$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json) Hash identifier: DZM6h6u/B1eO2t9xL2DEw9IC8SkjCztRFUAPMddp6TU= Subject key identifier: E9:1D:1C:59:1C:E8:0D:37:A0:34:A5:F3:BB:FA:48:0F:13:B4:2E:D8 Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft Manifest number: 0174 Signing time: Tue 01 Jul 2025 04:12:15 +0000 Manifest this update: Tue 01 Jul 2025 04:12:15 +0000 Manifest next update: Tue 08 Jul 2025 04:12:15 +0000 Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: MY9wPutfkjje7gxoGmoMWTwIlxn5JOfXp1OMtvFiavA=) 2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: ZCVYghnlBBULLQqokv1P6cracGy0h9WOzePiXeVHY4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Validity Not Before: Jul 1 04:12:15 2025 GMT Not After : Jul 8 04:12:15 2025 GMT Subject: CN=6863601f-f71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:95:04:bb:1e:d9:cb:f1:9a:dd:d1:82:fa:c0: d9:21:db:1a:a9:4c:a4:06:3c:0d:8b:da:58:44:c4: 16:99:d5:5b:d9:fb:30:f2:88:9c:4b:26:42:83:a4: 86:94:07:80:10:3b:1c:b9:b7:77:64:42:19:72:96: 73:27:d9:b7:a8:51:e8:77:04:53:e1:3a:31:e4:89: c8:9d:cf:57:7a:80:37:19:1d:de:cd:f6:ac:4d:74: a9:34:d2:3a:cf:77:8a:73:cd:f7:39:5d:02:57:5e: 3c:83:89:c6:1c:f8:84:1f:c5:8f:80:28:e1:4c:39: cb:06:ea:35:80:ff:37:37:f2:a7:2e:f7:80:cb:95: c1:f1:f0:6b:2f:d5:67:26:1c:61:c4:28:9e:88:a8: c0:16:26:9f:1e:38:1e:97:fa:25:b4:02:cb:71:b3: d9:13:1c:13:cf:7a:10:98:17:42:8b:20:5f:b3:11: 1e:f4:42:28:69:18:f9:69:56:f9:3c:45:d1:c1:c6: bf:25:81:33:c8:c6:8b:33:7b:ab:04:5a:02:9e:ae: f6:95:3a:2f:46:2d:d0:b3:fa:70:f9:6f:b6:c1:9d: a6:12:2e:d3:40:ea:1a:8e:99:2a:1f:67:0b:a5:7a: 32:f2:65:89:40:b3:68:a2:f1:b8:3d:7c:1e:19:94: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:1C:59:1C:E8:0D:37:A0:34:A5:F3:BB:FA:48:0F:13:B4:2E:D8 X509v3 Authority Key Identifier: keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:3d:53:c7:aa:23:b1:de:ab:fe:e3:22:0e:24:1d:0b:03:92: 04:a0:20:29:85:6a:93:85:28:51:f0:24:42:75:f3:98:8f:7c: 36:06:8e:6f:ed:80:f2:36:bb:2b:57:89:fe:76:3a:1b:36:9d: cc:7d:97:ca:2d:95:71:46:18:06:be:bf:7a:a2:9f:3f:3b:33: b0:98:26:c9:8e:78:8b:2d:e6:a1:64:ce:a1:bf:01:9a:97:b2: fd:7d:e7:5f:09:29:06:63:ad:c4:38:b3:2d:24:33:67:e8:95: 03:31:d3:39:2c:a5:63:93:d3:e6:25:b6:ff:5d:19:73:39:c7: 00:0d:f5:1a:2a:5f:48:61:2c:5f:ee:43:36:56:fa:d6:a6:06: c6:88:32:b1:4e:9d:93:ab:83:b5:4b:8e:36:7b:0b:5f:ed:ca: f8:c9:41:74:2b:aa:ad:32:f6:4a:a2:e7:53:54:c4:44:93:8d: a9:b8:a6:28:4c:de:bb:55:92:15:d6:2e:e3:cd:8d:03:ac:fe: 30:7b:dc:8d:96:de:af:6e:89:03:c1:9d:2e:a5:4b:65:18:ed: fc:44:8a:6d:61:f1:18:fa:df:de:e0:d3:f4:01:8e:06:6b:1a: 35:1c:26:cb:20:e3:f9:db:33:c6:b5:33:6e:d9:03:d6:84:ed: 9e:78:47:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4M0IxMTAvBgNVBAUTKENBN0NFRUY5MTg4MDdFNjcxQjE2MjRFNjNBQjZGNjgx MDNERkQ1RTMwHhcNMjUwNzAxMDQxMjE1WhcNMjUwNzA4MDQxMjE1WjAYMRYwFAYD VQQDEw02ODYzNjAxZi1mNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45UEux7Zy/Ga3dGC+sDZIdsaqUykBjwNi9pYRMQWmdVb2fsw8oicSyZCg6SG lAeAEDscubd3ZEIZcpZzJ9m3qFHodwRT4Tox5InInc9XeoA3GR3ezfasTXSpNNI6 z3eKc833OV0CV148g4nGHPiEH8WPgCjhTDnLBuo1gP83N/KnLveAy5XB8fBrL9Vn JhxhxCieiKjAFiafHjgel/oltALLcbPZExwTz3oQmBdCiyBfsxEe9EIoaRj5aVb5 PEXRwca/JYEzyMaLM3urBFoCnq72lTovRi3Qs/pw+W+2wZ2mEi7TQOoajpkqH2cL pXoy8mWJQLNoovG4PXweGZTcYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkdHFkc 6A03oDSl87v6SA8TtC7YMB8GA1UdIwQYMBaAFMp87vkYgH5nGxYk5jq29oED39Xj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgzQi81QUYwNDE5QzFC RTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZtY2JGaVRtT3JiMmdRUGYx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3luenUtUmlBZm1jYkZpVG1PcmIyZ1FQZjFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTgzQi81QUYwNDE5QzFCRTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZt Y2JGaVRtT3JiMmdRUGYxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClPVPHqiOx3qv+4yIOJB0LA5IEoCAphWqThShR8CRCdfOYj3w2Bo5v 7YDyNrsrV4n+djobNp3MfZfKLZVxRhgGvr96op8/OzOwmCbJjniLLeahZM6hvwGa l7L9fedfCSkGY63EOLMtJDNn6JUDMdM5LKVjk9PmJbb/XRlzOccADfUaKl9IYSxf 7kM2VvrWpgbGiDKxTp2Tq4O1S442ewtf7cr4yUF0K6qtMvZKoudTVMREk42puKYo TN67VZIV1i7jzY0DrP4we9yNlt6vbokDwZ0upUtlGO38RIptYfEY+t/e4NP0AY4G axo1HCbLIOP52zPGtTNu2QPWhO2eeEf+ -----END CERTIFICATE-----Generated at Tue Jul 1 12:59:46 2025 by rpki-client