$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: Ds6abJ11Vjulxwff6S35yVbFHcLMkbPIUrwHejrftxk= Subject key identifier: BE:C7:E1:72:E4:61:B1:9C:01:7B:D7:F9:30:19:B2:34:F3:28:E3:7E Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: 015C Signing time: Thu 03 Jul 2025 04:09:37 +0000 Manifest this update: Thu 03 Jul 2025 04:09:37 +0000 Manifest next update: Thu 10 Jul 2025 04:09:37 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: C25uvFBopoBwd6adxuQreQx/4bO9h8tbISQIMXISX7E=) 2: B78CCA4E4C5711EE9FE2EA35C4F9AE02.roa (hash: yOezlN4+53IwwnSsCKNCBTmWXo8aQEvNaQEYhS9yato=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Jul 3 04:09:37 2025 GMT Not After : Jul 10 04:09:37 2025 GMT Subject: CN=68660281-b2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:ef:4d:6d:a3:ca:c2:0f:94:7d:65:a1:ff: 42:25:69:86:6f:a6:50:1d:20:e0:97:5b:75:35:82: 24:77:48:48:93:d8:a8:39:eb:4a:44:8d:a0:d9:64: 05:08:b7:8f:02:a5:d9:1e:52:e2:04:1e:2f:8c:6d: 81:2e:b4:27:f4:9c:f1:1a:91:30:22:22:8d:0e:e6: f4:46:dd:b1:92:ad:c9:b2:f3:ad:c5:51:a7:4b:89: ba:e2:df:27:d8:7e:d1:74:a9:9e:f2:98:44:76:18: 98:42:df:44:ca:e9:6a:06:b5:e1:91:93:5f:12:0f: 94:80:07:52:3f:2b:c8:49:9a:41:92:1f:22:73:7b: 3a:30:c5:e1:9a:99:38:9a:c3:90:eb:30:2b:00:d4: a5:3d:8a:90:a0:0c:8a:07:a6:69:79:fa:e7:8d:0a: a9:99:19:06:38:c2:9f:80:02:94:ce:66:fc:3c:71: b1:95:cc:86:af:81:e2:41:10:c9:99:9a:56:a4:18: c3:86:44:f8:92:2d:05:c4:bb:a5:31:84:c1:63:cc: 24:56:82:e8:a9:02:4c:ff:e0:18:ac:58:34:5b:03: 69:5a:17:dc:eb:ca:f7:b4:3c:f9:f2:52:3c:ee:7b: 93:a1:f2:f2:6c:bb:10:c8:12:a1:c0:24:60:76:01: a2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C7:E1:72:E4:61:B1:9C:01:7B:D7:F9:30:19:B2:34:F3:28:E3:7E X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:18:f4:5a:df:6c:fa:a2:40:06:43:c9:db:94:b5:91:d1:72: 20:90:c2:ee:e6:34:65:4d:2c:8e:57:96:a3:81:da:62:4d:08: 7f:36:04:e2:cf:b8:36:5a:d0:0d:31:07:fd:c6:37:dd:05:69: 02:15:6b:97:94:5d:a9:69:0f:19:15:9b:e8:dd:b8:b9:93:90: 07:a4:b3:6c:7a:9d:99:52:5b:53:fa:eb:bf:35:aa:8f:33:c8: 0c:21:77:7d:9f:f2:ad:51:44:06:26:d4:e1:ab:79:2b:ec:f2: 56:24:1c:af:4f:53:31:c7:2d:83:f0:4f:74:66:d1:6f:3a:fc: 49:b6:e0:23:3a:e8:11:e6:76:49:7a:3f:60:bc:ef:eb:64:3d: c3:87:ac:ae:0a:18:8f:93:0f:f7:84:76:6a:c7:f5:a7:1c:1f: 67:b4:ca:32:46:79:a6:d2:b3:9d:2c:a9:78:cd:92:c9:fa:d7: 23:6c:1a:66:bf:fb:d2:0a:9e:61:bb:68:9a:eb:55:48:b1:42: 8b:aa:81:61:b5:df:bf:0c:3b:dc:bb:b8:aa:cd:66:8b:7d:fd: d2:92:8e:b7:ae:21:61:0f:4a:67:b2:61:50:b4:bf:b8:85:d2: 31:8e:8d:07:ee:8d:9d:38:94:1e:11:ca:47:47:56:2f:51:2c: 30:b9:e0:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjUwNzAzMDQwOTM3WhcNMjUwNzEwMDQwOTM3WjAYMRYwFAYD VQQDEw02ODY2MDI4MS1iMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQnvTW2jysIPlH1lof9CJWmGb6ZQHSDgl1t1NYIkd0hIk9ioOetKRI2g2WQF CLePAqXZHlLiBB4vjG2BLrQn9JzxGpEwIiKNDub0Rt2xkq3JsvOtxVGnS4m64t8n 2H7RdKme8phEdhiYQt9EyulqBrXhkZNfEg+UgAdSPyvISZpBkh8ic3s6MMXhmpk4 msOQ6zArANSlPYqQoAyKB6ZpefrnjQqpmRkGOMKfgAKUzmb8PHGxlcyGr4HiQRDJ mZpWpBjDhkT4ki0FxLulMYTBY8wkVoLoqQJM/+AYrFg0WwNpWhfc68r3tDz58lI8 7nuTofLybLsQyBKhwCRgdgGiiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7H4XLk YbGcAXvX+TAZsjTzKON+MB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+GPRa32z6okAGQ8nblLWR0XIgkMLu5jRlTSyOV5ajgdpiTQh/NgTi z7g2WtANMQf9xjfdBWkCFWuXlF2paQ8ZFZvo3bi5k5AHpLNsep2ZUltT+uu/NaqP M8gMIXd9n/KtUUQGJtThq3kr7PJWJByvT1Mxxy2D8E90ZtFvOvxJtuAjOugR5nZJ ej9gvO/rZD3Dh6yuChiPkw/3hHZqx/WnHB9ntMoyRnmm0rOdLKl4zZLJ+tcjbBpm v/vSCp5hu2ia61VIsUKLqoFhtd+/DDvcu7iqzWaLff3Sko63riFhD0pnsmFQtL+4 hdIxjo0H7o2dOJQeEcpHR1YvUSwwueA6 -----END CERTIFICATE-----Generated at Thu Jul 3 06:21:21 2025 by rpki-client