$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft File: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json) Hash identifier: DEeQnnb01EsRTViyja+YvFs1wWStkKRUewMw92i1pwc= Subject key identifier: CB:23:95:9C:E8:B5:64:F8:91:ED:DF:27:CE:5F:14:62:71:D4:6D:AD Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0C57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft Manifest number: 0C46 Signing time: Fri 04 Jul 2025 18:54:39 +0000 Manifest this update: Fri 04 Jul 2025 18:54:38 +0000 Manifest next update: Fri 11 Jul 2025 18:54:38 +0000 Files and hashes: 1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: wDculUSov0bk3GR481Bci3eGtMFR6TL3yjWkH7SjYuo=) 2: EC7403A0B20711EFAADEFA2CC4F9AE02.roa (hash: 41gtdkmTRXbX1drZcFOb/E12vO66zREAaSFWLwXsUVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: Jul 4 18:54:38 2025 GMT Not After : Jul 11 18:54:38 2025 GMT Subject: CN=6868236e-7920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f8:69:9f:d1:33:8c:f2:01:fa:10:ec:f0:fb: f8:81:c9:c6:54:a3:97:f3:7a:af:c4:70:fb:76:39: 4c:52:8e:32:95:6f:fc:44:1c:82:ed:2d:3a:d0:f5: 21:42:35:08:8d:db:5b:48:39:82:2f:42:21:b8:8a: 55:56:5a:0c:e7:dd:85:93:dd:b9:49:d9:34:c0:57: 55:7d:89:a6:cd:5f:09:29:ef:56:9d:17:2b:c5:fb: 3f:8d:33:3c:ab:f8:4a:bf:03:90:b6:76:51:f0:2d: a0:ef:04:9d:ec:70:43:1b:40:c6:cf:b9:3c:c9:da: 2e:9c:83:32:64:f0:bf:e7:df:4d:82:7c:30:e6:3d: e7:75:6f:f1:18:c9:66:2c:37:14:64:00:d4:e8:9e: 25:c0:bf:36:af:58:17:9b:0a:b8:8c:49:06:4e:0d: 73:8c:00:e4:18:50:dc:b6:ed:f2:d9:fd:22:ea:82: d3:2a:98:8e:39:32:20:97:3b:fd:fb:39:8a:dc:97: 22:d1:08:86:f3:54:63:cd:c0:d1:0f:ba:c8:a7:bb: 8f:c2:01:0c:4b:bc:6c:b5:05:ea:c0:ca:f7:cb:9c: 3a:d9:fa:b6:c6:fe:a7:bf:e6:a2:36:f2:31:c8:ac: e7:f5:28:02:c8:be:9a:ce:d2:75:d3:f0:07:18:fc: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:23:95:9C:E8:B5:64:F8:91:ED:DF:27:CE:5F:14:62:71:D4:6D:AD X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2b:f1:c8:2d:f6:e7:09:94:be:88:f2:3d:8e:cb:fb:3b:6f: 8b:f7:3e:09:5c:85:16:f1:a6:38:9f:b4:73:5d:89:5e:75:d3: 2d:f6:0e:87:c2:92:cd:6b:90:6f:6d:94:6b:cd:7a:2b:c7:20: c3:4c:af:09:21:3b:7a:0f:9e:e2:ef:aa:38:47:e1:ca:f5:bc: 31:b4:72:35:75:b5:55:6c:96:40:b4:12:d3:9e:6b:6f:db:13: a9:03:65:3a:73:30:1b:5b:f8:f7:f1:1b:e2:41:01:22:36:59: cb:c9:21:57:d6:f9:77:42:67:4c:5d:bd:10:b3:ef:3a:a1:db: f5:69:d6:ab:fa:e5:c3:6f:d2:51:45:65:cd:bd:95:99:39:c7: c8:f5:54:d1:38:48:ac:88:bf:b6:5b:a3:62:33:2b:1f:dc:7d: 6d:0a:31:be:31:38:49:07:c2:a6:ed:9c:83:7c:34:c8:b9:a6: d1:1c:45:ae:d9:b3:d8:66:db:52:58:d2:23:e6:11:8d:0f:81: cf:a7:86:79:cb:a1:20:6b:83:c8:28:e5:78:4e:a8:38:0d:e2: 58:a2:8d:38:47:90:cd:d0:a0:3a:04:e9:b9:dd:dc:bd:b4:36: b7:48:76:6b:c6:d7:20:0e:09:8f:58:a6:b1:54:78:24:be:0a: 01:77:27:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjUwNzA0MTg1NDM4WhcNMjUwNzExMTg1NDM4WjAYMRYwFAYD VQQDEw02ODY4MjM2ZS03OTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/hpn9EzjPIB+hDs8Pv4gcnGVKOX83qvxHD7djlMUo4ylW/8RByC7S060PUh QjUIjdtbSDmCL0IhuIpVVloM592Fk925Sdk0wFdVfYmmzV8JKe9WnRcrxfs/jTM8 q/hKvwOQtnZR8C2g7wSd7HBDG0DGz7k8ydounIMyZPC/599Ngnww5j3ndW/xGMlm LDcUZADU6J4lwL82r1gXmwq4jEkGTg1zjADkGFDctu3y2f0i6oLTKpiOOTIglzv9 +zmK3Jci0QiG81RjzcDRD7rIp7uPwgEMS7xstQXqwMr3y5w62fq2xv6nv+aiNvIx yKzn9SgCyL6aztJ10/AHGPxZewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsjlZzo tWT4ke3fJ85fFGJx1G2tMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEZFQS8yNDBEQUNFQTBCNzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2 b2praFBLelRkUVRTUmdvUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3K/HILfbnCZS+iPI9jsv7O2+L9z4JXIUW8aY4n7RzXYleddMt9g6H wpLNa5BvbZRrzXorxyDDTK8JITt6D57i76o4R+HK9bwxtHI1dbVVbJZAtBLTnmtv 2xOpA2U6czAbW/j38RviQQEiNlnLySFX1vl3QmdMXb0Qs+86odv1adar+uXDb9JR RWXNvZWZOcfI9VTROEisiL+2W6NiMysf3H1tCjG+MThJB8Km7ZyDfDTIuabRHEWu 2bPYZttSWNIj5hGND4HPp4Z5y6Ega4PIKOV4Tqg4DeJYoo04R5DN0KA6BOm53dy9 tDa3SHZrxtcgDgmPWKaxVHgkvgoBdye/ -----END CERTIFICATE-----Generated at Sat Jul 5 06:11:39 2025 by rpki-client