$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft File: YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json) Hash identifier: 970u1sSa7psXATPVL8xasIkatKciEyx1cxKcOsnqlsY= Subject key identifier: 84:5D:EE:80:B4:96:E0:BD:F3:C3:D1:64:7F:02:AF:27:B3:77:FE:1F Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 Certificate issuer: /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Certificate serial: 027D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft Manifest number: 0278 Signing time: Thu 03 Jul 2025 02:07:07 +0000 Manifest this update: Thu 03 Jul 2025 02:07:07 +0000 Manifest next update: Thu 10 Jul 2025 02:07:07 +0000 Files and hashes: 1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: HqAVe71k7mMAZWzu/vKZgxLKL+G9jRGHl33G7p05etI=) 2: 008C0876148311ED856EF438C4F9AE02.roa (hash: TaT1WGLobUSkn2V8H3yXdWE7g83qq/C9PlZR3+C38jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9293, serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Validity Not Before: Jul 3 02:07:07 2025 GMT Not After : Jul 10 02:07:07 2025 GMT Subject: CN=6865e5cb-079a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d7:6b:2c:1b:50:70:c8:87:02:0a:e7:77:cb: cf:f3:5d:d9:db:de:51:61:ef:04:8f:da:23:fa:34: cf:d1:dd:14:c1:b2:f8:39:e6:78:c2:ed:52:56:36: 55:c6:3a:f9:ea:a0:60:81:94:de:56:a7:98:8b:ba: 3a:ae:c9:0f:8c:9a:c4:24:a0:7d:cf:48:5f:83:e8: 65:da:0f:e5:c7:69:2f:9b:f4:c3:0e:5e:aa:8b:43: 4c:6b:ef:58:2c:2e:97:a1:e4:dd:cb:d8:a0:22:37: 69:ab:41:42:64:75:2a:67:c9:2a:a1:51:9b:9e:cb: 56:9a:5e:ad:9f:17:b6:15:bd:d9:10:a6:aa:a9:c8: 32:7f:aa:4c:1f:13:a0:37:8d:2f:87:cf:9a:d6:5c: 21:6c:93:23:32:24:72:f4:08:b7:c7:f4:cd:6c:4a: ca:ac:f1:07:f2:bb:38:30:e1:f0:60:4e:ac:5c:52: f8:7c:27:50:f8:70:fa:94:45:90:69:10:a9:37:02: cb:50:b1:e1:01:64:ee:b0:15:ce:01:6c:44:e6:5e: 2a:75:35:83:36:ca:96:74:df:67:83:d8:5e:10:5b: b6:39:97:2c:e0:80:ac:cd:40:0c:e2:31:cf:99:ad: f3:e2:3e:a3:fd:fd:ba:42:51:37:84:6e:12:d9:78: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5D:EE:80:B4:96:E0:BD:F3:C3:D1:64:7F:02:AF:27:B3:77:FE:1F X509v3 Authority Key Identifier: keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a1:bb:1a:bb:6b:bf:bb:2b:7b:69:1f:33:64:d4:fd:24:99: 83:aa:5e:0d:17:d7:1f:8b:d0:5b:b7:2a:54:f8:20:50:39:7f: 84:a7:01:a9:96:43:92:cd:5c:1c:3a:76:82:25:cf:44:00:d4: f5:9c:94:99:a4:45:03:0c:0e:8e:88:9b:ec:d0:a7:a9:9b:b1: 49:a9:78:af:68:63:b2:dd:c4:ba:95:8f:98:77:fc:d6:b6:72: a9:26:15:a2:0e:0f:f8:29:b6:a4:4c:a5:8b:88:3b:6c:55:87: e7:cb:86:84:46:60:32:17:aa:b9:00:9e:90:dd:bc:1c:a2:2b: c2:24:c0:30:c6:84:1a:17:ae:7a:9d:ce:b6:fa:66:95:f4:8e: 73:f2:80:be:ef:f2:b8:47:72:23:82:8d:9b:7a:5c:d3:e6:2a: 4a:f5:68:9c:f0:e3:be:27:92:35:44:36:b4:f8:cc:ac:4b:b0: ab:a8:5b:d4:d6:18:f3:5f:1a:51:73:d5:dd:4e:8b:fd:32:13: 24:09:de:f5:8b:ee:33:fc:65:53:85:bb:3d:0b:cf:9d:ac:21: 55:9b:5b:8c:76:0d:40:02:c9:7a:8d:e6:cf:6d:bd:6a:99:15: 7a:cb:b4:07:b7:b7:a2:32:e8:dd:4e:6a:5e:94:8b:ae:f1:0d: ae:8d:e3:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOTMxMTAvBgNVBAUTKDYwMkZGNEZBODBBMDAwQUM2MUU2RDRBQjJGNzJGQkQ5 NkE2MUY4ODIwHhcNMjUwNzAzMDIwNzA3WhcNMjUwNzEwMDIwNzA3WjAYMRYwFAYD VQQDEw02ODY1ZTVjYi0wNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9drLBtQcMiHAgrnd8vP813Z295RYe8Ej9oj+jTP0d0UwbL4OeZ4wu1SVjZV xjr56qBggZTeVqeYi7o6rskPjJrEJKB9z0hfg+hl2g/lx2kvm/TDDl6qi0NMa+9Y LC6XoeTdy9igIjdpq0FCZHUqZ8kqoVGbnstWml6tnxe2Fb3ZEKaqqcgyf6pMHxOg N40vh8+a1lwhbJMjMiRy9Ai3x/TNbErKrPEH8rs4MOHwYE6sXFL4fCdQ+HD6lEWQ aRCpNwLLULHhAWTusBXOAWxE5l4qdTWDNsqWdN9ng9heEFu2OZcs4ICszUAM4jHP ma3z4j6j/f26QlE3hG4S2Xji9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRd7oC0 luC988PRZH8Cryezd/4fMB8GA1UdIwQYMBaAFGAv9PqAoACsYebUqy9y+9lqYfiC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5My9BOUEzOEJCRTE0 N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FLeGg1dFNyTDNMNzJXcGgt SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDXzAtb0NnQUt4aDV0U3JMM0w3MldwaC1JSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5My9BOUEzOEJCRTE0N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FL eGg1dFNyTDNMNzJXcGgtSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQobsau2u/uyt7aR8zZNT9JJmDql4NF9cfi9BbtypU+CBQOX+EpwGp lkOSzVwcOnaCJc9EANT1nJSZpEUDDA6OiJvs0Kepm7FJqXivaGOy3cS6lY+Yd/zW tnKpJhWiDg/4KbakTKWLiDtsVYfny4aERmAyF6q5AJ6Q3bwcoivCJMAwxoQaF656 nc62+maV9I5z8oC+7/K4R3Ijgo2belzT5ipK9Wic8OO+J5I1RDa0+MysS7CrqFvU 1hjzXxpRc9XdTov9MhMkCd71i+4z/GVThbs9C8+drCFVm1uMdg1AAsl6jebPbb1q mRV6y7QHt7eiMujdTmpelIuu8Q2ujeN8 -----END CERTIFICATE-----Generated at Thu Jul 3 03:51:01 2025 by rpki-client