$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json) Hash identifier: k9elLkNXhvoVvSixVvcqBpuvf7CaRwwmzocv+MBwBgw= Subject key identifier: 1B:61:0C:2E:96:26:12:75:57:7E:18:35:A9:D6:60:CD:7F:57:66:12 Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft Manifest number: 0634 Signing time: Tue 01 Jul 2025 00:18:49 +0000 Manifest this update: Tue 01 Jul 2025 00:18:49 +0000 Manifest next update: Tue 08 Jul 2025 00:18:49 +0000 Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: YK15O2Zg3ltzJP3owBqyNBPkBoB8aTZedkJvbkX2wuA=) 2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: znV1YV1R4QHmzxUCIkShtYBgrQBJHV87NrUXdKtqEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Validity Not Before: Jul 1 00:18:49 2025 GMT Not After : Jul 8 00:18:49 2025 GMT Subject: CN=68632969-7a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:cd:5c:87:60:58:6f:78:44:9a:be:28:38: 3a:23:4a:99:f0:3d:1b:fb:1c:17:a4:8b:33:0b:32: 65:a4:51:0f:49:57:48:20:df:a3:69:78:53:df:ea: b7:cf:cb:da:8d:7f:d3:c0:c1:4c:4e:10:e1:f4:93: 6b:1c:30:fb:4b:5d:27:e6:a7:5f:c6:54:17:8f:a1: 0d:08:ab:1c:1e:fa:0b:d4:4e:64:82:be:7f:f7:aa: f3:4e:af:f3:b0:16:44:96:58:fa:a5:6a:6f:eb:ed: 9c:90:cf:e3:d1:41:15:5d:0b:e6:6e:4c:d2:48:5c: 29:90:93:01:72:c4:51:76:62:ea:70:58:16:9a:d2: e4:ad:1f:ca:f0:b2:ad:a3:49:7f:23:68:c1:28:84: b1:42:6f:7e:af:c3:51:dd:56:94:8c:40:6d:34:61: b5:1c:b5:70:ad:d7:4f:87:6f:4d:44:6c:4d:2b:d2: a5:44:bb:c3:ac:9b:29:e0:eb:bc:86:a9:3e:7a:79: ad:3d:22:50:ad:64:48:7c:ec:bb:aa:c9:ad:44:08: 72:7d:b3:33:89:a5:41:53:f9:71:81:36:ef:a1:ef: de:81:77:30:c4:09:17:d6:1e:24:6f:df:05:d8:aa: 4e:aa:97:48:72:05:4b:57:98:0f:45:ec:3d:45:59: 82:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:61:0C:2E:96:26:12:75:57:7E:18:35:A9:D6:60:CD:7F:57:66:12 X509v3 Authority Key Identifier: keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:a6:b4:3e:37:2b:7e:0e:49:cf:cd:5e:60:cd:43:10:01:b6: 36:28:04:fd:d0:f6:4d:45:67:02:05:6d:f9:4e:1b:4b:ca:26: 88:dd:50:7d:90:b8:89:0a:40:1f:e1:86:a9:88:94:97:55:4f: 7b:7c:84:a9:d2:4b:39:5f:b7:be:76:29:4f:12:57:55:2e:80: e0:91:1c:20:75:88:e2:e3:92:38:b9:c9:a6:80:c0:dd:a6:29: 9d:a4:69:91:3b:45:8b:0f:d9:ab:9f:2e:bb:c6:de:99:43:a8: 53:68:0b:92:e2:f8:4b:38:2f:d4:91:7a:04:ca:c8:8d:24:00: 9d:39:91:f0:2f:c0:31:42:c2:cc:c3:d0:9b:ff:b6:bb:58:b7: 72:86:1f:91:90:b4:3b:e3:9f:94:ed:c0:f1:c7:74:99:21:e6: b7:5b:d2:83:e9:bb:e3:72:e0:d5:46:a4:6b:a2:24:80:eb:d4: aa:2b:d1:02:df:7b:98:ba:0d:42:16:79:4c:be:07:44:1c:b5: 0b:15:55:21:3b:c2:22:f9:84:87:4d:ea:f6:33:30:00:4e:37: 13:8a:c1:ac:ba:96:34:69:c0:1d:5d:5b:cb:e8:43:1e:14:e8: 20:92:11:12:c7:d9:d1:ea:c8:e3:39:ff:e7:28:35:47:76:8d: ce:3a:5c:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz NTkwRkIyN0EwHhcNMjUwNzAxMDAxODQ5WhcNMjUwNzA4MDAxODQ5WjAYMRYwFAYD VQQDEw02ODYzMjk2OS03YTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsybNXIdgWG94RJq+KDg6I0qZ8D0b+xwXpIszCzJlpFEPSVdIIN+jaXhT3+q3 z8vajX/TwMFMThDh9JNrHDD7S10n5qdfxlQXj6ENCKscHvoL1E5kgr5/96rzTq/z sBZEllj6pWpv6+2ckM/j0UEVXQvmbkzSSFwpkJMBcsRRdmLqcFgWmtLkrR/K8LKt o0l/I2jBKISxQm9+r8NR3VaUjEBtNGG1HLVwrddPh29NRGxNK9KlRLvDrJsp4Ou8 hqk+enmtPSJQrWRIfOy7qsmtRAhyfbMziaVBU/lxgTbvoe/egXcwxAkX1h4kb98F 2KpOqpdIcgVLV5gPRew9RVmChQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBthDC6W JhJ1V34YNanWYM1/V2YSMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXprQ+Nyt+DknPzV5gzUMQAbY2KAT90PZNRWcCBW35ThtLyiaI3VB9 kLiJCkAf4YapiJSXVU97fISp0ks5X7e+dilPEldVLoDgkRwgdYji45I4ucmmgMDd pimdpGmRO0WLD9mrny67xt6ZQ6hTaAuS4vhLOC/UkXoEysiNJACdOZHwL8AxQsLM w9Cb/7a7WLdyhh+RkLQ745+U7cDxx3SZIea3W9KD6bvjcuDVRqRroiSA69SqK9EC 33uYug1CFnlMvgdEHLULFVUhO8Ii+YSHTer2MzAATjcTisGsupY0acAdXVvL6EMe FOggkhESx9nR6sjjOf/nKDVHdo3OOlx3 -----END CERTIFICATE-----Generated at Wed Jul 2 20:19:32 2025 by rpki-client