$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft File: YscfaukWKfhUypRkF2G2UizUgMM.mft (raw, json) Hash identifier: +Uodbs4CXxofJNNcfH6wF9kcENS/b9SdUxEYYVr472o= Subject key identifier: EB:75:3D:79:F0:00:A9:D5:5A:FB:5D:81:F6:3A:7C:68:47:30:CA:6A Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 Certificate issuer: /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft Manifest number: 38 Signing time: Tue 01 Jul 2025 08:23:44 +0000 Manifest this update: Tue 01 Jul 2025 08:23:44 +0000 Manifest next update: Tue 08 Jul 2025 08:23:44 +0000 Files and hashes: 1: YscfaukWKfhUypRkF2G2UizUgMM.crl (hash: ZQpUSXjQ/KHZ1/PiKagHUtXUH2JoskyYqTpv/hp06Ss=) 2: 824FECA61EA811F0A4B9881EC4F9AE02.roa (hash: lnqtXsb2uQDyw+VqZesv3MnkaYFT+PyijHSiNS5QwcA=) 3: 6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (hash: 3CfNmrVRNEvPM//uIqEsifmOeeaUM9uVI7qqpW4aJQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Validity Not Before: Jul 1 08:23:44 2025 GMT Not After : Jul 8 08:23:44 2025 GMT Subject: CN=68639b10-8274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:77:b8:38:e5:ec:47:dd:50:99:9a:1d:e9: 65:7a:8f:10:1e:ab:75:27:fb:2a:ee:27:4b:bb:f3: f9:98:25:cc:7f:93:02:f4:c1:38:c3:91:c6:14:26: b7:92:f5:75:ce:71:9b:f3:c6:93:41:7e:8c:78:31: 7a:ca:2b:3b:99:50:06:7c:f2:f8:a3:8c:34:1f:72: 59:83:a8:9f:b9:0f:0f:8d:37:6d:65:64:ce:53:9d: bf:e4:32:ea:92:23:d6:c7:bf:3f:46:03:c8:d7:0b: 1a:04:96:1f:d4:16:6a:51:d5:f3:3e:35:fe:f1:8f: 57:05:74:15:2e:88:05:34:50:ab:87:d7:94:15:29: cb:90:bb:46:83:b3:4d:3c:c8:fa:a1:0d:67:76:36: 84:b1:68:78:ac:b9:39:05:c8:e2:ef:97:c1:08:7a: 86:c7:8c:b2:5f:78:07:02:92:16:95:ad:5b:69:14: e9:0d:74:54:ad:4c:84:53:36:36:31:50:64:55:31: ce:ad:ca:cb:b1:4a:8c:4d:3f:b5:da:60:c7:4f:a1: 7d:b6:db:29:4d:42:83:75:31:d6:5b:85:5f:e7:46: c9:d3:7d:53:8b:fa:2c:1e:3f:45:8b:0f:55:d8:39: 58:83:68:99:ea:ea:3f:55:c3:7b:17:94:bf:3c:66: d2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:75:3D:79:F0:00:A9:D5:5A:FB:5D:81:F6:3A:7C:68:47:30:CA:6A X509v3 Authority Key Identifier: keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a5:aa:10:78:8e:b6:91:49:28:d3:5b:be:67:57:7f:6f:0a: 36:77:4d:9b:43:a2:d0:3a:dc:23:b7:58:f8:ba:a1:bd:a9:fc: fb:79:7a:e5:57:1c:91:2e:e2:ae:85:6c:0d:27:9d:19:a5:76: 18:58:8a:6a:f7:8a:79:4b:e5:38:82:23:c5:62:36:cd:0e:13: a7:81:27:c5:3d:3d:28:60:b1:d6:f5:84:90:1c:af:06:9b:93: 71:90:05:57:64:f6:25:70:36:c5:27:17:df:b6:c6:19:a0:c5: c7:e8:07:8d:10:49:71:bc:98:61:a0:bb:2f:00:73:ce:eb:24: d2:44:72:cb:93:92:53:c0:96:42:6d:e7:7d:ba:b8:55:8a:16: fd:e9:3a:8e:28:fe:df:ab:eb:d3:54:e0:ff:cd:3d:9b:c6:e7: 33:2c:5b:69:f2:9a:17:d7:b5:0b:d6:1b:f0:3e:93:a2:20:81: 4d:10:88:05:dc:5e:15:37:cd:d2:41:11:64:e5:56:ee:3e:50: 12:8e:b4:ec:eb:5f:b4:8e:54:c2:d2:d4:6d:f9:4a:e8:5f:9c: e2:91:2f:d0:7b:74:be:f3:91:ed:00:6b:bc:cc:b5:6c:5d:04: f6:e4:6c:38:de:dc:12:bb:b3:8a:fc:ce:a8:5c:b4:8e:23:aa: 7c:a3:e5:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTE5RjExMC8GA1UEBRMoNjJDNzFGNkFFOTE2MjlGODU0Q0E5NDY0MTc2MUI2NTIy Q0Q0ODBDMzAeFw0yNTA3MDEwODIzNDRaFw0yNTA3MDgwODIzNDRaMBgxFjAUBgNV BAMTDTY4NjM5YjEwLTgyNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvKXe4OOXsR91QmZod6WV6jxAeq3Un+yruJ0u78/mYJcx/kwL0wTjDkcYUJreS 9XXOcZvzxpNBfox4MXrKKzuZUAZ88vijjDQfclmDqJ+5Dw+NN21lZM5Tnb/kMuqS I9bHvz9GA8jXCxoElh/UFmpR1fM+Nf7xj1cFdBUuiAU0UKuH15QVKcuQu0aDs008 yPqhDWd2NoSxaHisuTkFyOLvl8EIeobHjLJfeAcCkhaVrVtpFOkNdFStTIRTNjYx UGRVMc6tysuxSoxNP7XaYMdPoX222ylNQoN1MdZbhV/nRsnTfVOL+iweP0WLD1XY OViDaJnq6j9Vw3sXlL88ZtLvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU63U9efAA qdVa+12B9jp8aEcwymowHwYDVR0jBBgwFoAUYscfaukWKfhUypRkF2G2UizUgMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMTlGL0I5RUEwNEM2MDU5 NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXNjZmF1a1dLZmhVeXBSa0YyRzJVaXpVZ01NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MTlGL0I5RUEwNEM2MDU5NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2Zo VXlwUmtGMkcyVWl6VWdNTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAImlqhB4jraRSSjTW75nV39vCjZ3TZtDotA63CO3WPi6ob2p/Pt5euVX HJEu4q6FbA0nnRmldhhYimr3inlL5TiCI8ViNs0OE6eBJ8U9PShgsdb1hJAcrwab k3GQBVdk9iVwNsUnF9+2xhmgxcfoB40QSXG8mGGguy8Ac87rJNJEcsuTklPAlkJt 5326uFWKFv3pOo4o/t+r69NU4P/NPZvG5zMsW2nymhfXtQvWG/A+k6IggU0QiAXc XhU3zdJBEWTlVu4+UBKOtOzrX7SOVMLS1G35SuhfnOKRL9B7dL7zke0Aa7zMtWxd BPbkbDje3BK7s4r8zqhctI4jqnyj5U4= -----END CERTIFICATE-----Generated at Thu Jul 3 06:16:13 2025 by rpki-client