$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json) Hash identifier: XyK4pNCmyPxxDgJldolJw0f3SW55WetLLWxRugqSiik= Subject key identifier: 44:2A:81:F1:26:19:3C:DE:C3:89:9D:3C:C2:53:53:58:B6:0E:FA:B8 Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft Manifest number: 0145 Signing time: Wed 23 Jul 2025 04:33:28 +0000 Manifest this update: Wed 23 Jul 2025 04:33:27 +0000 Manifest next update: Wed 30 Jul 2025 04:33:27 +0000 Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: BAD+s+ZCB1DGXmqCWz8nYkXf8XePZ0hYULSrWf9GUls=) 2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: Au9LqYxSegxqPey9TLXuRtICRWaNbswTGw/Qw/oD2tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 04:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: Jul 23 04:33:27 2025 GMT Not After : Jul 30 04:33:27 2025 GMT Subject: CN=68806617-4258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:af:94:c5:ec:cb:b1:2d:b0:05:bf:ae:e6:19: 6f:49:5c:f8:1e:39:dc:03:15:00:68:04:ba:76:ae: 7d:55:15:20:15:00:0e:46:ce:74:05:e6:52:27:7b: 68:eb:e7:d1:89:b6:64:f5:50:1d:ee:c1:6f:46:00: 5f:14:6c:be:70:f0:1f:ad:43:3a:36:4c:11:62:77: aa:60:ca:94:74:03:7a:c6:f7:27:c5:db:3f:fa:35: e1:e2:f0:5b:9b:41:59:f7:ae:a0:22:ad:35:c8:ae: 3e:ff:b9:c7:60:7c:fb:10:18:91:f2:c7:d8:0b:0d: 48:0e:e5:20:bc:e2:ea:cd:46:88:7a:0d:18:3f:4e: e9:fe:ca:a0:88:f4:c9:36:de:24:44:43:4e:ff:7b: db:1e:7c:49:f2:4b:46:1c:8e:7a:fd:b7:37:93:8d: 55:05:e8:4e:e0:0b:5b:5e:46:98:bd:2c:4d:1d:35: 17:a1:36:ca:d2:2d:38:71:e3:b2:70:72:f8:55:fa: a3:59:ec:eb:12:f3:64:a5:0d:bc:be:33:54:d0:16: 24:9a:bd:20:11:3b:1c:5a:9d:bf:69:f5:75:bd:07: b0:b5:93:f8:7b:f4:f2:7b:08:62:82:07:ea:27:ee: 83:f4:32:d7:c8:76:91:53:7a:6d:9e:6f:9d:29:aa: 54:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2A:81:F1:26:19:3C:DE:C3:89:9D:3C:C2:53:53:58:B6:0E:FA:B8 X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:6d:d2:59:2a:68:44:58:df:17:cd:06:7c:50:29:74:cc:29: f6:e2:d1:5d:f6:b2:e7:b7:a6:0d:dc:27:6a:33:fc:06:3b:d0: 36:7c:e4:6e:87:11:1f:0b:93:55:32:05:d7:9b:cb:3b:a7:5e: e6:d5:a1:31:19:06:f1:d5:ea:ae:7c:ff:d7:de:ae:68:3b:2d: 46:b1:fb:4a:14:04:b5:d0:a0:9c:00:43:02:f3:28:1f:52:a5: de:61:b7:fc:7a:a0:37:65:25:a7:52:82:ef:8a:45:cc:d8:ee: 77:a5:c8:82:67:ea:01:61:0c:e2:e8:47:94:8b:4d:c7:d0:fe: 56:72:c5:72:c5:08:85:77:36:28:10:a2:ce:ef:a3:88:87:78: 9d:49:5e:ba:31:f2:23:36:2d:6b:71:6e:56:c6:74:d1:80:22: 06:a9:65:69:fa:4b:26:09:db:13:74:04:4e:ce:5f:0e:cd:cd: b6:4b:5a:55:ce:cc:a4:c1:77:13:f8:25:26:29:9f:43:7b:ca: 1f:ec:8a:4a:77:54:8b:6f:5b:2b:56:30:0d:5d:b1:1e:8b:5a: ab:1a:c6:af:19:48:5e:b0:2a:c5:b8:e8:3b:3c:a9:e2:87:cc: bb:5f:97:4c:fe:6d:21:34:25:69:f9:5d:40:85:b8:d3:95:f5: 75:bb:cb:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNzAxMTAvBgNVBAUTKDYyMkU3NjYyRDlGQkUxMEMxQUFFMEJERkU5ODhEQjk5 NkFFM0ZENTkwHhcNMjUwNzIzMDQzMzI3WhcNMjUwNzMwMDQzMzI3WjAYMRYwFAYD VQQDEw02ODgwNjYxNy00MjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzK+UxezLsS2wBb+u5hlvSVz4HjncAxUAaAS6dq59VRUgFQAORs50BeZSJ3to 6+fRibZk9VAd7sFvRgBfFGy+cPAfrUM6NkwRYneqYMqUdAN6xvcnxds/+jXh4vBb m0FZ966gIq01yK4+/7nHYHz7EBiR8sfYCw1IDuUgvOLqzUaIeg0YP07p/sqgiPTJ Nt4kRENO/3vbHnxJ8ktGHI56/bc3k41VBehO4AtbXkaYvSxNHTUXoTbK0i04ceOy cHL4VfqjWezrEvNkpQ28vjNU0BYkmr0gETscWp2/afV1vQewtZP4e/Tyewhiggfq J+6D9DLXyHaRU3ptnm+dKapUlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQqgfEm GTzew4mdPMJTU1i2Dvq4MB8GA1UdIwQYMBaAFGIudmLZ++EMGq4L3+mI25lq4/1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI3MC9DQ0I0NTRBNDcz QTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRRd2FyZ3ZmNllqYm1Xcmpf VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI3MC9DQ0I0NTRBNDczQTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRR d2FyZ3ZmNllqYm1XcmpfVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWbdJZKmhEWN8XzQZ8UCl0zCn24tFd9rLnt6YN3CdqM/wGO9A2fORu hxEfC5NVMgXXm8s7p17m1aExGQbx1equfP/X3q5oOy1GsftKFAS10KCcAEMC8ygf UqXeYbf8eqA3ZSWnUoLvikXM2O53pciCZ+oBYQzi6EeUi03H0P5WcsVyxQiFdzYo EKLO76OIh3idSV66MfIjNi1rcW5WxnTRgCIGqWVp+ksmCdsTdAROzl8Ozc22S1pV zsykwXcT+CUmKZ9De8of7IpKd1SLb1srVjANXbEei1qrGsavGUhesCrFuOg7PKni h8y7X5dM/m0hNCVp+V1AhbjTlfV1u8uk -----END CERTIFICATE-----Generated at Wed Jul 23 12:50:39 2025 by rpki-client