$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft File: YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json) Hash identifier: lydXTWMyirdOaioGqTwDQzduwvrfXdxGHTpmFNBYBws= Subject key identifier: 3C:10:91:05:65:25:AD:73:4A:77:60:19:24:CD:06:F9:88:4B:CE:22 Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A Certificate issuer: /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft Manifest number: 011C Signing time: Sat 19 Jul 2025 04:57:09 +0000 Manifest this update: Sat 19 Jul 2025 04:57:09 +0000 Manifest next update: Sat 26 Jul 2025 04:57:09 +0000 Files and hashes: 1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: ix48eSbBTwa/GE5CkyeYm8aHGDqG1PpXXq8/h1nkqNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D16, serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Validity Not Before: Jul 19 04:57:09 2025 GMT Not After : Jul 26 04:57:09 2025 GMT Subject: CN=687b25a5-bfa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:39:e5:08:bc:f8:80:af:33:e0:a6:70:f5: 71:12:27:c3:be:89:59:5c:b6:69:58:49:c4:a5:1e: d6:13:3d:a4:cc:89:0a:ed:c1:4a:ab:ca:9f:1f:0e: 7a:c4:5c:89:d5:95:09:d9:72:cf:23:ff:ce:48:0a: a7:f1:de:36:db:69:df:44:27:20:58:e0:49:56:f4: a0:f9:3f:39:6d:8f:0c:45:11:30:6b:a0:1d:9c:19: 82:14:b5:68:21:4e:ac:d0:bd:b6:e3:20:7f:cc:4c: dd:8f:fd:54:d4:2c:9e:18:f3:65:be:62:ad:73:02: 91:56:c1:d2:5f:e9:5e:ce:1d:84:bc:9c:17:ea:1a: 39:78:d3:e2:16:6e:df:6a:01:d6:15:02:52:18:32: 4d:96:f0:f6:35:d3:d5:b6:5d:66:b5:13:e4:f2:2e: 7d:81:ff:88:df:01:bf:43:1b:ae:09:83:67:82:fa: fa:87:7d:39:41:b1:f0:b4:4b:ce:ba:c5:e7:b6:a5: ef:df:e4:c8:81:11:c5:19:00:58:5d:86:5f:a2:82: 73:d4:1b:d4:db:7c:3b:de:20:ff:7b:ba:51:67:85: 36:9f:9b:84:66:19:fa:1d:87:ce:d4:19:3d:20:dd: 2a:57:5d:43:51:0d:a6:53:f4:84:c9:e5:0b:da:fa: ae:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:10:91:05:65:25:AD:73:4A:77:60:19:24:CD:06:F9:88:4B:CE:22 X509v3 Authority Key Identifier: keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c4:4e:34:e3:5e:95:2f:24:b7:ba:ad:e9:7b:84:13:e8:ca: d2:93:a7:60:c1:8b:f6:79:d9:37:38:1a:33:4b:1b:2d:d6:50: 1a:10:56:b7:3f:a0:25:d2:ba:77:ac:29:97:82:cd:20:9d:13: 45:dd:12:42:25:e5:ce:83:6a:65:81:2b:5b:7c:6e:53:0f:6c: c4:6b:b4:86:9f:11:e7:d6:b0:6a:14:2d:37:46:70:a7:53:29: 8f:32:90:2a:db:0a:a8:79:b2:bb:a0:52:0b:6e:5f:4f:e3:eb: 8c:40:ec:8a:22:74:99:b4:c6:33:fe:6f:89:a5:c2:9c:2c:ff: 80:2d:4d:9f:36:47:20:7b:2a:76:e4:16:c2:df:dc:fb:af:00: 86:77:ca:0a:91:31:a3:71:35:3f:42:65:d3:f6:19:ca:ea:b4: 3d:c5:f5:7b:d4:5e:cd:5f:00:f5:ea:c0:87:de:9b:3e:3e:90: ad:35:6b:9b:8f:2f:6d:f7:07:99:0c:0a:ff:bd:92:a9:58:04: 0b:52:24:c3:6d:35:77:ee:3d:57:d1:ca:b3:58:fa:df:b6:68: d1:77:9b:70:ea:84:fd:f0:68:68:ee:65:66:56:88:9e:6f:ab: 12:97:88:97:0b:2b:aa:03:6b:67:9a:53:d3:99:a4:bd:f0:68: 08:5a:cc:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMTYxMTAvBgNVBAUTKDYxMzU0OUE4RDU5NjM3M0Q4NjVBMjIwRTJFQjFBODYw NEJENzUxOEEwHhcNMjUwNzE5MDQ1NzA5WhcNMjUwNzI2MDQ1NzA5WjAYMRYwFAYD VQQDEw02ODdiMjVhNS1iZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsk55Qi8+ICvM+CmcPVxEifDvolZXLZpWEnEpR7WEz2kzIkK7cFKq8qfHw56 xFyJ1ZUJ2XLPI//OSAqn8d4222nfRCcgWOBJVvSg+T85bY8MRREwa6AdnBmCFLVo IU6s0L224yB/zEzdj/1U1CyeGPNlvmKtcwKRVsHSX+lezh2EvJwX6ho5eNPiFm7f agHWFQJSGDJNlvD2NdPVtl1mtRPk8i59gf+I3wG/QxuuCYNngvr6h305QbHwtEvO usXntqXv3+TIgRHFGQBYXYZfooJz1BvU23w73iD/e7pRZ4U2n5uEZhn6HYfO1Bk9 IN0qV11DUQ2mU/SEyeUL2vqunwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwQkQVl Ja1zSndgGSTNBvmIS84iMB8GA1UdIwQYMBaAFGE1SajVljc9hloiDi6xqGBL11GK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQxNi82RUEzMEIwMkFF OUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056MkdXaUlPTHJHb1lFdlhV WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lUVkpxTldXTnoyR1dpSU9MckdvWUV2WFVZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQxNi82RUEzMEIwMkFFOUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056 MkdXaUlPTHJHb1lFdlhVWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0xE40416VLyS3uq3pe4QT6MrSk6dgwYv2edk3OBozSxst1lAaEFa3 P6Al0rp3rCmXgs0gnRNF3RJCJeXOg2plgStbfG5TD2zEa7SGnxHn1rBqFC03RnCn UymPMpAq2wqoebK7oFILbl9P4+uMQOyKInSZtMYz/m+JpcKcLP+ALU2fNkcgeyp2 5BbC39z7rwCGd8oKkTGjcTU/QmXT9hnK6rQ9xfV71F7NXwD16sCH3ps+PpCtNWub jy9t9weZDAr/vZKpWAQLUiTDbTV37j1X0cqzWPrftmjRd5tw6oT98Gho7mVmVoie b6sSl4iXCyuqA2tnmlPTmaS98GgIWsyY -----END CERTIFICATE-----Generated at Sun Jul 20 07:39:35 2025 by rpki-client