$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft File: YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json) Hash identifier: XjPfEVHdlVmOkjgKj9LAQEEATMMZismcKLC/XCqZR94= Subject key identifier: CD:E3:84:DD:8E:36:77:E1:C6:20:65:DA:A5:C0:77:17:C3:2B:61:4A Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 Certificate issuer: /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft Manifest number: 0184 Signing time: Thu 03 Jul 2025 03:43:44 +0000 Manifest this update: Thu 03 Jul 2025 03:43:44 +0000 Manifest next update: Thu 10 Jul 2025 03:43:44 +0000 Files and hashes: 1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: DVuzojUSJ3CONTbc1axxVZ36AlMCl06JY+fe1Hx+9dw=) 2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: fc1mmSSRqzCuGE7h3o2YcW/Wc0vCR2x5Y/Ca8guGROk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Validity Not Before: Jul 3 03:43:44 2025 GMT Not After : Jul 10 03:43:44 2025 GMT Subject: CN=6865fc70-8d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:49:36:03:d9:82:60:1a:2c:86:2f:ca:6b: 51:c7:80:5e:82:ee:48:76:49:43:73:0c:fa:fa:38: 29:81:cf:73:4e:02:2f:3f:c9:c9:c6:4c:09:20:0d: 2b:c6:25:c9:86:ef:45:a4:27:f0:24:91:fe:66:fe: 2e:fb:9b:09:a1:66:0a:73:76:5a:3c:b8:c9:5f:2d: a6:1c:97:9d:f3:2b:33:e6:00:7a:66:ce:87:e1:e5: ee:50:52:fa:b3:ed:54:21:74:0e:01:a1:41:77:ba: 8f:ae:07:be:01:0b:11:6d:6e:74:a7:12:1e:3b:24: a7:da:3e:22:b4:3b:a1:c9:c2:93:cb:ac:b6:92:6a: 8b:95:a7:0a:5e:64:ef:96:56:b7:66:ac:b8:41:86: 6a:cd:55:bd:ae:05:c8:a9:9a:4a:26:25:b9:90:d8: fd:27:24:0a:9a:e1:5f:8e:3c:58:21:55:c4:6b:5c: 4f:6d:88:da:85:34:1d:5c:ea:5d:5d:f7:4d:86:ba: 2e:e6:16:3d:a3:ed:bd:4d:69:65:df:38:ff:c0:77: 07:ad:7c:2e:25:39:7e:62:c9:9d:db:a2:a7:0d:a7: 34:9c:da:13:c7:86:6c:bf:c2:0a:16:ed:58:c4:91: cb:20:61:e9:ec:d8:f5:18:31:19:7b:12:3d:80:f9: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E3:84:DD:8E:36:77:E1:C6:20:65:DA:A5:C0:77:17:C3:2B:61:4A X509v3 Authority Key Identifier: keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:99:b6:93:d3:04:c9:5e:e8:c7:4d:58:de:cc:89:c9:cd:ae: e5:5d:85:a2:16:0e:35:0b:78:72:92:f6:aa:4a:40:5e:1c:0e: 09:68:17:4c:b8:e3:f8:dc:da:b4:19:f9:b4:c4:4e:64:46:19: 05:9d:78:0f:24:57:57:d7:e1:c6:d6:7f:ea:80:77:40:04:87: bc:19:4b:a7:de:52:b1:78:15:4d:a3:33:57:8c:dd:7e:7b:87: a7:09:ec:8a:9d:72:b9:bf:25:59:1c:9b:ec:20:6c:86:bf:00: 93:04:bb:44:4f:13:0a:3a:fe:b7:31:e4:59:e6:df:9c:76:b3: 04:ba:8e:a9:e8:32:78:cf:97:7c:7e:ad:c5:38:38:02:45:09: 56:b9:96:05:46:76:4c:36:d6:08:43:3b:d4:40:f0:75:10:d1: 5d:33:f6:50:4f:94:89:8d:df:b4:57:3f:a9:79:9e:3e:b1:52: 8c:df:1f:75:f0:c4:07:48:26:8e:67:3c:6b:af:6c:e5:bd:7d: c3:03:6b:6f:04:35:e5:cd:86:c4:ba:eb:12:30:67:1a:e1:60: 06:f1:ce:16:b0:98:24:26:f1:5e:24:71:ee:3d:96:ac:05:e3: 91:77:eb:f1:f2:43:ec:92:91:49:ba:9d:cf:02:c1:ce:1e:10: e4:79:48:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERFRjAxMTAvBgNVBAUTKDYxMTQxQUI1M0ZENEFGMURCMkE4NkFGRTdFQzhGRUM5 N0Q1RUExRDUwHhcNMjUwNzAzMDM0MzQ0WhcNMjUwNzEwMDM0MzQ0WjAYMRYwFAYD VQQDEw02ODY1ZmM3MC04ZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZRJNgPZgmAaLIYvymtRx4Begu5IdklDcwz6+jgpgc9zTgIvP8nJxkwJIA0r xiXJhu9FpCfwJJH+Zv4u+5sJoWYKc3ZaPLjJXy2mHJed8ysz5gB6Zs6H4eXuUFL6 s+1UIXQOAaFBd7qPrge+AQsRbW50pxIeOySn2j4itDuhycKTy6y2kmqLlacKXmTv lla3Zqy4QYZqzVW9rgXIqZpKJiW5kNj9JyQKmuFfjjxYIVXEa1xPbYjahTQdXOpd XfdNhrou5hY9o+29TWll3zj/wHcHrXwuJTl+Ysmd26KnDac0nNoTx4Zsv8IKFu1Y xJHLIGHp7Nj1GDEZexI9gPnjkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3jhN2O NnfhxiBl2qXAdxfDK2FKMB8GA1UdIwQYMBaAFGEUGrU/1K8dsqhq/n7I/sl9XqHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REVGMC84MjAzMDlDMjBB NUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4MnlxR3ItZnNqLXlYMWVv ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSUWF0VF9VcngyeXFHci1mc2oteVgxZW9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REVGMC84MjAzMDlDMjBBNUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4 MnlxR3ItZnNqLXlYMWVvZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCombaT0wTJXujHTVjezInJza7lXYWiFg41C3hykvaqSkBeHA4JaBdM uOP43Nq0Gfm0xE5kRhkFnXgPJFdX1+HG1n/qgHdABIe8GUun3lKxeBVNozNXjN1+ e4enCeyKnXK5vyVZHJvsIGyGvwCTBLtETxMKOv63MeRZ5t+cdrMEuo6p6DJ4z5d8 fq3FODgCRQlWuZYFRnZMNtYIQzvUQPB1ENFdM/ZQT5SJjd+0Vz+peZ4+sVKM3x91 8MQHSCaOZzxrr2zlvX3DA2tvBDXlzYbEuusSMGca4WAG8c4WsJgkJvFeJHHuPZas BeORd+vx8kPskpFJup3PAsHOHhDkeUgm -----END CERTIFICATE-----Generated at Sat Jul 5 03:34:02 2025 by rpki-client