$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json) Hash identifier: IEdJfyUoik1tlVcsN7SoA1osKOsg++jRJEjF8RTYciQ= Subject key identifier: 83:FE:79:C2:CE:3F:DF:20:21:76:58:25:45:93:34:E1:10:02:15:81 Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft Manifest number: 01ED Signing time: Mon 21 Jul 2025 02:40:56 +0000 Manifest this update: Mon 21 Jul 2025 02:40:56 +0000 Manifest next update: Mon 28 Jul 2025 02:40:56 +0000 Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: 1VzM2wNOVt5PxFRBMvTkS0tu4EMDTZ/h9b+TOe17ey0=) 2: 9DE3DEAEAC9E11EFBAC6A027C4F9AE02.roa (hash: TvtT1Oa3KekcpLOO3lB33TtpOxnVn3h062NADWWRlOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Validity Not Before: Jul 21 02:40:56 2025 GMT Not After : Jul 28 02:40:56 2025 GMT Subject: CN=687da8b8-7a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a5:03:1b:93:4a:da:ca:25:92:2b:32:a2:54: ec:10:0f:04:02:22:0b:7e:73:57:98:1b:76:f9:4d: 3d:d6:da:60:ad:18:9b:26:0a:7c:6c:ea:42:9b:25: fc:8d:03:51:5e:e8:9f:fd:d8:d2:50:fa:36:56:6d: 09:76:22:60:73:2c:35:f0:33:c1:59:b3:f2:b1:cb: f2:ea:34:5e:8a:37:c6:62:d4:e0:b7:ed:e1:ff:21: fd:68:88:77:1d:d6:8a:40:87:6e:33:7e:94:8a:a5: e8:6c:ab:02:d5:de:55:1c:c6:d6:b8:cd:97:2d:c0: ad:af:19:3e:c6:23:24:7d:12:2d:4f:4d:ca:a6:1f: 73:1f:68:24:60:67:06:73:13:21:25:39:95:8b:03: c1:1f:be:ae:d6:a8:18:78:bf:85:79:8d:30:f2:77: cc:88:78:ee:73:d2:58:e7:2b:86:7f:dd:97:a5:e6: 5d:7c:e5:82:36:8a:11:86:b9:7f:56:b2:81:b9:3d: fc:57:a4:47:b4:4e:96:0b:89:cf:54:61:24:6f:f9: ce:47:eb:8c:70:c6:eb:85:ea:33:24:8e:7d:d0:cc: 50:9e:50:93:47:45:23:76:f8:41:fa:20:8c:48:bd: 8c:6b:f4:bb:ef:73:b1:10:8d:8a:4f:84:7e:b7:6e: f6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FE:79:C2:CE:3F:DF:20:21:76:58:25:45:93:34:E1:10:02:15:81 X509v3 Authority Key Identifier: keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:39:e3:1f:b8:c4:16:c3:fe:23:63:16:73:a3:dd:ff:00:f1: de:29:1a:35:ed:c9:85:1d:1f:6e:29:48:e0:53:3d:cc:84:62: 9f:e2:b3:0b:9d:45:54:d8:10:bf:00:c4:68:e4:08:29:ae:a8: 3f:30:7b:fc:11:54:f8:7c:f8:37:65:dc:ef:50:3b:5b:d9:08: 9d:c6:21:b8:d7:f3:ac:10:b8:19:9e:d1:02:b6:6b:0c:a9:fd: 97:65:fa:dd:9e:c1:47:9c:19:e1:b1:41:81:ee:64:a4:ab:c9: bd:46:e8:14:0b:13:be:d2:b5:1f:d7:72:64:33:0b:3d:d6:44: 31:5b:8f:da:81:62:4c:3e:01:62:ab:89:42:a8:e9:47:00:6d: e3:ed:db:72:97:2e:bb:97:f9:69:13:43:7b:8d:5d:36:8a:40: eb:0e:67:82:77:3a:3b:b8:09:f0:f0:0c:3b:da:c5:a1:e8:4d: bf:4e:46:6c:fd:87:8e:30:f5:b5:74:71:87:4f:60:50:2a:c6: 18:37:68:a3:e7:33:c5:cc:8c:f0:d5:31:9b:e5:ce:0c:f6:89: b0:fc:ea:f4:8f:d0:e0:cc:61:48:cd:01:49:e3:99:0a:42:62: 41:82:40:d5:e4:75:aa:33:fa:db:48:bd:b4:4a:d1:5e:ac:53: 8a:57:57:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5MDcxMTAvBgNVBAUTKENBMDA3MEFDNTIwMUQ2RjZBNzc1QUE1MjVENTNEOEUz MzBFMzIwOTYwHhcNMjUwNzIxMDI0MDU2WhcNMjUwNzI4MDI0MDU2WjAYMRYwFAYD VQQDEw02ODdkYThiOC03YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qUDG5NK2solkisyolTsEA8EAiILfnNXmBt2+U091tpgrRibJgp8bOpCmyX8 jQNRXuif/djSUPo2Vm0JdiJgcyw18DPBWbPyscvy6jReijfGYtTgt+3h/yH9aIh3 HdaKQIduM36UiqXobKsC1d5VHMbWuM2XLcCtrxk+xiMkfRItT03Kph9zH2gkYGcG cxMhJTmViwPBH76u1qgYeL+FeY0w8nfMiHjuc9JY5yuGf92XpeZdfOWCNooRhrl/ VrKBuT38V6RHtE6WC4nPVGEkb/nOR+uMcMbrheozJI590MxQnlCTR0UjdvhB+iCM SL2Ma/S773OxEI2KT4R+t2729QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIP+ecLO P98gIXZYJUWTNOEQAhWBMB8GA1UdIwQYMBaAFMoAcKxSAdb2p3WqUl1T2OMw4yCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkwNy9CNTZBN0NCMDdB QjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2YW5kYXBTWFZQWTR6RGpJ SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lnQndyRklCMXZhbmRhcFNYVlBZNHpEaklKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjkwNy9CNTZBN0NCMDdBQjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2 YW5kYXBTWFZQWTR6RGpJSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnOeMfuMQWw/4jYxZzo93/APHeKRo17cmFHR9uKUjgUz3MhGKf4rML nUVU2BC/AMRo5Agprqg/MHv8EVT4fPg3ZdzvUDtb2QidxiG41/OsELgZntECtmsM qf2XZfrdnsFHnBnhsUGB7mSkq8m9RugUCxO+0rUf13JkMws91kQxW4/agWJMPgFi q4lCqOlHAG3j7dtyly67l/lpE0N7jV02ikDrDmeCdzo7uAnw8Aw72sWh6E2/TkZs /YeOMPW1dHGHT2BQKsYYN2ij5zPFzIzw1TGb5c4M9omw/Or0j9DgzGFIzQFJ45kK QmJBgkDV5HWqM/rbSL20StFerFOKV1fb -----END CERTIFICATE-----Generated at Mon Jul 21 12:29:12 2025 by rpki-client