$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: Kv+C22S64t7fdudO7qICvw7VvXH6TvDCwohzmekZ2uw= Subject key identifier: 1B:14:AC:9C:6C:4A:1A:FD:BF:E9:9A:C6:43:F9:73:9F:0C:49:05:ED Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0D5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0D53 Signing time: Wed 02 Jul 2025 18:12:32 +0000 Manifest this update: Wed 02 Jul 2025 18:12:31 +0000 Manifest next update: Wed 09 Jul 2025 18:12:31 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: Cdbmsi8w/jJbrLM8jcefuw+K7RlqEcbAwWH5m5y4VD8=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3423 (0xd5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: Jul 2 18:12:31 2025 GMT Not After : Jul 9 18:12:31 2025 GMT Subject: CN=6865768f-a501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:3f:9d:86:24:fb:5b:4c:8a:f3:3f:b4:df: 54:de:eb:53:bf:75:e2:2e:d6:58:62:c4:2c:dd:53: 48:94:29:61:39:c7:08:11:20:57:c8:f2:5f:90:83: 2a:22:a7:c2:c5:f3:5a:10:77:3e:a8:cc:3f:5f:ee: 83:d1:2e:37:59:39:b2:94:b0:a3:49:fe:3f:b7:f0: 93:e1:7d:9c:75:25:32:96:22:ec:43:aa:e6:1d:4a: 37:ee:8b:42:a2:90:cd:15:88:8a:99:c6:34:08:40: 84:f1:3e:4b:7f:47:d6:cb:cb:66:62:44:30:e6:00: 6a:29:b4:ba:68:e0:1b:9b:87:8e:89:cc:b6:b8:ba: ed:14:08:a5:2a:24:86:e0:0b:dc:3c:8c:42:73:ae: ed:d2:8b:0b:c0:96:79:b0:ee:be:fd:48:d2:66:a9: 05:a1:5b:81:42:82:c6:9d:a3:3a:56:0c:99:df:eb: e9:84:89:f4:72:4b:2b:fa:d6:79:6e:d3:02:62:8f: 7a:f5:1c:24:05:14:bd:ce:3a:c2:15:60:f5:06:c5: 36:0e:70:58:f0:11:59:be:5b:21:f0:dd:76:42:13: 1d:b0:48:02:de:9d:8d:2e:98:ed:f2:b1:47:fa:48: 67:33:88:64:00:2f:cd:bf:7e:b4:0a:50:64:07:53: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:14:AC:9C:6C:4A:1A:FD:BF:E9:9A:C6:43:F9:73:9F:0C:49:05:ED X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:56:05:96:77:84:a0:8c:5a:69:f4:32:8d:6d:b7:ae:62:d1: 7b:ba:98:03:69:e1:4b:ec:53:a9:bb:ba:b9:b7:65:8c:b8:8f: 28:6b:e0:87:48:2d:3f:2c:97:8d:3d:d8:bc:e0:e6:78:e2:6a: 7b:85:f0:3d:00:e7:20:8a:d0:a4:f6:c0:b3:ae:6e:b8:7d:e1: cc:f9:5c:b1:ab:62:ab:b7:32:ff:99:38:e8:a8:a8:9c:9c:88: ac:d0:6e:c5:94:d7:80:7d:10:43:01:36:53:f6:e4:d8:b8:f9: a8:f3:98:82:02:61:3b:73:ee:ec:c1:aa:27:b5:6c:72:88:aa: e2:3b:c7:73:6f:ec:c8:64:d7:d4:cf:6b:4a:80:a1:de:46:38: fc:0d:a5:8f:e1:90:c7:b1:82:76:6c:ef:78:07:35:09:bc:e7: 6f:5f:7d:0f:45:1b:3f:7e:9c:59:06:28:75:75:8b:6d:88:f9: 12:36:2d:18:d2:8f:bd:ca:b0:bd:27:eb:c0:b1:ac:03:96:b1: e9:30:e5:2d:81:6e:70:90:61:df:15:42:cd:f0:05:92:26:c2: 74:73:c2:41:92:6e:16:a0:b5:61:37:32:ee:9f:81:6e:cc:ef: 69:5b:2f:1c:ef:87:90:df:7c:0d:94:be:12:25:d4:98:cf:a6: 49:9b:f7:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUwNzAyMTgxMjMxWhcNMjUwNzA5MTgxMjMxWjAYMRYwFAYD VQQDEw02ODY1NzY4Zi1hNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoss/nYYk+1tMivM/tN9U3utTv3XiLtZYYsQs3VNIlClhOccIESBXyPJfkIMq IqfCxfNaEHc+qMw/X+6D0S43WTmylLCjSf4/t/CT4X2cdSUyliLsQ6rmHUo37otC opDNFYiKmcY0CECE8T5Lf0fWy8tmYkQw5gBqKbS6aOAbm4eOicy2uLrtFAilKiSG 4AvcPIxCc67t0osLwJZ5sO6+/UjSZqkFoVuBQoLGnaM6VgyZ3+vphIn0cksr+tZ5 btMCYo969RwkBRS9zjrCFWD1BsU2DnBY8BFZvlsh8N12QhMdsEgC3p2NLpjt8rFH +khnM4hkAC/Nv360ClBkB1NNHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsUrJxs Shr9v+maxkP5c58MSQXtMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2VgWWd4SgjFpp9DKNbbeuYtF7upgDaeFL7FOpu7q5t2WMuI8oa+CH SC0/LJeNPdi84OZ44mp7hfA9AOcgitCk9sCzrm64feHM+Vyxq2KrtzL/mTjoqKic nIis0G7FlNeAfRBDATZT9uTYuPmo85iCAmE7c+7swaontWxyiKriO8dzb+zIZNfU z2tKgKHeRjj8DaWP4ZDHsYJ2bO94BzUJvOdvX30PRRs/fpxZBih1dYttiPkSNi0Y 0o+9yrC9J+vAsawDlrHpMOUtgW5wkGHfFULN8AWSJsJ0c8JBkm4WoLVhNzLun4Fu zO9pWy8c74eQ33wNlL4SJdSYz6ZJm/fo -----END CERTIFICATE-----Generated at Thu Jul 3 17:31:35 2025 by rpki-client