$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json) Hash identifier: X9QmBF03tIo9R6ipPy6hQl84yNJI3lxqOjOwl69/egk= Subject key identifier: C0:61:1E:1B:8B:66:78:60:A3:20:E9:32:AF:42:37:F7:D6:CE:F6:70 Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft Manifest number: 95 Signing time: Thu 03 Jul 2025 06:34:18 +0000 Manifest this update: Thu 03 Jul 2025 06:34:18 +0000 Manifest next update: Thu 10 Jul 2025 06:34:18 +0000 Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: CFdi6yLOl4S9VehEVQXHbivdLHI80KeoNe0SRwc3LVo=) 2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Validity Not Before: Jul 3 06:34:18 2025 GMT Not After : Jul 10 06:34:18 2025 GMT Subject: CN=6866246a-88f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:cb:58:16:93:2e:d0:2b:fc:7c:0e:dd:85: 7b:72:36:b0:b3:7f:27:c5:d2:68:2a:79:34:69:36: eb:3d:2c:e0:ac:11:1b:15:51:58:89:ee:7d:69:dd: 30:e2:68:c6:72:07:11:76:8a:78:3f:d2:ca:d7:60: 18:b0:17:87:f8:5a:a8:11:62:c6:7a:0e:6e:44:b9: e5:d0:8b:8a:94:5d:0e:b3:44:c3:c0:7d:05:07:04: 91:b5:4d:35:fb:17:6d:c6:cf:07:49:b3:06:87:50: 64:55:f5:b6:35:b5:78:a7:b5:c6:15:5d:5a:8a:ff: 3e:20:ec:ae:86:61:27:dd:77:bc:4f:54:e4:f3:e6: 39:8c:98:d9:27:de:bb:df:69:e0:5a:d1:2f:3a:1c: 7a:c0:b7:89:a6:08:05:f9:88:05:37:8e:55:51:da: 61:86:ad:03:0a:46:56:a2:6e:20:f2:ff:b3:6e:51: 66:93:61:cf:7e:26:01:21:df:cf:da:47:e6:fc:fc: 45:d4:33:5b:01:8f:11:17:a9:5a:c7:75:7c:1c:33: 9e:36:5c:52:6c:c4:f2:60:2f:1f:44:27:b0:00:10: c9:27:bc:c5:f9:7d:27:05:23:d9:1d:07:45:e6:68: 37:cf:ec:f2:c5:35:be:7b:8b:6e:4a:f2:59:7b:0f: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:61:1E:1B:8B:66:78:60:A3:20:E9:32:AF:42:37:F7:D6:CE:F6:70 X509v3 Authority Key Identifier: keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b2:cc:d4:e2:1d:0e:2d:ae:99:5c:b6:49:fa:95:c6:8e:97: 5e:39:51:e1:e3:73:83:8f:2d:32:5a:d3:ec:a1:24:b3:50:65: 66:78:5d:dc:8e:f5:ab:00:1a:b6:0f:13:a2:8a:f0:91:3b:5d: b4:4d:94:7d:d9:8a:3f:ad:2b:ab:c3:6c:8a:39:08:9b:ca:4b: e6:f6:86:70:09:c8:dc:7d:c1:cf:78:0a:42:3d:90:9b:eb:5d: ad:33:07:7e:ac:ce:cf:f1:9b:5e:00:be:62:71:63:77:f5:10: 55:48:77:f5:34:4c:c4:5f:bc:ec:ba:a9:be:d6:01:de:d4:72: 0e:9c:c6:bc:4a:1d:31:d6:8d:9f:04:fc:60:44:cb:b4:a3:82: e2:87:b8:89:82:65:68:72:29:bd:24:c5:2e:9b:18:92:ce:2c: 32:c4:9d:58:f4:cf:ed:3d:cd:6e:18:91:96:5e:09:95:cb:8b: 15:28:f0:28:af:8d:28:0f:2c:19:09:0b:0d:af:98:13:c1:56: 2a:91:96:9d:da:d7:c4:e4:a4:87:93:71:d0:da:c8:d5:0c:8c: 3d:c8:02:ef:7d:89:5d:e1:8b:11:2a:17:15:37:d9:04:47:d4: e8:fb:45:f0:a6:db:f0:a8:20:bd:cc:d2:b2:83:c1:f1:c2:e6: 27:e3:c7:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEM4NDlDMUY2RUI4RDFCMEIzNzk0QjA2MEM0OUM1QTlC RDUzQUQ0QzkwHhcNMjUwNzAzMDYzNDE4WhcNMjUwNzEwMDYzNDE4WjAYMRYwFAYD VQQDEw02ODY2MjQ2YS04OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvefLWBaTLtAr/HwO3YV7cjaws38nxdJoKnk0aTbrPSzgrBEbFVFYie59ad0w 4mjGcgcRdop4P9LK12AYsBeH+FqoEWLGeg5uRLnl0IuKlF0Os0TDwH0FBwSRtU01 +xdtxs8HSbMGh1BkVfW2NbV4p7XGFV1aiv8+IOyuhmEn3Xe8T1Tk8+Y5jJjZJ967 32ngWtEvOhx6wLeJpggF+YgFN45VUdphhq0DCkZWom4g8v+zblFmk2HPfiYBId/P 2kfm/PxF1DNbAY8RF6lax3V8HDOeNlxSbMTyYC8fRCewABDJJ7zF+X0nBSPZHQdF 5mg3z+zyxTW+e4tuSvJZew+4bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBhHhuL ZnhgoyDpMq9CN/fWzvZwMB8GA1UdIwQYMBaAFMhJwfbrjRsLN5SwYMScWpvVOtTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BNzMzN0M2QTcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3czNsTEJneEp4YW05VTYx TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BNzMzN0M2QTczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3 czNsTEJneEp4YW05VTYxTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhsszU4h0OLa6ZXLZJ+pXGjpdeOVHh43ODjy0yWtPsoSSzUGVmeF3c jvWrABq2DxOiivCRO120TZR92Yo/rSurw2yKOQibykvm9oZwCcjcfcHPeApCPZCb 612tMwd+rM7P8ZteAL5icWN39RBVSHf1NEzEX7zsuqm+1gHe1HIOnMa8Sh0x1o2f BPxgRMu0o4Lih7iJgmVocim9JMUumxiSziwyxJ1Y9M/tPc1uGJGWXgmVy4sVKPAo r40oDywZCQsNr5gTwVYqkZad2tfE5KSHk3HQ2sjVDIw9yALvfYld4YsRKhcVN9kE R9To+0XwptvwqCC9zNKyg8HxwuYn48c1 -----END CERTIFICATE-----Generated at Fri Jul 4 13:33:37 2025 by rpki-client