$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: SvEh7NHv5ylCcY/qtdo0DSzzhY0xE80YVI5YNRcnEMM= Subject key identifier: 6D:5A:F4:B8:FA:92:49:A9:0B:EB:E2:12:C1:1A:24:72:AB:C0:C2:C3 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0D67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0D5B Signing time: Fri 18 Jul 2025 18:08:55 +0000 Manifest this update: Fri 18 Jul 2025 18:08:55 +0000 Manifest next update: Fri 25 Jul 2025 18:08:55 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: 6X5fCipUWobPT6uuIeyZN3Nlct9DWpani9jDnMhtYSk=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3431 (0xd67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: Jul 18 18:08:55 2025 GMT Not After : Jul 25 18:08:55 2025 GMT Subject: CN=687a8db7-3e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9b:0e:6b:d9:e1:0e:4e:2e:09:f8:3c:75:87: dc:cd:e7:d0:0f:d6:be:ce:6b:ff:45:19:a1:a4:37: c1:6b:ec:7b:84:69:0d:1d:dc:30:56:1a:1c:3f:b3: c9:f9:cb:07:14:4d:9d:83:42:ea:a4:61:c8:6f:e8: 0c:d7:e5:04:70:c7:bc:d4:c0:64:fc:40:7a:b1:c7: fd:1d:0e:a2:1e:75:e6:f4:1c:f6:45:8a:8d:8a:ef: d6:51:38:24:ab:4e:6b:00:6d:73:d7:34:ce:6f:16: e7:e3:1d:57:6e:99:d5:31:9b:3f:b6:fa:e3:6d:e1: b2:0b:f2:c3:5c:3b:0d:ec:be:a0:5b:b2:07:0c:c1: f9:4b:ad:86:35:0f:8c:73:a5:fa:c3:4b:c2:95:44: a4:3d:67:f1:a9:4a:20:2f:86:7a:5c:e7:e9:2c:7d: c9:66:e9:ae:09:a4:c9:4c:17:6a:e9:b2:61:52:a8: 48:6b:17:75:67:6a:e4:a8:5e:5f:10:d8:a3:18:38: c9:18:56:02:17:98:10:e9:d8:c0:99:27:21:5e:85: ae:e2:5c:94:d2:42:a2:69:b7:29:72:63:97:a1:f4: 42:61:f4:89:17:20:6b:0a:94:d5:69:41:e1:0c:74: cb:e0:dd:9a:d7:56:9b:13:b0:8a:9a:1f:82:c5:56: d8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5A:F4:B8:FA:92:49:A9:0B:EB:E2:12:C1:1A:24:72:AB:C0:C2:C3 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d7:b2:ba:35:e3:80:d6:e6:b9:9f:71:b6:12:b3:6b:69:3b: 25:87:8f:5d:89:89:06:ca:72:c5:04:4b:10:87:20:67:bd:18: 85:59:20:93:53:13:b0:d1:28:ec:f8:fc:ac:17:55:5c:39:46: 9e:4b:e3:b8:a4:18:15:e5:89:3c:2c:65:4f:23:2a:08:23:20: 1d:da:96:0e:28:4d:ed:bc:87:1f:3f:04:c2:3f:8e:f3:80:f6: 76:b7:00:b7:92:b0:54:7b:da:ae:51:f5:db:c0:8a:b4:a0:a1: 13:ff:2b:a8:0a:c6:0c:15:42:9f:6a:b8:35:53:44:46:64:1c: bc:99:f2:83:a0:9d:66:7f:90:56:da:12:62:13:84:fd:00:6c: 9b:fb:9c:f6:21:0c:ea:c4:b7:4b:b4:81:6f:fc:99:ab:81:a7: 05:1f:b8:56:4e:86:a1:70:d2:71:54:38:96:72:d9:d0:ce:e8: 54:c9:07:04:97:1c:85:b9:97:05:af:4b:8b:43:4f:71:4a:c4: 07:47:af:c2:ed:fc:5b:74:56:6c:a5:d5:1e:1a:16:a0:14:f0: a6:75:e6:aa:60:ca:6e:a1:fb:d0:1c:d9:38:58:28:ae:0a:41: 89:2d:79:41:d5:74:8c:38:e0:93:1a:4c:bc:9d:06:25:7c:8b: ad:e7:a4:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUwNzE4MTgwODU1WhcNMjUwNzI1MTgwODU1WjAYMRYwFAYD VQQDEw02ODdhOGRiNy0zZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZsOa9nhDk4uCfg8dYfczefQD9a+zmv/RRmhpDfBa+x7hGkNHdwwVhocP7PJ +csHFE2dg0LqpGHIb+gM1+UEcMe81MBk/EB6scf9HQ6iHnXm9Bz2RYqNiu/WUTgk q05rAG1z1zTObxbn4x1XbpnVMZs/tvrjbeGyC/LDXDsN7L6gW7IHDMH5S62GNQ+M c6X6w0vClUSkPWfxqUogL4Z6XOfpLH3JZumuCaTJTBdq6bJhUqhIaxd1Z2rkqF5f ENijGDjJGFYCF5gQ6djAmSchXoWu4lyU0kKiabcpcmOXofRCYfSJFyBrCpTVaUHh DHTL4N2a11abE7CKmh+CxVbYmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1a9Lj6 kkmpC+viEsEaJHKrwMLDMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi17K6NeOA1ua5n3G2ErNraTslh49diYkGynLFBEsQhyBnvRiFWSCT UxOw0Sjs+PysF1VcOUaeS+O4pBgV5Yk8LGVPIyoIIyAd2pYOKE3tvIcfPwTCP47z gPZ2twC3krBUe9quUfXbwIq0oKET/yuoCsYMFUKfarg1U0RGZBy8mfKDoJ1mf5BW 2hJiE4T9AGyb+5z2IQzqxLdLtIFv/JmrgacFH7hWToahcNJxVDiWctnQzuhUyQcE lxyFuZcFr0uLQ09xSsQHR6/C7fxbdFZspdUeGhagFPCmdeaqYMpuofvQHNk4WCiu CkGJLXlB1XSMOOCTGky8nQYlfIut56Q+ -----END CERTIFICATE-----Generated at Sun Jul 20 03:10:22 2025 by rpki-client