$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft File: YiOr1va2e6_v4-c2Rv16ZuECFL4.mft (raw, json) Hash identifier: aRztXXNy42y9RdqorhTcc1H91XOfcO5Ln8Ry5sbHLDg= Subject key identifier: AF:50:A4:0E:87:B2:4F:4F:37:62:42:93:94:34:56:0A:11:D1:CF:7C Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE Certificate issuer: /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft Manifest number: D7 Signing time: Tue 01 Jul 2025 06:09:37 +0000 Manifest this update: Tue 01 Jul 2025 06:09:36 +0000 Manifest next update: Tue 08 Jul 2025 06:09:36 +0000 Files and hashes: 1: YiOr1va2e6_v4-c2Rv16ZuECFL4.crl (hash: RohsqtUScfsBgyn/D4isadCzzd/qA4317gIozlGJrsQ=) 2: 884A59828D3211EF9E092384C4F9AE02.roa (hash: GqBUNYobHpDctK2tEnk2wHBO+0ezgYbmfu4uXv2cQjU=) 3: 878615B88D3211EF9E092384C4F9AE02.roa (hash: q+Tk9tMLXZGyDR8qEuibZ0K/2qF5avUb5fU2EBmwtEQ=) 4: A937C2200FA511EFBDB06936C4F9AE02.roa (hash: fjeTe75jZm5dJALxtcTp9K54dbCVL0/Mg85S4l4+7No=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176FD9, serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE Validity Not Before: Jul 1 06:09:36 2025 GMT Not After : Jul 8 06:09:36 2025 GMT Subject: CN=68637ba0-339e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4d:3b:ce:8a:95:28:46:22:ba:f7:a7:70:a4: 81:14:58:7a:88:db:e3:ae:0f:89:97:c3:06:f5:aa: 2c:cf:f8:83:92:58:bf:c7:00:78:ce:e3:e6:ca:41: d6:a3:3a:ae:e9:4a:66:18:b0:a8:6c:8d:b2:8c:50: b8:a9:e4:89:fb:44:b5:f5:24:21:15:ff:e1:2a:85: 3f:0a:b7:25:7c:7f:43:39:31:6a:1e:e1:aa:09:09: fc:46:29:06:70:45:a8:9c:7d:0d:be:b1:6a:d8:d1: 21:1f:0b:64:19:a5:1e:8c:e4:fe:9c:a1:ec:92:a2: f2:8c:31:ae:99:84:dc:d5:54:74:bf:80:83:0f:cd: b7:ea:7a:73:71:dd:98:4a:34:f3:01:30:57:3d:62: 8f:9f:89:21:7e:e5:a6:90:65:d0:68:2a:34:f5:99: 91:57:9b:44:f7:f9:f2:bc:9e:a1:73:e9:26:8e:61: 49:37:fd:20:78:6a:f7:95:4a:2e:78:4e:97:1e:a5: 9d:45:00:43:fd:8e:eb:2f:52:c2:33:5f:d6:3e:79: b4:ca:4d:37:e3:d0:85:f0:8e:cc:b0:c1:54:e6:b6: ef:99:e4:d2:6f:a0:ed:ae:5e:29:46:55:42:ff:fc: 31:0c:e4:dc:8d:3c:a7:95:19:f1:77:e0:06:63:b8: 67:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:50:A4:0E:87:B2:4F:4F:37:62:42:93:94:34:56:0A:11:D1:CF:7C X509v3 Authority Key Identifier: keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:04:38:57:2a:aa:34:d1:17:dd:6d:db:25:84:56:13:47:17: 