$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft File: yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json) Hash identifier: hpuzulWLW3+xh30etxYJToSD0OpH7iM6RVI8BprSjCw= Subject key identifier: 0B:A7:2E:41:49:B0:C7:DC:9F:A6:78:5A:42:67:76:B8:4A:DE:33:D7 Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft Manifest number: 011B Signing time: Sat 19 Jul 2025 05:00:09 +0000 Manifest this update: Sat 19 Jul 2025 05:00:08 +0000 Manifest next update: Sat 26 Jul 2025 05:00:08 +0000 Files and hashes: 1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: MGmX5WzY3+yh8Cg3KiAbQEFLpYxZMTL+xT5wAdiUxTk=) 2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: 6omCuuVUgdbnOuuOFxfXDIcF+rrSXl7KykbR3GM1b/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Validity Not Before: Jul 19 05:00:08 2025 GMT Not After : Jul 26 05:00:08 2025 GMT Subject: CN=687b2659-c9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ac:f2:18:7d:8d:17:41:b1:33:25:3d:82:f7: 45:a7:81:1f:75:b1:db:2a:ff:31:97:e6:27:05:c3: d9:12:a5:2e:cc:e6:8e:01:5c:0c:43:54:9e:5f:6b: 54:d8:10:9c:0b:99:f0:80:0d:d4:03:af:5c:c0:6b: 65:f6:bd:fd:64:41:5b:b2:9c:b9:18:9d:a3:fa:ef: 17:77:71:76:1d:5b:47:bf:6d:41:c9:15:60:c6:06: 7e:2a:c6:d6:9b:24:66:c8:8d:b9:25:3e:02:35:ab: d7:cb:7f:57:c9:59:ba:a3:54:00:12:60:aa:14:0e: f9:a4:bb:e2:9a:66:68:ba:8e:a1:d8:20:d0:a9:be: e2:ab:1f:03:c5:d2:77:e4:ed:5d:6b:46:90:5f:e0: 35:7e:36:37:3d:46:5f:82:ee:62:ab:a2:20:72:9b: df:55:4b:e2:7a:f1:c8:9a:34:c9:d0:5e:52:af:aa: 3a:28:fe:b9:4f:67:8d:15:60:85:cf:8b:3b:c0:23: 17:f0:48:3b:0d:af:bb:4c:7a:cd:28:eb:bb:a1:d7: 89:26:58:8e:bd:a3:61:e4:40:cf:07:27:3b:f7:72: 4a:5c:b3:76:a3:ae:bf:d0:e2:55:61:09:0b:b4:30: e0:d9:01:5b:26:c7:f0:f7:78:a1:0c:75:27:9c:cc: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A7:2E:41:49:B0:C7:DC:9F:A6:78:5A:42:67:76:B8:4A:DE:33:D7 X509v3 Authority Key Identifier: keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:02:87:fd:a3:25:e3:44:6d:bc:70:75:88:d7:d0:5c:85:10: c9:c6:6c:50:65:3d:1d:47:07:44:8d:b3:c9:05:a3:55:f3:72: 31:73:c7:46:3c:a6:83:27:14:5a:d2:11:fc:a2:cf:ca:20:50: c0:c5:96:6c:0a:6c:3d:ca:09:96:de:eb:63:76:d3:76:ae:cb: 03:32:13:65:a6:cb:6d:c5:18:d1:39:a0:e5:e2:1d:3a:cd:3a: 4e:4c:75:cd:60:0f:e1:88:35:71:f1:c2:0e:11:c2:cd:de:56: 37:1f:35:7f:66:78:37:69:a1:51:b1:75:43:f5:6d:ff:a9:8c: 29:ff:8a:e0:5e:5f:c7:17:6e:fb:08:9d:08:39:f5:1c:ef:8e: 4a:34:0f:ae:6f:8b:86:98:34:2e:7b:a9:0e:58:57:94:8a:f9: 2c:14:91:b4:f7:e8:7c:f4:32:41:58:61:fb:8c:dc:8c:60:b2: 4a:d1:3c:0c:82:d7:8b:2b:95:a3:38:cb:2f:42:30:f0:39:b5: e0:57:8b:57:52:8f:3c:51:f2:a7:7b:df:de:57:d1:37:79:a1: c1:2d:18:ba:d2:2b:b6:53:00:10:20:b4:da:e9:f5:ac:b4:26: 8e:8b:09:71:f0:47:b9:e9:16:e3:28:cc:e6:5f:52:38:06:2f: 0b:45:e0:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1MjYxMTAvBgNVBAUTKENBRTkwRjQ2QzIyMUQwMEIyREEwODA3QUQ0QzRCMDY1 MDMzNzQzNDQwHhcNMjUwNzE5MDUwMDA4WhcNMjUwNzI2MDUwMDA4WjAYMRYwFAYD VQQDEw02ODdiMjY1OS1jOWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2azyGH2NF0GxMyU9gvdFp4EfdbHbKv8xl+YnBcPZEqUuzOaOAVwMQ1SeX2tU 2BCcC5nwgA3UA69cwGtl9r39ZEFbspy5GJ2j+u8Xd3F2HVtHv21ByRVgxgZ+KsbW myRmyI25JT4CNavXy39XyVm6o1QAEmCqFA75pLvimmZouo6h2CDQqb7iqx8DxdJ3 5O1da0aQX+A1fjY3PUZfgu5iq6IgcpvfVUvievHImjTJ0F5Sr6o6KP65T2eNFWCF z4s7wCMX8Eg7Da+7THrNKOu7odeJJliOvaNh5EDPByc793JKXLN2o66/0OJVYQkL tDDg2QFbJsfw93ihDHUnnMzklQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAunLkFJ sMfcn6Z4WkJndrhK3jPXMB8GA1UdIwQYMBaAFMrpD0bCIdALLaCAetTEsGUDN0NE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODUyNi9DNEM2RDA0NkI0 NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBBc3RvSUI2MU1Td1pRTTNR MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1a1BSc0loMEFzdG9JQjYxTVN3WlFNM1EwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODUyNi9DNEM2RDA0NkI0NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBB c3RvSUI2MU1Td1pRTTNRMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWAof9oyXjRG28cHWI19BchRDJxmxQZT0dRwdEjbPJBaNV83Ixc8dG PKaDJxRa0hH8os/KIFDAxZZsCmw9ygmW3utjdtN2rssDMhNlpsttxRjROaDl4h06 zTpOTHXNYA/hiDVx8cIOEcLN3lY3HzV/Zng3aaFRsXVD9W3/qYwp/4rgXl/HF277 CJ0IOfUc745KNA+ub4uGmDQue6kOWFeUivksFJG09+h89DJBWGH7jNyMYLJK0TwM gteLK5WjOMsvQjDwObXgV4tXUo88UfKne9/eV9E3eaHBLRi60iu2UwAQILTa6fWs tCaOiwlx8Ee56RbjKMzmX1I4Bi8LReCY -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:18 2025 by rpki-client