$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json) Hash identifier: W5sLCTZvdSARCfFDIKaVrtxpsK8cMMs3UTOlb7roWu8= Subject key identifier: AB:CD:8C:E3:1C:58:55:5B:A1:1C:93:78:7F:AB:66:B5:CD:96:09:70 Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft Manifest number: 4A Signing time: Tue 01 Jul 2025 08:08:42 +0000 Manifest this update: Tue 01 Jul 2025 08:08:42 +0000 Manifest next update: Tue 08 Jul 2025 08:08:42 +0000 Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: 2k0NQHxCvS1nUVDRFLE1Q32sVNGCjNU4lQZBYIeGQ0U=) 2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: Jul 1 08:08:42 2025 GMT Not After : Jul 8 08:08:42 2025 GMT Subject: CN=6863978a-3492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:09:2e:18:27:e7:ef:d6:d9:e6:cb:16:24: 37:09:bf:1c:f5:6f:4d:c4:d5:40:c6:01:95:04:49: 39:67:f4:5f:84:f5:7b:e8:77:78:34:0f:d7:2d:68: b3:fe:d3:b5:dc:ac:e2:4b:58:a9:e1:7f:6a:17:9d: 39:00:01:82:eb:ed:31:e5:00:3a:e1:35:41:6a:cf: 92:68:e3:50:5b:9d:3a:e5:c0:a9:b6:98:64:ad:61: 2f:ce:98:f0:d3:5b:86:dd:00:89:2b:d3:1d:be:52: 71:51:14:ad:58:bf:17:89:4e:bc:83:c5:ea:b0:ec: 89:a1:0f:cd:d6:7c:c8:d0:1f:af:ce:54:fa:66:0d: a8:a2:ac:df:c6:f3:2c:3b:5a:89:e6:64:86:88:87: a0:6e:d9:4b:dd:92:18:f2:b8:51:85:b4:58:dc:dc: 8c:51:79:50:fe:f8:2a:c5:72:55:b8:b0:a3:17:33: be:5f:65:21:cd:2f:7f:40:e4:6c:94:40:62:39:87: 27:c4:c3:67:12:14:2f:d0:b6:b1:0d:17:e4:ce:3d: 6b:84:6b:c2:f2:ff:d8:67:07:d0:49:e2:4f:b8:10: 39:e4:c4:01:c0:64:90:b0:f8:03:67:fa:ee:8b:ed: d7:b6:73:99:f2:8d:26:e4:04:36:d2:2f:e3:85:00: 5d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CD:8C:E3:1C:58:55:5B:A1:1C:93:78:7F:AB:66:B5:CD:96:09:70 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:07:e1:bb:bc:93:19:f3:62:b6:71:25:a1:2f:bb:88:38:93: 20:1e:5f:cc:f3:12:f0:e3:21:f7:e2:12:76:f2:fe:fd:43:14: c6:4b:40:c3:1b:be:17:cd:a5:65:19:89:88:f7:3e:ed:4f:cd: 40:fc:74:42:d7:cf:35:9b:cf:99:74:a5:d8:07:57:d6:92:24: 8d:57:65:8c:c9:b1:ea:1a:2a:b5:8b:b9:1d:7f:87:6f:75:6b: 44:6c:85:b7:66:c2:9f:46:f2:06:2f:56:22:9a:a2:07:1c:3e: 37:27:bc:96:98:c2:69:55:f2:36:ba:bd:d1:42:6c:3c:a7:78: 8c:39:7a:72:b6:54:65:e8:62:b4:93:03:48:2d:26:b2:bd:e4: 36:d8:ca:60:d7:05:19:5a:a9:cd:9f:91:38:1f:2e:fe:1a:b1: eb:a9:01:cb:4a:35:50:30:7e:b3:e6:8f:04:aa:1c:2d:d0:b4: 74:d1:d5:2e:19:31:e5:6d:c7:f5:aa:bf:08:a2:aa:aa:18:f4: da:e2:14:8d:4d:c0:6b:e8:49:d3:cc:1a:71:ea:ab:f6:df:26: 8f:b3:db:9a:19:dd:eb:66:20:5e:b9:c1:d1:be:db:2a:2a:97: 35:58:b5:a6:48:84:35:56:d9:db:63:b4:d0:0b:3d:11:47:c2: 88:99:cf:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTc2NjExMC8GA1UEBRMoQzkyNDYwMTQyNTdFRUZGRkZFODBDRDNFQUJGRUQ2N0E4 OThENkY1NzAeFw0yNTA3MDEwODA4NDJaFw0yNTA3MDgwODA4NDJaMBgxFjAUBgNV BAMTDTY4NjM5NzhhLTM0OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD+QkuGCfn79bZ5ssWJDcJvxz1b03E1UDGAZUESTln9F+E9Xvod3g0D9ctaLP+ 07XcrOJLWKnhf2oXnTkAAYLr7THlADrhNUFqz5Jo41BbnTrlwKm2mGStYS/OmPDT W4bdAIkr0x2+UnFRFK1YvxeJTryDxeqw7ImhD83WfMjQH6/OVPpmDaiirN/G8yw7 WonmZIaIh6Bu2UvdkhjyuFGFtFjc3IxReVD++CrFclW4sKMXM75fZSHNL39A5GyU QGI5hyfEw2cSFC/QtrENF+TOPWuEa8Ly/9hnB9BJ4k+4EDnkxAHAZJCw+ANn+u6L 7de2c5nyjSbkBDbSL+OFAF27AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq82M4xxY VVuhHJN4f6tmtc2WCXAwHwYDVR0jBBgwFoAUySRgFCV+7//+gM0+q/7WeomNb1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5NzY2LzgwRjU5RTk0RUE1 NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVNSZ0ZDVi03X18tZ00wLXFfN1dlb21OYjFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 NzY2LzgwRjU5RTk0RUE1NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19f LWdNMC1xXzdXZW9tTmIxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGQH4bu8kxnzYrZxJaEvu4g4kyAeX8zzEvDjIffiEnby/v1DFMZLQMMb vhfNpWUZiYj3Pu1PzUD8dELXzzWbz5l0pdgHV9aSJI1XZYzJseoaKrWLuR1/h291 a0Rshbdmwp9G8gYvViKaogccPjcnvJaYwmlV8ja6vdFCbDyneIw5enK2VGXoYrST A0gtJrK95DbYymDXBRlaqc2fkTgfLv4aseupActKNVAwfrPmjwSqHC3QtHTR1S4Z MeVtx/WqvwiiqqoY9NriFI1NwGvoSdPMGnHqq/bfJo+z25oZ3etmIF65wdG+2yoq lzVYtaZIhDVW2dtjtNALPRFHwoiZz3A= -----END CERTIFICATE-----Generated at Wed Jul 2 19:31:35 2025 by rpki-client