0d:43:a4:76:15:7e:dc:95:42:11:24:30:ff:b9:29:f2:64:d6: 0f:be:54:3c:34:71:c8:8b:b8:83:54:46:d8:52:c1:0e:65:fb: 15:05:0a:dd:05:ff:b9:6d:d2:a4:ef:bf:72:d4:f4:84:6c:5d: f7:6b:a3:ef:6b:00:d9:bf:4c:db:af:d6:de:3e:e4:21:ed:ba: 71:74:26:f6:c7:74:b2:d7:49:85:34:61:61:31:c1:bf:d8:77: 68:7b:4b:3e:78:4f:d5:9a:9e:f8:23:89:e3:94:1e:05:8a:06: 82:ef:d0:ef:a1:ed:54:61:fc:ba:bf:54:f4:8d:43:13:7d:b7: 05:95:77:3b:a7:df:a7:f2:b3:3e:65:f6:fa:84:56:73:b6:30: d8:60:fb:fe:22:f8:7c:68:28:65:7d:8a:a3:34:f5:68:c2:95: d1:f9:76:7c:7b:8e:39:df:e1:d8:dd:8a:dc:5a:74:ff:5a:0e: ab:63:7d:65:28:42:74:4f:20:4b:1c:7a:12:0c:d6:0e:2a:e8: df:25:cc:45:ba:04:4c:75:7b:4c:f3:49:e9:e0:63:ec:4f:c4: 13:66:3d:8d:43:98:17:fc:4d:da:1c:e2:7b:62:a7:3c:3d:8c: 1e:6a:c1:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZGRDkxMTAvBgNVBAUTKDYyMjNBQkQ2RjZCNjdCQUZFRkUzRTczNjQ2RkQ3QTY2 RTEwMjE0QkUwHhcNMjUwNzAxMDYwOTM2WhcNMjUwNzA4MDYwOTM2WjAYMRYwFAYD VQQDEw02ODYzN2JhMC0zMzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1U07zoqVKEYiuvencKSBFFh6iNvjrg+Jl8MG9aosz/iDkli/xwB4zuPmykHW ozqu6UpmGLCobI2yjFC4qeSJ+0S19SQhFf/hKoU/CrclfH9DOTFqHuGqCQn8RikG cEWonH0NvrFq2NEhHwtkGaUejOT+nKHskqLyjDGumYTc1VR0v4CDD8236npzcd2Y SjTzATBXPWKPn4khfuWmkGXQaCo09ZmRV5tE9/nyvJ6hc+kmjmFJN/0geGr3lUou eE6XHqWdRQBD/Y7rL1LCM1/WPnm0yk0349CF8I7MsMFU5rbvmeTSb6Dtrl4pRlVC //wxDOTcjTynlRnxd+AGY7hnFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9QpA6H sk9PN2JCk5Q0VgoR0c98MB8GA1UdIwQYMBaAFGIjq9b2tnuv7+PnNkb9embhAhS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkZEOS85OEQ2NjZDQzBG QTMxMUVGQjQzQzk0MzJDNEY5QUUwMi9ZaU9yMXZhMmU2X3Y0LWMyUnYxNlp1RUNG TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpT3IxdmEyZTZfdjQtYzJSdjE2WnVFQ0ZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkZEOS85OEQ2NjZDQzBGQTMxMUVGQjQzQzk0MzJDNEY5QUUwMi9ZaU9yMXZhMmU2 X3Y0LWMyUnYxNlp1RUNGTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvBDhXKqo00RfdbdslhFYTRxcNQ6R2FX7clUIRJDD/uSnyZNYPvlQ8 NHHIi7iDVEbYUsEOZfsVBQrdBf+5bdKk779y1PSEbF33a6PvawDZv0zbr9bePuQh 7bpxdCb2x3Sy10mFNGFhMcG/2Hdoe0s+eE/Vmp74I4njlB4FigaC79Dvoe1UYfy6 v1T0jUMTfbcFlXc7p9+n8rM+Zfb6hFZztjDYYPv+Ivh8aChlfYqjNPVowpXR+XZ8 e4453+HY3YrcWnT/Wg6rY31lKEJ0TyBLHHoSDNYOKujfJcxFugRMdXtM80np4GPs T8QTZj2NQ5gX/E3aHOJ7Yqc8PYweasHX -----END CERTIFICATE-----Generated at Wed Jul 2 12:24:58 2025 by rpki-client