07:c2:32:7c:55:fb:ed:1d: e6:58:35:67:d5:a7:50:88:b6:2f:21:0c:b8:5d:22: 51:a7:95:6d:18:d1:f0:40:75:56:1e:1e:0e:fd:3c: 2c:d2:d0:6e:7a:1c:7e:16:24:4f:aa:a0:b8:85:58: 05:f0:6e:2b:6b:80:01:8d:6b:ce:45:1e:6d:36:1b: 92:a1:2e:68:a8:71:c1:52:52:95:07:ba:b7:45:5b: 0c:ea:d3:f8:3d:be:2d:05:95:73:fe:de:4b:b6:8c: 11:5d:fe:0a:33:12:ff:45:06:51:7b:1a:e3:71:53: 7f:84:b9:7f:f7:ab:7e:4b:18:c4:f3:df:fe:8d:52: 6f:21:59:e0:fb:1e:9c:ab:0e:b4:13:83:db:8b:35: fd:17:4f:77:d3:93:60:c6:5b:8e:77:67:04:f9:75: 25:85:51:27:6c:af:f6:20:2f:21:c9:5c:e3:89:ef: ac:7a:2b:94:0a:66:99:a7:18:0d:47:ef:93:dc:44: 55:2a:29:67:07:fb:3d:3c:49:3a:a7:b6:5a:29:99: e6:44:a2:1a:a2:3e:97:cc:4c:45:67:fc:0c:10:b3: 7b:aa:83:cd:98:9d:f2:3b:3f:22:97:b6:2a:68:6d: 3d:41:c6:32:db:d7:47:50:7e:6a:89:8f:01:86:8a: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:11:A0:2F:30:8A:EB:05:96:BB:41:34:A0:D0:AA:E0:FC:CC:2B:C9 X509v3 Authority Key Identifier: keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:b7:89:c2:46:a0:53:97:04:51:80:e1:0c:46:d0:ed:9e:b4: 7c:96:74:9b:f4:78:a8:62:9e:4c:1f:28:01:12:23:9e:04:b6: d8:4f:93:d0:87:6d:ad:5a:84:5c:91:7e:5f:68:90:4b:67:13: ac:5c:92:c2:79:71:57:a8:29:4c:65:16:c6:23:ba:3a:58:2c: 3d:e9:2c:ed:67:86:32:af:a6:df:ee:45:2a:37:07:66:a1:78: 1b:b0:88:1d:b5:1e:57:ec:d8:1c:35:cd:98:35:98:57:a9:41: b5:16:f7:45:a6:ed:e6:68:0e:b8:07:0b:d0:3c:e8:c3:38:da: 52:90:a4:e0:c6:7d:a5:82:e4:79:3f:d2:3b:df:2b:e2:2d:50: ac:77:9e:1e:9a:f0:2e:c9:60:3c:fc:76:a3:59:1a:88:7b:f7: 1a:39:68:34:a4:a0:9e:a2:4a:6f:8b:f8:3c:20:7b:5c:b5:2d: 07:27:00:6b:7a:5d:62:03:29:ab:6e:ee:da:48:5f:74:87:46: 02:b6:e4:fd:c6:5f:58:d4:bc:4c:70:d9:06:38:15:d2:8b:38: e0:b6:45:02:69:74:89:1e:12:d0:d8:7b:d2:ee:e5:65:70:af: 51:2a:a4:50:ee:1d:ad:72:03:13:63:e6:07:61:d5:74:7f:ea: f4:79:39:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC QzRFMjY1NkIwHhcNMjUwNTEwMjAwNTU0WhcNMjUwNTE3MjAwNTU0WjAYMRYwFAYD VQQDEw02ODFmYjFhMy0wMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6akJXXPB8IyfFX77R3mWDVn1adQiLYvIQy4XSJRp5VtGNHwQHVWHh4O/Tws 0tBuehx+FiRPqqC4hVgF8G4ra4ABjWvORR5tNhuSoS5oqHHBUlKVB7q3RVsM6tP4 Pb4tBZVz/t5LtowRXf4KMxL/RQZRexrjcVN/hLl/96t+SxjE89/+jVJvIVng+x6c qw60E4PbizX9F09305NgxluOd2cE+XUlhVEnbK/2IC8hyVzjie+seiuUCmaZpxgN R++T3ERVKilnB/s9PEk6p7ZaKZnmRKIaoj6XzExFZ/wMELN7qoPNmJ3yOz8il7Yq aG09QcYy29dHUH5qiY8BhorwRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcRoC8w iusFlrtBNKDQquD8zCvJMB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO bnRZQ2R6MHAySGk4VGlaV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGt4nCRqBTlwRRgOEMRtDtnrR8lnSb9HioYp5MHygBEiOeBLbYT5PQ h22tWoRckX5faJBLZxOsXJLCeXFXqClMZRbGI7o6WCw96SztZ4Yyr6bf7kUqNwdm oXgbsIgdtR5X7NgcNc2YNZhXqUG1FvdFpu3maA64BwvQPOjDONpSkKTgxn2lguR5 P9I73yviLVCsd54emvAuyWA8/HajWRqIe/caOWg0pKCeokpvi/g8IHtctS0HJwBr el1iAymrbu7aSF90h0YCtuT9xl9Y1LxMcNkGOBXSizjgtkUCaXSJHhLQ2HvS7uVl cK9RKqRQ7h2tcgMTY+YHYdV0f+r0eTkw -----END CERTIFICATE-----Generated at Mon May 12 07:25:53 2025 by rpki-client