$ rpki-client -vvf rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft File: ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft (raw, json) Hash identifier: aCn1udApcZyOPqxOna21aQ0kG5fy8S5kMTZ1txEze08= Subject key identifier: 4F:AD:EC:2F:50:AA:DC:F9:98:C8:4A:3E:6F:05:01:C3:E9:33:9D:60 Authority key identifier: CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0 Certificate issuer: /CN=A9193037/serialNumber=CA955914F98B2FC916A4512DA72AB75A11C52BD0 Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft Manifest number: 0909 Signing time: Wed 02 Jul 2025 20:35:22 +0000 Manifest this update: Wed 02 Jul 2025 20:35:21 +0000 Manifest next update: Wed 09 Jul 2025 20:35:21 +0000 Files and hashes: 1: ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl (hash: cHBEDJ9OaqgtTxfK6uw81PLNgK3kmA/kJgh6+QwV+qs=) 2: D9C523A0B05A11EAA233021EC4F9AE02.roa (hash: plSH71jqFHiqVOcppEgGivQOT8E3EqzsKsifhjqPdW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193037, serialNumber=CA955914F98B2FC916A4512DA72AB75A11C52BD0 Validity Not Before: Jul 2 20:35:21 2025 GMT Not After : Jul 9 20:35:21 2025 GMT Subject: CN=68659809-d885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:3e:1f:60:c0:e7:9a:10:7b:e0:31:f9:17: c1:bd:20:b5:17:04:16:29:84:ea:ad:f5:ae:f4:88: 5e:a5:54:7a:60:70:ee:eb:d0:ba:fd:50:98:36:b1: 26:c0:a3:4f:e5:25:da:9c:40:d9:23:e2:9b:06:cb: 78:9a:c9:b9:3e:60:07:d9:77:e9:a1:8d:53:21:ca: 2e:a6:1b:e8:63:2a:4f:7d:13:44:57:0e:a9:a6:42: 0c:7a:b7:fe:bb:5b:dc:f1:12:57:dd:2e:20:7a:35: 3e:bb:2d:cf:63:cc:76:a8:b5:b7:d2:af:4b:a4:92: 7f:81:f2:b8:26:83:65:9d:34:9b:f2:87:8d:79:bf: 5c:d1:a7:ba:a1:7e:c3:6c:5a:c9:27:42:63:ea:75: 92:3e:16:05:a6:cd:2a:b6:66:a8:c3:7f:db:4a:20: a6:31:5e:4c:44:ca:de:1c:62:88:68:e7:f7:c5:1a: 45:d2:ce:a2:80:e9:d2:c1:b3:54:71:57:86:ee:ba: 29:d9:7e:14:b0:c6:d1:40:9a:80:9b:79:d8:20:f6: 86:e5:f2:60:71:03:61:42:42:fb:f0:da:13:8d:12: 9a:d4:2c:8f:42:ee:85:72:b0:cb:93:0b:57:1e:84: c6:e5:02:ad:54:a9:96:0f:3d:bb:18:69:8a:a5:39: 14:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AD:EC:2F:50:AA:DC:F9:98:C8:4A:3E:6F:05:01:C3:E9:33:9D:60 X509v3 Authority Key Identifier: keyid:CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:27:70:4c:59:64:4e:fd:12:9d:de:c1:24:e1:02:86:45:ed: d7:d1:3a:df:0c:78:28:b8:ba:7b:37:b7:a7:a5:8e:c1:23:be: 66:a0:d3:c8:b6:7f:77:10:83:07:92:bf:3f:55:03:19:2f:3f: 6e:7f:b3:ad:c5:25:d3:5a:d3:9a:01:8f:a4:98:1b:b8:0d:de: 72:f6:e6:60:a7:87:ba:20:f0:f8:2f:71:3c:c0:a7:60:a1:98: 6a:dd:b7:5b:ec:68:00:f6:55:d9:bc:e0:27:af:5a:4b:71:11: 93:73:0a:39:d9:4a:55:eb:f8:00:f9:79:0e:66:c7:5e:f6:c7: 0d:52:0f:58:da:fd:fa:3a:e1:78:48:c9:ed:48:5c:fb:b2:3d: 43:9f:f9:c0:7e:a2:51:3e:41:f7:98:58:80:1f:c3:45:85:07: c4:df:1e:7c:b6:18:59:f9:25:f6:38:fa:b6:52:f0:da:dc:20: 1e:24:cc:51:b5:f7:f4:83:64:eb:88:48:b9:10:fb:45:5e:3e: 02:ba:4d:f4:2d:f3:b5:d0:ac:e9:8f:2a:36:6e:f0:7e:93:d4: aa:65:60:b4:ef:78:56:93:f0:dd:7b:a3:a7:37:ac:9a:f1:cc: 3f:74:36:71:1c:9a:cb:79:5e:af:fd:f0:2b:4a:79:7a:ed:d9: 34:38:e4:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwMzcxMTAvBgNVBAUTKENBOTU1OTE0Rjk4QjJGQzkxNkE0NTEyREE3MkFCNzVB MTFDNTJCRDAwHhcNMjUwNzAyMjAzNTIxWhcNMjUwNzA5MjAzNTIxWjAYMRYwFAYD VQQDEw02ODY1OTgwOS1kODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFU+H2DA55oQe+Ax+RfBvSC1FwQWKYTqrfWu9IhepVR6YHDu69C6/VCYNrEm wKNP5SXanEDZI+KbBst4msm5PmAH2XfpoY1TIcouphvoYypPfRNEVw6ppkIMerf+ u1vc8RJX3S4gejU+uy3PY8x2qLW30q9LpJJ/gfK4JoNlnTSb8oeNeb9c0ae6oX7D bFrJJ0Jj6nWSPhYFps0qtmaow3/bSiCmMV5MRMreHGKIaOf3xRpF0s6igOnSwbNU cVeG7rop2X4UsMbRQJqAm3nYIPaG5fJgcQNhQkL78NoTjRKa1CyPQu6FcrDLkwtX HoTG5QKtVKmWDz27GGmKpTkUWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+t7C9Q qtz5mMhKPm8FAcPpM51gMB8GA1UdIwQYMBaAFMqVWRT5iy/JFqRRLacqt1oRxSvQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzAzNy85NDBFNDZCNEFB QkMxMUVBQjEwNkMxNzZDNEY5QUUwMi95cFZaRlBtTEw4a1dwRkV0cHlxM1doSEZL OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwVlpGUG1MTDhrV3BGRXRweXEzV2hIRks5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzAzNy85NDBFNDZCNEFBQkMxMUVBQjEwNkMxNzZDNEY5QUUwMi95cFZaRlBtTEw4 a1dwRkV0cHlxM1doSEZLOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOJ3BMWWRO/RKd3sEk4QKGRe3X0TrfDHgouLp7N7enpY7BI75moNPI tn93EIMHkr8/VQMZLz9uf7OtxSXTWtOaAY+kmBu4Dd5y9uZgp4e6IPD4L3E8wKdg oZhq3bdb7GgA9lXZvOAnr1pLcRGTcwo52UpV6/gA+XkOZsde9scNUg9Y2v36OuF4 SMntSFz7sj1Dn/nAfqJRPkH3mFiAH8NFhQfE3x58thhZ+SX2OPq2UvDa3CAeJMxR tff0g2TriEi5EPtFXj4Cuk30LfO10Kzpjyo2bvB+k9SqZWC073hWk/Dde6OnN6ya 8cw/dDZxHJrLeV6v/fArSnl67dk0OORM -----END CERTIFICATE-----Generated at Thu Jul 3 11:27:09 2025 by rpki-client