$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft File: YscfaukWKfhUypRkF2G2UizUgMM.mft (raw, json) Hash identifier: XabL984xD6ubXmga3hqDwbeNf6YSBUMrQVT0oz7m/2k= Subject key identifier: 50:89:B3:80:8F:C6:78:4D:6E:A1:F5:24:6C:CD:05:01:96:71:90:A9 Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 Certificate issuer: /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft Manifest number: 41 Signing time: Sat 19 Jul 2025 07:46:09 +0000 Manifest this update: Sat 19 Jul 2025 07:46:08 +0000 Manifest next update: Sat 26 Jul 2025 07:46:08 +0000 Files and hashes: 1: YscfaukWKfhUypRkF2G2UizUgMM.crl (hash: p2BkM2QDXUoFKL5gZ+jtOqO1stPpkfAw0s/xDDXKNlU=) 2: 824FECA61EA811F0A4B9881EC4F9AE02.roa (hash: lnqtXsb2uQDyw+VqZesv3MnkaYFT+PyijHSiNS5QwcA=) 3: 6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (hash: 3CfNmrVRNEvPM//uIqEsifmOeeaUM9uVI7qqpW4aJQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3 Validity Not Before: Jul 19 07:46:08 2025 GMT Not After : Jul 26 07:46:08 2025 GMT Subject: CN=687b4d41-21a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:55:94:bc:57:83:37:ab:5b:00:11:9e:20:2a: 55:dc:0f:35:ad:57:40:c3:c7:7e:fb:9c:79:e5:9e: 66:78:d3:85:24:fe:e3:49:41:b2:25:ad:a5:f4:7a: a2:0e:6a:86:9d:78:10:b7:e7:7d:7c:68:4e:fe:c4: 0a:12:18:e0:e5:62:de:6a:58:ed:65:e8:83:d2:62: f4:c6:74:0b:9d:c0:b9:df:2b:af:d0:f2:80:b6:7d: 02:f1:89:c3:eb:a9:91:b6:d7:4b:d1:7c:bf:7e:5a: 5a:35:d1:94:5b:91:0d:90:7a:e3:89:d9:15:ed:34: e4:e7:37:73:2a:9c:31:80:c1:25:43:46:6f:63:50: 63:3b:8d:80:fd:f1:5a:9d:0e:97:a2:01:80:f0:85: 66:bf:5c:ca:e0:03:28:b2:d2:ae:0c:a0:a7:bf:72: 48:ce:fb:33:94:69:22:27:a6:4d:f9:ab:cf:08:7f: 9e:60:a0:bd:6f:76:d4:5e:3d:90:e3:20:9a:b7:50: 3a:b8:6b:c8:c5:21:e0:b6:93:f2:ea:64:62:c2:2c: 15:6f:0f:1b:0f:ec:24:89:cd:9a:3b:77:b8:37:7c: 36:0e:df:01:71:14:e1:4c:2c:0b:eb:8f:43:d9:20: 23:9d:8f:b6:d0:3a:6b:3a:76:7f:c4:41:35:8f:33: 7e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:89:B3:80:8F:C6:78:4D:6E:A1:F5:24:6C:CD:05:01:96:71:90:A9 X509v3 Authority Key Identifier: keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:7f:72:ef:98:d7:0f:61:6c:b6:12:ca:21:cd:d1:90:30:25: 54:01:ad:5b:5e:fc:1b:85:f8:a0:1b:25:3d:79:dc:d3:70:56: 09:ef:43:0a:02:7a:0e:e8:d9:96:19:05:43:e6:d3:4d:76:69: ea:49:83:8e:e2:08:c9:7f:eb:3d:21:03:c9:16:7b:d4:c8:83: 95:1d:ea:53:0a:63:af:d0:84:95:c2:cb:19:b9:ca:df:db:0b: 61:6e:58:6e:c1:47:0b:a6:fb:db:b1:a5:65:fb:54:16:b3:2b: 03:ac:ea:c8:27:e2:f4:04:16:81:91:78:4a:90:a2:be:88:6e: 71:19:4c:31:80:79:50:85:34:65:3b:45:31:c9:5f:29:46:ab: 8b:f7:18:41:a7:7f:e5:e1:75:c2:5c:97:b9:5d:1d:48:80:0c: d2:c9:43:a7:fe:14:4d:4b:fb:f1:62:c5:51:90:c0:aa:74:c6: b9:cb:67:db:49:3f:91:0c:38:73:b0:b6:10:92:1c:52:38:b0: 3f:da:17:72:6e:39:54:22:74:d4:b6:12:df:ff:31:d4:fd:9a: 99:13:b7:32:fc:b1:18:64:b3:c3:ac:68:b0:25:64:96:29:7f: dc:3d:00:7e:ad:69:d1:1a:94:81:db:9c:2c:07:9b:1d:ae:25: 6c:de:4d:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTE5RjExMC8GA1UEBRMoNjJDNzFGNkFFOTE2MjlGODU0Q0E5NDY0MTc2MUI2NTIy Q0Q0ODBDMzAeFw0yNTA3MTkwNzQ2MDhaFw0yNTA3MjYwNzQ2MDhaMBgxFjAUBgNV BAMTDTY4N2I0ZDQxLTIxYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwVZS8V4M3q1sAEZ4gKlXcDzWtV0DDx377nHnlnmZ404Uk/uNJQbIlraX0eqIO aoadeBC35318aE7+xAoSGODlYt5qWO1l6IPSYvTGdAudwLnfK6/Q8oC2fQLxicPr qZG210vRfL9+Wlo10ZRbkQ2QeuOJ2RXtNOTnN3MqnDGAwSVDRm9jUGM7jYD98Vqd DpeiAYDwhWa/XMrgAyiy0q4MoKe/ckjO+zOUaSInpk35q88If55goL1vdtRePZDj IJq3UDq4a8jFIeC2k/LqZGLCLBVvDxsP7CSJzZo7d7g3fDYO3wFxFOFMLAvrj0PZ ICOdj7bQOms6dn/EQTWPM37nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUImzgI/G eE1uofUkbM0FAZZxkKkwHwYDVR0jBBgwFoAUYscfaukWKfhUypRkF2G2UizUgMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMTlGL0I5RUEwNEM2MDU5 NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXNjZmF1a1dLZmhVeXBSa0YyRzJVaXpVZ01NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MTlGL0I5RUEwNEM2MDU5NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2Zo VXlwUmtGMkcyVWl6VWdNTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGN/cu+Y1w9hbLYSyiHN0ZAwJVQBrVte/BuF+KAbJT153NNwVgnvQwoC eg7o2ZYZBUPm0012aepJg47iCMl/6z0hA8kWe9TIg5Ud6lMKY6/QhJXCyxm5yt/b C2FuWG7BRwum+9uxpWX7VBazKwOs6sgn4vQEFoGReEqQor6IbnEZTDGAeVCFNGU7 RTHJXylGq4v3GEGnf+XhdcJcl7ldHUiADNLJQ6f+FE1L+/FixVGQwKp0xrnLZ9tJ P5EMOHOwthCSHFI4sD/aF3JuOVQidNS2Et//MdT9mpkTtzL8sRhks8OsaLAlZJYp f9w9AH6tadEalIHbnCwHmx2uJWzeTQI= -----END CERTIFICATE-----Generated at Sun Jul 20 19:02:11 2025 by rpki-client