$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft File: YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json) Hash identifier: l7HQMb+sTHPm7C+lf4wxh5EgmMCEf53umM7TDVbBKNI= Subject key identifier: F1:44:51:F1:A1:33:03:24:70:86:64:33:F3:3E:8B:3C:9E:64:90:BA Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 Certificate issuer: /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft Manifest number: 0A72 Signing time: Wed 02 Jul 2025 20:41:35 +0000 Manifest this update: Wed 02 Jul 2025 20:41:34 +0000 Manifest next update: Wed 09 Jul 2025 20:41:34 +0000 Files and hashes: 1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: 0lAsWfnbepNMS4SasobWmykjgX9Um0rLWkjitAQ4vPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Validity Not Before: Jul 2 20:41:34 2025 GMT Not After : Jul 9 20:41:34 2025 GMT Subject: CN=6865997e-8ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:9f:b2:71:6e:0d:e8:49:fe:6b:b7:9e:ae: 1a:a1:9d:c9:cf:ba:44:40:d3:4a:0d:88:e1:b2:15: 2d:0e:c8:f5:23:22:1a:b8:a7:f9:c8:41:4a:d4:dd: 7a:50:7b:88:d0:64:55:bb:c8:3b:be:21:a9:83:6e: dd:74:1a:95:cc:0e:4a:50:82:92:22:29:49:24:01: 2d:ed:65:a4:ab:02:b0:f3:24:77:50:a4:bc:78:18: f1:8a:da:ed:51:83:a2:63:b2:5f:c0:e8:b6:ee:76: f0:56:89:da:66:16:14:73:ef:89:7d:2e:f6:5e:b6: 71:53:4f:ba:da:ee:86:55:21:14:9b:ee:c9:c5:4a: fe:44:c7:1a:ba:ed:ee:fe:8e:22:a7:cf:2c:97:56: c3:50:55:d4:af:2f:65:97:3c:b2:6f:7f:9f:82:94: eb:24:9e:52:1d:b4:dd:d5:94:c3:70:53:e4:ed:99: e2:a0:de:c1:36:ce:fc:26:32:5c:96:78:91:08:f7: 11:c1:fa:12:1c:7a:c4:ce:9e:55:91:69:e7:a3:19: 5e:37:5f:3c:ff:63:14:c2:6b:db:08:a3:ff:2d:58: 28:d3:67:8c:c0:fd:b2:88:09:10:e9:38:29:54:e5: f9:61:b8:50:cb:3c:e0:e4:95:ee:dc:1f:b4:2e:e4: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:44:51:F1:A1:33:03:24:70:86:64:33:F3:3E:8B:3C:9E:64:90:BA X509v3 Authority Key Identifier: keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:31:63:96:84:38:32:18:e5:58:0d:04:5f:0a:cb:f4:07:fb: 84:39:f8:a4:4f:25:ab:96:ea:c6:e5:25:fb:d8:f1:2b:29:f3: f1:33:9f:a1:50:c7:11:eb:f4:cb:b6:52:b3:bd:e1:c1:04:5a: 1b:6b:98:29:d0:27:ac:c6:e0:f8:5f:76:7e:58:85:c6:f2:86: a4:7b:5a:69:d7:43:0b:2f:e6:0b:70:2a:b1:75:d3:fe:3c:e7: 5d:f4:fb:0e:ac:42:b2:32:2a:d9:ad:34:36:2e:fb:85:42:b6: b5:fb:c5:91:06:cc:9f:78:f1:15:38:80:84:c9:53:85:41:15: 67:4f:91:c5:b4:d7:72:32:f7:ac:d4:9e:9b:24:00:79:ff:bd: f4:26:27:22:cd:91:4d:84:b5:5e:81:b4:7f:c0:84:6e:96:1c: 9b:5c:c1:70:39:85:7e:2b:e8:2b:26:49:dc:b7:2a:de:68:16: 48:8a:46:61:07:6d:6d:5d:d3:39:e8:6e:db:55:cb:df:12:d2: 56:f1:cd:d9:6f:c3:dd:30:07:01:93:63:91:91:b9:21:15:3a: 56:37:0e:ba:a5:a7:a8:e5:c7:ff:ac:46:01:e7:cf:9d:ce:4e: c9:e2:6c:f3:85:d9:dd:c8:ba:e5:ac:00:07:03:1b:d0:99:9b: 7c:e5:32:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE3RTYxMTAvBgNVBAUTKDYwNzYyOEJFNDU1RUYzNzlCRTY2QUY5RDZDQTlCQThF Q0RFRDNGMDQwHhcNMjUwNzAyMjA0MTM0WhcNMjUwNzA5MjA0MTM0WjAYMRYwFAYD VQQDEw02ODY1OTk3ZS04YWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl2fsnFuDehJ/mu3nq4aoZ3Jz7pEQNNKDYjhshUtDsj1IyIauKf5yEFK1N16 UHuI0GRVu8g7viGpg27ddBqVzA5KUIKSIilJJAEt7WWkqwKw8yR3UKS8eBjxitrt UYOiY7JfwOi27nbwVonaZhYUc++JfS72XrZxU0+62u6GVSEUm+7JxUr+RMcauu3u /o4ip88sl1bDUFXUry9llzyyb3+fgpTrJJ5SHbTd1ZTDcFPk7ZnioN7BNs78JjJc lniRCPcRwfoSHHrEzp5VkWnnoxleN188/2MUwmvbCKP/LVgo02eMwP2yiAkQ6Tgp VOX5YbhQyzzg5JXu3B+0LuQgQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFEUfGh MwMkcIZkM/M+izyeZJC6MB8GA1UdIwQYMBaAFGB2KL5FXvN5vmavnWypuo7N7T8E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz QjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgzbS1acS1kYkttNmpzM3RQ d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIWW92a1ZlODNtLVpxLWRiS202anMzdFB3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgz bS1acS1kYkttNmpzM3RQd1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZMWOWhDgyGOVYDQRfCsv0B/uEOfikTyWrlurG5SX72PErKfPxM5+h UMcR6/TLtlKzveHBBFoba5gp0CesxuD4X3Z+WIXG8oake1pp10MLL+YLcCqxddP+ POdd9PsOrEKyMirZrTQ2LvuFQra1+8WRBsyfePEVOICEyVOFQRVnT5HFtNdyMves 1J6bJAB5/730JicizZFNhLVegbR/wIRulhybXMFwOYV+K+grJknctyreaBZIikZh B21tXdM56G7bVcvfEtJW8c3Zb8PdMAcBk2ORkbkhFTpWNw66paeo5cf/rEYB58+d zk7J4mzzhdndyLrlrAAHAxvQmZt85TIt -----END CERTIFICATE-----Generated at Thu Jul 3 00:30:19 2025 by rpki-client