$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json) Hash identifier: MC889as6x5FVON99cXCBUBRWCCEHaF/Ai/x9VqTEEI0= Subject key identifier: CA:C3:C3:65:F0:A7:53:7E:CF:2C:C2:E2:D1:98:A1:7E:92:FA:7C:12 Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft Manifest number: 0904 Signing time: Mon 30 Jun 2025 20:29:55 +0000 Manifest this update: Mon 30 Jun 2025 20:29:54 +0000 Manifest next update: Mon 07 Jul 2025 20:29:54 +0000 Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: PaAPce8PItx0YYo+/UMdcMmmZ+19aGSUTEJSPvIVjPM=) 2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: SjfL0z+V8r1mG2yvSd88vw9Fy41PjMV8KGz6ODEkn2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Validity Not Before: Jun 30 20:29:54 2025 GMT Not After : Jul 7 20:29:54 2025 GMT Subject: CN=6862f3c3-cb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:87:35:dc:38:16:74:c0:a6:68:a0:18:b4: 33:02:20:2e:7e:72:ed:dc:12:3d:09:0d:8b:a5:77: f7:0f:07:06:9d:81:33:bc:e3:f6:7b:47:85:df:9d: 2d:96:dc:20:bb:8c:ef:3c:4b:35:e1:51:6c:9d:24: c6:f3:01:cb:9f:54:61:97:e5:47:8e:06:82:57:b4: ec:66:d1:7e:1a:2f:ac:27:da:2c:95:2f:b7:10:f3: 89:84:71:81:70:a2:6b:d5:26:a7:96:4b:18:59:3d: 4f:ef:34:68:e2:c9:3b:3d:cf:5b:d4:21:8a:e4:1f: 3d:9d:ff:0a:04:ae:21:b2:8c:8d:2b:e7:36:85:48: 5d:53:58:d6:bc:03:e2:aa:77:43:8e:f4:02:7e:99: 96:e4:29:c5:26:3c:60:99:12:7a:74:8d:e7:d2:ab: c5:a3:62:a5:94:ec:35:20:60:bb:43:3b:e7:4b:42: 23:c1:61:ce:21:4e:9f:d6:d5:80:0b:f9:13:a8:34: d8:70:86:50:d3:36:e6:b6:a8:36:68:a3:4a:b0:da: ab:8d:d7:5b:5e:1b:df:f1:04:95:22:4c:5b:33:e5: 86:d1:3f:66:de:20:30:0d:2d:be:5d:d3:e8:97:1d: de:3a:fc:3a:85:58:0c:ef:64:7c:60:cc:90:28:a3: 54:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C3:C3:65:F0:A7:53:7E:CF:2C:C2:E2:D1:98:A1:7E:92:FA:7C:12 X509v3 Authority Key Identifier: keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:bd:98:ba:ee:23:59:00:7a:a2:85:ee:00:e0:22:2f:a3:ed: c3:5a:61:7a:a0:3e:f2:22:9c:bf:29:26:62:80:11:4b:19:37: d0:99:13:d3:77:69:58:c2:e5:e8:35:4c:0d:ae:53:0f:bd:e5: 9b:71:41:e3:77:57:a3:aa:77:21:87:78:b3:a3:1b:18:b5:aa: e5:a4:8c:af:5c:66:a8:6a:aa:ca:1e:bf:fd:d1:2e:ac:f7:87: ef:bf:4e:e9:03:77:c3:ae:b5:6a:a9:06:8b:cc:8b:95:9a:85: 7d:ef:46:9b:19:4e:33:8b:ec:24:09:10:4c:48:42:24:ab:c7: 54:03:04:e1:c2:13:d6:f2:db:df:34:78:64:ae:2a:3d:26:50: 84:76:e6:2d:3c:5a:85:86:c1:90:8f:68:63:f8:b3:f8:fb:ed: 64:99:ff:93:fe:9e:28:42:3d:91:96:87:b4:5f:cb:fe:7e:cb: ac:1a:de:c1:63:41:55:75:df:e2:23:86:13:3e:96:23:a2:0c: 07:cd:72:14:8f:1e:59:3c:0b:0e:44:bf:5d:22:12:d5:7a:5f: 26:e1:44:01:3c:b8:71:19:3b:6c:8d:43:e0:33:1a:bc:37:79: 36:28:e8:64:b5:00:92:d2:9a:db:cc:1f:31:01:f5:6e:c0:6a: 8f:bb:96:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC QzRFMjY1NkIwHhcNMjUwNjMwMjAyOTU0WhcNMjUwNzA3MjAyOTU0WjAYMRYwFAYD VQQDEw02ODYyZjNjMy1jYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozKHNdw4FnTApmigGLQzAiAufnLt3BI9CQ2LpXf3DwcGnYEzvOP2e0eF350t ltwgu4zvPEs14VFsnSTG8wHLn1Rhl+VHjgaCV7TsZtF+Gi+sJ9oslS+3EPOJhHGB cKJr1SanlksYWT1P7zRo4sk7Pc9b1CGK5B89nf8KBK4hsoyNK+c2hUhdU1jWvAPi qndDjvQCfpmW5CnFJjxgmRJ6dI3n0qvFo2KllOw1IGC7QzvnS0IjwWHOIU6f1tWA C/kTqDTYcIZQ0zbmtqg2aKNKsNqrjddbXhvf8QSVIkxbM+WG0T9m3iAwDS2+XdPo lx3eOvw6hVgM72R8YMyQKKNUxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrDw2Xw p1N+zyzC4tGYoX6S+nwSMB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO bnRZQ2R6MHAySGk4VGlaV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcvZi67iNZAHqihe4A4CIvo+3DWmF6oD7yIpy/KSZigBFLGTfQmRPT d2lYwuXoNUwNrlMPveWbcUHjd1ejqnchh3izoxsYtarlpIyvXGaoaqrKHr/90S6s 94fvv07pA3fDrrVqqQaLzIuVmoV970abGU4zi+wkCRBMSEIkq8dUAwThwhPW8tvf NHhkrio9JlCEduYtPFqFhsGQj2hj+LP4++1kmf+T/p4oQj2Rloe0X8v+fsusGt7B Y0FVdd/iI4YTPpYjogwHzXIUjx5ZPAsORL9dIhLVel8m4UQBPLhxGTtsjUPgMxq8 N3k2KOhktQCS0prbzB8xAfVuwGqPu5YR -----END CERTIFICATE-----Generated at Wed Jul 2 13:39:13 2025 by rpki-client