$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json) Hash identifier: I9NO6vhR4VYDP3Hw8Y1hqG91GKHsv8ieJrLdiEpxLMU= Subject key identifier: 3A:8E:B7:BE:70:68:15:7B:F8:16:FC:1C:CD:8B:1B:45:0A:6B:74:03 Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft Manifest number: 016E Signing time: Tue 01 Jul 2025 04:39:48 +0000 Manifest this update: Tue 01 Jul 2025 04:39:48 +0000 Manifest next update: Tue 08 Jul 2025 04:39:48 +0000 Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: f2XByN3/UnZP1EbG2HhKHcWhZ8NDzKc2+uzTIm4iJAc=) 2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: 0UB6vf7tsJ4/eqdU0xPwdgNnTiXM+SW0/ez8sQsDOEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Validity Not Before: Jul 1 04:39:48 2025 GMT Not After : Jul 8 04:39:48 2025 GMT Subject: CN=68636694-3b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c8:f0:b8:21:d3:a5:3a:92:ae:73:ea:e3:7f: 33:71:7f:a2:2e:cc:96:6c:bb:0f:0f:4c:61:bc:de: 60:59:22:32:78:8c:f3:a4:a1:e8:8b:c6:ed:fa:e3: 62:23:00:71:2d:37:46:44:9c:7e:a4:86:85:3a:db: 2b:cf:ac:a8:8b:ca:ac:77:40:35:c1:83:d9:12:63: 13:52:1b:d6:04:77:ac:d8:15:03:98:52:ce:dd:64: d7:68:3a:e1:15:b0:c1:26:f6:17:cd:a5:20:23:c6: 25:83:e2:5d:7f:1b:0c:67:7a:00:1b:7e:51:ad:66: eb:f9:b8:dc:47:e0:de:88:91:50:a0:11:57:23:a0: 0c:94:ba:9b:aa:4e:3d:9c:04:66:f6:16:99:5d:4f: 98:96:fc:12:ad:be:d8:94:0c:1f:c8:bf:4b:2d:c9: 27:8f:99:d2:65:9a:95:97:13:c6:98:ed:74:d5:f1: 2a:1c:a4:b8:f7:7d:fd:23:cc:a1:a3:cc:cf:1c:22: 28:20:0a:72:e6:39:4a:fa:2f:74:88:8a:63:73:f2: f2:ea:03:f9:3a:74:91:93:1c:35:5e:27:e5:b0:53: 9d:8a:b8:ad:99:49:86:4d:2f:ba:09:f3:a6:cb:39: 3d:1a:47:17:bd:52:cd:06:8d:bb:57:1c:ce:23:4e: 62:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8E:B7:BE:70:68:15:7B:F8:16:FC:1C:CD:8B:1B:45:0A:6B:74:03 X509v3 Authority Key Identifier: keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:d5:61:4b:d0:35:3d:dc:65:ca:65:b1:a9:7f:2c:07:da:36: b3:93:6c:78:78:bc:8d:37:38:30:8c:47:68:93:a7:d8:d9:a5: 6a:47:03:32:5b:5d:a5:e5:3c:ff:b8:e1:b0:f6:8b:37:ef:a4: d9:de:81:e5:a8:48:50:64:44:85:02:49:a4:c5:ac:2a:49:49: 08:57:52:b6:fd:ba:2d:01:98:70:42:42:0b:f5:f0:d4:27:16: 1a:b0:51:7a:cd:3e:1d:30:d6:bf:cd:5e:82:88:e3:90:4c:dd: 36:55:35:c0:cb:85:c8:4b:d2:17:14:86:02:62:0d:71:8c:14: 05:33:9e:4b:e1:0e:50:60:a7:26:35:06:7b:84:e0:35:ab:38: 79:ae:8a:8a:06:d4:ee:79:27:4e:32:af:23:77:30:34:6f:8b: 05:c9:9d:0c:a5:1f:f4:ae:da:e2:de:24:e2:a6:d7:58:07:17: f6:5c:f9:c0:19:f7:d8:00:1a:4e:5a:80:74:90:0a:7b:9c:28: c6:b2:6a:5c:b5:32:25:b8:4f:3e:c5:01:42:6d:12:26:2c:0a: 7b:98:a3:d9:ae:1c:e8:cb:da:1d:2a:9a:02:2b:c0:de:e3:f1: 66:e8:02:71:1f:5c:fb:cb:eb:e5:f8:be:e9:86:04:78:9c:83: cc:33:4f:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2 RDY3NzU4MDkwHhcNMjUwNzAxMDQzOTQ4WhcNMjUwNzA4MDQzOTQ4WjAYMRYwFAYD VQQDEw02ODYzNjY5NC0zYjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18jwuCHTpTqSrnPq438zcX+iLsyWbLsPD0xhvN5gWSIyeIzzpKHoi8bt+uNi IwBxLTdGRJx+pIaFOtsrz6yoi8qsd0A1wYPZEmMTUhvWBHes2BUDmFLO3WTXaDrh FbDBJvYXzaUgI8Ylg+JdfxsMZ3oAG35RrWbr+bjcR+DeiJFQoBFXI6AMlLqbqk49 nARm9haZXU+YlvwSrb7YlAwfyL9LLcknj5nSZZqVlxPGmO101fEqHKS49339I8yh o8zPHCIoIApy5jlK+i90iIpjc/Ly6gP5OnSRkxw1XiflsFOdiritmUmGTS+6CfOm yzk9GkcXvVLNBo27VxzOI05iQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqOt75w aBV7+Bb8HM2LG0UKa3QDMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZX Nk9zVS1WUHExanR0WjNXQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT1WFL0DU93GXKZbGpfywH2jazk2x4eLyNNzgwjEdok6fY2aVqRwMy W12l5Tz/uOGw9os376TZ3oHlqEhQZESFAkmkxawqSUkIV1K2/botAZhwQkIL9fDU JxYasFF6zT4dMNa/zV6CiOOQTN02VTXAy4XIS9IXFIYCYg1xjBQFM55L4Q5QYKcm NQZ7hOA1qzh5roqKBtTueSdOMq8jdzA0b4sFyZ0MpR/0rtri3iTiptdYBxf2XPnA GffYABpOWoB0kAp7nCjGsmpctTIluE8+xQFCbRImLAp7mKPZrhzoy9odKpoCK8De 4/Fm6AJxH1z7y+vl+L7phgR4nIPMM0+f -----END CERTIFICATE-----Generated at Thu Jul 3 01:07:25 2025 by rpki-client