$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: ch5wP7j1er91QwofnU2o/avgAxGp5N+CRSI5hpWvFC4= Subject key identifier: A8:00:35:A1:02:48:95:CA:AB:46:02:95:5C:4B:5E:3C:58:A9:D2:BB Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 1835 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 1828 Signing time: Mon 30 Jun 2025 16:40:53 +0000 Manifest this update: Mon 30 Jun 2025 16:40:53 +0000 Manifest next update: Mon 07 Jul 2025 16:40:53 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: xe5Z6OwjghregsCiNSriHu0Mvye64mGQ4agAb2j3fQU=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: YxR/IEAXYjhKk4qyNbFNVRXx2+Bty0U++VTURHi/7GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6197 (0x1835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Jun 30 16:40:53 2025 GMT Not After : Jul 7 16:40:53 2025 GMT Subject: CN=6862be15-9158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0b:3f:ec:67:e2:82:0d:61:ec:5b:09:11:3c: 2d:b0:78:58:72:88:23:14:95:04:94:d1:99:7d:35: 51:5b:83:39:30:11:52:a5:e9:d8:33:7b:b0:67:8e: db:e1:95:23:c1:17:b4:d5:8e:36:5c:2e:f0:c7:ba: d1:ab:7c:37:33:92:11:51:e4:6e:56:c8:7b:86:25: e5:c9:31:b7:ae:cc:33:3f:f3:56:36:1b:45:32:4d: 20:c3:65:98:c6:6c:7d:a8:45:a3:3d:45:2c:73:46: 14:72:b2:26:3a:a5:f1:db:67:31:52:76:fe:9f:e2: 7e:8a:f5:20:4b:1e:95:6e:cd:5a:f3:8e:20:1c:32: c1:33:72:2a:5f:7d:44:69:c0:01:3a:2c:87:ae:36: 2e:f7:34:3d:ec:85:56:e8:77:34:df:b7:0f:27:fe: de:63:42:3d:65:6c:87:f1:45:3e:af:76:df:b4:15: 48:32:9c:da:52:74:81:3d:59:e4:c9:30:d0:5c:fb: 70:49:d9:8c:57:a1:ed:0a:e6:7d:7b:21:36:68:1a: bd:16:f3:63:d6:e1:0e:3a:88:6d:4a:a1:0d:a1:91: 23:fd:00:ec:6b:b7:87:ff:cd:17:90:2b:5f:8a:b6: 7b:f8:df:69:de:6d:2f:1f:34:89:8b:a0:fa:1b:39: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:00:35:A1:02:48:95:CA:AB:46:02:95:5C:4B:5E:3C:58:A9:D2:BB X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:85:ba:66:cb:0c:4f:2a:2e:11:a1:25:3b:31:49:84:94:73: 80:36:7b:d3:91:f6:72:77:ed:6c:e6:ce:13:2b:db:47:91:5f: 03:8a:66:60:14:51:c7:3b:53:49:8e:41:fd:f6:85:03:3c:c4: 18:a4:45:f8:30:38:6d:a9:52:e1:c2:1a:dc:a9:bf:ea:9d:b0: fa:e1:9c:bc:b1:c7:5b:fb:c5:69:df:7a:54:85:a0:ba:b6:0e: b5:0f:c4:34:d2:37:78:66:ee:68:59:4a:c4:ad:0f:a7:68:0e: 6e:cc:14:c1:07:58:50:0b:99:a2:c4:b1:7a:92:b8:fd:d8:4b: f6:1e:c2:c8:f7:ea:ce:cf:43:c8:ef:a3:d2:39:4d:6a:b3:36: 7f:69:a6:8c:bc:af:96:d3:20:30:b5:bc:8e:71:06:62:83:5e: 1a:ab:d7:3b:30:a5:6f:17:09:ed:4c:07:c3:e4:9d:d7:8e:0b: f3:0a:92:75:53:c6:19:80:73:e8:f5:fd:c4:93:a2:7d:ec:93: 55:9e:b7:d1:fe:26:df:f6:8c:75:ab:87:66:12:c7:52:8b:c2: 62:4a:4d:5d:09:c5:de:49:24:85:0e:7a:d2:65:a4:e9:9e:3d: 97:09:de:46:75:a0:dd:58:88:4d:17:68:79:55:ed:b1:2b:4c: aa:50:29:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjUwNjMwMTY0MDUzWhcNMjUwNzA3MTY0MDUzWjAYMRYwFAYD VQQDEw02ODYyYmUxNS05MTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyws/7Gfigg1h7FsJETwtsHhYcogjFJUElNGZfTVRW4M5MBFSpenYM3uwZ47b 4ZUjwRe01Y42XC7wx7rRq3w3M5IRUeRuVsh7hiXlyTG3rswzP/NWNhtFMk0gw2WY xmx9qEWjPUUsc0YUcrImOqXx22cxUnb+n+J+ivUgSx6Vbs1a844gHDLBM3IqX31E acABOiyHrjYu9zQ97IVW6Hc037cPJ/7eY0I9ZWyH8UU+r3bftBVIMpzaUnSBPVnk yTDQXPtwSdmMV6HtCuZ9eyE2aBq9FvNj1uEOOohtSqENoZEj/QDsa7eH/80XkCtf irZ7+N9p3m0vHzSJi6D6GzmIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgANaEC SJXKq0YClVxLXjxYqdK7MB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrhbpmywxPKi4RoSU7MUmElHOANnvTkfZyd+1s5s4TK9tHkV8DimZg FFHHO1NJjkH99oUDPMQYpEX4MDhtqVLhwhrcqb/qnbD64Zy8scdb+8Vp33pUhaC6 tg61D8Q00jd4Zu5oWUrErQ+naA5uzBTBB1hQC5mixLF6krj92Ev2HsLI9+rOz0PI 76PSOU1qszZ/aaaMvK+W0yAwtbyOcQZig14aq9c7MKVvFwntTAfD5J3XjgvzCpJ1 U8YZgHPo9f3Ek6J97JNVnrfR/ibf9ox1q4dmEsdSi8JiSk1dCcXeSSSFDnrSZaTp nj2XCd5GdaDdWIhNF2h5Ve2xK0yqUCnN -----END CERTIFICATE-----Generated at Wed Jul 2 05:18:36 2025 by rpki-client